Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is any data by which you could be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Slow Interior OHG, Marienstraße 3, 50825 Cologne, Germany, Tel.: +49221/42360320, E-mail: hello@onomao.com. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website purely for informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website visited
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you came to the page
• Browser used
• Operating system used
• IP address used (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively should there be concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser line.

3) Hosting & Content Delivery Network

3.1 Amazon Web Services

For the hosting of our website and the presentation of its content, we use the system of the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg

Data may also be transmitted to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

3.2 Shopify

For the hosting of our website and the presentation of its content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

An adequate level of data protection for data transfers to Canada is ensured by an adequacy decision of the European Commission.

3.3 AWS CloudFront

We use a content delivery network provided by the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Data may also be transmitted to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

3.4 Cloudflare

We use a content delivery network provided by the following provider: Cloudflare Inc., 101 Townsend St, San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for longer and enable page settings to be remembered (so-called "persistent cookies"). In the latter case, you can find the storage period in the cookie settings overview of your web browser.

Where individual cookies used by us also process personal data, the processing is carried out either pursuant to Art. 6(1)(b) GDPR to perform the contract, pursuant to Art. 6(1)(a) GDPR where consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective use of the site.

You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance, or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Acuity Scheduling

To provide an online appointment booking function, we use the services of the following provider: Squarespace Ireland Limited, Le Pole House, Ship Street Great, Dublin 8, Ireland

For the purpose of scheduling appointments, your first and last name and e-mail address (and, if applicable, telephone number, if a telephone appointment is requested) are collected pursuant to Art. 6(1)(b) GDPR and transmitted to the provider pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in effective customer management and efficient appointment scheduling, and stored there for appointment organisation.

Your data is deleted by the provider after the appointment has taken place or after the agreed appointment period has expired.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

5.2 Gorgias

To handle customer enquiries, we use the e-mail ticketing system of the following provider: Gorgias Inc., 180 Sansome St, Suite 1800, San Francisco, CA 94014, USA

If you submit enquiries to us via e-mail through our website, these are stored and organised in the ticketing system to enable chronological processing and to improve the service experience. You can view the current status of the processing of your request at any time using the individually assigned ticket number.

For the organisation and processing of enquiries, personal data is collected to the extent provided by you, but in any case name, first name and e-mail address, transmitted to the provider, stored and accessed there.

The legal basis for the processing of this data is our legitimate interest in the efficient organisation of our customer service, in responding to your enquiry as quickly as possible, and in optimising our service offering pursuant to Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

5.3 In the context of contacting us (e.g. via contact form or e-mail), personal data is processed exclusively for the purpose of handling and responding to your enquiry and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your enquiry pursuant to Art. 6(1)(f) GDPR. If your enquiry is aimed at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided that no statutory retention obligations preclude this.

5.4 Klaviyo

For sending transactional e-mails, i.e. occasion-related messages triggered by a specific user interaction (such as conclusion of a contract, registration or password reset), we use the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly e-mail communication, we pass on the data provided by you when carrying out such a user action to this provider pursuant to Art. 6(1)(f) GDPR, so that it can carry out the e-mail dispatch on our behalf.

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits its disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

6) Data Processing Upon Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data is further collected and processed to the extent required if you provide us with such data when opening a customer account. The data required to open an account can be found in the input form of the relevant form on our website.

You may delete your customer account at any time by sending a message to the controller's address stated above. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via the account have been fully performed, no statutory retention periods preclude this, and we no longer have a legitimate interest in continued storage.

7) Use of Customer Data for Direct Marketing

7.1 Subscribing to Our E-Mail Newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your e-mail address. The provision of further data is voluntary and is used to enable us to address you personally. For the newsletter dispatch we use the so-called double opt-in procedure, which ensures that you only receive newsletters once you have expressly confirmed your consent to receiving the newsletter by clicking on a verification link sent to the e-mail address provided.

By activating the confirmation link, you grant us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when registering for the newsletter is used strictly for the intended purpose.

You may unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter, or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data, or we reserve the right to use the data for purposes beyond this that are permitted by law and about which we inform you in this declaration.

