Privacy Policy
1) Introduction and controller's contact details
1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to personally identify you.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is
AHATRADE LIMITED
Address: Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy
Central, Hong Kong S.A.R
Tel: +4924195504426
E-Mail: kontakt@amdor.de. The controller responsible for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
2) Data collection when you visit our website
When you only use our website for informational purposes, i.e. if you do not register or otherwise send us any information, we only collect the data that your browser transmits to the site server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
-
The website you visited
-
Date and time at the time of access
-
Volume of data sent in bytes
-
Source/referrer that led you to the page
-
Browser used
-
Operating system used
-
IP address used (if applicable: in anonymized form)
This processing takes place pursuant to Art. 6 Para. 1 lit. f GDPR, based on our legitimate interest in improving the stability and functionality of our website. Your data will not be passed on or otherwise used. However, we reserve the right to retroactively review the server log files if there are concrete indications of illegal use.
3) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your end device for longer and allow your site settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of your web browser's cookie settings.
If any of the cookies we use also process personal data, this processing takes place pursuant to Art. 6 Para. 1 lit. b GDPR either to perform a contract, pursuant to Art. 6 Para. 1 lit. a GDPR if you have provided your consent, or pursuant to Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website, as well as a customer-friendly and effective design of your site visit.
You can set your browser to notify you when cookies are set, and you can decide individually whether to accept cookies for specific cases or exclude their acceptance entirely.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
4) Contacting us
4.1 Judge.me
For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom
Exclusively on the basis of your explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, we transmit your email address and any additional customer data to the provider, so that they can contact you with a review reminder via email.
You can revoke your consent at any time with effect for the future, by notifying us or the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
When data is transferred to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
4.2 When you contact us (e.g. via contact form or email), personal data is processed – exclusively for the purpose of processing and responding to your request, and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 Para. 1 lit. f GDPR. If your contact relates to the conclusion of a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when the circumstances indicate that the relevant matter has been conclusively resolved, and no statutory retention obligations apply.
5) Comment function
When using the comment function on this website, in addition to your comment, details of the time the comment was created and the commenter name you selected are stored and published on this website. Your IP address is also logged and stored. This storage of your IP address takes place for security reasons, in case the person posting the comment violates the rights of third parties or posts illegal content. We need your email address to contact you if a third party claims that your published content is illegal.
The legal bases for storing your data are Art. 6 Para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are reported by third parties as illegal.
6) Use of customer data for direct marketing
6.1 Signing up for our email newsletter
If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory detail to send the newsletter is your email address. Providing additional data is voluntary and is used to be able to address you personally. We use the so-called double opt-in procedure for newsletter sends, which ensures that you only receive newsletters after you explicitly confirm your consent to receive the newsletter by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you grant us your consent to use your personal data pursuant to Art. 6 Para. 1 lit. a GDPR. We store your IP address registered by your internet service provider (ISP), as well as the date and time of sign-up, to be able to trace any potential misuse of your email address at a later date. The data we collect when you sign up for the newsletter is used strictly for its stated purpose.
You can unsubscribe from the newsletter at any time via the dedicated link in the newsletter, or by sending a corresponding message to the controller named at the start. After unsubscribing, your email address will be immediately removed from our newsletter distribution list, unless you have explicitly consented to further use of your data, or we reserve the right to use your data beyond this, which is legally permitted and we inform you of in this statement.
6.2 Klaviyo
Our email newsletters and other promotional email communications are sent via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA
Based on our legitimate interest in effective, user-friendly email marketing, we share the data you provided when you signed up pursuant to Art. 6 Para. 1 lit. f GDPR with this provider, so that they can send emails on our behalf.
Subject to your explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, the provider also carries out statistical success analysis of email campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. End device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated in this process, but is not merged with other datasets.
You can revoke your consent to email tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision of the European Commission.
6.3 Omnisend
Our email newsletters are sent via this provider: Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, England
Based on our legitimate interest in effective, user-friendly newsletter marketing, we share the data you provided when you signed up for the newsletter pursuant to Art. 6 Para. 1 lit. f GDPR with this provider, so that they can send newsletters on our behalf.
