Privacy Policy
1. Information on the collection of personal data
1.1
Below we provide information about the collection of personal data when you use our website. Personal data
means any information relating to you personally, e.g. name, address, email addresses and user behaviour.
1.2
The controller within the meaning of Art. 4(7) of the EU General Data Protection Regulation (GDPR) is
- elostore GmbH & Co. KG
- Untere Grabenstraße 23
- D-88299 Leutkirch
- Email: shop@elo.store
- (see our Legal Notice)
1.3
You can contact our Data Protection Officer by email at
shop@elo.store or by writing to our postal address and adding “Data
Protection Officer”.
1.4
When you contact us by email or via a contact form, the data you provide (your email address and, where
applicable, your name and telephone number) will be stored by us in order to answer your questions. We
delete the data arising in this context once storage is no longer necessary, or restrict processing if
statutory retention obligations apply.
The legal basis for the processing of personal data described here is Art. 6(1)(f) GDPR. Our legitimate
interest is to provide you with a simple and quick way to contact us so that we can answer your
questions and requests.
2. Your rights
2.1
You have the following rights vis-à-vis us with regard to your personal data:
- - Right of access,
- - Right to rectification or erasure,
- - Right to restriction of processing,
- - Right to object to processing,
- - Right to data portability.
To exercise your data subject rights, in particular your right to erasure under Article 17 GDPR, you can use our deletion form at https://elo.store/en/Data-Protection/Delete-Request/ or alternatively contact us by email at shop@elo.store.
2.2
You also have the right to lodge a complaint with a data protection supervisory authority about our
processing of your personal data.
The authority locally responsible for us is:
- The State Commissioner for Data Protection and Freedom of Information,
- Lautenschlagerstraße 20
- 70173 Stuttgart
- Tel.: 0711/615541-0
- Fax: 0711/615541-15
- Email: poststelle@lfdi.bwl.de
3. Collection of personal data when visiting our website
3.1
The servers for our website are operated by the provider Google LLC, Germany. We have concluded a data
processing agreement with the provider in accordance with Art. 28 GDPR. The legal basis for the use of
external hosting is the performance of a contract with our potential and existing customers pursuant to Art.
6(1)(b) GDPR as well as our legitimate interest in the secure and high-performance provision of our website
pursuant to Art. 6(1)(f) GDPR.
If you use the website purely for informational purposes, i.e. if you do not register or otherwise
provide us with information, we only collect the personal data that your browser transmits to our
server. If you wish to view our website, we collect the following data, which is technically necessary
for us to display the website to you and to ensure stability and security (legal basis: Art. 6(1)(f)
GDPR):
- - IP address (anonymised)
- - Date and time of the request
- - Time zone difference from Greenwich Mean Time (GMT)
- - Content of the request (specific page)
- - Access status/HTTP status code
- - Amount of data transferred in each case
- - Website from which the request originates
- - Browser
- - Operating system and its interface
- - Language and version of the browser software
3.2
In addition to the data mentioned above, cookies are stored on your computer when you use our website.
Cookies are small text files that are stored on your hard drive and assigned to the browser you use. Cookies
cannot execute programs or transmit viruses to your computer. They are used to make the website as a whole
more user-friendly and effective.
3.3
Use of cookies:
This website uses the following types of cookies, the scope and function of which are explained below:
-
Session cookies are automatically deleted when you close your browser. They store a so-called
session ID, which allows different requests from your browser to be assigned to the same session.
This enables your computer to be recognised when you return to our website. Session cookies are
deleted when you log out or close your browser.
-
Persistent cookies are automatically deleted after a predefined period, which may vary
depending on the cookie. You can delete cookies at any time in your browser's security settings.
-
Essential/necessary cookies are used to control your visit to our websites and are necessary,
for example, to enable you to navigate through the pages and use essential functions. The legal
basis for the data processing is Art. 6(1)(f) GDPR.
-
Statistics cookies help us to better understand, in so-called pseudonymous usage profiles,
how visitors interact with the website. It is not possible to directly identify a person from these
profiles. These cookies allow us to measure the reach of our offering. The legal basis for the data
processing is your prior consent pursuant to Art. 6(1)(a) GDPR.
- Marketing cookies allow us to provide you with optimised and personalised content and offers on our website or on third-party websites. These cookies are only active if you have previously given us your consent. The legal basis for the data processing is Art. 6(1)(a) GDPR.
