Privacy Policy 

As the operator of this website and as a company, we come into contact with your personal data. This refers to all data that provides information about you and can be used to identify you. In this Privacy Policy, we would like to explain how, for what purpose, and on what legal basis we process your data. 

The following entity is responsible for data processing on this website and within our company: 

When you enter your data on websites, place online orders, or send emails over the Internet, you must always be aware that unauthorized third parties may access your data. There is no such thing as complete protection against such access. However, we do everything in our power to protect your data as best as possible and to close any security gaps to the extent that we are able. 

An important security measure is the SSL or TLS encryption on our website, which ensures that data you transmit to us cannot be read by third parties. You can recognize this encryption by the padlock icon next to the website address in your browser and by the fact that our website address begins with https:// rather than http://.

Payment data, such as account or credit card numbers, is particularly sensitive. For this reason, all payment transactions using standard payment methods are processed exclusively via an encrypted SSL or TLS connection. 

In some sections of this Privacy Policy, we inform you about how long we—or the companies that process your data on our behalf—store your data. If no such information is provided, we store your data until the purpose of the data processing no longer applies, you object to the data processing, or you revoke your consent to the data processing.

In the event of an objection or withdrawal of consent, however, we may continue to process your data if at least one of the following conditions is met: 

• We have compelling legitimate grounds for continuing the data processing that override your interests, rights, and freedoms (only in the case of an objection to data processing; if the objection is directed against direct marketing, we cannot invoke any legitimate grounds). 

• Data processing is necessary to assert, exercise, or defend legal claims (this does not apply if your objection is directed against direct marketing). 

• We are legally obligated to retain your data. In this case, we will delete your data as soon as the condition(s) no longer apply.

On our website, we also use tools from companies that transfer your data to the U.S., where it is stored and, where applicable, further processed. The European Commission has adopted an Adequacy Decision regarding the EU-U.S. data protection framework. This decision establishes that the U.S. ensures an adequate level of protection for personal data from the EU that is transferred to U.S. companies. This decision is based on new safeguards and measures introduced by the U.S. to meet data protection requirements. Among other things, the adequacy decision includes restrictions and safeguards regarding access to the data by U.S. intelligence agencies. 

Binding safeguards have been introduced to limit access by U.S. intelligence agencies to what is necessary and proportionate for the protection of national security. In addition, enhanced oversight of the activities of U.S. intelligence agencies has been established to ensure that restrictions on surveillance activities are adhered to. An independent recourse mechanism has also been established to address and resolve complaints from European citizens regarding access to their data. The EU-U.S. Privacy Shield thus enables European companies to transfer data to certified U.S. companies without having to implement additional data protection safeguards.

You can view a list of all certified companies at the following link: https://www.dataprivacyframework.gov/s/participant-search A change in the European Commission’s decision cannot be ruled out. 

We have appointed a Data Protection Officer for our company. 

IF YOU READ IN THIS PRIVACY POLICY THAT WE HAVE LEGITIMATE INTERESTS IN PROCESSING YOUR DATA AND THEREFORE PROCESS IT ON THE BASIS OF ART. 6(1), SENTENCE 1, SUBPARAGRAPH F) of the GDPR, you have the right under Article 21 of the GDPR to object to this. THIS ALSO APPLIES TO PROFILING CONDUCTED ON THE BASIS OF THE AFOREMENTIONED PROVISION. THE PREREQUISITE IS THAT YOU PROVIDE REASONS FOR YOUR OBJECTION THAT ARISE FROM YOUR SPECIFIC SITUATION. A JUSTIFICATION IS NOT REQUIRED IF THE OBJECTION IS DIRECTED AGAINST THE USE OF YOUR DATA FOR DIRECT MARKETING. AS A RESULT OF YOUR OBJECTION, WE MAY NO LONGER PROCESS YOUR DATA. THIS DOES NOT APPLY, HOWEVER, IF ONE OF THE FOLLOWING CONDITIONS IS MET: • WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS. • THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS. THESE EXCEPTIONS DO NOT APPLY IF YOUR OBJECTION IS DIRECTED AGAINST DIRECT MARKETING OR AGAINST PROFILING RELATED TO SUCH MARKETING.

