PRIVACY, DATA PROTECTION AND SECURITY
We appreciate your interest in our online shop. The protection of your personal privacy is very important to us. So we would like to offer you some detailed information below concerning how we handle your personal data.
The following summary gives a straightforward overview of what happens to your personal information when you visit our website. Personal data is any kind of data which can be used to identify you personally. Detailed information about data protection can be found in our data protection policy set out below.
Data acquisition via our website
Access data and hosting
You can visit our web pages without giving us any personal information. Each time a web page is accessed, the web server automatically stores what is known as a server log file. This documents your visit and contains details such as the name of the requested file, your IP address, the date and time of the retrieval, the amount of data transferred and the service provider originating the request.
This access data is analysed solely for the purpose of ensuring the trouble-free operation of our site as well as the improvement of our offer. Such preservation of our legitimate interests is fully in accordance with Art. 6 (1) f GDPR and enables us to optimize the accuracy and presentation of our offer.
Hosting services provided by Profihost AG
Working on our behalf, Profihost AG, Expo Plaza 1, 30539 Hannover, provides the services required for hosting and displaying our website. This arrangement serves to safeguard our legitimate interests and is essential to ensure our offer is accurately presented. All data collected during the use of our website, or on designated forms used in our online shop as described below, will be processed on its servers. No processing takes place on other servers beyond the context of what we explain here.
Profihost AG is located in Germany and is thus within the European Union and the European Economic Area.
Who is responsible for the data collection on this website?
The data processing on this website is done by us. Our contact details can be found in the website imprint.
How do we collect your data?
Firstly, we collect data you directly share with us. This could be, for instance, data you enter in a contact form when transacting business with us
Other data is gathered automatically through our IT systems when you visit our website. This is primarily technical data (for example, your Internet browser, operating system and the time of a page access request). The collection of such data routinely occurs as soon as you access our website.
What do we use your data for?
Some data is gathered to ensure our website provision remains error-free. Other data can be used to analyse user behaviour.
What are your rights concerning your data?
At any time you have the right to obtain free information about the origin, recipient and purpose of your stored personal data. You also have a right to request the correction, blocking or deletion of this data. You may contact us for this purpose at any time, and if you have any further questions about data protection, at the address given in the imprint. Furthermore, you have a right of appeal to the competent supervisory authority. A list of our data protection officers and their contact information can be obtained at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.
Analysis tools and third-party tools
When you visit our website, your surfing behaviour is statistically evaluated. This mainly takes place using cookies and analysis programs. The resultant analysis of your surfing behaviour is usually anonymous and cannot be traced back to you as an individual. Using certain tools, you can object to this analysis or prevent it taking place. Detailed information can be found in the following data protection policy.
You can object to this data analysis, and our data protection policy will inform you about the methods of you can use.
the consent management tool "consentmanager"
Right to data portability
You have the right to receive the data that we process on the basis of your consent or in the fulfilment of a contract, and to have your data transmitted to a third party in a standard, machine-readable format. If you require the direct transfer of data to another responsible person, this will only be done to the extent that it proves technically feasible.
SSL or TLS encryption
Our website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries you may send to us as the site operator. You can recognise an encrypted connection by noticing a change in the browser address line from "http: //" to "https: //" and the appearance of a lock symbol.
SSL or TLS encryption ensures that any data you send us cannot be read by third parties.
Encrypted payment transactions on this website
If, after the conclusion of a chargeable contract, there is an obligation to provide us with your payment details (e.g. an account number for direct debit authorisation), this data will be required for payment processing.
Payment transactions via our various payment methods (advance payment, PayPal, Visa/ MasterCard/ American Express, instant money transfer (Klarna), Paymorrow invoice and direct debit payments) are made exclusively via an encrypted SSL or TLS connection. You can recognise an encrypted connection by noticing a change in the browser address line from "http: //" to "https: //" and the appearance of a lock symbol.
Encrypted communication means the payment details you submit to us cannot be read by third parties.
Disclosure of information, blocking, deletion
You have the right to free information about your stored personal data, its origin and recipient, and the purpose of any data processing. And where necessary, you have a right to request the rectification, blocking or deletion of this data. You can contact us at any time at the address given in the imprint for further information about personal data.
