Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Imke Hanscomb, TIZZ & TONIC, Hermann-Ritter-Straße 112, 28197 Bremen, Germany, Tel.: 01794536148, Email: hello@tizzandtonic.com. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 If you use our website solely for informational purposes, meaning that you do not register or otherwise provide us with information, we collect only the data that your browser transmits to the website server (known as server log files). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The page of our website visited
Date and time of access
Amount of data sent in bytes
Source/referral from which you reached the page
Browser used
Operating system used
IP address used (where applicable, in anonymised form)

Processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (such as orders or enquiries sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the “https://” prefix and the padlock symbol in your browser’s address bar.

3) Hosting and content delivery network

3.1 Amazon Web Services

We use the system of the following provider to host our website and display its content: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg.

Data may also be transferred to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.

All data collected on our website is processed on the provider’s servers. We have entered into a data processing agreement with the provider to protect the data of visitors to our website and prohibit unauthorised disclosure to third parties.

For transfers of data to the USA, the provider participates in the EU–US Data Privacy Framework, which ensures compliance with European data protection standards on the basis of an adequacy decision of the European Commission.

3.2 Shopify

We use the system of the following provider to host our website and display its content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

For transfers of data to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (known as session cookies), while others remain on your device for longer and allow website settings to be saved (known as persistent cookies). In the latter case, you can find the storage period in the cookie settings overview of your web browser.

If individual cookies used by us also process personal data, processing is carried out under Article 6(1)(b) GDPR for the performance of the contract, under Article 6(1)(a) GDPR where consent has been given, or under Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective browsing experience.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to refuse cookies in certain cases or altogether.

Please note that refusing cookies may limit the functionality of our website.

5) Contacting us

When you contact us (for example, using a contact form or by email), personal data is processed exclusively for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry under Article 6(1)(f) GDPR. If your enquiry relates to a contract, Article 6(1)(b) GDPR provides an additional legal basis for processing. Your data will be deleted when it is apparent from the circumstances that the matter has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

6) Data processing when opening a customer account

Under Article 6(1)(b) GDPR, personal data is also collected and processed to the extent necessary when you provide it to us when opening a customer account. The data required to open an account is shown in the input fields of the relevant form on our website.

You may delete your customer account at any time by sending a message to the controller at the address given above. Once your customer account has been deleted, your data will be deleted, provided that all contracts concluded through the account have been fully performed, no statutory retention periods prevent deletion, and we no longer have a legitimate interest in retaining the data.

7) Use of customer data for direct marketing

7.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only information required to receive the newsletter is your email address. Providing any additional data is voluntary and allows us to address you personally. We use the double opt-in procedure for newsletter subscriptions. This ensures that you receive newsletters only after you have expressly confirmed your consent by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR. We store the IP address assigned by your Internet Service Provider (ISP), together with the date and time of registration, so that any possible misuse of your email address can be traced at a later date. Data collected when you subscribe to the newsletter is used strictly for its intended purpose.

You may unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning of this policy. After you unsubscribe, your email address will be removed from our newsletter mailing list without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data further in a manner permitted by law and explained in this policy.

7.2 Omnisend

Our email newsletters are sent through the following provider: Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, England.

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass the data you provide when subscribing to the newsletter to this provider in accordance with Article 6(1)(f) GDPR, so that it can send newsletters on our behalf.

Subject to your express consent under Article 6(1)(a) GDPR, the provider also carries out statistical performance analysis of newsletter campaigns using web beacons or tracking pixels in the emails sent. These can measure opening rates and specific interactions with newsletter content. Device information (such as the time of access, IP address, browser type and operating system) is also collected and analysed, but is not combined with other datasets.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider to protect the data of visitors to our website and prohibit disclosure to third parties.

For transfers of data to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

7.3 Shopify Email

Our email newsletters are sent through the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

You may withdraw your consent to newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider to protect the data of visitors to our website and prohibit disclosure to third parties.

For transfers of data to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

7.4 Shopping cart reminders by email

If you abandon your purchase with us before completing your order, you have the option of receiving a one-time email reminder about the contents of your virtual shopping cart.

The only information required to send this reminder is your email address. Providing additional data is voluntary and may allow us to address you personally. We use the double opt-in procedure for sending these emails. This ensures that you receive a notification only after you have expressly confirmed your consent by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data under Article 6(1)(a) GDPR to send a shopping cart reminder. We store the IP address assigned by your Internet Service Provider (ISP), together with the date and time of registration, so that any possible misuse of your email address can be traced at a later date. The data collected when you register for our email notification service is used strictly for its intended purpose.