Many data processing operations are based on your consent. You provide this consent, for example, by checking the appropriate box on online forms before submitting them, or by accepting certain cookies when you visit our website. You may withdraw your consent at any time without providing a reason (Art. 7(3) GDPR). From the time of withdrawal, we may no longer process your data. The only exception is if we are legally required to retain the data for a specific period of time. Such retention periods exist, in particular, under tax and commercial law. 

If you believe that we are in violation of the General Data Protection Regulation (GDPR), you have the right under Article 77 of the GDPR to lodge a complaint with a supervisory authority. You may contact a supervisory authority in the Member State where you reside, where you work, or where the alleged infringement occurred. The right to lodge a complaint exists in addition to administrative or judicial remedies.

We must provide you or a third party with data that we process automatically based on your consent or in fulfillment of a contract in a commonly used machine-readable format if you request it. We may transfer the data to another controller only to the extent that this is technically feasible. 

Under Article 15 of the GDPR, you have the right to obtain, free of charge, information about what personal data we have stored about you, where the data comes from, to whom we transfer the data, and for what purpose it is stored. If the data is incorrect, you have the right to have it rectified (Article 16 of the GDPR); under the conditions set forth in Article 17 of the GDPR, you may request that we erase the data.

In certain situations, you may request that we restrict the processing of your data in accordance with Article 18 of the GDPR. In such cases, the data may then—apart from storage—only be processed as follows: 

• with your consent 

• to assert, exercise, or defend legal claims 

• to protect the rights of another natural or legal person 

• for reasons of a substantial public interest of the European Union or a Member State 

The right to restriction of processing applies in the following situations: 

• You have contested the accuracy of your personal data stored by us, and we need time to verify this. In this case, the right applies for the duration of the verification. 

• The processing of your personal data is unlawful or was unlawful in the past. In this case, the right applies as an alternative to erasure of the data. 

• We no longer need your personal data, but you need it to exercise, defend, or assert legal claims. In this case, this right applies as an alternative to erasure of the data. 

• You have objected pursuant to Article 21(1) of the GDPR, and your interests and ours must now be weighed against one another. In this case, this right applies as long as the outcome of the balancing test has not yet been determined.

Our website is hosted on a server provided by the following internet service provider (host): 

Compositiv GmbH 

Hammer Deich 30 

20537 Hamburg 

Yes 

The hosting provider stores all data from our website. This includes all personal data collected automatically or through your input. In particular, this may include: your IP address, pages visited, names, contact information and inquiries, as well as metadata and communication data. When processing data, our hosting provider adheres to our instructions and processes the data only to the extent necessary to fulfill its contractual obligations to us.

Since we use our website to reach potential customers and maintain contact with existing customers, the data processing carried out by our hosting provider serves the purpose of initiating and fulfilling a contract and is therefore based on Article 6(1)(b) of the GDPR. Furthermore, it is in our legitimate interest as a company to provide a professional website that meets the necessary requirements for security, speed, and efficiency. To this extent, we also process your data on the basis of Article 6(1)(f) of the GDPR. 

Data Collection on This Website 

Our website places cookies on your device. These are small text files used for various purposes. Some cookies are technically necessary for the website to function at all (essential cookies). Others are required to perform certain actions or functions on the site (functional cookies). For example, without cookies, it would not be possible to use the features of a shopping cart in an online store. Still other cookies are used to analyze user behavior or optimize advertising. If we use third-party services on our website—for example, to process payments—these companies may also place cookies on your device when you visit the website (so-called third-party cookies).

Session cookies are stored on your device only for the duration of a session. As soon as you close your browser, they are automatically deleted. Persistent cookies, on the other hand, remain on your device unless you delete them yourself. This can, for example, result in your user behavior being analyzed on an ongoing basis. 

You can use your browser settings to control how it handles cookies: 

• Do you want to be notified when cookies are set? 

• Do you want to block cookies in general or in specific cases? 

