Privacy Policy

1 Responsible for Data Processing

The party responsible for the processing of personal data within the scope of this website in accordance with the provisions of the General Data Protection Regulation (GDPR) is:

DeinDesign GmbH - Owner of the brand NIVOCASE
Otto‑Meffert‑Str. 3
55543 Bad Kreuznach
Germany

Telephone: +49 (0) 671 | 970 80 70
Website: www.deindesign.de
Email: hello@deindesign.com (not for support inquiries)

2 Contact Details of Our Data Protection Officer

Our Data Protection Officer:

Christina Lang
Email: datenschutz@deindesign.com

3 General Information on Data Processing

With this privacy policy, we inform you about the scope of the processing of your personal data (hereinafter referred to as “data”).

In the course of operating our website, we process data. This also includes disclosure by transmission to third parties and, where applicable, to so‑called third countries outside the European Union (“EU”) and the European Economic Area (“EEA”). Where we transfer data outside the EU or the EEA, this is indicated accordingly below.

Data processing also includes disclosure by transmission. The data concerned in detail, the purposes of processing, the legal bases, recipients, and transfers to third countries are listed in the overview below.

4 Log Files, Hosting, Content Delivery Network

We log your visit to our websites. In doing so, the following data is processed:
name of the website accessed, date and time of access, amount of data transferred, browser type and version, operating system used by you, referrer URL (the previously visited website), your IP address, and the requesting provider.

This is necessary to ensure the security of the website. We process this data on the basis of our legitimate interests pursuant to Art. 6 (1) (f) GDPR. The log file is deleted after seven days unless it is required for the investigation or proof of specific legal violations that become known within the retention period.

To provide our online presence, we use services from web hosting providers who process the aforementioned data (log files during website visits) on our behalf in accordance with Art. 28 GDPR.

The legal basis for data processing is our overriding legitimate interest in providing our website pursuant to Art. 6 (1) (f) GDPR. We have concluded a data processing agreement in accordance with Art. 28 GDPR with the web hosting provider.

For the purpose of shorter loading times, we use a so‑called Content Delivery Network (“CDN”) for some services. With this service, content such as large media files is delivered via regionally distributed servers of external CDN service providers. Access data is therefore processed on the servers of the service providers. The legal basis for data processing is our overriding legitimate interest in providing our website pursuant to Art. 6 (1) (f) GDPR. Our service providers act for us within the scope of commissioned data processing pursuant to Art. 28 GDPR.

5 Contact, Contact Form, friendlyCaptcha

If you contact us, your data (name, contact details, if provided by you) and your message will be processed exclusively for the purpose of handling and responding to your inquiry. This data is processed on the basis of Art. 6 (1) (b) GDPR in order to respond to your contact request.

We have integrated the CAPTCHA service “friendlyCaptcha” provided by Friendly Captcha GmbH, Am Anger 3‑5, 82237 Wörthsee, into our contact form in order to protect our website from interactions with bots. When using our contact form, your IP address is stored exclusively in anonymized form so that it is not possible to identify you.

The legal basis for processing is our legitimate interest pursuant to Art. 6 (1) (f) GDPR in securing our website.

Further information on data protection at the provider can be found at:
https://friendlycaptcha.com/de/legal/privacy/

6 Contract Processing, Creation of a Customer Account

We collect personal data when you voluntarily provide it to us as part of your order or when creating a customer account. Mandatory fields are marked as such, as we require this data to process the contract or to create the customer account. The data collected can be seen from the respective input forms.

We use the data provided by you for contract processing and to handle your contractual inquiries pursuant to Art. 6 (1) (b) GDPR. After complete fulfillment of the contract or deletion of your customer account, your data will be restricted for further processing on the basis of Art. 6 (1) (c) GDPR to fulfill our legal obligations and deleted after the expiry of statutory retention periods under tax and commercial law, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) (a) GDPR or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this privacy policy. Deletion of your customer account is possible at any time and can be carried out either by sending a message to the contact option described in this privacy policy or via a function provided for this purpose in the customer account.

7 Shipping Processing, Shipping Notifications, Payment Processing

For the fulfillment of the contract pursuant to Art. 6 (1) (b) GDPR, we pass on your data to the shipping service provider commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods.