You may unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning of this policy. After you unsubscribe, your email address will be removed from the mailing list established for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data further in a manner permitted by law and explained in this policy.

8) Data processing for order fulfilment

8.1 Where necessary for performance of the contract for delivery and payment purposes, the personal data we collect is passed to the transport company and financial institution commissioned by us in accordance with Article 6(1)(b) GDPR.

If we are required under a corresponding contract to provide you with updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order in order to inform you personally in accordance with our statutory information obligations under Article 6(1)(c) GDPR. Your contact details are used strictly for communications about updates we are required to provide, and we process them for this purpose only to the extent necessary for the relevant notification.

8.2 Disclosure of personal data to shipping service providers

Deutsche Post

We use the following transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany.

Before delivery of the goods, we pass your email address and/or telephone number to the provider under Article 6(1)(a) GDPR to coordinate a delivery date or provide delivery notification, provided that you have given your express consent during the ordering process. Otherwise, we pass only the recipient’s name and delivery address to the provider for delivery purposes under Article 6(1)(b) GDPR. Data is disclosed only to the extent necessary to deliver the goods. In this case, it is not possible to coordinate the delivery date with the provider in advance or provide delivery notification.

You may withdraw your consent at any time with effect for the future by contacting either the controller named above or the provider.

DHL

We use the following transport service provider: DHL Paket GmbH, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany.

You may withdraw your consent at any time with effect for the future by contacting either the controller named above or the provider.

8.3 Use of payment service providers

Apple Pay

If you choose the “Apple Pay” payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed through the Apple Pay function on your device running iOS, watchOS or macOS by charging a payment card stored in Apple Pay. Apple Pay uses security features built into your device’s hardware and software to protect your transactions. Authorising a payment therefore requires entry of a code previously set by you and verification using your device’s Face ID or Touch ID function.

For payment processing purposes, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before transmitting it to the payment service provider for the payment card stored in Apple Pay to carry out the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. After payment has been made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm that payment was successful.

If personal data is processed during the transfers described, it is processed exclusively for payment processing purposes under Article 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. Anonymisation completely prevents identification of an individual. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, the Mac and the authorising device communicate through an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and turn off “Allow Payments on Mac”.

Further information about privacy in connection with Apple Pay is available at:

https://support.apple.com/de-de/HT203027

BLIK

One or more online payment methods from the following provider are available on this website: Polski Standard Płatności Sp. z o.o., Czerniakowska 87a, 00-718 Warsaw, Poland.

To process your payment, the payment data you provide during the ordering process (including your name, address, bank and payment card information, currency and transaction number), together with information about the contents of your order, is passed to the provider under Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively to process payment with the provider and only to the extent necessary for this purpose.

Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method offered by the provider for which you pay in advance (such as payment by credit card), the payment data you provide during the ordering process (including your name, address, bank and payment card information, currency and transaction number), together with information about the contents of your order, is passed to the provider under Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively to process payment with the provider and only to the extent necessary for this purpose.

If you select a payment method for which the provider performs in advance (such as purchase on account, payment by instalments or direct debit), you will also be asked during the ordering process to provide certain personal information (first and last name, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To safeguard our legitimate interest in establishing our customers’ ability to pay, we pass this data to the provider for a credit check under Article 6(1)(f) GDPR. Using the personal data you provide and further data (such as your shopping cart, invoice amount, order history and payment experience), the provider checks whether the payment option you have selected can be offered in view of payment and/or debt default risks.

In addition to the provider’s internal criteria, identity and creditworthiness information from the following credit reference agencies may be included in the decision when assessing your application under Article 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (known as credit scores). Where credit scores are included in the results of a credit report, they are based on a scientifically recognised mathematical and statistical procedure. Address data, among other information, is used to calculate these scores.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data where this is necessary to process payments in accordance with the contract.

PayPal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method offered by the provider for which you pay in advance, the payment data you provide during the ordering process (including your name, address, bank and payment card information, currency and transaction number), together with information about the contents of your order, is passed to the provider under Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively to process payment with the provider and only to the extent necessary for this purpose.

If you select a payment method for which we perform in advance, you will also be asked during the ordering process to provide certain personal information (first and last name, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To safeguard our legitimate interest in establishing your ability to pay in such cases, we pass this data to the provider for a credit check under Article 6(1)(f) GDPR. Using the personal data you provide and further data (such as your shopping cart, invoice amount, order history and payment experience), the provider checks whether the payment option you have selected can be offered in view of payment and/or debt default risks.