Data Protection Officer
Statutory data protection officer
We have appointed a company data protection officer.
Frau Gabriele Raschke
An der Gärtnerei 12
59555 Lippstadt, Germany
Data collection on our website
Our websites use what are known as cookies. Cookies are small text files which are stored on your computer and stored by your browser. Cookies won’t harm your computer and neither do they contain viruses. Cookies serve to make our offer more user-friendly, effective and secure.
We mostly use what are known as "session cookies" which are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These particular cookies allow us to recognise your browser the next time you visit.
You can set your browser so you are informed about the setting of cookies and allow cookies only in individual cases. You can also choose to accept certain kinds of cookies, opt for a general exclusion, or enable the automatic deletion of cookies when closing your browser. You will find help about settings, and changing your web browser’s cookie settings, in the respective browser documentation, or information about the common web browsers (Microsoft Edge, Google Chrome, Mozilla Firefox) here. Disabling cookies may limit the functionality of this website.
Cookies which are required to facilitate our electronic communication process or to provide certain functions that you may wish to use (e.g. a shopping cart feature) are stored in accordance with Art. 6 (1) f GDPR. We have a legitimate interest in storing cookies to ensure the provision of our services is both optimised and technically correct. As far as other cookies are stored (such as cookies for analysing your surfing behaviour), they will be treated separately under this data protection policy.
Server log files
The website provider routinely collects and stores information in server log files, which your browser transmits to us automatically. This includes:
• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server access request
• IP address
This data will not be merged with other data sources.
The grounds for such data processing are cited in Art. 6 (1) f GDPR, which allows data processing for the performance of a contract or for the performance of pre-contractual measures.
When you send us enquiries via our contact form, the details on the enquiry form, including your contact details, will be stored in order to process your request and to address any follow-up questions. We will not share this information without your consent.
The processing of contact form data is therefore exclusively based on your consent (Art. 6 (1) GDPR). You can, of course, revoke this consent at any time simply by sending us an informal e-mail message. Any data processing operations carried out prior to your revocation remain lawful and unaffected by it.
The information you provide on the contact form will remain on file until you ask us to delete it or revoke your consent to storage, or otherwise deleted once the reason for data storage no longer applies (for example, after your request has been processed). Any mandatory statutory provisions – especially designated periods of retention – must still be observed.
You can register on our website to use its additional features, and we will only use the data entered for the purpose of acquiring the respective offer or service for which you registered. Any mandatory information requested during registration must be given in full, otherwise the registration request will be rejected.
We will use the e-mail address specified during registration to inform you about important changes, such as the scope of an offer or where there are technical changes.
The processing of the data entered during registration is grounded in your consent (Art. 6 (1) GDPR). You can, of course, revoke this consent at any time simply by sending us an informal e-mail message. Any data processing operations carried out prior to your revocation remain lawful and unaffected by it.
We will store the data collected during registration as long as you are registered on our website. This will then subsequently be deleted, though any mandatory periods of retention must still be observed.
Data transfer at the conclusion of the contract for online shops, merchants and commercial shipments
We only transfer personal data to third parties if this is necessary to fulfil the contract, for example to companies entrusted with the delivery of goods or to a bank responsible for processing a payment. No further transfer of data occurs without your express consent to such transfer. For instance, there will be no transfer of your data to third parties for advertising purposes without your consent.
The grounds for such data processing are cited in Art. 6 (1) b GDPR, which allows data processing to fulfil a contract or for the performance of pre-contractual measures.
In the context of data processing in accordance with Art. 6 (1) b GDPR, data is sent to the following shipping service providers:
DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn
United Parcel Service Deutschland S.à r.l. & Co. OHG, Görlitzer Straße 1, 41460 Neuss
Parcel.One GmbH, Otto-Hahn-Str. 21, 35510 Butzbach
Shared content via plugins (Facebook & Twitter)
Our site content can be shared on social networks like Facebook or Twitter in a way which is data protection compliant. Direct contact between these networks and users is not established until a user actively clicks on a social media button.
This action does not initiate an automatic transfer of user data to the operators of these platforms. If the user is logged in to one of these social networks, an information window will appear when using Facebook & Twitter social media buttons. This allows the user to confirm the text content before submission.