7.2 Sending the E-Mail Newsletter to Existing Customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers by e-mail for similar goods or services to those already purchased from our range. Pursuant to Section 7(3) of the German Act Against Unfair Competition (UWG), we do not need to obtain separate consent from you for this purpose. The data processing in this respect is based solely on our legitimate interest in personalised direct advertising pursuant to Art. 6(1)(f) GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you any e-mails.

You are entitled to object at any time, with effect for the future, to the use of your e-mail address for the aforementioned advertising purpose by notifying the controller named at the beginning. This will only incur transmission costs according to the basic rates. After receipt of your objection, the use of your e-mail address for advertising purposes will be discontinued without delay.

7.3 Klaviyo

Our e-mail newsletters and other promotional e-mail communications are sent via the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly e-mail marketing, we pass on the data provided at registration to this provider pursuant to Art. 6(1)(f) GDPR, so that it can carry out the e-mail dispatch on our behalf.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also conducts a statistical evaluation of the success of e-mail campaigns using web beacons or tracking pixels in the e-mails sent, which can measure open rates and specific interactions with the newsletter content. In doing so, device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data sets.

You may withdraw your consent to e-mail tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits its disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

7.4 Shopping Cart Reminders by E-Mail

If you abandon your purchase with us before completing the order, you have the option of being reminded once by e-mail of the contents of your virtual shopping cart.

The only mandatory information required to send this reminder is your e-mail address. The provision of further data is voluntary and may be used to enable us to address you personally. For the e-mail dispatch we use the so-called double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent to this by clicking on a verification link sent to the e-mail address provided.

By activating the confirmation link, you grant us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR for sending a shopping cart reminder. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when registering for our e-mail notification service is used strictly for the intended purpose.

You may unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be deleted from the distribution list set up for this purpose without delay, unless you have expressly consented to further use of your data, or we reserve the right to use the data for purposes beyond this that are permitted by law and about which we inform you in this declaration.

8) Data Processing for Order Handling

8.1 Insofar as necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us is passed on to the commissioned transport company and the commissioned credit institution pursuant to Art. 6(1)(b) GDPR.

Where we owe you updates for goods with digital elements or for digital products under a corresponding contract, we process the contact data provided by you when ordering in order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact data is used strictly for the intended purpose of communications regarding updates owed by us and is processed by us for this purpose only to the extent necessary for the respective information.

To handle your order, we furthermore work together with the service provider(s) listed below, who support us fully or partially in performing concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Billbee

For order processing we use the following provider: Billbee GmbH, Arolser Str. 10, 34477 Twistetal

Name, address and, where applicable, further personal data is passed on to the provider exclusively for the purpose of processing the online order pursuant to Art. 6(1)(b) GDPR. Your data is only passed on to the extent actually necessary for processing the order.

8.3 Druckerwolke

For order processing we use the following provider: Aljoscha Knaust, Südhang 42, 32699 Extertal, Germany

Name, address and, where applicable, further personal data is passed on to the provider for the purpose of processing the online order pursuant to Art. 6(1)(b) GDPR. Your data is only passed on to the extent actually necessary for processing the order. The provider is also used for accounting purposes. In this respect, the provider processes incoming and outgoing invoices as well as, where applicable, our company's bank transactions in order to automatically record invoices, match them to transactions, and generate the financial accounting from them in a partially automated process.

Insofar as personal data is also processed in this respect, the processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business operations.

8.4 Order Printer Pro

For order processing we use the following provider: FORSBERG+TWO, Tranegårdsvej 74, 2900, Hellerup, Denmark

Name, address and, where applicable, further personal data is passed on to the provider for the purpose of processing the online order pursuant to Art. 6(1)(b) GDPR. Your data is only passed on to the extent actually necessary for processing the order. The provider is also used for accounting purposes. In this respect, the provider processes incoming and outgoing invoices as well as, where applicable, our company's bank transactions in order to automatically record invoices, match them to transactions, and generate the financial accounting from them in a partially automated process.