7.1 Shipping Notifications and Delivery Coordination

If you have given us your consent during or after your order, we will pass on your email address to the respective shipping service provider pursuant to Art. 6 (1) (a) GDPR so that the provider may contact you for the purpose of delivery notification and coordination.

You may revoke your consent at any time by sending a message to the contact option described in this privacy policy or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this privacy policy.

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

7.2 Payment Processing

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions, and payment service providers.

Depending on the selected payment method, we pass on the data required to process the payment transaction to our technical service providers acting on our behalf within the scope of commissioned processing, or to the commissioned credit institutions, or to the selected payment service provider, insofar as this is necessary for payment processing. This serves the fulfillment of the contract pursuant to Art. 6 (1) (b) GDPR.

In some cases, payment service providers collect the data required to process the payment themselves, for example on their own websites or via technical integration in the order process. In this respect, the privacy policy of the respective payment service provider applies.

If you have questions about our partners for payment processing and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

7.3 Fraud Prevention and Optimization of Our Payment Processes

Where applicable, we pass on additional data to our service providers, which they use together with the data required to process the payment as our processors for the purpose of fraud prevention and optimization of our payment processes (e.g. invoicing, handling of contested payments, support of accounting).

This serves to safeguard our overriding legitimate interests in protecting against fraud and in efficient payment management pursuant to Art. 6 (1) (f) GDPR.

7.4 Identity and Creditworthiness Check When Selecting Klarna Payment Services

If you choose payment services provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”), as part of the payment options, we will forward your data to Klarna for payment and contract processing pursuant to Art. 6 (1) (b) GDPR.

The transfer of this data is carried out so that Klarna can create an invoice for the payment method you selected and conduct an identity and creditworthiness check. We can only offer the respective Klarna payment method if it is permitted based on the results of the creditworthiness check. Detailed information on this and on the credit agencies used can be found in Klarna’s privacy information.

8 Advertising by Email, Post, and Other Means of Contact

8.1 Email Newsletter and Promotional Mailings with Registration

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you in order to send you our email newsletter on a regular basis based on your consent pursuant to Art. 6 (1) (a) GDPR.

To protect against misuse, you will receive a confirmation email (double opt‑in procedure) with a confirmation link. Your registration is logged with the time of registration and confirmation as well as your IP address in order to be able to prove the process in compliance with legal requirements. You will only be added to our mailing list after confirming the link.

You may unsubscribe from the newsletter at any time with effect for the future. This can be done either by sending a message to the contact option described above or via the unsubscribe link provided in each email. After unsubscribing, we will delete your email address from the recipient list unless we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this privacy policy.

8.2 Email Newsletter and Promotional Mailings without Registration and Your Right to Object

If we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right to send you regular offers by email for similar products from our range to those you have already purchased.

This serves to safeguard our overriding legitimate interests in advertising to our customers within the framework of a balancing of interests pursuant to Art. 6 (1) (f) GDPR.

You may object to this use of your email address at any time by sending a message to the contact option of the controller mentioned above or via an unsubscribe link provided in the promotional email, without incurring any costs other than the transmission costs according to the basic tariffs.

8.3 Newsletter Dispatch

The newsletter may also be sent by our service providers within the scope of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact option described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by means of an adequacy decision pursuant to Art. 45 GDPR: Canada, USA. With regard to the US provider Salesforce, San Francisco, USA, this provider is certified with the US Department of Commerce as required.

Our service providers are also located and/or use servers in India. There is no adequacy decision by the European Commission for this country. Our cooperation with them is based on the European Commission’s standard data protection clauses pursuant to Art. 46 GDPR.

8.4 Sending of Review Requests by Email

If you have given us your consent pursuant to Art. 6 (1) (a) GDPR during or after your order, we use your email address to request a review of your order via the review system we use. This consent may be revoked at any time for the future by sending a message to the contact option described in this privacy policy or via a link provided in the review request.

The review requests may also be sent by our service providers within the scope of processing on our behalf. If you have questions about our service providers and the basis of our cooperation with them, please contact the contact option for the controller mentioned above in this privacy policy.

8.5 Postal Advertising and Your Right to Object

Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes by letter post, e.g. to send you interesting offers and information about our products.

This serves to safeguard our overriding legitimate interests in advertising to our customers within the framework of a balancing of interests pursuant to Art. 6 (1) (f) GDPR.