Our users can share our website content on social networks in a way which is data protection compliant, and which does not allow network operators to create a full surfing profile.
Facebook plugins (Like & Share button)
Facebook social network plugins provided by Facebook Inc., 1 Hacker Way, Menlo Park, California 94025, USA, are integrated into our pages. These Facebook plugins can be recognised on our site by the Facebook logo or the "Like-Button" label. An overview of Facebook plugins can be found here: https://developers.facebook.com/docs/plugins/.
When you visit our pages, this plugin establishes a direct connection between your browser and the Facebook server. Thus Facebook receives the information that you have visited our site as an IP address. If you click on the Facebook "Like-Button" while you are logged into your Facebook account, you can link our page content to your Facebook profile. As a result, Facebook can associate your visit to our pages with your user account. Please note that we as the provider of these pages are not aware of the content of the data transmitted and its subsequent use by Facebook. For more information, please refer to Facebook’s data protection policy at https://de-de.facebook.com/policy.php.
If you do not wish Facebook to associate your visit to our pages with your Facebook user account, please log out of your Facebook user account prior to your visit.
Twitter social media service functions are integrated within our site. These features are provided by Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. When using Twitter and the "Re-Tweet" function, any websites you visit will be linked to your Twitter account and shared with other users, and such data will also be transmitted to Twitter. Please note that we as the provider of these pages are not aware of the content of the data transmitted and its subsequent use by Twitter. For more information, please refer to Twitter’s data protection policy at: https://twitter.com/privacy.
You can change your Twitter privacy settings under Account Settings at https://twitter.com/account/settings.
Analysis tools and advertising
Our website uses some functions of the web analytics service Google Analytics, provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.
Google Analytics uses what are known as "cookies". These are text files stored on your computer which facilitate an analysis of your use of our website. Information generated by a cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
The grounds for storing Google Analytics cookies are cited in Art. 6 (1) f GDPR. A website operator has a legitimate interest in analysing user behaviour in order to optimise its advertising and website performance.
IP anonymisation is active on our website. As a result, your IP address will be shortened by Google prior to its transmission to the United States within member states of the European Union, or other parties to the agreement within the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google server in the US and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of our website, to compile reports on website activity, and to provide other services related to website activity and internet usage to the website operator. The IP address Google Analytics receives from your browser will not be merged with any other Google data.
You can prevent the storage of cookies by activating the relevant setting in your browser software; however, please note that if you do this, you may not be able to use all the features of this website to their fullest extent. In addition, you may also prevent Google collecting data generated by cookies related to your use of the website (including your IP address), as well as the processing of this data by Google, by downloading and installing the browser plug-in available via the following link: https://tools.google.com/dlpage/gaoptout?hl=de. oder Google Analytics deaktivieren
Objection to data collection
You can prevent Google Analytics collecting your data by clicking on the following link. An opt-out cookie will be installed which will prevent the collection of your data during future visits to this website: disable Google Analytics. For more information about how Google Analytics handles user data, please refer to Google’s data protection policy at :
We have entered into a contract data processing agreement with Google whereby the strict requirements of the German data protection authorities are fully implemented when Google Analytics is employed.
Google Analytics and demographics
Our website uses the Google Analytics demographics feature. That means reports containing statements about the age, gender and interests of our website visitors can be produced. This data is obtained via Google’s interest-based advertising and third-party visitor data. None of this data can be assigned to any specific person. You can disable this feature at any time via the ad settings in your Google Account, or initiate a general prohibition which will prevent Google Analytics collecting your data, as outlined in the section "Objection to data collection".
Google AdWords and Google Conversion Tracking
Our website uses Google AdWords, an online advertising program provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, United States ("Google").
As part of Google AdWords, we also use a feature known as conversion tracking. Here, a conversion tracking cookie is set whenever an ad served by Google is clicked. Cookies are small text files which the Internet browser stores on a user's computer. These cookies expire after 30 days and are not used to personally identify the user. When a user visits certain pages of our website while the cookie is still valid, both we and Google can recognise that the user clicked on an ad and was redirected to this page.