Your consent to or rejection of the cookies listed above (preferences, statistics, marketing) can be
adjusted via the
used on our website. There we also explain how the cookies work, for what purposes we or third parties
wish to use them and how long your data is stored.
You can also configure your browser settings according to your preferences and reject cookies.
Please note that you may then be unable to use all functions of this website.
4. Other functions and services of our website
4.1
In addition to purely informational use of our website, we offer various services that you may use if you
are interested. To do so, you generally have to provide further personal data, which we use to provide the
respective service and to which the data processing principles described above apply.
4.2
In some cases, we use external service providers to process your data. These service providers have been
carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.
4.3
If our service providers or partners are based in a country outside the European Economic Area (EEA), we
inform you about the consequences of this circumstance in the description of the respective application.
5. Consent and withdrawal / Consent Management Tool / Objection under Art. 21 GDPR
5.1
If you have given consent to the processing of your data pursuant to Art. 7 GDPR, you may withdraw it at any
time with effect for the future.
To obtain and manage the consents you have given, we use a so-called
on our websites. This tool allows you to decide, according to your preferences, whether cookies may be
set on our websites. At any time, you can use the settings of the consent tool to change the decision
you made there and subsequently grant or withdraw your consent.
5.2
Where we base the processing of your personal data on the balancing of interests pursuant to Art. 6(1)(f)
GDPR, you may object to the processing if reasons arising from your particular situation speak against the
processing of your data.
You can also notify us of your objection to advertising using the following contact details:
- elostore GmbH & Co KG
- Untere Grabenstraße 23
- D-88299 Leutkirch
- Email: shop@elo.store
6. Secure communication on the internet
6.1
To ensure the confidentiality of communication with you via our contact form, we use TLS encryption in
accordance with the current state of the art.
7. Data erasure and storage
7.1
The personal data of the data subject will be erased or blocked as soon as the purpose for storage no longer
applies. Data may continue to be stored where this is provided for by the European or national legislator in
Union regulations, laws or other provisions to which the controller is subject. The data will also be
blocked or erased when a storage period prescribed by the aforementioned provisions expires.
Please refer to the
for the retention periods of data stored by cookies.
8. elostore
8.1
If you wish to place an order in our elostore, it is necessary for the conclusion of the contract that you
provide the personal data we require to process your order. Mandatory information required for processing
the contract is marked separately; further information is voluntary. We process the data you provide in
order to process your order. For this purpose, we may pass your payment data on to our principal bank.
You may voluntarily create a customer account, through which we can store your data for future
purchases. When you create an account under “My Account”, the data you provide is stored until revoked.
If you wish to have all other data, including your user account, deleted, please contact us by email at
shop@elo.store.
We may also process the data you provide in order to send you emails containing technical
information.
8.2
Due to requirements under commercial and tax law, we are obliged to retain your address, payment and order
data for a period of ten years. However, after two years we restrict processing, i.e. your data is then used
only to comply with statutory obligations.
8.3
To prevent unauthorised access by third parties to your personal data, in particular financial data, the
ordering process is encrypted using TLS technology.
8.4
The legal basis for this is Art. 6(1)(b) GDPR.
9. Newsletter
9.1
With your consent, you can subscribe to our newsletter, which we use to inform you about our current
interesting offers. The goods and services advertised are specified in the declaration of consent.
9.2
We use the so-called double opt-in procedure for newsletter registration. This means that after you
register, we send an email to the email address provided asking you to confirm that you wish to receive the
newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and
automatically deleted after one month. We also store the IP addresses used by you and the times of
registration and confirmation. The purpose of this procedure is to enable us to prove your registration and,
where necessary, investigate possible misuse of your personal data.
9.3
The only mandatory information required to receive the newsletter is your email address. Any further data
marked separately is provided voluntarily and is used so that we can address you personally. After your
confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art.
6(1)(a) GDPR.
9.4
You can withdraw your consent to receive the newsletter and unsubscribe at any time. You can withdraw your
consent by clicking the link provided in each newsletter email or by emailing
shop@elo.store.
9.5
Please note that when sending the newsletter, we evaluate your user behaviour. For this evaluation, the
emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our
website. For the evaluations, we link the data referred to in Section 3 and the web beacons with your email
address and an individual ID.