You may object to the storage and use of your data for these purposes at any time by sending a message to the contact option mentioned above.

The advertising mailings are carried out by a service provider acting on our behalf, to whom we pass on your data for this purpose.

8.6 Superchat / WhatsApp Business

For communication via WhatsApp, we use the messaging platform “Superchat” provided by SuperX GmbH, Prenzlauer Allee 242–247, 10405 Berlin, Germany. Superchat enables us to use the WhatsApp Business API in a data‑protection‑compliant manner for handling inquiries and for mandate or customer communication.

The data processed includes your mobile phone number, your name stored in WhatsApp, any message content (text, images, documents) sent to us, as well as communication metadata.

The legal basis for data processing is Art. 6 (1) sentence 1 (b) GDPR (initiation and performance of contracts) and Art. 6 (1) sentence 1 (f) GDPR (legitimate interest in efficient communication).

9 Website Analysis and Marketing, Cookies, Consent Banner

9.1 Adobe Analytics

On this website, we use Adobe Analytics, a web analytics service provided by Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Park, Dublin 24, Ireland, a subsidiary of Adobe Inc., 345 Park Avenue, San Jose, CA 95110, USA.

Adobe Analytics uses cookies and similar technologies to analyze the behavior of website visitors. Information about your use of this website is collected and evaluated in anonymized or pseudonymized form. The data obtained helps us to understand the user experience on our website and to continuously improve it.

In the course of using Adobe Analytics, the following data is processed in particular:

IP address (shortened/anonymized)
Browser and device information (browser type, operating system, screen resolution)
Visited pages, click paths, duration of visit
Origin of the visit (referrer URL, search terms)
Interactions on the website (e.g. button clicks, form entries)
Technical identifiers (cookie ID, session ID)

The legal basis for data processing is your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR, which you may grant via our cookie consent banner. You may revoke your consent at any time by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

We have concluded a data processing agreement with Adobe pursuant to Art. 28 GDPR. Adobe processes the data exclusively on our behalf and in accordance with our instructions.

Adobe processes data, inter alia, in the USA. Adobe Inc. is certified under the EU‑US Data Privacy Framework, and the European Commission has issued an adequacy decision for the USA pursuant to Art. 45 GDPR, ensuring an adequate level of data protection.

9.2 General Information on Cookies

To make visiting our website attractive and to enable the use of certain functions, we use technologies on various pages, including so‑called cookies. Cookies are small text files that are automatically stored on your device.

Some of the cookies we use are deleted after the end of the browser session, i.e. when you close your browser (session cookies). Other cookies remain on your device and enable us to recognize your browser the next time you visit (persistent cookies).

9.2.1 Necessary Cookies

These cookies are necessary to enable the operation of our website. This includes, for example, cookies that allow you to log into the customer area or place items in the shopping cart.

We use technologies that are strictly necessary for the use of certain functions of our website (e.g. shopping cart function). Through these technologies, IP address, time of visit, device and browser information as well as information about your use of our website (e.g. information about the contents of the shopping cart) are collected and processed.

This serves our overriding legitimate interests in an optimized presentation of our offering pursuant to Art. 6 (1) (f) GDPR.

9.2.2 Third‑Party Cookies

Cookies from some of our advertising partners help to make our online offering and our website more interesting for you. When you visit our website, cookies from partner companies may also be stored on your device.

These are temporary cookies that delete themselves automatically after a specified period. Cookies from partner companies are usually deleted after a few days or up to 24 months, in individual cases also after several years.

Cookies from our partner companies do not contain personal data. Data is only collected under a user‑ID pseudonym. This pseudonymized data is never merged with your personal data.

In addition, we use technologies to fulfill legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data) as well as for website analysis and online marketing.

Further information on these technologies, including the respective legal basis for data processing, can be found in the following sections of this privacy policy or in our consent banner under the link “Settings” or under the following link: [Link to cookie settings in the banner].

If you have given your consent to the use of these technologies pursuant to Art. 6 (1) (a) GDPR, you may revoke your consent at any time by accessing the cookie settings mentioned above and adjusting your preferences or rejecting cookies entirely.

9.3 Consent Banner

On our website, we use the consent banner or consent management platform of Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark (“Usercentrics”), to inform you about the cookies and other technologies used on our website and to obtain, manage, and document your consent where required by law.