Subject to your explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, the provider also carries out statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. End device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated in this process, but is not merged with other datasets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
When data is transferred to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
6.4 Shopify Email
Our email newsletters are sent via this provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Based on our legitimate interest in effective, user-friendly newsletter marketing, we share the data you provided when you signed up for the newsletter pursuant to Art. 6 Para. 1 lit. f GDPR with this provider, so that they can send newsletters on our behalf.
Subject to your explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, the provider also carries out statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. End device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated in this process, but is not merged with other datasets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
When data is transferred to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
6.5 Cart reminder emails
If you abandon your purchase with us before completing your order, you can choose to receive a one-time email reminder of the contents of your virtual shopping cart.
The only mandatory detail to send this reminder is your email address. Providing additional data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending this email, which ensures that you only receive the notification after you explicitly confirm your consent for this purpose by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you grant us your consent to use your personal data pursuant to Art. 6 Para. 1 lit. a GDPR to send you a cart reminder. We store your IP address registered by your internet service provider (ISP), as well as the date and time of sign-up, to be able to trace any potential misuse of your email address at a later date. The data we collect when you sign up for our email notification service is used strictly for its stated purpose.
You can unsubscribe from cart reminders at any time by sending a corresponding message to the controller named at the start. After unsubscribing, your email address will be immediately removed from the distribution list we created for this purpose, unless you have explicitly consented to further use of your data, or we reserve the right to use your data beyond this, which is legally permitted and we inform you of in this statement.
7) Data processing for order fulfillment
7.1 As far as necessary for contract performance for delivery and payment purposes, the personal data we collect is shared pursuant to Art. 6 Para. 1 lit. b GDPR with the contracted transport company and the contracted financial institution.
If we are required under a corresponding contract to provide updates for goods with digital elements or digital products, we process the contact details you submitted with your order to personally inform you in accordance with our legal information obligations pursuant to Art. 6 Para. 1 lit. c GDPR. Your contact details are used strictly for the purpose of sending notifications about updates we are required to provide, and we only process them to the extent necessary for each individual communication.
To fulfill your order, we also work with the following service provider(s), who support us in whole or in part with performing concluded contracts. Certain personal data is shared with these service providers in accordance with the information below.
7.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We share your name, delivery address, and, if required for delivery, your telephone number exclusively for the purpose of delivering goods pursuant to Art. 6 Para. 1 lit. b GDPR to a shipping partner we have selected.
7.3 CJ Dropshipping
We use the following provider for order fulfillment: YIWU CUJIA TRADE CO.,LTD, F2, Building 8,No.89, Siyuan Road, Yidong Industrial Zone,Niansanli St, China
Your name, address, and any other personal data are shared with the provider exclusively for the purpose of processing your online order pursuant to Art. 6 Para. 1 lit. b GDPR. Your data is only shared to the extent that it is actually necessary to process your order.
7.4 Order Printer Pro
We use the following provider for order fulfillment: FORSBERG+TWO, Tranegårdsvej 74, 2900, Hellerup, Denmark
Your name, address, and any other personal data are shared with the provider for the purpose of processing your online order pursuant to Art. 6 Para. 1 lit. b GDPR. Your data is only shared to the extent that it is actually necessary to process your order. The provider is also used for accounting. They process incoming and outgoing invoices, as well as any bank transactions of our company, to automatically record invoices, match them to transactions, and create financial accounts in a semi-automated process.
If this process also involves the processing of personal data, this processing takes place pursuant to Art. 6 Para. 1 lit. f GDPR, based on our legitimate interest in the efficient organization and documentation of our business operations.
7.5 Track123
To enable package tracking, we use the service of the following provider: Shenzhen LINGXING Network Technology Co., Ltd., Nanshan District, 35-36F, Building A7, Creative City, Shenzhen, GD, 518000, China
Pursuant to Art. 6 Para. 1 lit f GDPR, based on our legitimate interest in effective, informative customer communication, as well as the transparent and reliable shipping process that is also in the customer's interest after a package is shipped, we share certain customer data (email address, first and last name, and address) along with the tracking number with the provider, so that they can send shipping notifications and delivery status updates on our behalf, or otherwise make them accessible to customers.
The provider does not share this data with third parties and only processes it for the purpose stated above. After shipping is complete, the data is deleted by the provider.