PayPal Checkout

This website uses PayPal Checkout, an online payment system from PayPal comprising PayPal’s own payment methods and local payment methods offered by third-party providers.

When you pay using PayPal, credit card through PayPal, direct debit through PayPal or, if offered, “Pay Later” through PayPal, we pass your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”) as part of payment processing. Data is disclosed under Article 6(1)(b) GDPR and only to the extent necessary to process the payment.

PayPal reserves the right to obtain a credit report for the payment methods credit card through PayPal, direct debit through PayPal or, if offered, “Pay Later” through PayPal. For this purpose, your payment data may be passed to credit reference agencies under Article 6(1)(f) GDPR on the basis of PayPal’s legitimate interest in establishing your ability to pay. PayPal uses the results of the credit check concerning the statistical probability of payment default to decide whether to provide the relevant payment method. The credit report may contain probability values (known as credit scores). Where credit scores are included in the results of a credit report, they are based on a scientifically recognised mathematical and statistical procedure. Address data, among other information, is used to calculate these scores. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal data where this is necessary to process payments in accordance with the contract.

If the PayPal “Purchase on account” payment method is available and you select it, your payment data is initially transmitted to PayPal to prepare the payment. PayPal then forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (“Ratepay”) to carry out the payment. The legal basis in each case is Article 6(1)(b) GDPR. In this case, Ratepay carries out an identity and credit check in its own name to establish your ability to pay, following the principles described above, and passes your payment data to credit reference agencies under Article 6(1)(f) GDPR on the basis of its legitimate interest in establishing your ability to pay. A list of the credit reference agencies that Ratepay may use is available here:

https://www.ratepay.com/legal-payment-creditagencies/

If you use a payment method offered by a local third-party provider, your payment data is initially passed to PayPal under Article 6(1)(b) GDPR to prepare the payment. Depending on which available local payment method you select, PayPal then transmits your payment data to the relevant provider under Article 6(1)(b) GDPR to carry out the payment:

Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
bancontact (Bancontact Payconiq Company, Rue d’Arlon 82, 1040 Brussels, Belgium)
blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2, 1200 Vienna, Austria)
MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further data protection information, please refer to PayPal’s privacy policy:

https://www.paypal.com/de/legalhub/paypal/privacy-full

Stripe

One or more online payment methods from the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you select a payment method offered by the provider, the payment data you provide during the ordering process (including your name, address, bank and payment card information, currency and transaction number), together with information about the contents of your order, is passed to the provider under Article 6(1)(b) GDPR. In this case, your data is disclosed exclusively to process payment with the provider and only to the extent necessary for this purpose.

SumUp

One or more online payment methods from the following provider are available on this website: SumUp Limited, Block 8, Harcourt Centre, Charlotte Way, Dublin 2, Ireland D02 K580.

8.4 Electronic withdrawal function for distance contracts

Consumers who conclude contracts on this website for which a statutory right of withdrawal exists may exercise that right using an electronic withdrawal function in accordance with the applicable withdrawal provisions.

When using the withdrawal function, you must provide or confirm not only information identifying the contract from which you wish to withdraw, but also additional personal information, such as your first and last name and email address.

This information is collected and transmitted to us under Article 6(1)(b) GDPR only to the extent necessary to properly process the withdrawal. The personal data provided is also used under Article 6(1)(b) GDPR to confirm receipt of the withdrawal declaration by email. Article 6(1)(c) GDPR provides an additional legal basis for processing. We are legally required to provide an electronic withdrawal function for consumer distance contracts involving an obligation to pay.

9) Web analytics services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are stored on your device as small text files and collect certain information. This information includes your IP address, although Google truncates its final digits to prevent direct identification of an individual.

The information is transferred to Google’s servers and processed further there. Transfers to Google LLC, based in the USA, may also occur.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services relating to website and internet use. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Data collected through the use of Google Analytics 4 is stored for two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent under Article 6(1)(a) GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right to withdraw consent, please disable this service using the cookie consent tool provided on the website.

We have entered into a data processing agreement with Google to protect the data of visitors to our website and prohibit unauthorised disclosure to third parties.

Further legal information about Google Analytics 4 is available at:

https://business.safety.google/intl/de/privacy/

https://policies.google.com/privacy?hl=de&gl=de

https://policies.google.com/technologies/partner-sites

Demographics

Google Analytics 4 uses the special “Demographics” feature and can generate statistics about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. It allows target groups to be identified for marketing activities. However, the data collected cannot be attributed to a specific individual and is deleted after being stored for two months.