This is necessary pursuant to Art. 6 (1) sentence 1 (c) GDPR to fulfill our legal obligation under Art. 7 (1) GDPR to be able to demonstrate your consent. Usercentrics processes data on our behalf.

When visiting our website, the Usercentrics web server stores a server log file that also contains your anonymized IP address, date and time of the visit, device and browser information, and information about your consent behavior.

Your data is deleted after three years unless you have expressly consented to further use of your data pursuant to Art. 6 (1) (a) GDPR or we reserve the right to use the data beyond this, which is legally permitted and about which we inform you in this privacy policy.

9.4 Google Services

We use the following services provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”) on our website.

It cannot be ruled out that data may be transferred to the USA. For the USA, an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists, and Google is certified with the US Department of Commerce under the EU‑U.S. Data Privacy Framework as required. We have concluded a data processing agreement with Google pursuant to Art. 28 GDPR.

If your IP address is collected via Google technologies, it is shortened by activating IP anonymization before being stored on Google servers. Only in exceptional cases is the full IP address transmitted to a Google server and shortened there.

Unless otherwise stated for individual technologies, data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google’s privacy notices.

9.4.1 Google Consent Mode

We use the Google service “Consent Mode” on our website. With this function, we synchronize your consent decisions via our consent banner with the Google services we use.

Depending on the user’s confirmation or rejection, conversion tracking by Google is continued or blocked. Data processing via the consent banner is carried out to fulfill our legal obligations pursuant to Art. 6 (1) (c) GDPR.

9.4.2 Google Ads

We use “Google Ads”, an online advertising program provided by Google. As part of this, so‑called conversion tracking is used.

When you click on an advertisement placed by Google, a cookie is set. This cookie expires after 30 days and does not serve to personally identify users.

If a user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the advertisement and was redirected to that page.

The data collected using the conversion cookie is used to create statistics for Ads customers who have opted for conversion tracking.

The legal basis for data processing is your consent pursuant to Art. 6 (1) (a) GDPR, which we obtain via our consent banner. You may revoke your consent at any time by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

9.4.3 Google Remarketing / Retargeting

We use Google tracking cookies on our website. When visiting our website, information is stored in persistent cookies regarding which products you have viewed and via which advertisements and third‑party pages users access our website.

When you subsequently visit a partner website, we may display personalized advertising to you based on the products you viewed on our website.

The data obtained in this way is processed on the basis of your consent pursuant to Art. 6 (1) (a) GDPR, which we obtain via our consent banner.

The information generated by the cookie about your use of this website (including your IP address) is transmitted to a Google server and stored there.

You may revoke your consent at any time by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

Further information on data protection can be found at:
https://policies.google.com/privacy?hl=de&gl=de

9.5 Google Shopping Campaigns via Producthero CSS

For the placement of Google Shopping advertisements, we use the service “Producthero CSS” provided by Producthero B.V., Stadhouderskade 60, 1072 AC Amsterdam, Netherlands.

Producthero is a Google‑approved Comparison Shopping Service (CSS). For the use of the Producthero CSS service, our Google Merchant Center is linked to the Producthero account.

Producthero thereby receives access to our product data (product feed) and campaign reporting data in the Google Merchant Center.

The actual delivery of advertisements, click and conversion measurement, and billing are carried out by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, in accordance with Google’s terms of use.

In connection with ad placement, Google processes personal data of users (in particular IP address, device data, browser information, click and interaction data) in accordance with Google’s privacy policy.

Producthero itself does not process personal data of website visitors. Producthero receives only aggregated, non‑personal evaluation data on campaign performance from Google.

The legal basis is Art. 6 (1) sentence 1 (a) GDPR (your consent obtained via our consent banner). You may revoke your consent at any time by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

9.6 Microsoft Services

We use the technologies described below provided by Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (“Microsoft”).

Data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR.

The information automatically collected by Microsoft technologies regarding your use of our website is generally transmitted to a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052‑6399, USA, and stored there.

For the USA, an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists, and Microsoft is certified under the EU‑U.S. Data Privacy Framework as required.

We have concluded a data processing agreement pursuant to Art. 28 GDPR with Microsoft.