Insofar as personal data is also processed in this respect, the processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business operations.

8.5 Disclosure of Personal Data to Shipping Service Providers

DHL

As a transport service provider we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods pursuant to Art. 6(1)(a) GDPR for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent to this during the ordering process. Otherwise, we only pass on the recipient's name and delivery address to the provider for delivery purposes pursuant to Art. 6(1)(b) GDPR. Disclosure only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Consent may be withdrawn at any time with effect for the future, either vis-à-vis the controller named above or vis-à-vis the provider.

8.6 Anthropic Claude

To provide our services, we use artificial intelligence software from the following provider: Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland

Information provided by you in the context of a contractual relationship may be fed into the provider's software in order to organise, analyse, aggregate, modify, evaluate or prepare it for the provision of our service.

Information may also be transmitted to: Anthropic PBC, USA

The collection and further processing of this information is carried out strictly for the intended purpose of contract performance. Processing for the purposes of training and further developing the provider's AI language models is expressly excluded.

Insofar as the subject matter of the processing also includes personal data, this is carried out on the basis of our legitimate interest in the efficient organisation of our services and the optimal use of available resources and technologies pursuant to Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of personal data processed by the provider and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

8.7 Use of Payment Service Providers

VR Factoring GmbH

One or more online payment methods of the following provider are available on this website: VR Factoring GmbH, Platz der Republik 6, 60325 Frankfurt am Main, Germany

If you select a payment method offered by the provider under which you pay in advance (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and card details, currency and transaction number) as well as information about the content of your order are passed on to the provider pursuant to Art. 6(1)(b) GDPR. In this case, your data is passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.

If you select a payment method under which the provider pays in advance (e.g. purchase on account or in instalments, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and, where applicable, details of an alternative means of payment).

In order to safeguard our legitimate interest in establishing the creditworthiness of our customers, this data is forwarded by us to the provider pursuant to Art. 6(1)(f) GDPR for the purpose of a credit check. Based on the personal data provided by you as well as further data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment method selected by you can be granted in view of the risk of payment default and/or non-payment.

In addition to the provider's own internal criteria, identity and credit information from the following credit reporting agencies may also be taken into account for the decision pursuant to Art. 6(1)(f) GDPR:

• SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany
• Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss, Germany

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is factored into the calculation of the score values.

You may object to this processing of your data at any time by notifying us or the provider. However, the provider may remain entitled to process your personal data insofar as this is necessary for the proper handling of payments under the contract.

To perform the factoring agreement in place with VR Factoring GmbH (assignment of our receivables and transfer of accounts receivable management), we furthermore transmit the following data to VR Factoring GmbH:

• the name and address of our customers (as debtors),
• data relating to the receivables owed by our customers (in particular the gross amount and due date),
• where applicable, the names and contact details (telephone number, e-mail address) of contact persons, for the purpose of coordinating accounts receivable accounting.

The processing is carried out pursuant to Art. 6(1)(b) GDPR to perform the purchase contract, as well as pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the proper handling of our payment transactions.

VR Factoring GmbH furthermore passes on our customers' company data to credit reporting agencies and trade credit insurers, as well as to processors (e.g. IT service providers, printing service providers).

Further details on the data processing carried out by VR Factoring GmbH can be found in its "Data Protection Notice", available at www.vr-factoring.de/datenschutz.

8.8 Credit Check

Should we make an advance payment (e.g. delivery on account), we reserve the right to carry out a credit check based on mathematical-statistical methods in order to safeguard our legitimate interest in establishing the creditworthiness of our customers. We transmit the personal data required for a credit check pursuant to Art. 6(1)(f) GDPR to the following service provider:

First Debit GmbH, Am Hülsenbusch 23, 59063 Hamm, Germany

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data is factored into the calculation of the score values. We use the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding on the establishment, performance or termination of a contractual relationship.

You may object to this processing of your data at any time by notifying the controller responsible for data processing or the aforementioned credit reporting agency. However, we may remain entitled to process your personal data insofar as this is necessary for the proper handling of payments under the contract.

8.9 Electronic Withdrawal Function for Distance Contracts

Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring their withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.