Google Signals

As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised advertising and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics under Article 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including models of cross-device conversions. We receive only statistics from Google, not personal data. If you wish to stop cross-device analysis, you can disable “Personalised ads” in your Google Account settings. Follow the instructions on this page:

https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de

Further information about Google Signals is available at:

https://support.google.com/analytics/answer/7532985?hl=de

User IDs

As an extension to Google Analytics 4, the “User IDs” feature may be used on this website. If you have consented to the use of Google Analytics 4 under Article 6(1)(a) GDPR, created an account on this website and sign in to that account on different devices, your activities, including conversions, may be analysed across devices.

10) Retargeting/remarketing and conversion tracking

10.1 Meta Pixel

As part of our online offering, we use the “Meta Pixel” service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).

When a user clicks on an advertisement we have placed on Facebook and/or Instagram, Meta Pixel adds a parameter to the URL of our linked page. After redirection, this URL parameter is stored in the user’s browser through a cookie set by our linked page itself.

This enables Meta to identify visitors to our online offering as a target group for displaying advertisements (“ads”). Accordingly, we use this service to display our Facebook and/or Instagram ads only to users who have shown an interest in our online offering or who have certain characteristics (such as interests in particular topics or products determined on the basis of the websites visited) that we transmit to Meta (“Custom Audiences”).

Meta Pixel also makes it possible to track whether users were redirected to our website after clicking on an advertisement and what actions they perform there (“conversion tracking”).

The data collected is anonymous to us and therefore does not allow us to identify users. However, Meta stores and processes the data, allowing it to be linked to the relevant user profile and enabling Meta to use the data for its own advertising purposes.

All processing described above, in particular the setting of cookies to read information on the device used, is carried out only if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on our website.

We have entered into a data processing agreement with the provider to protect the data of visitors to our website and prohibit unauthorised disclosure to third parties.

The information generated by Meta is generally transferred to a Meta server and stored there; this may also involve transfers to servers of Meta Platforms Inc. in the USA.

10.2 Pinterest Tag conversion tracking

This website uses conversion tracking technology from the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

If you have reached our website through an advertisement on the provider’s domain, cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests) can be used to track the success of the advertisement.

For this purpose, the tracking technology reads certain device and browser information, potentially including your IP address, to record and analyse user actions predefined by us (such as completed transactions, leads, search queries on the website and product page views). This allows statistics to be compiled about usage behaviour on our website following redirection from an advertisement, which we use to optimise our offering.

We have entered into a data processing agreement with the provider to protect the data of visitors to our website and prohibit unauthorised disclosure to third parties.

10.3 TikTok Pixel

This website uses conversion tracking technology from the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

We have entered into a data processing agreement with the provider to protect the data of visitors to our website and prohibit unauthorised disclosure to third parties.

11) Website functionalities

11.1 Facebook plugins

Our website uses plugins from the social network operated by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when you visit our website, the plugins are initially disabled and integrated into the site using a “two-click” or “Shariff” solution.

This integration ensures that no connection to the provider’s servers is established when you access a page of our website containing such plugins.

Only when you activate the plugins and thereby consent to the transfer of data under Article 6(1)(a) GDPR does your browser establish a direct connection to the provider’s servers. Regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), your browser and your browsing history is transmitted to the provider and may be processed further there.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out through the plugins is also published there and displayed to your contacts.

You may withdraw your consent at any time by clicking again to disable the activated plugin. However, withdrawal does not affect data already transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have entered into a data processing agreement with the provider to protect the data of visitors to our website and prohibit unauthorised disclosure to third parties.

11.2 Instagram plugins

Our website uses plugins from the social network operated by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when you visit our website, the plugins are initially disabled and integrated into the site using a “two-click” or “Shariff” solution.

This integration ensures that no connection to the provider’s servers is established when you access a page of our website containing such plugins.

You may withdraw your consent at any time by clicking again to disable the activated plugin. However, withdrawal does not affect data already transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have entered into a data processing agreement with the provider to protect the data of visitors to our website and prohibit unauthorised disclosure to third parties.

11.3 Best Currency Converter

This website uses the “Best Currency Converter” service from Grizzly Apps SRL, Str. Muresului Nr. 7 Bloc E23, Scara B, Apartament 15, Brasov, Romania (“Best Currency Converter”). On the basis of our legitimate interest in displaying prices in the local currency at your location, Best Currency Converter collects and analyses your IP address under Article 6(1)(f) GDPR to adapt the prices displayed on the website to your location. The IP address is not stored permanently. In addition, after adjusting the currency for the first time, Best Currency Converter sets a functional cookie in the browser of your device to save the currency setting for the duration of a session. The cookie is automatically deleted when that session ends.