• Do you want cookies to be automatically deleted when you close your browser? 

If you disable or do not allow cookies, the functionality of the website may be limited. If we use cookies from other companies or for analytical purposes, we will inform you of this in this Privacy Policy. We will also request your consent regarding this when you visit our website.

We have a legitimate interest in ensuring that visitors can use our online services without technical issues and that all desired features are available to them. The storage of necessary and functional cookies on your device is therefore based on Article 6(1)(f) of the GDPR. We use all other cookies on the basis of Article 6(1)(a) of the GDPR, provided that you give us your consent. You may revoke this consent at any time with future effect. If you consented to the placement of necessary and functional cookies when prompted, the storage of these cookies is also based exclusively on your consent.

A consent management provider (CMP) for obtaining, processing, and forwarding GDPR-compliant consents 

Papoo Software & Media GmbH, Auguststr. 4, 53229 Bonn 

Yes 

 https://www.ccm19.de/datenschutzerklaerung.html 

We use CCM19 to obtain your consent to store cookies on your device and to document this consent in compliance with data protection regulations. When you visit our website and close the CCM19 cookie window that requests your consent, the following data is transmitted to the company: 

• Your IP address (which is also used to determine your country) 

• The browser you are using 

• The language you are using 

• The webpage you visited 

In addition, CCM19 stores various cookies in your browser to associate the consents you have granted—or their revocation—with your browser. All collected data is stored until the cookies are no longer needed, you delete the CCM19 cookies, or you request that we delete the data. This does not apply if we are legally required to retain the data.

We are legally required to obtain the consent of our website visitors for the use of certain cookies. To fulfill this obligation, we use CCM19. The legal basis for data processing is therefore Article 6(1)(c) of the GDPR. 

Server log files record all requests and visits to our website and log error messages. They also contain personal data, in particular your IP address. However, this address is anonymized by our provider after a short period of time, so we cannot associate the data with you personally. The data is automatically transmitted from your browser to our provider. 

Our provider stores the server log files to track activity on our website and identify errors. The files contain the following data: 

• Browser type and version 

• Operating system used 

• Referrer URL 

• Hostname of the accessing computer 

• Time of the server request 

• IP address (anonymized if applicable) 

We do not combine this data with any other data; rather, we use it solely for statistical analysis and to improve our website.

We have a legitimate interest in ensuring that our website runs smoothly. It is also in our legitimate interest to obtain an anonymized overview of visits to our website. Data processing is therefore lawful under Article 6(1)(f) of the GDPR. 

We use the following tools to analyze the behavior of our website visitors and to show you advertisements. 

What is Google Tag Manager? 

A tag management system for integrating tracking codes and conversion pixels from Google Ireland Ltd. 

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland 

Where can you find more information about data protection with Google Tag Manager? 

https://policies.google.com/privacy 

Based on the European Commission’s Adequacy Decision and the company’s corresponding certification.

We use Google Tag Manager. This tool helps us integrate, manage, and deploy tracking codes and conversion pixels on our website. Google Tag Manager does not create user profiles, place cookies on your device, or analyze your user behavior. However, it does collect your IP address and transmits it to Google’s servers in the United States. 

On what legal basis do we process your data? 

We have a legitimate interest in the quick and straightforward integration and management of various tools on our website. The use of Google Tag Manager is therefore lawful under Article 6(1)(f) of the GDPR. If you have consented to the transfer of your IP address, we process your data exclusively on the basis of Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

A tool for analyzing user behavior provided by Google Ireland Ltd. 

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland 

Yes 

https://support.google.com/analytics/answer/6004245?hl=de 

Based on the European Commission’s Adequacy Decision and the company’s corresponding certification. 

Among other methods, by using a browser plugin: https://tools.google.com/dlpage/gaoptout?hl=de 

We are always interested in optimizing our website for visitors and placing advertisements effectively. Google Analytics helps us do this; it is a tool that analyzes user behavior and thus provides us with the necessary data to make adjustments. Through this tool, we receive information about the origin of our visitors, the pages they view, how long they stay on the site, and the operating system they use.