We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
7.6 Sharing personal data with shipping service providers
- Deutsche Post
We use the following provider as our transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
We share your email address and/or telephone number pursuant to Art. 6 Para. 1 lit. a GDPR before goods are delivered, for the purpose of coordinating a delivery date or sending a delivery announcement to the provider, if you have given your explicit consent to this during the ordering process. Otherwise, we only share the recipient's name and delivery address with the provider for the purpose of delivery pursuant to Art. 6 Para. 1 lit. b GDPR. Data is only shared to the extent that it is necessary for delivering the goods. In this case, it is not possible to coordinate a delivery date with the provider or send a delivery announcement in advance.
You can revoke this consent at any time with effect for the future, by notifying the controller named above or the provider.
- DHL
We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We share your email address and/or telephone number pursuant to Art. 6 Para. 1 lit. a GDPR before goods are delivered, for the purpose of coordinating a delivery date or sending a delivery announcement to the provider, if you have given your explicit consent to this during the ordering process. Otherwise, we only share the recipient's name and delivery address with the provider for the purpose of delivery pursuant to Art. 6 Para. 1 lit. b GDPR. Data is only shared to the extent that it is necessary for delivering the goods. In this case, it is not possible to coordinate a delivery date with the provider or send a delivery announcement in advance.
You can revoke this consent at any time with effect for the future, by notifying the controller named above or the provider.
- DHL Express
We use the following provider as our transport service provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany
We share your email address and/or telephone number pursuant to Art. 6 Para. 1 lit. a GDPR before goods are delivered, for the purpose of coordinating a delivery date or sending a delivery announcement to the provider, if you have given your explicit consent to this during the ordering process. Otherwise, we only share the recipient's name and delivery address with the provider for the purpose of delivery pursuant to Art. 6 Para. 1 lit. b GDPR. Data is only shared to the extent that it is necessary for delivering the goods. In this case, it is not possible to coordinate a delivery date with the provider or send a delivery announcement in advance.
You can revoke this consent at any time with effect for the future, by notifying the controller named above or the provider.
- Österreichische Post
We use the following provider as our transport service provider: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Wien, Österreich
We share your email address and/or telephone number pursuant to Art. 6 Para. 1 lit. a GDPR before goods are delivered, for the purpose of coordinating a delivery date or sending a delivery announcement to the provider, if you have given your explicit consent to this during the ordering process. Otherwise, we only share the recipient's name and delivery address with the provider for the purpose of delivery pursuant to Art. 6 Para. 1 lit. b GDPR. Data is only shared to the extent that it is necessary for delivering the goods. In this case, it is not possible to coordinate a delivery date with the provider or send a delivery announcement in advance.
You can revoke this consent at any time with effect for the future, by notifying the controller named above or the provider.
- Post CH
We use the following provider as our transport service provider: Post CH (Schweizerische PostAG, Schweiz, Wankdorfallee 4, 3030 Bern)
We share your email address and/or telephone number before goods are delivered, for the purpose of coordinating a delivery date or sending a delivery announcement to the provider, if you have given your explicit consent to this during the ordering process. Otherwise, we only share the recipient's name and delivery address with the provider for the purpose of delivery. Data is only shared to the extent that it is necessary for delivering the goods. In this case, it is not possible to coordinate a delivery date with the provider or send a delivery announcement in advance.
You can revoke this consent at any time with effect for the future, by notifying the controller named above or the provider.
When data is transferred to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
7.7 Use of payment service providers
- Amazon Pay
One or more online payment methods from the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg
If you select a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order are shared with the provider pursuant to Art. 6 Para. 1 lit. b GDPR. Your data is only shared in this case exclusively for the purpose of processing payment with the provider, and only to the extent necessary for this purpose.
- Apple Pay
If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is handled via the "Apple Pay" function on your end device running iOS, watchOS, or macOS, by charging a payment card stored in "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. To authorize a payment, you must therefore enter a code you previously set, as well as verify the transaction using the "Face ID" or "Touch ID" function of your end device.