For website analysis and event tracking, we use Microsoft Advertising Universal Event Tracking (UET) to measure your subsequent usage behavior if you have reached our website via an advertisement from Microsoft Advertising.

Cookies may be used and data such as IP address, time of visit, device and browser information as well as information about your use of our website based on events defined by us (e.g. visit to a website or newsletter registration) may be collected. Pseudonymized usage profiles may be created from this data.

If your internet‑enabled devices are linked to your Microsoft account and you have not disabled the “interest‑based advertising” setting in your Microsoft account, Microsoft may create reports on usage behavior (in particular cross‑device user numbers), even if you change your device (“cross‑device tracking”).

No processing of personal data takes place on our part in this respect; we only receive statistics generated on the basis of Microsoft UET.

The legal basis for data processing is your consent pursuant to Art. 6 (1) (a) GDPR, which we obtain via our consent banner.

9.7 Meta Services (Facebook)

We use the following services provided by Meta Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Meta”) on our website.

Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR. Joint responsibility is limited to the collection of data and its transmission to Meta. Subsequent processing by Meta is not covered by this.

It cannot be ruled out that data may be transferred to the USA. For the USA, an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists, and Meta is certified with the US Department of Commerce under the EU‑U.S. Data Privacy Framework as required.

We have concluded a data processing agreement with Meta pursuant to Art. 28 GDPR.

9.7.1 Use of Facebook Pixel

We use the “Facebook Pixel” on our website. Data such as IP address, time of visit, device and browser information as well as information about your use of our website based on events defined by us (e.g. visit to a website or newsletter registration) is automatically collected and stored, and pseudonymized usage profiles are created.

As part of the so‑called extended data matching, additional information is collected and stored in hashed form for matching purposes, which can be used to identify individuals (e.g. names, email addresses, and telephone numbers).

When you visit our website, a cookie is automatically set by the Facebook Pixel, which enables recognition of your browser when visiting other websites.

Meta combines this information with other data from your Facebook account and uses it to create reports on website activity and to provide further services related to website usage, in particular personalized and group‑based advertising.

9.7.2 Meta Ads

We advertise our website via “Meta Ads” on the Facebook platform and on other platforms.

We determine the parameters of the respective advertising campaign. Meta is responsible for the specific implementation, in particular the decision on the placement of advertisements to individual users.

Based on statistics on visitor activities on our website generated via Facebook Pixel, we use Facebook Custom Audiences to conduct group‑based advertising by defining the characteristics of the respective target group. As part of the extended data matching process, Facebook acts as our processor.

Based on the pseudonymized cookie ID set by the Facebook Pixel and the collected data on your usage behavior on our website, we use Facebook Pixel Remarketing to display personalized advertising.

We use Facebook Pixel Conversions to measure your subsequent usage behavior for website analysis and event tracking if you have reached our website via an advertisement from Facebook Ads.

9.8 Shopping24

We use the tracking tool provided by shopping24 Gesellschaft für multimediale Anwendungen mbH, An der Alster 45, 20099 Hamburg, Germany.

To correctly record and bill transactions (sales and/or leads) that occur through mediation by partners (publishers) in the shopping24 network, shopping24 integrates a conversion tracking code on our website.

Cookies are set and read on your device. The cookies used store exclusively pseudonymized information, in particular:

the ID of the mediating publisher,
the order number of the advertising material clicked by the visitor (e.g. banner, text link),
transaction‑related data for allocation and billing of the commission.

Direct identification of your person does not take place. Technically necessary data (e.g. IP address, browser type) is also temporarily stored in server‑side log files when the page is accessed.

The use of cookies or comparable technologies is based on your consent pursuant to § 25 (1) sentence 1 TDDDG. The legal basis for data processing is your consent pursuant to Art. 6 (1) (a) GDPR.

9.9 TikTok Pixel

We use the TikTok Pixel provided by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).

When visiting our website, personal data relating to website usage and the logging of clicks on individual elements is processed.

The purpose of processing is the analysis of your usage behavior, the effectiveness of our online marketing measures, and the selection of online advertising on other platforms, which is automatically selected using real‑time bidding based on usage behavior.

It cannot be ruled out that data may be transferred to a country outside the European Union. Further information on data processing by TikTok can be found in TikTok’s privacy notices.