11.4 Google Photos

This website uses the “Google Photos” image service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) to embed and display photographs.

Google Photos itself does not store or read information on users’ devices. The service also does not carry out independent data analysis.

However, when a page is accessed, your IP address is transmitted to Google and may be stored there in order to load image files from Google’s network. Transfers to servers of Google LLC in the USA may also occur.

This processing takes place only if you have given us your express consent under Article 6(1)(a) GDPR. Without this consent, image files will not be loaded through Google Photos.

You may withdraw your consent at any time with effect for the future. To withdraw your consent, please disable this service in the cookie consent tool provided on the website. We have entered into a data processing agreement with Google requiring Google to protect the data of visitors to our website and not disclose it to third parties.

12) Tools and miscellaneous

Cookie consent tool

This website uses a cookie consent tool to obtain valid user consent for cookies and cookie-based applications that require consent. The cookie consent tool is displayed to users when they access the website in the form of an interactive interface, where consent to specific cookies and/or cookie-based applications can be given by ticking boxes. The tool ensures that all cookies/services requiring consent are loaded only if the user has given the corresponding consent by ticking the relevant boxes. This ensures that such cookies are set on the user’s device only where consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this process.

If, in an individual case, personal data (such as an IP address) is processed to store, assign or record cookie settings, this is carried out under Article 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, accordingly, a legally compliant website.

Article 6(1)(c) GDPR provides a further legal basis for processing. As the controller, we are legally required to make the use of technically non-essential cookies dependent on the relevant user’s consent.

Where necessary, we have entered into a data processing agreement with the provider to protect the data of visitors to our website and prohibit unauthorised disclosure to third parties.

Further information about the operator of the cookie consent tool and its settings is available directly in the corresponding interface on our website.

13) Rights of data subjects

13.1 Applicable data protection law grants you the following rights as a data subject in relation to the controller’s processing of your personal data (rights of access and intervention). Please refer to the legal provisions cited for the conditions governing the exercise of each right:

Right of access under Article 15 GDPR;
Right to rectification under Article 16 GDPR;
Right to erasure under Article 17 GDPR;
Right to restriction of processing under Article 18 GDPR;
Right to be informed under Article 19 GDPR;
Right to data portability under Article 20 GDPR;
Right to withdraw consent under Article 7(3) GDPR;
Right to lodge a complaint under Article 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Retention period for personal data

The period for which personal data is stored depends on the relevant legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (such as retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent under Article 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar obligations under Article 6(1)(b) GDPR, this data is routinely deleted once the retention periods expire, provided that it is no longer required to perform or initiate a contract and/or we no longer have a legitimate interest in retaining it.

Where personal data is processed under Article 6(1)(f) GDPR, it is stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes under Article 6(1)(f) GDPR, it is stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise stated in the other information in this policy concerning specific processing situations, stored personal data is otherwise deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.

German source: IT-Recht Kanzlei
Source last updated: 28 September 2026, 10:52:38

All Collections

Privacy policy

1) Introduction and contact details of the controller

2) Data collection when you visit our website

3) Hosting and content delivery network

3.1 Amazon Web Services

3.2 Shopify

4) Cookies

5) Contacting us

6) Data processing when opening a customer account

7) Use of customer data for direct marketing

7.1 Subscribing to our email newsletter

7.2 Omnisend

7.3 Shopify Email

7.4 Shopping cart reminders by email

8) Data processing for order fulfilment

8.2 Disclosure of personal data to shipping service providers

Deutsche Post

DHL

8.3 Use of payment service providers

Apple Pay

BLIK

Klarna

PayPal

PayPal Checkout

Stripe

SumUp

8.4 Electronic withdrawal function for distance contracts

9) Web analytics services

Google Analytics 4

Demographics

Google Signals

User IDs

10) Retargeting/remarketing and conversion tracking

10.1 Meta Pixel

10.2 Pinterest Tag conversion tracking

10.3 TikTok Pixel

11) Website functionalities

11.1 Facebook plugins

11.2 Instagram plugins

11.3 Best Currency Converter

11.4 Google Photos

12) Tools and miscellaneous

Cookie consent tool

13) Rights of data subjects

13.2 RIGHT TO OBJECT

14) Retention period for personal data