To provide the electronic withdrawal function, we use a solution from the following provider: BuschBytes, Hofstraße Nr. 2-4, Cologne, 51061, Germany.

When using the withdrawal function, in addition to information required to identify the contract to be withdrawn from, further personal information such as the consumer's first and last name and e-mail address must be provided or confirmed.

This information is initially collected by the provider on the basis of our legitimate interest in a user-friendly, stable and process-optimised solution pursuant to Art. 6(1)(f) GDPR, then used to confirm receipt of the withdrawal declaration by e-mail on our behalf, and finally transmitted to us. We subsequently process the transmitted information for the proper handling of the withdrawal pursuant to Art. 6(1)(b) GDPR and Art. 6(1)(c) GDPR on the basis of our statutory obligation to provide an electronic withdrawal function for consumer distance contracts subject to payment.

The information collected by the provider is routinely deleted after final processing of a withdrawal, provided that no statutory retention obligations preclude this.

We have concluded a data processing agreement with the provider that protects data processed within the withdrawal function and prohibits unauthorised disclosure to third parties.

9) Online Marketing

Google AdSense

This website uses Google AdSense, an advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, i.e. text files that are stored on your computer and that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to a Google server and stored there. This may also result in a transfer to servers of Google LLC in the USA.

Google uses the information obtained in this way to evaluate your usage behaviour with regard to the AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not merged with other data from Google. The information collected by Google may under certain circumstances be transferred to third parties, insofar as this is legally required and/or insofar as third parties process this data on behalf of Google.

All of the processing operations described above, in particular the reading of information on the device used via cookies and/or web beacons, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without such consent, Google AdSense will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

Further information on Google's data protection provisions can be found here: business.safety.google/intl/en/privacy and google.com/policies/privacy

10) Web Analytics Services

10.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are stored as small text elements on your device and collect certain information. This information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude direct personal identifiability.

The information is transmitted to Google servers and further processed there. Transfers to Google LLC, based in the USA, are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide further services related to the use of the website and the internet. The shortened IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. The data collected within the scope of using Google Analytics 4 is stored for a period of two months and then deleted.

All processing operations described above, in particular the setting of cookies on the device used, are only carried out if you have given us your express consent for this pursuant to Art. 6(1)(a) GDPR.

Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at business.safety.google/intl/en/privacy, policies.google.com/privacy and at policies.google.com/technologies/partner-sites

Demographic Characteristics

Google Analytics 4 uses the special "demographic characteristics" function and can use it to compile statistics that make statements about the age, gender and interests of website visitors. This is done through the analysis of advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be attributed to any specific person and is deleted after a storage period of two months.

Google Signals

As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have activated personalised advertisements and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including with regard to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "personalised advertising" function in your Google account settings. To do so, follow the instructions on this page: support.google.com/My-Ad-Center-Help

Further information on Google Signals can be found at the following link: support.google.com/analytics

UserIDs

As an extension to Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have created an account on this website, and log in to this account on various devices, your activities, including conversions, may be analysed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

10.2 Google Tag Manager

This website uses the "Google Tag Manager", a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").

The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and calibrating, controlling and linking them to conditions via a uniform user interface. The Google Tag Manager itself does not store any information on user devices or read any such information. Nor does the service carry out any independent data analyses. However, the Google Tag Manager transmits your IP address to Google when a page is accessed, where it may be stored. A transfer to servers of Google LLC in the USA is also possible.

This processing is only carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without such consent, Google Tag Manager will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

Further legal information on Google Tag Manager can be found at business.safety.google/intl/en/privacy and policies.google.com/privacy

10.3 Hotjar

This website uses the web analytics service of the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate them for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. Among other things, this enables the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). The pseudonymisation generally excludes direct personal identifiability. There is no merging with plain-text data about you collected in any other way.

All of the processing operations described above, in particular the reading or storage of information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

10.4 Microsoft Clarity

This website uses the web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate them for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. Among other things, this enables the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). The pseudonymisation generally excludes direct personal identifiability. There is no merging with plain-text data about you collected in any other way.