Using the data obtained in this way, we create a user profile in order to tailor the newsletter to your
individual interests. We record when you read our newsletters, which links you click in them, and infer
your personal interests from this. We link this data with actions you have taken on our website.
You can object to this tracking at any time by clicking the separate link provided in each email or
by informing us via another contact channel. The information is stored for as long as you are
subscribed to the newsletter. After you unsubscribe, we retain the data only in statistical and
anonymised form.
10. Amazon CloudFront
We use the “Amazon CloudFront” service on our website to deliver content efficiently and improve website
performance. The provider is Amazon EU S.à r.l. ("Amazon"), 38 avenue John F. Kennedy, L-1855 Luxembourg.
The legal basis for the use of Amazon CloudFront is our legitimate interest pursuant to Art. 6(1)(f) GDPR in optimising the performance and loading speed of our website content and improving the user experience.
The data processed by Amazon CloudFront includes your IP address, location, time of visit, device information and information about your interaction with the website; cookies may also be set in order to optimise content delivery.
The purpose of the data processing is the efficient delivery and optimisation of website content via a global Content Delivery Network (CDN).
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Amazon, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Amazon is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on Amazon CloudFront's data protection provisions is available at: https://aws.amazon.com/compliance/data-privacy-faq/
The legal basis for the use of Amazon CloudFront is our legitimate interest pursuant to Art. 6(1)(f) GDPR in optimising the performance and loading speed of our website content and improving the user experience.
The data processed by Amazon CloudFront includes your IP address, location, time of visit, device information and information about your interaction with the website; cookies may also be set in order to optimise content delivery.
The purpose of the data processing is the efficient delivery and optimisation of website content via a global Content Delivery Network (CDN).
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Amazon, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Amazon is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on Amazon CloudFront's data protection provisions is available at: https://aws.amazon.com/compliance/data-privacy-faq/
11. Amazon Web Services
We use “Amazon Web Services” (AWS) on our website to host and manage our online infrastructure. The provider is
Amazon EU S.à r.l. ("Amazon"), 38 avenue John F. Kennedy, L-1855 Luxembourg.
The legal basis for the use of AWS is our legitimate interest pursuant to Art. 6(1)(f) GDPR in securely hosting our website and ensuring its reliable operation, performance and protection against technical problems or misuse.
The data processed by Amazon Web Services includes your IP address, device and browser information, usage data and log data; cookies may also be set for authentication and service functionality.
The purpose of the data processing is to provide cloud computing infrastructure and services, including storage, hosting and data management.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Amazon is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Amazon, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on AWS's data protection provisions is available at: https://aws.amazon.com/privacy/
The legal basis for the use of AWS is our legitimate interest pursuant to Art. 6(1)(f) GDPR in securely hosting our website and ensuring its reliable operation, performance and protection against technical problems or misuse.
The data processed by Amazon Web Services includes your IP address, device and browser information, usage data and log data; cookies may also be set for authentication and service functionality.
The purpose of the data processing is to provide cloud computing infrastructure and services, including storage, hosting and data management.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Amazon is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Amazon, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on AWS's data protection provisions is available at: https://aws.amazon.com/privacy/
12. Google Ads
We use the “Google Ads” service on our website to advertise our products and services online. The provider is
Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of Google Ads is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Ads includes your IP address, browser and device information, location data, search queries, interactions with advertisements and websites; cookies are also set.
If you are signed in to a Google account, Google Ads may link the data collected with your user profile in order to display personalised advertising.
The purpose of the data processing is to display personalised advertising and measure advertising effectiveness.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on Google Ads' data protection provisions is available at: https://business.safety.google/adsprocessorterms/
The legal basis for the use of Google Ads is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Ads includes your IP address, browser and device information, location data, search queries, interactions with advertisements and websites; cookies are also set.
If you are signed in to a Google account, Google Ads may link the data collected with your user profile in order to display personalised advertising.
The purpose of the data processing is to display personalised advertising and measure advertising effectiveness.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on Google Ads' data protection provisions is available at: https://business.safety.google/adsprocessorterms/
13. Google Ads Conversion Tracking
We use the “Google Ads Conversion Tracking” service on our website to measure the effectiveness of our
advertising campaigns. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4,
Ireland.
The legal basis for the use of Google Ads Conversion Tracking is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Ads Conversion Tracking includes your IP address, browser and device information and details of interactions with advertisements; cookies are set to track conversions.