To collect data, Google Analytics uses cookies, device fingerprinting, or other technologies to recognize users. The data is transmitted to Google’s servers in the United States and, using the IP address that is also collected, is compiled into a profile that can be associated with you or your device. 

You can prevent Google from processing your data by installing a browser plugin provided by Google itself: https://tools.google.com/dlpage/gaoptout?hl=de. 

We have enabled the “IP anonymization” feature within Google Analytics. For you, this means that Google truncates your IP address (from the EU or the EEA) before transmitting it to the United States. Only in exceptional cases does Google transmit the full IP address to servers in the United States and truncate it there.

We use the “demographic features” function in Google Analytics to display relevant ads to visitors of our website within the Google advertising network. As a result, reports can be generated that provide insights into the age, gender, and interests of our website visitors. This data comes from Google’s interest-based advertising as well as from visitor data provided by third parties. It is not possible to associate the collected data with specific individuals. 

You can disable this feature in your Google Account settings.

We use the “E-commerce Tracking” feature in Google Analytics. This allows us to analyze the purchasing behavior of our website visitors and improve our online marketing campaigns. E-commerce tracking records, for example, your orders, average order values, shipping costs, and the time from viewing a product to purchasing it. Google may aggregate this data under a transaction ID and associate it with you or your device. 

How long do we store your data? 

According to Google, data stored at the user and event levels that is linked to cookies, user identifiers (e.g., user IDs), or advertising IDs is deleted or anonymized after 14 months (see https://support.google.com/analytics/answer/7667196?hl=de). 

As a website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our website and the advertisements placed on it. Data processing is therefore lawful under Article 6(1)(f) of the GDPR. In the event that you have, for example, consented to the storage of cookies or otherwise consented to data processing by Google Analytics, the sole legal basis is Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

An online advertising program offered by Google Ireland Ltd. 

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland 

Yes 

https://policies.google.com/privacy?hl=de&gl=de 

Based on the European Commission’s Adequacy Decision and the company’s corresponding certification. 

We use Google Ads. Google’s advertising program allows us to display ads in the Google search engine or on third-party websites when visitors to our website enter specific search terms into Google (keyword targeting). Furthermore, we can use user data available to Google (e.g., location data and interests) to place targeted ads (audience targeting). We evaluate the collected data quantitatively by, for example, analyzing which search terms led to the display of our ads and how many ads resulted in corresponding clicks.

As the website operator, we have a legitimate interest in displaying and analyzing advertisements. Data processing is therefore lawful under Article 6(1)(f) of the GDPR. If, for example, you have consented to the storage of cookies or have otherwise consented to data processing by Google, the sole legal basis is Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

 A tool for personalized advertising provided by Google Ireland Ltd. 

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland 

Yes 

Where can you find more information about data protection for Google Analytics Remarketing?

 https://www.google.de/intl/de/policies/privacy/ and https://policies.google.com/technologies/ads 

Based on the European Commission’s Adequacy Decision and the company’s corresponding certification. 

By opting out of personalized ads in your Google Account or on this page: https://www.google.com/settings/ads/onweb/ 

We are always interested in placing our ads in the most effective way possible. The Google Analytics remarketing feature helps us do this.

Remarketing means that we analyze your behavior on our website to assign you to a specific advertising target group and subsequently display relevant advertising messages to you when you visit other websites. In addition, we link these advertising target groups to Google’s cross-device features. This enables us to display interest-based, personalized advertising messages—tailored to you based on your usage and browsing behavior on one device (e.g., your cell phone)—on another device (e.g., a tablet or PC) as well. 

When creating advertising target groups, we also use the Customer Match feature. In doing so, we transfer certain customer data (e.g., email addresses) from our customer lists to Google. If the customers in question are Google users and are signed in to their Google Account, they will subsequently be shown relevant ads within the Google network (e.g., on YouTube, Gmail, or in the search engine). 

You can adjust your ad settings in your Google Account. To do so, click the following link and sign in: https://adssettings.google.com/authenticated. Outside of your Google account, you can opt out of personalized advertising at the following link: https://www.google.com/settings/ads/onweb/ (this setting then applies only to the device and browser you are currently using).