9.10 Vimeo Video Plugin

To integrate third‑party content, we have integrated the video plugin of Vimeo.com, Inc., 555 West 18th Street, New York 10011, USA (“Vimeo”) on our website.

User data (IP address, time of visit, device and browser information) is collected, transmitted to Vimeo, and subsequently processed by Vimeo.

For the USA, an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists, and Vimeo is certified under the EU‑U.S. Data Privacy Framework as required.

We have concluded a data processing agreement with Vimeo pursuant to Art. 28 GDPR.

Data processing is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR.

Google Analytics is automatically integrated into the Vimeo video plugin. Please refer to the information above regarding data processing with Google Analytics.

9.11 Push Notifications (CleverPush)

On our website, we use the service “CleverPush” to send web push notifications. CleverPush is a service provided by CleverPush GmbH, Valentinskamp 30, 20355 Hamburg, Germany.

If you allow push notifications via your browser, the following data is collected and transmitted to CleverPush: time of consent, browser type and version, operating system, and a device‑specific push token or device ID.

No transfer of personal data to third countries takes place. CleverPush stores the data on servers in Germany.

Processing is based on your consent pursuant to Art. 6 (1) (a) GDPR. You may revoke your consent at any time with effect for the future by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

Data processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR with CleverPush GmbH.

9.12 Google Maps

We use the map service “Google Maps” provided by Google to display an interactive map on our website.

When the map is displayed, data, including your IP address and location data, is transmitted to Google servers and stored there.

The legal basis for processing is your prior consent pursuant to Art. 6 (1) (a) GDPR. You may revoke your consent at any time by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

The controller for data processing with Google Maps is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

It cannot be ruled out that data may be transferred to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google is certified under the EU‑U.S. Data Privacy Framework and therefore falls under the EU adequacy decision for the USA.

9.13 Trust Seals

To display our Trusted Shops trust seal and Trusted Shops buyer protection products after an order, the Trustbadge of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany, is integrated on our website.

When the Trustbadge is accessed, your IP address, date and time of access, data volume transferred, and the requesting provider (access data) are transmitted to Trusted Shops servers.

This access data is not evaluated and is automatically overwritten no later than seven days after the end of your visit.

The legal basis for data processing is our overriding legitimate interest in the optimal marketing of our online offering pursuant to Art. 6 (1) (f) GDPR.

Further data is only transmitted to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you are already registered for their use. In this case, the contractual agreement between you and Trusted Shops applies.

9.14 Affiliate Tracking via AWIN

Our website participates in the affiliate marketing network of AWIN AG, Otto‑Ostrowski‑Str. 1A, 10249 Berlin, Germany (“AWIN”), a subsidiary of Axel Springer SE.

Affiliate marketing enables the integration of advertising materials (e.g. links or banners) through which we receive a commission for successfully mediated transactions (e.g. purchases or registrations).

To correctly assign and bill transactions, AWIN uses tracking technologies on your device, in particular:

Tracking domain cookies: set when you click on an advertising material displayed by a publisher; these contain a pseudonymized sequence of numbers with information about the campaign, the publisher, the type of user action (click or page view), as well as the country and time of the action.
Advertiser Journey Tag: a JavaScript code integrated into our website that transmits confirmation of a completed transaction to AWIN.
Fingerprinting: a method for device‑specific identification based on browser and device attributes (e.g. screen resolution, browser settings).

The processing is carried out on the basis of your consent pursuant to Art. 6 (1) (a) GDPR. You may revoke your consent at any time with effect for the future by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

9.15 Content Discovery and Personalized Advertising (Taboola)

On our website, we use the service Taboola, a content discovery platform that displays personalized content recommendations and advertisements. The provider of this service is Taboola.com Ltd., a company incorporated under Israeli law.

The responsible entity within the meaning of the GDPR for users in the European Economic Area is Taboola.com Ltd. In Germany, Taboola Germany GmbH, Alt‑Moabit 2, 10557 Berlin (District Court of Berlin, HRB 194021), operates as the local entity.

Taboola integrates so‑called widgets (content discovery elements) on our website, via which editorial content and sponsored recommendations are displayed.