If you are signed in to a Google account, data from Google Ads Conversion Tracking may be linked to a user profile.
The purpose of the data processing is to measure the effectiveness of advertising campaigns and track user interactions after clicking on advertisements.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on the data protection provisions for Google Ads Conversion Tracking is available at: https://policies.google.com/privacy
The legal basis for the use of Google Ads Conversion Tracking is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Ads Conversion Tracking includes your IP address, browser and device information and details of interactions with advertisements; cookies are set to track conversions.
If you are signed in to a Google account, data from Google Ads Conversion Tracking may be linked to a user profile.
The purpose of the data processing is to measure the effectiveness of advertising campaigns and track user interactions after clicking on advertisements.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on the data protection provisions for Google Ads Conversion Tracking is available at: https://policies.google.com/privacy
14. Google Analytics
We use the “Google Analytics” service on our website to analyse user behaviour. The provider is Google Ireland
Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of Google Analytics is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Analytics includes your IP address, browser and device information, location data, time of visit and information about interactions with the website; cookies are also set.
If you are signed in to a Google account, this data may be linked to a user profile.
The purpose of the data processing is to analyse and evaluate user behaviour in order to optimise the website and marketing activities.
The standard data retention period for Google Analytics is 14 months.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on Google Analytics' data protection provisions is available at: https://support.google.com/analytics/topic/2919631?hl=de
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://tools.google.com/dlpage/gaoptout
The legal basis for the use of Google Analytics is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Analytics includes your IP address, browser and device information, location data, time of visit and information about interactions with the website; cookies are also set.
If you are signed in to a Google account, this data may be linked to a user profile.
The purpose of the data processing is to analyse and evaluate user behaviour in order to optimise the website and marketing activities.
The standard data retention period for Google Analytics is 14 months.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on Google Analytics' data protection provisions is available at: https://support.google.com/analytics/topic/2919631?hl=de
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://tools.google.com/dlpage/gaoptout
15. Google Ads Remarketing
We use the “Google Analytics Remarketing” service on our website to display targeted advertisements to users
based on their previous interactions with our website. The provider is Google Ireland Limited ("Google"), Gordon
House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of Google Analytics Remarketing is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Analytics Remarketing includes your IP address, device information, browser details, pages visited and the time and duration of the visit; cookies are set to track interactions with the website for remarketing purposes.
Google Analytics Remarketing collects data in order to create user profiles for targeted advertising purposes.
The purpose of the data processing is to analyse user behaviour and provide personalised advertising based on previous website interactions.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on the data protection provisions for Google Analytics Remarketing is available at: https://business.safety.google/adsprocessorterms/
The legal basis for the use of Google Analytics Remarketing is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Analytics Remarketing includes your IP address, device information, browser details, pages visited and the time and duration of the visit; cookies are set to track interactions with the website for remarketing purposes.
Google Analytics Remarketing collects data in order to create user profiles for targeted advertising purposes.
The purpose of the data processing is to analyse user behaviour and provide personalised advertising based on previous website interactions.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on the data protection provisions for Google Analytics Remarketing is available at: https://business.safety.google/adsprocessorterms/
16. Google Fonts
We use the “Google Fonts” service on our website to integrate external fonts for an improved visual
presentation. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4,
Ireland.
The legal basis for the use of Google Fonts is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Fonts includes your IP address, browser and device information and the time of the request.
The purpose of the data processing is the optimised and consistent display of fonts on the website.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on Google Fonts' data protection provisions is available at: https://policies.google.com/privacy
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://policies.google.com/privacy#infochoices
The legal basis for the use of Google Fonts is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Fonts includes your IP address, browser and device information and the time of the request.
The purpose of the data processing is the optimised and consistent display of fonts on the website.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on Google Fonts' data protection provisions is available at: https://policies.google.com/privacy
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://policies.google.com/privacy#infochoices
17. Google Signals
17.1
If you have given your consent via our Consent Management Tool, we use the “Google Signals” function within
Google Analytics. Google Signals enables us to obtain additional information about users who are signed in
to their Google account and have agreed to personalised advertising. In particular, information about
cross-device sessions, remarketing audiences, demographic characteristics and users' interests may be
processed. We use the data provided by Google Signals exclusively in aggregated and anonymised form. The
function is used to analyse and optimise our online offering, prepare statistical evaluations and improve
and personalise our marketing activities. Google Signals is used exclusively on the basis of your consent
pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future via our
. In addition, users can control or deactivate the collection and processing of data by Google Signals
themselves via their Google account settings. Further information can be found in your Google account under
“Data & Privacy” and at:
https://support.google.com/analytics/answer/7532985
18. Google Tag Manager
We use the “Google Tag Manager” service on our website to efficiently manage website tags. The provider is
Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Tag Manager includes your IP address, browser and device information and information about interactions with the website. Google Tag Manager itself does not set cookies, but it may trigger other services that set cookies.