Each Google AdWords customer receives a different cookie. This means that cookies cannot be tracked via the websites of AdWords customers. The information gathered via the conversion cookie is used to generate conversion statistics for those AdWords advertisers who have opted for conversion tracking. Customers receive a report about the total number of users who clicked on their ad and were redirected to a conversion tracking tag page. However, they do not receive any information which could personally identify a user. If you don’t want to participate in tracking, you can easily opt-out by disabling Google Conversion Tracking cookies in your Internet browser under User Preferences. Then you will not be included in the conversion tracking statistics.
The grounds for storing "conversion cookies" are cited in Art. 6 (1) f GDPR. A website operator has a legitimate interest in analysing user behaviour in order to optimise its advertising and website performance.
For more information about Google AdWords and Google Conversion Tracking, see Google’s data protection policy at: https://www.google.com/settings/ads/onweb/.
You can set your browser so you are informed about the setting of cookies and allow cookies only in individual cases. You can also choose to accept certain kinds of cookies, opt for a general exclusion, or enable the automatic deletion of cookies when closing your browser. Disabling cookies may limit the functionality of this website: https://www.google.com/policies/technologies/ads/.
Our website uses Facebook's visitor action pixel for conversion measurement. This feature is provided by Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook").
This enables the tracking of a visitor’s behaviour after he has been redirected to the provider's website by clicking on a Facebook ad. As a result, the effectiveness of Facebook advertisements can be evaluated for statistical and market research purposes and future advertising measures can be refined and optimised.
Any data collected is anonymous to us as the website operator, so we cannot draw conclusions about user identity. However, the data is stored and processed by Facebook in a way which makes a connection to the respective user profile possible, and Facebook can also use the data for its own advertising purposes in accordance with Facebook’s data usage directive. As a result, Facebook can enable ads to be displayed both on Facebook and outside of Facebook. As site operators, we cannot influence this data use.
For more information about how to protect your privacy, please refer to Facebook’s data protection policy at: https://www.facebook.com/about/privacy/.
You can also disable the remarketing Custom Audiences feature in the Ad Settings section by visiting https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen To achieve this, you must be logged in to Facebook.
If you do not have a Facebook account, you can still opt-out of Facebook-based advertising via the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.
Receiving evaluation reminders via e-mail
If you have given us your express consent in accordance with Art. 6 (1) 1a GDPR, we will use your e-mail address to send you a reminder to submit an evaluation of your order via our review system.
This consent can be withdrawn at any time by sending a message to the contact option described below.
If you wish to receive our newsletter mentioned on our website, we will require your e-mail address, as well as information allowing us to verify you are the owner of the e-mail address provided and that you agree to receive the newsletter. No further data will be collected, except on a purely voluntary basis. We use this data exclusively for delivery of the requested information and will not pass your data on to third parties.
The processing of the data entered into the newsletter registration form takes place exclusively on the basis of your consent (Article 6 (1) a GDPR). You can revoke your consent to the storage of your data and e-mail address and its use for sending the newsletter, for example via the "unsubscribe" newsletter link. Any prior data processing operations remain lawful and unaffected by your revocation.
The data you deposit with us for the purpose of obtaining the newsletter will be saved until you cancel your newsletter registration. Any data stored with us for other purposes (such as e-mail addresses for the members section) will remain unaffected.
Our website uses CleverReach for distributing newsletters. This facility is provided by CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service which enables newsletter deliveries to be organised and analysed. The data you enter for the purpose of receiving the newsletter (e.g. your e-mail address) will be stored on CleverReach's servers in Germany or Ireland.
Distributing our newsletters via CleverReach enables us to analyse the behaviour of newsletter recipients. Among other things, this can reveal how many recipients have opened our newsletter and how often each link in the newsletter was clicked. With the help of what is known as conversion tracking, it is also possible to analyse whether a predefined action (for example, the purchase of a product on our website) has taken place after clicking on the appropriate newsletter link. For more information on data analysis via CleverReach newsletters, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.
Data processing is based on your consent (Article 6 (1) a GDPR), and you can always revoke your consent at any time by unsubscribing from our newsletter. Any prior data processing operations remain lawful and unaffected by your revocation.
