privacy policy.
General
Your personal data (e.g. title, name, address, e-mail address, telephone number, bank details, credit card number) will only be processed by us in accordance with the provisions of German data protection law and the data protection law of the European Union (EU). In addition to the processing purposes, recipients, legal bases, storage periods, the following regulations also inform you about your rights and the person responsible for your data processing. This data protection declaration only refers to our website. If you are forwarded to other sites via links on our sites, please inform yourself about the respective handling of your data.
Data processing for performance of contract
(1) Purpose of processing
Your personal data, which you provide to us during the ordering process, is required for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we cannot send you the goods without your address. For some payment procedures, we require the necessary payment data in order to pass them on to a payment service provider commissioned by us. The processing of your data entered in the order process is therefore carried out for the purpose of fulfilling the contract.
If you send us an enquiry by e-mail, via a contact form, etc. before the conclusion of the contract, we process the data received in this way for the purpose of carrying out pre-contractual measures and answering your questions.
(2) Legal basis
The legal basis for this processing is Art. 6 para. 1 b) GDPR.
(3) Recipient categories
Payment service provider, shipping service provider, hosting provider
(4) Storage period
We store data required for the processing of the contract until the expiry of the statutory warranty and, if applicable, contractual guarantee periods.
We store the data required under commercial and tax law for the periods specified by law, regularly ten years (cf. § 257 HGB, § 147 AO (German Commercial Code)).
The data processed to carry out pre-contractual measures are deleted as soon as the measures have been carried out and there is no recognisable conclusion of a contract.
Web analysis with Google Analytics
(1) Purpose of processing
This website uses Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about your use of the website will be transmitted to and stored by Google on servers in the United States. In the event that IP anonymisation is activated on this website, however, your IP address will be truncated beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.
(2) Legal basis
The legal basis for this processing is Art. 6 (1a) GDPR.
(3) Recipient categories
Google and its partner companies.
(4) Transfer to a third country
Google Ireland Limited is a company affiliated with Google LLC. Google LLC is located in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).
(5) Storage period
14 months
(6) Right of objection
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of the data generated by the cookie and related to your use of the website (incl. your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plugin available under the following link: optout.
Information about cookies
(1) Purpose of processing
Technically necessary cookies are used on this website. These are small text files that are stored in or by your internet browser on your computer system.
(2) Legal basis
The legal basis for this processing is Art. 6 (1) f) GDPR.
(3) Legitimate interest
Our legitimate interest is the functionality of our website. The user data collected through technically necessary cookies are not used to create user profiles. This protects your interest in data protection.
(4) Storage period
Technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies have a varying lifespan from a few minutes to several years.
(5) Right of objection
If you do not wish these cookies to be stored, please deactivate the acceptance of these cookies in your internet browser. However, this may result in a functional restriction of our website. You can also delete permanently stored cookies at any time via your browser.
Transfer of personal data to shipping service providers
We will pass on your e-mail address to DHL before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery. In this case, prior coordination of the delivery date with DHL or notification of delivery is not possible. The consent can be revoked at any time.
Use of payment service providers
When paying via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). Your data is only transferred as necessary for the payment processing. For further information on data protection, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
When paying via Stripe, we pass on your payment data to Stripe, Inc., 354 Oyster Point Boulevard, South San Francisco, California, 94080, USA (hereinafter “Stripe”). Your data is only transferred as necessary for the payment processing. For further information on data protection, including information on the credit agencies used, please refer to Stripe’s privacy policy: https://stripe.com/en-gb-de/privacy
You can object to this processing of your data at any time by sending a message to Stripe. However, Stripe may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
If you choose the "Apple Pay" payment method of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your device operated with iOS, watchOS or macOS by charging a payment card deposited with "Apple Pay". Apple Pay uses security functions that are integrated into the hardware and software of your device to protect your transactions. In order to release a payment, you must enter a code previously defined by you and verify it using the "Face ID" or "Touch ID" function of your terminal device. For the purposes of payment processing, the information you provide during the ordering process, together with information about your order, will be passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website from which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the source website to confirm the success of the payment. If personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing. Apple keeps anonymised transaction data, including the approximate amount of the purchase, the approximate date and time, and whether the transaction was completed successfully. Anonymisation completely eliminates the possibility of any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services. When you use Apple Pay on the iPhone or Apple Watch to complete a purchase made through Safari on the Mac, the Mac and the authorisation device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and uncheck "Allow payments on Mac". You can find further information on data protection with Apple Pay under the following link: https://support.apple.com/de-de/HT203027
Newsletter
When registering for our newsletter, the data you provide will be exclusively used for this purpose. Subscribers may also be informed about circumstances relevant to the service or registration (for example, changes to the newsletter offer) via e-mail.
We require a valid e-mail address for registration. In order to verify that a registration is made by the owner of an e-mail address, we use the "double-opt-in" procedure. For this purpose, we save the request of the newsletter, the confirmation e-mail and the receipt of the response. No further data is collected. The data is used exclusively for sending the newsletter and is not passed on to third parties.
You can revoke your consent to the storage of your personal data and its use for newsletter at any time. There is a corresponding link in each newsletter. You can also inform us of your wish to delete your data.
Your rights
If your personal data is processed, you are a data subject to GDPR and you have the following rights:
1. Right to information
You can request information about your personal data processed by us within the scope of Art. 15 GDPR.
2. Right to rectification
If the information concerning you is not (or no longer) accurate, you may request a correction in accordance with Art. 16 GDPR. If your data is incomplete, you can request that it be completed.
3. Right to deletion
You can request the deletion of your personal data under the conditions of Art. 17 GDPR.
4. Right to restriction of processing
You have the right, under the conditions of Art. 18 GDPR, to request a restriction of the processing of the data concerning you.
5. Right to data portability
In accordance with Art. 20 GDPR, you have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller.
6. Right to revoke the declaration of consent under data protection law
In accordance with Art. 7 (3) GDPR, you have the right to revoke your declaration of consent under data protection law at any time. This does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
7. Right to complain to a supervisory authority
If you are of the opinion that the processing of personal data concerning you violates the GDPR, you have the right to lodge a complaint with a supervisory authority (in particular in the member state of your place of residence, your place of work or the place of the alleged infringement) in accordance with Art. 77 GDPR.
Information about your right to object Art. 21 GDPR
1. You have the right to object at any time to the processing of your data on the basis of Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests), if there are grounds for doing so that arise from your particular situation. This also applies to profiling based on this provision within the meaning of Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the assertion, exercise or defence of legal claims.
2. In individual cases, we also process your personal data in order to carry out direct advertising. If you do not wish to receive advertising, you have the right to object to this at any time; this also applies to profiling, insofar as it is connected with such direct advertising. We will respect this objection in the future.
We will no longer process your data for direct marketing purposes if you object to processing for these purposes.
The objection can be made form-free and should preferably be addressed to hello@lisaseeberger.com