The purpose of the data processing is the simplified integration and management of website tags and tracking codes for analysing user interactions.
Further information on Google Tag Manager's data protection provisions is available at: https://policies.google.com/privacy
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://tools.google.com/dlpage/gaoptout
The legal basis for the use of Google Tag Manager is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Google Tag Manager includes your IP address, browser and device information and information about interactions with the website. Google Tag Manager itself does not set cookies, but it may trigger other services that set cookies.
The purpose of the data processing is the simplified integration and management of website tags and tracking codes for analysing user interactions.
Further information on Google Tag Manager's data protection provisions is available at: https://policies.google.com/privacy
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://tools.google.com/dlpage/gaoptout
19. YouTube Videos
We use the “YouTube” video service on our website. The service provider is Google Ireland Limited ("Google"),
Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of YouTube is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
Google collects and processes your IP address, browser and operating system information and location data. Actions such as viewing videos or creating playlists are also processed. Cookies are additionally set. YouTube integrates other Google services such as Google Fonts, Google Photos and Google Ads (formerly DoubleClick).
If you are signed in to a Google account, this data may be linked to a user profile. Your user behaviour is recorded and analysed for advertising purposes.
The purpose of the data processing is to provide video content and embed it on our website.
According to Google's privacy policy, the retention period for data processed by YouTube varies depending on the type of data and user settings. By default, activity data (such as watched videos, search history, etc.) is automatically deleted after 36 months (3 years) for new accounts or users who have not previously specified a retention period. Users can manually set this retention period to 3 months or 18 months, or choose to retain the data permanently. Detailed information is available at: https://policies.google.com/privacy?hl=de#inforetaining
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on YouTube's data protection provisions is available at: https://policies.google.com/privacy
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://myaccount.google.com/data-and-privacy
The legal basis for the use of YouTube is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
Google collects and processes your IP address, browser and operating system information and location data. Actions such as viewing videos or creating playlists are also processed. Cookies are additionally set. YouTube integrates other Google services such as Google Fonts, Google Photos and Google Ads (formerly DoubleClick).
If you are signed in to a Google account, this data may be linked to a user profile. Your user behaviour is recorded and analysed for advertising purposes.
The purpose of the data processing is to provide video content and embed it on our website.
According to Google's privacy policy, the retention period for data processed by YouTube varies depending on the type of data and user settings. By default, activity data (such as watched videos, search history, etc.) is automatically deleted after 36 months (3 years) for new accounts or users who have not previously specified a retention period. Users can manually set this retention period to 3 months or 18 months, or choose to retain the data permanently. Detailed information is available at: https://policies.google.com/privacy?hl=de#inforetaining
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on YouTube's data protection provisions is available at: https://policies.google.com/privacy
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://myaccount.google.com/data-and-privacy
20. YouTube NoCookie
We use the YouTube NoCookie service (also known as “YouTube in enhanced privacy mode”) on our website to embed
videos without using cookies that track user behaviour. The provider is Google Ireland Limited ("Google"),
Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis for the use of YouTube NoCookie is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by YouTube NoCookie includes your IP address, device information and information about video interactions. Data is stored in the browser's web storage.
The purpose of the data processing is to embed videos while minimising the use of cookies and improving users' data protection.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on YouTube NoCookie's data protection provisions is available at: https://policies.google.com/privacy#infocollect
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://policies.google.com/privacy#infochoices
The legal basis for the use of YouTube NoCookie is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by YouTube NoCookie includes your IP address, device information and information about video interactions. Data is stored in the browser's web storage.