All of the processing operations described above, in particular the reading or storage of information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

10.5 Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymised visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate them for statistical analyses of usage behaviour on our website and to create pseudonymised usage profiles. The pseudonymisation generally excludes direct personal identifiability. There is no merging with plain-text data about you collected in any other way.

All of the processing operations described above, in particular the reading or storage of information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits its disclosure to third parties.

An adequate level of data protection for data transfers to Canada is ensured by an adequacy decision of the European Commission.

11) Retargeting / Remarketing and Conversion Tracking

11.1 Meta Pixel

Within our online offering, we use the "Meta Pixel" service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

If a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into the user's browser after redirection by a cookie set by our linked page itself.

This allows Meta, on the one hand, to identify visitors to our online offering as a target group for the display of advertisements ("Ads"). Accordingly, we use the service to display the Facebook and/or Instagram ads placed by us only to those users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, determined based on the websites visited) that we transmit to Meta (so-called "Custom Audiences").

On the other hand, "Meta Pixel" can be used to track whether users were redirected to our website after clicking on an advertisement and what actions they take there ("conversion tracking").

The data collected is anonymous to us and therefore provides no conclusions about the identity of the users. However, the data is stored and processed by Meta, so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.

All of the processing operations described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

The information generated by Meta is generally transmitted to and stored on a Meta server; in this context, a transfer to servers of Meta Platforms Inc. in the USA may also occur.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

11.2 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. The information collected in this respect generally also includes your IP address.

Further data processing only takes place if you have agreed with Google that your internet and app browsing history is linked by Google to your Google account and that information from your Google account is used to personalise the advertisements you view on the web. If you are logged in to Google in this case while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups. In the context of using Google Ads Remarketing, personal data may also be transferred to Google LLC's servers in the USA.

All of the processing operations described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without such consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "cookie consent tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

Details on the processing initiated by Google and Google's handling of website data can be found here: policies.google.com/technologies/partner-sites

Further information on Google's data protection provisions can be found here: business.safety.google/intl/en/privacy and google.com/policies/privacy

11.3 LinkedIn Insight

This website uses retargeting technology from the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

This makes it possible to specifically address visitors to our website with personalised, interest-based advertising for our shop and our products in which they have already shown an interest. The display of advertising material is based on a cookie-based analysis of past and current usage behaviour.

In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests and thereby individually tailor advertising to the stored information. These cookies are small text files that are stored on your computer or mobile device. This allows advertising to be displayed to you that is likely to correspond to your product and information interests.

All of the processing operations described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without such consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "cookie consent tool" provided on the website.

Data may also be transmitted to: LinkedIn Corp., USA

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

11.4 Microsoft Advertising

This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

This makes it possible to specifically address visitors to our website with personalised, interest-based advertising for our shop and our products in which they have already shown an interest. The display of advertising material is based on a cookie-based analysis of past and current usage behaviour.

In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests and thereby individually tailor advertising to the stored information. These cookies are small text files that are stored on your computer or mobile device. This allows advertising to be displayed to you that is likely to correspond to your product and information interests.

All of the processing operations described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without such consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "cookie consent tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

11.5 Pinterest Retargeting Pixel

This website uses retargeting technology from the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

This makes it possible to specifically address visitors to our website with personalised, interest-based advertising for our shop and our products in which they have already shown an interest. The display of advertising material is based on a cookie-based analysis of past and current usage behaviour.

In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests and thereby individually tailor advertising to the stored information. These cookies are small text files that are stored on your computer or mobile device. This allows advertising to be displayed to you that is likely to correspond to your product and information interests.

All of the processing operations described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without such consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "cookie consent tool" provided on the website.

11.6 Google Ads Conversion Tracking

This website uses the "Google Ads" online advertising programme and, within the scope of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use Google Ads to draw attention to our offers on external websites using advertising material (so-called Google Adwords). We can determine, in relation to the advertising campaign data, how successful the individual advertising measures are. In doing so, we pursue the aim of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information obtained with the aid of the conversion cookie, which also includes your IP address, is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users.