To tailor these recommendations to your interests, Taboola uses cookies and comparable tracking technologies (including JavaScript, web beacons, and HTML5 local storage) on your device and collects the following information in pseudonymized form:

Device information (operating system, browser type, device model)
IP address (for approximate location determination at city/state level)
Browsing behavior within the Taboola network (visited pages, click behavior, dwell time, interactions with advertisements)
Referrer source (the page from which you accessed our website)
Date and time of access
In certain cases, hashed email addresses and general location data

According to Taboola, direct identification of your person does not take place. The collected data is used to create user profiles and to display interest‑based advertising (behavioral advertising), including across devices.

Taboola participates in the IAB Europe Transparency & Consent Framework (TCF 2.0) as vendor no. 42 and complies with its specifications and guidelines.

The legal basis for data processing is your consent pursuant to Art. 6 (1) (a) GDPR. The storage of information on your device or access thereto requires your consent pursuant to § 25 (1) TDDDG, which you may provide via our cookie consent tool.

You may revoke your consent at any time with effect for the future by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

We have concluded a data processing agreement with Taboola pursuant to Art. 28 GDPR.

As part of its global business operations, your data may be processed in data centers in the USA and Israel. For data transfers to Israel, an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists. For transfers to the USA, Taboola uses EU standard contractual clauses pursuant to Art. 46 (2) (c) GDPR.

9.16 Sovendus (Voucher and Benefit Offers after Checkout)

After completion of a purchase process, we use the service Sovendus on our website. Sovendus is a platform that presents attractive offers from cooperation partners in retail and publishing to you after checkout (Sovendus Voucher Network / Sovendus Checkout Benefits).

The provider of this service is Sovendus GmbH, c/o Design Offices Karlsruhe Bahnhofplatz, Bahnhofplatz 12, 76137 Karlsruhe, Germany.

In order to be able to select a suitable voucher or benefit offer for you and at the same time take into account any advertising objection you may have declared with Sovendus, we transmit the following data to Sovendus in pseudonymized and encrypted form after completion of your purchase:

the hash value (one‑way encryption) of your email address to check whether an advertising objection exists,
your IP address exclusively for data security purposes,
for billing purposes: order number, order value including currency, session ID, any coupon code, and timestamp.

Processing is carried out on the basis of your consent pursuant to Art. 6 (1) (a) GDPR. You may revoke your consent at any time with effect for the future by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

Sovendus is a European company based in Germany. According to Sovendus, data processing takes place in Europe. We have concluded a data processing agreement with Sovendus pursuant to Art. 28 GDPR.

9.17 Conversion Optimization (Sovendus Optimize)

We also use Sovendus Optimize on our website, a conversion optimization tool provided by Sovendus GmbH.

Sovendus Optimize analyzes the behavior of website visitors in real time and displays personalized content at an appropriate time, such as information on special offers, discount campaigns, newsletter sign‑up options, or support offers. The aim is to reduce shopping cart abandonment and improve the shopping experience on our website.

For this purpose, a JavaScript script is integrated into our website and executed on your device when you visit our website. The script analyzes the following information in real time:

Device type, operating system, and browser type
Your interaction behavior on our website (e.g. mouse movements, scrolling behavior, dwell time, pages visited, recognizable exit‑intent signals)
Shopping cart status and page context
If entered by you on our website: your email address (e.g. for reminder functions for abandoned orders)

Based on this data, Sovendus determines the appropriate time and content for a display. According to Sovendus, the collected data is immediately pseudonymized (by hashing) and processed exclusively for the optimization purposes described above. According to Sovendus, direct identification of your person does not take place.

The legal basis for access to your device by the Sovendus Optimize script (storage and retrieval of information) is your consent pursuant to § 25 (1) TDDDG, which you may provide via our cookie consent tool. Subsequent processing of the personal data collected in this context is carried out on the basis of your consent pursuant to Art. 6 (1) (a) GDPR.

You may revoke your consent at any time with effect for the future by adjusting your cookie settings via our cookie function under [Link to cookie settings in the banner].

10 Social Media

Our online presence on Facebook, Instagram, YouTube, Pinterest, LinkedIn, Xing, TikTok.

If you have given your consent pursuant to Art. 6 (1) (a) GDPR to the respective social media operator, your data will be automatically collected and stored for market research and advertising purposes when visiting our online presences on the social networks listed above. Usage profiles are created using pseudonyms and may be used, for example, to display advertisements within and outside the platforms that presumably correspond to your interests. Cookies are generally used for this purpose.

