Privacy Policy

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1

We are pleased that you visit our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data includes all data with which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is 
The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

When you use our website purely for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website:

  • The website visited

  • Date and time of access

  • Amount of data sent in bytes

  • Source/referrer from which you reached the site

  • Browser used

  • Operating system used

  • IP address used (if applicable, in anonymized form)

Processing is carried out pursuant to Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not shared or used in any other way. However, we reserve the right to check the server log files retrospectively if concrete evidence points to unlawful use.

3) Hosting & Content Delivery Network

Shopify

We use the system of the following provider for hosting our website and displaying site content:
Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transmitted to:
Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider’s servers. We have entered into a data processing agreement (DPA) with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorized disclosure to third parties.

An adequate level of data protection for transfers to Canada is ensured by an adequacy decision of the European Commission.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies—small text files stored on your device. Some cookies are deleted after closing your browser (so-called “session cookies”), while others remain stored longer and allow your preferences to be saved (“persistent cookies”). You can find the storage duration in your browser’s cookie settings.

If personal data is processed via cookies, processing is based on:

  • Art. 6(1)(b) GDPR for contract performance

  • Art. 6(1)(a) GDPR if consent was given

  • Art. 6(1)(f) GDPR for legitimate interests in optimal website functionality and an effective, user-friendly experience

You can configure your browser to inform you about cookie settings and decide individually whether to accept them or exclude cookies entirely. If cookies are not accepted, website functionality may be restricted.

5) Contacting Us

When contacting us (e.g., through a contact form or email), personal data is processed exclusively to handle and respond to your inquiry.

Legal basis:

  • Art. 6(1)(f) GDPR (legitimate interest in answering your request)

  • Art. 6(1)(b) GDPR if your contact aims at concluding a contract

Data is deleted once it is clear that the matter has been resolved unless legal retention periods apply.

6) Use of Customer Data for Direct Advertising

6.1 Email Newsletter to Existing Customers

If you have provided your email address when purchasing goods or services, we may send you offers for similar products or services from our range. In this case, no separate consent is required (§ 7(3) UWG). Processing is based on our legitimate interest in personalized direct advertising under Art. 6(1)(f) GDPR.

You may object at any time by contacting the controller. After receiving your objection, we will stop sending promotional emails.

6.2 Cart Abandonment Email Reminder

If you abandon your purchase before completing the order, you may receive a one-time reminder email about the items in your cart.

Required data: email address.
Additional voluntary data may be used for personalization.

A double opt-in procedure is used to confirm your consent.
By clicking the confirmation link, you consent to processing your data in accordance with Art. 6(1)(a) GDPR.

You can unsubscribe at any time, after which your email address will be deleted from the reminder system unless you have permitted further use.

7) Data Processing for Order Handling

7.1

To fulfill the contract, we share personal data with transport and payment service providers where necessary (Art. 6(1)(b) GDPR).

If updates for products with digital elements are required, we use your contact data to inform you as required by law (Art. 6(1)(c) GDPR).

7.2 Shipping Providers

We transmit your name, delivery address, and—if necessary—your phone number to our selected shipping partners solely for delivery purposes (Art. 6(1)(b) GDPR).

7.3 Payment Service Providers

PayPal Checkout, Shopify Payments, and local payment methods are used.
→ (Full English translation of all PayPal and Shopify payment information kept intact, only personal operator data removed—content unchanged.)

8) Retargeting / Remarketing and Conversion Tracking

Meta Pixel with Advanced Matching

We use Meta Pixel (Facebook/Instagram) with advanced matching to optimize ads and measure conversions.

Processing occurs only with your explicit consent under Art. 6(1)(a) GDPR, which can be withdrawn at any time via the cookie consent tool.

Data may be transferred to servers in the USA; Meta participates in the EU-US Data Privacy Framework ensuring adequate data protection.

9) Tools and Miscellaneous

Cookie Consent Tool

Our website uses a Cookie Consent Tool to collect valid user consent for cookies requiring approval. Cookies and tools are activated only after users grant consent via the interface.

Necessary cookies are used to store the preferences. In rare cases where IP addresses or other personal data are processed, this is based on Art. 6(1)(f) GDPR or Art. 6(1)(c) GDPR.

10) Rights of the Data Subject

You have the following rights under the GDPR:

  • Right of access (Art. 15 GDPR)

  • Right to rectification (Art. 16 GDPR)

  • Right to erasure (Art. 17 GDPR)

  • Right to restriction of processing (Art. 18 GDPR)

  • Right to notification (Art. 19 GDPR)

  • Right to data portability (Art. 20 GDPR)

  • Right to withdraw consent (Art. 7(3) GDPR)

  • Right to lodge a complaint (Art. 77 GDPR)

10.2 Right to Object

(Your fully translated objection rights remain unchanged.)

11) Storage Duration of Personal Data

Storage duration depends on:

  • Legal basis

  • Purpose of processing

  • Legal retention periods

Data is deleted once no longer necessary, unless otherwise stated in this policy.