In the context of using Google Ads, personal data may also be transferred to Google LLC's servers in the USA.

Details on the processing initiated by Google Ads Conversion Tracking and Google's handling of website data can be found here: policies.google.com/technologies/partner-sites

All of the processing operations described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

You may also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link: support.google.com/My-Ad-Center-Help

In order to address users, whose data we have received in the context of business or business-like relationships, in a more interest-appropriate manner in advertising, we use a customer matching function within Google Ads. For this purpose, we transmit one or more files with aggregated customer data (in particular e-mail addresses and telephone numbers) electronically to Google. Google does not gain access to plain-text data in this process, but rather automatically encrypts the information in the customer files by means of a special algorithm as part of the transmission process. The encrypted information can then only be used by Google to match it to existing Google accounts set up by the data subjects. This enables personalised advertising to be delivered across all Google services linked to the respective Google account.

The transmission of customer data to Google only takes place if you have given us your express consent to this pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent at any time with effect for the future. Further information on Google's data protection measures with regard to the customer matching function can be found here: support.google.com/google-ads

Google's data protection provisions can be viewed here: business.safety.google/intl/en/privacy and google.com/policies/privacy

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

11.7 Google Ads Conversion Tracking Without Cookies

This website uses the "Google Ads" online advertising programme and, within the scope of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

We use Google Ads to draw attention to our offers on external websites using advertising material (so-called Google Adwords). We can determine, in relation to the advertising campaign data, how successful the individual advertising measures are. In doing so, we pursue the aim of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of the advertising costs incurred.

This website uses Google Ads Conversion Tracking exclusively without the use of cookies, which means that the service does not set any cookies on your device at any time.

Instead, the local storage of your browser is used to store an individual ID assigned by Google, which enables an analysis of your use of the website. For this purpose, certain user information, including your IP address, is processed via the ID.

The ID is set when a user clicks on an ad placed by Google. If the user visits certain pages of this website, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information obtained in this way is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag.

However, they do not receive any information that could be used to personally identify users. In the context of using Google Ads, personal data may also be transferred to Google LLC's servers in the USA. Details on the processing initiated by Google Ads Conversion Tracking and Google's handling of website data can be found here: policies.google.com/technologies/partner-sites

Insofar as the information collected relates to a person, the processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical evaluation of the success of our advertising campaigns.

Google's data protection provisions can be viewed here: business.safety.google/intl/en/privacy and google.com/policies/privacy

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

11.8 Google Ads Conversion Tracking

This website uses the "Google Ads" online advertising programme and, within the scope of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites using advertising material (so-called Google Adwords). We can determine, in relation to the advertising campaign data, how successful the individual advertising measures are. In doing so, we pursue the aim of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of the advertising costs incurred.

The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information obtained with the aid of the conversion cookie, which also includes your IP address, is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that could be used to personally identify users. In the context of using Google Ads, personal data may also be transferred to Google LLC's servers in the USA.

Details on the processing initiated by Google Ads Conversion Tracking and Google's handling of website data can be found here: policies.google.com/technologies/partner-sites

All of the processing operations described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

You may also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link: support.google.com/My-Ad-Center-Help

Please note that certain functions of this website may not be usable, or only to a limited extent, if you have deactivated the use of cookies.

Google's data protection provisions can be viewed here: business.safety.google/intl/en/privacy and google.com/policies/privacy

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

11.9 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

For the use of Universal Event Tracking, a tag is embedded on every page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behaviour on our website traceable and sends the information collected in this way to Microsoft. The purpose of this is to enable certain predefined goals, such as purchases or leads, to be statistically recorded and evaluated in order to make the targeting and content of our offers more interest-oriented. The tags are never used for the personal identification of users.

All of the processing operations described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without such consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "cookie consent tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

11.10 TikTok Pixel

This website uses conversion tracking technology from the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

If you arrived at our website via an advertisement on the provider's domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain device and browser information, including, where applicable, your IP address, is read via the tracking technology in order to record and evaluate user actions predefined by us (e.g. completed transactions, leads, search queries on the website, views of product pages). This enables the compilation of statistics on usage behaviour on our website following redirection from an advertisement, which serve us to optimise our offering.