If you prefer not to be subject to CleverReach data analysis, you can, of course, unsubscribe from the newsletter, and we provide a link for this purpose in every newsletter. Furthermore, you can also unsubscribe from the newsletter directly on our website.
Your data deposited with us for the purpose of subscribing to the newsletter is stored by us from the time you opt-in until you unsubscribe. After that, your newsletter data is deleted both from our servers and from those of CleverReach. Data which has been stored with us for other purposes (such as e-mail addresses for the members section) remains unaffected. For more information, see the CleverReach data protection policy at: https://www.cleverreach.com/de/datenschutz/.
Conclusion of a data processing contract
We have concluded a data processing contract with CleverReach. When using CleverReach, we observe the strict requirements of the German data protection authorities to the full.
Among other methods, we offer payment via PayPal on our website. This payment service is provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereafter "PayPal").
If you choose to pay via PayPal, then the payment details you enter will be sent to PayPal.
The transmission of your data to PayPal is based on Art. 6 (1) a GDPR (consent) and Art. 6 (1) b GDPR (processing to fulfil a contract). You have the option to revoke your consent to this data processing at any time. Such revocation will not affect the validity of historical data processing operations.
Credit card payments VISA/ MASTER/ AMEX
Among other methods, we offer payment via credit card. This payment service is provided by the HeidelPay GmbH, Vangerowstraße 18, 69115 Heidelberg (hereafter "HeidelPay").
If you select payment via credit card, all the payment data you enter will be directly transmitted and entered on the HeidelPay GmbH website. All order-related data is collected exclusively for processing the payment and is stored on servers at HeidelPay GmbH and HeidelPay S.A., Société anonyme.
The transmission of your data to HeidelPay S.A., Société anonyme, is based on Art. 6 (1) a GDPR (consent) and Art. 6 (1) b GDPR (processing to fulfil a contract). You have the option to revoke your consent to this data processing at any time. Such revocation will not affect the validity of historical data processing operations.
Further information can be found in the HeidelPay GmbH data protection policy. (https://www.heidelpay.com/de/datenschutz)
Among other methods, we offer payment by "Sofortüberweisung". This payment service is provided by Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereafter "Sofort GmbH").
The "Sofortüberweisung" method allows us to receive an immediate payment confirmation from Sofort GmbH, which then means we can start to fulfil our obligations immediately.
If you have decided to use the "Sofortüberweisung" method of payment, please forward the PIN and a valid TAN to Sofort GmbH, which will enable you to log in to your online banking account. Sofort GmbH will then automatically check your account balance after logging in and transfer money to us using the TAN you have submitted. Afterwards, it will then quickly send us a transaction confirmation. Once you log in, your purchases, available credit, and the existence of other accounts as well as their balances will also be checked automatically.
In addition to the PIN and the TAN, the payment data you enter as well as your personal data will be transmitted to Sofort GmbH. This personal data includes your first name, surname, address, telephone number (s), e-mail address, IP address and possibly other data if required for payment processing. This data transmission is necessary to establish your identity beyond doubt, and to prevent fraud.
The transmission of your data to Sofort GmbH is based on Art. 6 (1) a GDPR (consent) and Art. 6 (1) b GDPR (processing to fulfil a contract). You have the option to revoke your consent to this data processing at any time. Such revocation will not affect the validity of historical data processing operations.
Objection to promotional emails
We object to the use of our contact information published as part of our obligation to publish an imprint for sending unsolicited advertising and informational materials. We expressly reserve the right to take legal action in the event of unsolicited promotional information, such as spam e-mails.
Liability for external links
Our shop contains links to external third-party websites, though we have no influence on their content. For this reason, we cannot assume any liability for such external content. In each case, the provider or the operator of the site is directly responsible for the content of any linked pages. At the time of linking, the linked pages were checked for any legal violations and no illegal content was identified. Should any violations come to our attention, we will remove such links immediately.
As the operator of these pages, we always endeavour to respect the copyrights of other sites and to create or source license-free products. All our website content is subject to German copyright law. Any duplication, processing or distribution for any purpose beyond the scope of this copyright must be approved in writing by the respective author or creator. Downloads and copies of these pages are permitted for personal use only. The use and copying of our website content for commercial purposes is forbidden.
last change: 01/01/2022