As a website operator, we have a legitimate interest in the effective marketing of our services and products. Data processing is therefore lawful under Article 6(1)(f) of the GDPR. If, for example, you have consented to the storage of cookies or have otherwise consented to data processing by Google Analytics Remarketing, the sole legal basis is Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

A tool for analyzing user behavior provided by Google Ireland Ltd. 

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland 

Yes 

 https://www.google.de/intl/de/policies/privacy/ 

Based on the European Commission’s Adequacy Decision and the company’s corresponding certification. 

We are always interested in optimizing our website for users and placing advertisements in the most effective way. To this end, we also use Google Conversion Tracking. This allows us to track whether and how often visitors to our website have clicked on specific buttons and which products were viewed and purchased particularly frequently (conversion statistics). During the collection and storage of this data, we do not receive any information that would allow us to personally identify individual visitors. Google itself uses cookies or similar recognition technologies for identification purposes.

As the website operator, we have a legitimate interest in analyzing user behavior for the purpose of optimizing our website and the advertisements displayed on it. Data processing is therefore lawful under Article 6(1)(f) of the GDPR. If, for example, you have consented to the storage of cookies or have otherwise consented to data processing via Google Conversion Tracking, the sole legal basis is Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

An online advertising program provided by Google Ireland Ltd. 

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland 

Yes 

 https://policies.google.com/privacy?hl=de&gl=de 

Based on the European Commission’s Adequacy Decision and the company’s corresponding certification.

We use Google Ads remarketing. Remarketing is an online marketing feature that displays ads to users who have already interacted with a website or online store. Google Remarketing uses data from the Google Ads platform and Google Ads tracking to target advertising campaigns at users who have already shown interest in a specific product or service. Google’s advertising program allows us to display ads in the Google search engine or on third-party websites when visitors to our website enter specific search terms into Google (keyword targeting). Furthermore, we can use user data available to Google (e.g., location data and interests) to place targeted ads (audience targeting). We evaluate the collected data quantitatively by, for example, analyzing which search terms led to the display of our ads and how many ads resulted in corresponding clicks. You can adjust your ad settings in your Google Account. To do so, click the following link and sign in: https://www.google.com/settings/ads/onweb/

As the website operator, we have a legitimate interest in displaying and analyzing advertisements. Data processing is therefore lawful under Article 6(1)(f) of the GDPR. If, for example, you have consented to the storage of cookies or have otherwise consented to data processing by Google, the sole legal basis is Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

A tool from Microsoft Corp. for analyzing user behavior. 

Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland 

Yes 

Where can you find more information about data protection at Microsoft Clarity? https://privacy.microsoft.com/de-de/privacystatement 

Based on the European Commission’s Adequacy Decision and the company’s corresponding certification. 

We use Microsoft Clarity on our website. Clarity is a tool for analyzing user behavior. In particular, Clarity tracks mouse movements and creates a graphical representation of which parts of the website users scroll to most frequently (heat maps). Clarity can also record sessions, allowing us to view page usage in the form of videos. Furthermore, we receive information about general user behavior on our website. 

Clarity uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Your personal data is stored on Microsoft’s servers (Microsoft Azure Cloud Service) in the United States.

As the website operator, we have a legitimate interest in optimizing our online offerings and our advertising activities. Data processing is therefore lawful under Article 6(1)(f) of the GDPR. If, for example, you have consented to the storage of cookies or otherwise consented to data processing, the sole legal basis is Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect.

Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland 

Where can you find more information about privacy on YouTube? https://www.youtube.com/intl/ALL_de/howyoutubeworks/our-commitments/protecting-user-data/?gclid=EAIaIQobChMIztKuysSW-gIVjgwGAB0euwPlEAAYASAAEgLBXfD_BwE

You can watch YouTube videos on our website. As the provider of YouTube, Google collects and stores certain information about you when you do so. However, since we use YouTube in enhanced privacy mode, this only happens once you start playing a video. Specifically, the following happens in this case: 

Shopware Analytics