All of the processing operations described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

12) Website Functionalities

12.1 Facebook Plugins

Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are integrated into the site initially deactivated by means of a so-called "2-click" or "Shariff" solution.

This integration ensures that when a page of our website that contains such plugins is accessed, no connection is yet established with the provider's servers.

Only once you activate the plugins, thereby giving your consent to the data transfer pursuant to Art. 6(1)(a) GDPR, does your browser establish a direct connection to the provider's servers. In doing so, regardless of whether you are logged in to an existing user profile, certain information about the device you are using (including your IP address), your browser and your browsing history is transmitted to the provider and, where applicable, further processed there.

If you are logged in to an existing user profile on the provider's social network, information about interactions carried out via the plugins is also published there and displayed to your contacts. You may withdraw your consent at any time by deactivating the activated plugin by clicking on it again. However, the withdrawal has no effect on data that has already been transmitted to the provider.

Data may also be transmitted to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

12.2 Instagram Plugins

Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are integrated into the site initially deactivated by means of a so-called "2-click" or "Shariff" solution.

This integration ensures that when a page of our website that contains such plugins is accessed, no connection is yet established with the provider's servers.

Only once you activate the plugins, thereby giving your consent to the data transfer pursuant to Art. 6(1)(a) GDPR, does your browser establish a direct connection to the provider's servers. In doing so, regardless of whether you are logged in to an existing user profile, certain information about the device you are using (including your IP address), your browser and your browsing history is transmitted to the provider and, where applicable, further processed there.

If you are logged in to an existing user profile on the provider's social network, information about interactions carried out via the plugins is also published there and displayed to your contacts. You may withdraw your consent at any time by deactivating the activated plugin by clicking on it again. However, the withdrawal has no effect on data that has already been transmitted to the provider.

Data may also be transmitted to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

12.3 Pinterest Plugins

Plugins of the social network of the following provider are used on our website: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are integrated into the site initially deactivated by means of a so-called "2-click" or "Shariff" solution.

This integration ensures that when a page of our website that contains such plugins is accessed, no connection is yet established with the provider's servers.

Only once you activate the plugins, thereby giving your consent to the data transfer pursuant to Art. 6(1)(a) GDPR, does your browser establish a direct connection to the provider's servers. In doing so, regardless of whether you are logged in to an existing user profile, certain information about the device you are using (including your IP address), your browser and your browsing history is transmitted to the provider and, where applicable, further processed there.

If you are logged in to an existing user profile on the provider's social network, information about interactions carried out via the plugins is also published there and displayed to your contacts. You may withdraw your consent at any time by deactivating the activated plugin by clicking on it again. However, the withdrawal has no effect on data that has already been transmitted to the provider.

Data may also be transmitted to: Pinterest Inc., USA

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.4 Google Maps API

To enable real-time checking of certain entries in the address form of our webshop's ordering process for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA

The provider validates the address entered, verifies the spelling and, where applicable, supplements missing data. In the case of ambiguous addresses, correct alternative suggestions are displayed. For this purpose, the address data entered by you is transmitted to the provider, stored there and evaluated.

This processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the proper recording of the customer's correct address data for the conscientious performance of our contractual delivery obligations and to prevent problems in the performance of the contract.

The provider processes the affected data separately and does not merge it with other data sets, and deletes it as soon as its status or correctness has been confirmed, but no later than after 30 days.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

Further information on Google's data protection provisions can be found here: business.safety.google/intl/en/privacy

12.5 Adobe Fonts (Typekit)

This site uses so-called web fonts from the following provider for the uniform display of fonts: Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA

When a page is accessed, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly, and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

The processing of personal data in the course of establishing a connection with the font provider will only be carried out if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

12.6 Google reCAPTCHA

On this website we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA.

For the visual design of the captcha window, the provider uses "Google Fonts", i.e. fonts loaded by Google from the internet. There is no processing of information beyond that already mentioned above, which is transmitted to Google via the functionality of reCAPTCHA.