For the purpose of payment processing, the information you provided during the ordering process, along with information about your order, is encrypted and sent to Apple. Apple then encrypts this data again with a developer-specific key before the data is sent to the payment service provider of the payment card stored in Apple Pay to process the payment. This encryption ensures that only the website you made the purchase from can access the payment details. After the payment is completed, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment was successful.
If the transfers described above involve the processing of personal data, this processing takes place exclusively for the purpose of processing payment pursuant to Art. 6 Para. 1 lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was completed successfully. Anonymization fully eliminates any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made via Safari on your Mac, your Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can be used to identify you. You can disable the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".
Further information about data protection for Apple Pay is available at the following internet address: https://support.apple.com/de-de/HT203027
- giropay
One or more online payment methods from the following provider are available on this website: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany
If you select a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order are shared with the provider pursuant to Art. 6 Para. 1 lit. b GDPR. Your data is only shared in this case exclusively for the purpose of processing payment with the provider, and only to the extent necessary for this purpose.
- Google Pay
If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is handled via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") with an NFC function, by charging a payment card stored in Google Pay or a verified payment method there (e.g. PayPal). To authorize a payment over Google Pay of more than €25, you must first unlock your mobile device using the verification method you set up (e.g. facial recognition, password, fingerprint, or pattern).
For the purpose of payment processing, the information you provided during the ordering process, along with information about your order, is shared with Google. Google then sends the payment information stored in your Google Pay in the form of a one-time issued transaction number to the originating website, which is used to verify that a payment was successful. This transaction number does not contain any information about the actual payment details of the payment methods stored in your Google Pay, but is created and sent as a one-time valid numeric token. For all transactions via Google Pay, Google only acts as an intermediary to handle the payment process. The transaction is processed exclusively between you and the originating website by charging the payment method stored in Google Pay.
If the transfers described above involve the processing of personal data, this processing takes place exclusively for the purpose of processing payment pursuant to Art. 6 Para. 1 lit. b GDPR.
Google reserves the right to collect, store, and evaluate certain process-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, any photos you added to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and any offer associated with the transaction.
According to Google, this processing takes place exclusively pursuant to Art. 6 Para.1 lit. f GDPR, based on the legitimate interest in proper accounting, verification of process data, and the optimization and functional maintenance of the Google Pay service.
Google also reserves the right to combine the processed process data with other information that Google collects and stores when you use other Google services.
The terms of use for Google Pay are available here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information about data protection for Google Pay is available at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna
One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden
If you select a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order are shared with the provider pursuant to Art. 6 Para. 1 lit. b GDPR. Your data is only shared in this case exclusively for the purpose of processing payment with the provider, and only to the extent necessary for this purpose.
If you select a payment method where the provider pays in advance (e.g. invoice or installment purchase or direct debit), you will also be prompted during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and if applicable, details of an alternative payment method).
To protect our legitimate interest in assessing the creditworthiness of our customers, we share this data with the provider for the purpose of a credit check pursuant to Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided and other data (such as your shopping cart, invoice amount, order history, past payment experiences), whether the payment method you selected can be offered with regard to payment and/or default risks.
To make a decision as part of the application review, in addition to the provider's internal criteria, identity and credit information from the following credit bureaus may also be included pursuant to Art. 6 Para. 1 lit. f GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data, among other, but not exclusively, factors is included in the calculation of the score values.
You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still remain entitled to process your personal data if this is necessary for contract-compliant payment processing.
- Masterpayment
One or more online payment methods from the following provider are available on this website: Masterpayment LTD, 483 Green Lanes, London, N13 4BS, United Kingdom
If you select a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order are shared with the provider pursuant to Art. 6 Para. 1 lit. b GDPR. Your data is only shared in this case exclusively for the purpose of processing payment with the provider, and only to the extent necessary for this purpose.
If you select a payment method where the provider pays in advance (e.g. invoice or installment purchase or direct debit), you will also be prompted during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and if applicable, details of an alternative payment method).
To protect our legitimate interest in assessing the creditworthiness of our customers, we share this data with the provider for the purpose of a credit check pursuant to Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided and other data (such as your shopping cart, invoice amount, order history, past payment experiences), whether the payment method you selected can be offered with regard to payment and/or default risks.