The purpose of the data processing is to embed videos while minimising the use of cookies and improving users' data protection.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Google, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Google is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on YouTube NoCookie's data protection provisions is available at: https://policies.google.com/privacy#infocollect
Information about the cookies set is available at: https://policies.google.com/technologies/cookies
You can prevent the processing of your data by clicking this link: https://policies.google.com/privacy#infochoices
21. LinkedIn Insight Tag
We use the “LinkedIn Insight Tag” service on our website to analyse user behaviour and measure the effectiveness
of our advertising activities. The provider is LinkedIn Ireland Unlimited Company ("LinkedIn"), Wilton Plaza,
Wilton Place, Dublin 2, Ireland.
The legal basis for the use of LinkedIn Insight Tag is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by LinkedIn Insight Tag includes your IP address, device and browser information, page events and information about interactions with the website; the service also uses cookies.
LinkedIn Insight Tag collects data that may be used to create user profiles for targeted advertising purposes.
The purpose of the data processing is to analyse advertising effectiveness, track conversions and create anonymous user profiles for targeted marketing.
Data from the LinkedIn Insight Tag is stored by LinkedIn for 180 days by default.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. LinkedIn is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with LinkedIn, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on LinkedIn Insight Tag's data protection provisions is available at: https://www.linkedin.com/legal/privacy-policy
Information about the cookies set is available at: https://www.linkedin.com/legal/cookie-policy
The legal basis for the use of LinkedIn Insight Tag is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by LinkedIn Insight Tag includes your IP address, device and browser information, page events and information about interactions with the website; the service also uses cookies.
LinkedIn Insight Tag collects data that may be used to create user profiles for targeted advertising purposes.
The purpose of the data processing is to analyse advertising effectiveness, track conversions and create anonymous user profiles for targeted marketing.
Data from the LinkedIn Insight Tag is stored by LinkedIn for 180 days by default.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. LinkedIn is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with LinkedIn, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on LinkedIn Insight Tag's data protection provisions is available at: https://www.linkedin.com/legal/privacy-policy
Information about the cookies set is available at: https://www.linkedin.com/legal/cookie-policy
22. Meta Pixel
We use the “Meta Pixel” service (also known as the “Facebook Pixel”) on our website to analyse user behaviour
and measure the effectiveness of our advertising campaigns. The provider is Meta Platforms Ireland Limited, 4
Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
The legal basis for the use of Meta Pixel is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Meta Pixel includes IP address, browser information, operating system, device information, location data, referrer URL, interactions on the website and Facebook user ID (if the user is signed in to Facebook); cookies are also set.
Meta Pixel collects user data that may be used to create user profiles for targeted advertising purposes.
The purpose of the data processing is to analyse user behaviour, measure advertising effectiveness, create audiences and provide personalised advertising.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Meta is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a Data Processing Addendum with Meta, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on Meta Pixel's data protection provisions is available at: https://www.facebook.com/privacy/policy
Information about the cookies set is available at: https://www.facebook.com/policies/cookies/
You can prevent the processing of your data by clicking this link: https://www.facebook.com/settings?tab=ads
The legal basis for the use of Meta Pixel is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Meta Pixel includes IP address, browser information, operating system, device information, location data, referrer URL, interactions on the website and Facebook user ID (if the user is signed in to Facebook); cookies are also set.
Meta Pixel collects user data that may be used to create user profiles for targeted advertising purposes.
The purpose of the data processing is to analyse user behaviour, measure advertising effectiveness, create audiences and provide personalised advertising.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Meta is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a Data Processing Addendum with Meta, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on Meta Pixel's data protection provisions is available at: https://www.facebook.com/privacy/policy
Information about the cookies set is available at: https://www.facebook.com/policies/cookies/
You can prevent the processing of your data by clicking this link: https://www.facebook.com/settings?tab=ads
23. Microsoft Advertising
We use the “Microsoft Advertising” service (formerly “Bing Ads”) on our website to display targeted advertising.
The provider is Microsoft Ireland Operations Limited ("Microsoft"), One Microsoft Place, South County Business
Park, Leopardstown, Dublin 18, Ireland.
The legal basis for the use of Microsoft Advertising is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Microsoft Advertising includes your IP address, location data, device and browser information, search queries and interactions with advertisements; cookies are also set.
Microsoft Advertising may collect data to create user profiles for personalised advertising purposes.
The purpose of the data processing is to display personalised advertising and measure advertising effectiveness.