The service checks whether an entry is made by a natural person or is made abusively through automated machine processing, and blocks spam, DDoS attacks and similar automated malicious access. In order to ensure that an action is carried out by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this to the provider's servers for evaluation. Cookies, i.e. small text files stored in the browser of the device, may be used in this process.

Insofar as the processing operations described above are carried out on the basis of cookies, these will only be set if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

Where the processing operations described above are carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual accountability on the internet and preventing abuse and spam pursuant to Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

12.7 n8n

This website uses the services of the following provider for the integration and synchronisation of databases and web applications: n8n GmbH, Novalisstr. 10, 10115 Berlin, Germany

This automates our processing operations and establishes various workflows in order to efficiently manage and carry out internal processes in our processing system. Insofar as personal data is also processed in this respect, this is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimising our internal organisation.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

12.8 Typeform

For conducting surveys or online forms, we use the services of the following provider: TYPEFORM SL, Carrer de Can Rabia 3-5, 4th Floor, 08017 Barcelona, Spain

The provider enables us to design and evaluate surveys and online forms. In addition to the respective personal data that you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transmitted to the provider and stored on the provider's servers.

The information you enter into the forms is stored password-protected, ensuring that third-party access is excluded and that only we can evaluate the data for the purpose specified in the respective form.

Art. 6(1)(b) GDPR serves as the legal basis for the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations necessary for carrying out pre-contractual measures). If you have given us your consent to process your data, the processing is carried out on the basis of Art. 6(1)(a) GDPR. Any consent given can be withdrawn at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

13) Tools and Miscellaneous

13.1 AccountOne

For our accounting, we use the service of the cloud-based accounting software of the following provider: AccountOne GmbH, Fördepromenade 4d, 24944 Flensburg, Germany

The provider processes incoming and outgoing invoices as well as, where applicable, our company's bank transactions in order to automatically record invoices, match them to transactions, and generate the financial accounting from them in a partially automated process.

Insofar as personal data is also processed in this respect, the processing is carried out on the basis of our legitimate interest in the efficient organisation and documentation of our business operations pursuant to Art. 6(1)(f) GDPR.

13.2 DATEV

For our accounting, we use the service of the cloud-based accounting software of the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany

The provider processes incoming and outgoing invoices as well as, where applicable, our company's bank transactions in order to automatically record invoices, match them to transactions, and generate the financial accounting from them in a partially automated process.

Insofar as personal data is also processed in this respect, the processing is carried out on the basis of our legitimate interest in the efficient organisation and documentation of our business operations pursuant to Art. 6(1)(f) GDPR.

13.3 Cookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain effective user consent for consent-requiring cookies and cookie-based applications. The "cookie consent tool" is displayed to users when the page is accessed, in the form of an interactive user interface, on which consent can be given for certain cookies and/or cookie-based applications by ticking a box. The use of the tool ensures that all consent-requiring cookies/services are only loaded once the respective user has given the relevant consent by ticking the box. This ensures that such cookies are only set on the respective user's device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, no personal user data is processed in this respect.

Should personal data (such as the IP address) nevertheless be processed in individual cases for the purpose of storing, assigning or logging cookie settings, this is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management system for cookies, and thus in a legally compliant design of our website.

The further legal basis for the processing is also Art. 6(1)(c) GDPR. As controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.

Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13.4 Channable

For the integration and synchronisation of databases and web applications, we use the services of the following provider: ProductImpulse BV, Kromme Nieuwegracht 66, 3512 HL Utrecht, Netherlands

This automates our processing operations and establishes various workflows in order to efficiently manage and carry out internal processes in our processing system. Insofar as personal data is also processed in this respect, this is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimising our internal organisation.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

14) Rights of the Data Subject

14.1 Applicable data protection law grants you the following rights as a data subject (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the legal basis cited for the respective requirements for exercising these rights:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent given pursuant to Art. 7(3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

14.2 Right to Object

15) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of the processing and, where applicable, additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods exist for data processed in connection with contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.

When processing personal data on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise indicated by other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.