To make a decision as part of the application review, in addition to the provider's internal criteria, identity and credit information from the following credit bureaus may also be included pursuant to Art. 6 Para. 1 lit. f GDPR:
-
Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Germany Tel.: +49 (0)2131-109-501, Fax: -557
-
CRIF GmbH, Friesenweg 4, Haus 12, 22763 Hamburg, Germany Tel.: +49 (0)40-89803-0, Fax: -419
-
SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany Tel.: +49 (0)611-9278-0, Fax: -109
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data, among other, but not exclusively, factors is included in the calculation of the score values.
You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still remain entitled to process your personal data if this is necessary for contract-compliant payment processing.
When data is transferred to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
- Paypal
One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method from the provider that requires you to pay in advance, your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order are shared with the provider pursuant to Art. 6 Para. 1 lit. b GDPR. Your data is only shared in this case exclusively for the purpose of processing payment with the provider, and only to the extent necessary for this purpose.
If you select a payment method where we pay in advance, you will also be prompted during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and if applicable, details of an alternative payment method).
To protect our legitimate interest in assessing your creditworthiness in such cases, we share this data with the provider for the purpose of a credit check pursuant to Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided and other data (such as your shopping cart, invoice amount, order history, past payment experiences), whether the payment method you selected can be offered with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data, among other, but not exclusively, factors is included in the calculation of the score values.
You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still remain entitled to process your personal data if this is necessary for contract-compliant payment processing.
- Paypal Checkout
This website uses PayPal Checkout, an online payment system from PayPal that combines PayPal's own payment methods and local payment methods from third-party providers.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we share your payment details as part of payment processing with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). This data is shared pursuant to Art. 6 Para. 1 lit. b GDPR and only to the extent that it is necessary for payment processing.
PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered - "Pay Later" via PayPal. For this purpose, your payment data may be shared with credit bureaus pursuant to Art. 6 Para. 1 lit. f GDPR, based on PayPal's legitimate interest in assessing your creditworthiness. The result of the credit check regarding the statistical probability of payment default is used by PayPal to decide whether to offer the respective payment method. The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data, among other, but not exclusively, factors is included in the calculation of the score values. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still remain entitled to process your personal data if this is necessary for contract-compliant payment processing.
If the PayPal payment method "purchase on invoice" is available and selected, your payment data is first sent to PayPal to prepare the payment, after which PayPal forwards this data to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to process the payment. The legal basis for this is Art. 6 Para. 1 lit. b GDPR in each case. In this case, RatePay carries out its own identity and credit check to assess creditworthiness in accordance with the principle outlined above, and shares your payment data with credit bureaus based on its legitimate interest in assessing your creditworthiness pursuant to Art. 6 Para. 1 lit. f GDPR. A list of credit bureaus that Ratepay may use is available here: https://www.ratepay.com/legal-payment-creditagencies/
When using a local third-party provider's payment method, your payment data is first shared with PayPal to prepare the payment pursuant to Art. 6 Para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal then forwards your payment data to the corresponding provider to process the payment pursuant to Art. 6 Para. 1 lit. b GDPR:
- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
Please refer to PayPal's privacy policy for further data protection information: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments
One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
If you select a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order are shared with the provider pursuant to Art. 6 Para. 1 lit. b GDPR. Your data is only shared in this case exclusively for the purpose of processing payment with the provider, and only to the extent necessary for this purpose.
- Sofortüberweisung
One or more online payment methods from the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden
If you select a payment method from the provider that requires you to pay in advance (e.g. credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the contents of your order are shared with the provider pursuant to Art. 6 Para. 1 lit. b GDPR. Your data is only shared in this case exclusively for the purpose of processing payment with the provider, and only to the extent necessary for this purpose.
8) Online marketing
Goaffpro Affiliate
We participate in the affiliate program of the following provider: Oxybit Enterprises Pvt Ltd, 16, Sector 20, Part 1, HUDA, Sirsa, Haryana -125055, India
In this context, we have placed links on our website that lead to offers on the provider's websites or third-party websites ("partner sites").
To measure the success of an affiliate link, evaluate orders generated via such a link, and process corresponding commission payments, the provider uses cookies and/or comparable technologies that are generally set on the partner sites, for which we are not responsible under data protection law. In this context, the provider also regularly processes the IP address and any additional end device information.