Microsoft Advertising stores data for a standard period of 390 days. This information can be found in the Microsoft Advertising privacy policy under “Data retention”: https://about.ads.microsoft.com/de-de/policies/privacy
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Microsoft is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Microsoft, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on Microsoft Advertising's data protection provisions is available at: https://privacy.microsoft.com/en-us/privacystatement#mainadvertisingmodule
The legal basis for the use of Microsoft Advertising is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Microsoft Advertising includes your IP address, location data, device and browser information, search queries and interactions with advertisements; cookies are also set.
Microsoft Advertising may collect data to create user profiles for personalised advertising purposes.
The purpose of the data processing is to display personalised advertising and measure advertising effectiveness.
Microsoft Advertising stores data for a standard period of 390 days. This information can be found in the Microsoft Advertising privacy policy under “Data retention”: https://about.ads.microsoft.com/de-de/policies/privacy
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Microsoft is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Microsoft, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on Microsoft Advertising's data protection provisions is available at: https://privacy.microsoft.com/en-us/privacystatement#mainadvertisingmodule
24. Microsoft Clarity
We use the “Microsoft Clarity” service on our website to analyse user interactions and improve the user
experience. The provider is Microsoft Ireland Operations Limited ("Microsoft"), One Microsoft Place, South
County Business Park, Leopardstown, Dublin 18, Ireland.
The legal basis for the use of Clarity is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Microsoft Clarity includes your IP address, location, time of visit, device information and information about interactions with the website; cookies are set to collect this data.
The purpose of the data processing by Microsoft Clarity is the statistical evaluation of user interactions and the creation of anonymised user behaviour profiles to optimise the usability of the website.
Microsoft Clarity stores data for a standard period of 13 months.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Microsoft, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Microsoft is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on Clarity's data protection provisions is available at: https://privacy.microsoft.com/en-us/privacystatement
The legal basis for the use of Clarity is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Microsoft Clarity includes your IP address, location, time of visit, device information and information about interactions with the website; cookies are set to collect this data.
The purpose of the data processing by Microsoft Clarity is the statistical evaluation of user interactions and the creation of anonymised user behaviour profiles to optimise the usability of the website.
Microsoft Clarity stores data for a standard period of 13 months.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. We have concluded a data processing agreement (DPA) with Microsoft, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR. Microsoft is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA.
Further information on Clarity's data protection provisions is available at: https://privacy.microsoft.com/en-us/privacystatement
25. RUMvision
We use RUMvision as an analytics tool on our website to monitor the user experience in relation to page speed
and web performance. This data is collected anonymously by means of a small piece of JavaScript code, enabling
us to optimise and improve your browsing experience. It is important to note that RUMvision does not collect
personally identifiable information (PII) such as IP addresses, names, email addresses or other identifying
metrics. However, information such as device memory, browser, internet speed and data on whether a user is a
first-time or returning visitor or navigates through our website may be collected. This data is captured via
LocalStorage and SessionStorage in your browser and is not shared with or combined with data from other parties.
As a tool based in the Netherlands (EU), RUMvision is fully GDPR-compliant, and we take your data and privacy
seriously. We ensure that your data is protected and that your privacy is respected at all times.
26. Klaviyo
We use the “Klaviyo” service on our website to manage email marketing campaigns and evaluate user interactions.
The provider is Klaviyo, Inc. ("Klaviyo"), 125 Summer Street, Floor 6, Boston, MA 02111, USA.
The legal basis for the use of Klaviyo is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Klaviyo includes your email address, IP address, device information, browser information and data relating to interactions with the website; cookies are also set.
Klaviyo collects user data in order to create user profiles for personalised marketing purposes.
The purpose of the data processing is to manage email marketing campaigns, analyse user interactions and optimise customer communication.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Klaviyo is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Klaviyo, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on Klaviyo's data protection provisions is available at: https://www.klaviyo.com/legal/privacy/privacy-notice
The legal basis for the use of Klaviyo is your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future.
The data processed by Klaviyo includes your email address, IP address, device information, browser information and data relating to interactions with the website; cookies are also set.
Klaviyo collects user data in order to create user profiles for personalised marketing purposes.
The purpose of the data processing is to manage email marketing campaigns, analyse user interactions and optimise customer communication.
It cannot be ruled out that personal data may be transferred to third countries considered insecure (USA), where the level of data protection is lower than in the EU. Klaviyo is certified under the EU-US Data Privacy Framework, which governs the secure processing of EU citizens' data in the USA. We have concluded a data processing agreement (DPA) with Klaviyo, which ensures that personal data is processed only in accordance with our instructions and in compliance with the GDPR.