Detailed information on the processing and use of data by the respective social media operator, as well as contact options and your rights and settings options for protecting your privacy, can be found in the privacy notices of the respective providers linked below. If you nevertheless require assistance in this regard, you may contact us.

10.1 Facebook, Instagram

Facebook and Instagram are services provided by Meta Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Meta”). Information automatically collected by Meta about your use of our Facebook or Instagram online presence is generally transferred to a Meta server in the USA and stored there.

For the USA, an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists, and Meta is certified with the US Department of Commerce under the EU‑U.S. Data Privacy Framework as required.

Data processing in connection with visits to our Facebook or Instagram company page is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR.

10.2 YouTube

YouTube is a service provided by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, a subsidiary of Google LLC. For data processing in the European Economic Area, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, is responsible.

It cannot be ruled out that data may be transferred to the USA when using our YouTube presence. For the USA, an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists, and Google LLC is certified under the EU‑U.S. Data Privacy Framework as required.

Data processing in connection with visits to our YouTube company page is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR.

10.3 Pinterest

Pinterest is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). Information automatically collected by Pinterest about your use of our Pinterest online presence is generally transferred to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA, and stored there.

For the USA, an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists, and Pinterest is certified with the US Department of Commerce under the EU‑U.S. Data Privacy Framework as required.

Data processing in connection with visits to our Pinterest company page is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR.

10.4 LinkedIn

LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). Information automatically collected by LinkedIn about your use of our LinkedIn online presence is generally transferred to a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA, and stored there.

For the USA, an adequacy decision of the European Commission pursuant to Art. 45 GDPR exists, and LinkedIn is certified with the US Department of Commerce under the EU‑U.S. Data Privacy Framework as required.

Data processing in connection with visits to our LinkedIn company page is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR.

10.5 XING

XING is a service provided by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany (“XING”). Information automatically collected by XING about your use of our XING online presence is transmitted to XING servers and stored there.

Data processing in connection with visits to our XING company page is carried out on the basis of an agreement between jointly responsible parties pursuant to Art. 26 GDPR.

10.6 TikTok

We operate a TikTok page of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).

It cannot be ruled out that data may be transferred to a country outside the European Union. Further information on data processing by TikTok can be found in TikTok’s privacy notices.

11 Duration of Data Storage

We store personal data only for as long as is necessary for the purposes for which it is processed or until consent given by you has been withdrawn. Where statutory retention obligations must be observed, the storage period for certain data may be up to 10 years, irrespective of the purposes of processing.

12 Your Data Subject Rights

12.1 Right of Access

Upon request, you will receive free information at any time about all personal data that we have stored about you.

12.2 Rectification, Erasure, Restriction of Processing (Blocking), Objection

If you no longer agree to the storage of your personal data or if it has become inaccurate, we will arrange for the deletion or blocking of your data or make the necessary corrections upon corresponding instruction, insofar as this is permitted under applicable law.

The same applies if we are only to restrict future processing of data. You have a right to object in particular where your data is processed on the basis of our legitimate interests or for the performance of a task carried out in the public interest, including profiling based on such grounds. You also have a right to object to data processing for the purposes of direct advertising.

12.3 Right to Withdraw Consent with Effect for the Future

You may withdraw any consent you have given at any time with effect for the future. The legality of processing carried out up to the time of withdrawal remains unaffected.

12.4 Right to Data Portability

Where data processing is based on a contract, pre‑contractual negotiations, consent, or automated procedures, you have the right to data portability. Upon request, we will provide your data in a commonly used, structured, and machine‑readable format so that you may transfer the data to another controller if desired.

12.5 Restriction of Processing

Data for which we are unable to identify the data subject, for example where data has been anonymized for analysis purposes, is not covered by the above rights. Access, erasure, blocking, correction, or transfer to another company may be possible with respect to such data if you provide additional information that enables us to identify you.

12.6 Exercise of Your Rights and Right to Lodge a Complaint

If you have questions regarding the processing of your personal data, requests for access, rectification, blocking, objection, or deletion of data, or wish to have your data transferred to another company, please contact the contact option specified above for the controller or the data protection officer.

You also have the right to lodge a complaint with a supervisory authority regarding the exercise of your data subject rights.