Further information on Klaviyo's data protection provisions is available at: https://www.klaviyo.com/legal/privacy/privacy-notice
27. Karla / GoKarla
We use the “Karla / GoKarla” service on our website for post-purchase communication and shipment tracking
following an order.
For this purpose, order and shipping information from our shop system is transferred to Karla.
The integration is used in particular for:
For this purpose, order and shipping information from our shop system is transferred to Karla.
The integration is used in particular for:
- - Shipment tracking
- - Providing tracking information to customers
- - Sending delivery and status notifications
- - Displaying tracking pages
- - Post-purchase communication
In particular, the following data may be processed:
- - Name and contact details
- - Email address
- - Delivery address
- - Order number
- - Items ordered
- - Tracking number
- - Shipping service provider
- - Shipping and delivery status
- - Tracking and delivery events
Depending on the configuration used, additional functions such as returns, complaints or post-purchase marketing
may also be provided via Karla.
The legal basis for the use of Karla / GoKarla is our legitimate interest pursuant to Art. 6(1)(f) GDPR in simplifying shipment tracking and post-purchase communication.
The legal basis for the use of Karla / GoKarla is our legitimate interest pursuant to Art. 6(1)(f) GDPR in simplifying shipment tracking and post-purchase communication.
28. Trusted Shops
We use the “Trusted Shops” service on our website to collect and display customer reviews and to provide trust
seals. The provider is Trusted Shops AG ("Trusted Shops"), Subbelrather Straße 15c, 50823 Cologne, Germany.
The legal basis for the use of Trusted Shops is our legitimate interest pursuant to Art. 6(1)(f) GDPR in increasing our customers' trust and security through the display of verified reviews and quality seals and thereby strengthening the credibility of our online shop.
The data processed by Trusted Shops includes your IP address, order information, email address and review data.
The purpose of the data processing is to collect and display customer reviews and to verify the authenticity of reviews for the purposes of building trust and ensuring quality.
Further information on Trusted Shops' data protection provisions is available at: https://business.trustedshops.de/impressum#a1_processing_on_website
The legal basis for the use of Trusted Shops is our legitimate interest pursuant to Art. 6(1)(f) GDPR in increasing our customers' trust and security through the display of verified reviews and quality seals and thereby strengthening the credibility of our online shop.
The data processed by Trusted Shops includes your IP address, order information, email address and review data.
The purpose of the data processing is to collect and display customer reviews and to verify the authenticity of reviews for the purposes of building trust and ensuring quality.
Further information on Trusted Shops' data protection provisions is available at: https://business.trustedshops.de/impressum#a1_processing_on_website
29. Cookiebot
We use the “Cookiebot” service on our website to manage cookie consent and ensure compliance with data
protection requirements. The provider is Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany.
The legal basis for the use of Cookiebot is compliance with a legal obligation pursuant to Art. 6(1)(c) GDPR.
The data processed by Cookiebot includes your IP address, browser information, the URL of the website visited, date and time of consent, a unique anonymous identifier and the consent status; cookies are also set in your browser.
The purpose of the data processing is to manage users' consent regarding cookies and to ensure compliance with data protection requirements.
According to Cookiebot's official privacy policy, the standard retention period for data processed by Cookiebot is 12 months.
Further information on Cookiebot's data protection provisions is available at: https://www.cookiebot.com/en/privacy-policy/
The legal basis for the use of Cookiebot is compliance with a legal obligation pursuant to Art. 6(1)(c) GDPR.
The data processed by Cookiebot includes your IP address, browser information, the URL of the website visited, date and time of consent, a unique anonymous identifier and the consent status; cookies are also set in your browser.
The purpose of the data processing is to manage users' consent regarding cookies and to ensure compliance with data protection requirements.
According to Cookiebot's official privacy policy, the standard retention period for data processed by Cookiebot is 12 months.
Further information on Cookiebot's data protection provisions is available at: https://www.cookiebot.com/en/privacy-policy/
30. Changes
From time to time, it is necessary to adapt the content of this privacy information. We therefore reserve the
right to amend it at any time. We will also publish the amended version of the privacy information here. When
you visit us again, you should therefore read the privacy information again.
Version: 30 September 2026
Version: 30 September 2026