All of the processing operations described above, in particular the reading or storage of information on the end device you are using, only take place if you have given your explicit consent for this pursuant to Art. 6 Para. 1 lit. a GDPR. You can revoke the consent you once provided at any time with effect for the future, by using the cookie consent management options on the partner sites.
9) Retargeting/ Remarketing and Conversion Tracking
9.1 Meta Pixel with advanced matching
Within our online offering, we use the "Meta Pixel" service from the following provider in advanced matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Quay, Dublin 2, Ireland ("Meta")
If a user clicks on an ad we placed on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into the user's browser after redirection via a cookie that our linked page sets itself. In addition, this cookie collects specific customer data such as the email address that we collect on our website linked to the Facebook or Instagram ad for events such as completed purchases, account logins or registrations (advanced matching). The cookie is then read, enabling the data including the specific customer data to be sent to Meta.
We use "Meta Pixel" with advanced matching to make our ads (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to the interests of users or have specific characteristics (e.g. interest in certain topics or products determined based on the websites visited), which we send to Meta (so-called "Custom Audiences").
In addition, we analyze the effectiveness of our ads by tracking whether users are redirected to our website after clicking on an ad (conversion). Compared to the standard version of "Meta Pixel", the advanced matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All data sent is stored and processed by Meta, so that it can be assigned to the respective user profile, and Meta can use the data for its own advertising purposes in accordance with Meta's data usage policies (https://www.facebook.com/about/privacy/). This data may enable Meta and its partners to place ads on and off Facebook.
All of the processing operations described above, in particular the setting of cookies to read information on the end device you are using, are only carried out if you have given us your explicit consent for this pursuant to Art. 6 Para. 1 lit. a GDPR. You can revoke the consent you provided at any time with effect for the future, by disabling this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is generally transferred to a Meta server and stored there; in this context, data may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision of the European Commission.
9.2 Adverfly
This website uses the conversion tracking technology of the following provider: Adverfly GmbH, Südring 1a, 51702 Bergneustadt
If you arrived at our website from an ad on the provider's domain, the success of the ad can be traced using cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).
For this purpose, the tracking technology reads certain end device and browser information, including if applicable your IP address, to capture and evaluate predefined user actions (e.g. completed transactions, leads, search queries on the website, views of product pages). This enables us to create statistics about user behavior on our website after being redirected from an ad, which we use to optimize our offering.
All of the processing operations described above, in particular the setting of cookies to read information on the end device you are using, are only carried out if you have given us your explicit consent for this pursuant to Art. 6 Para. 1 lit. a GDPR. You can revoke the consent you provided at any time with effect for the future, by disabling this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
9.3 TikTok Pixel
This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
If you arrived at our website from an ad on the provider's domain, the success of the ad can be traced using cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).
For this purpose, the tracking technology reads certain end device and browser information, including if applicable your IP address, to capture and evaluate predefined user actions (e.g. completed transactions, leads, search queries on the website, views of product pages). This enables us to create statistics about user behavior on our website after being redirected from an ad, which we use to optimize our offering.
All of the processing operations described above, in particular the setting of cookies to read information on the end device you are using, are only carried out if you have given us your explicit consent for this pursuant to Art. 6 Para. 1 lit. a GDPR. You can revoke the consent you provided at any time with effect for the future, by disabling this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
10) Tools and other matters
10.1 Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain valid user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users when they access the site as an interactive user interface, where users can grant consent for specific cookies and/or cookie-based applications by ticking a box. By using this tool, all consent-required cookies/services are only loaded if the respective user grants the corresponding consent by ticking the box. This ensures that such cookies are only set on the user's respective end device if consent has been provided.
The tool sets technically necessary cookies to store your cookie preferences. In principle, no personal user data is processed in this context.
If in individual cases processing of personal data (such as the IP address) does occur for the purpose of storing, assigning, or logging cookie settings, this takes place pursuant to Art. 6 Para. 1 lit. f GDPR, based on our legitimate interest in legally compliant, user-specific, user-friendly consent management for cookies, and thus in a legally compliant design of our website.
A further legal basis for this processing is also Art. 6 Para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically non-necessary cookies dependent on the respective user's consent.
Where required, we have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further information about the operator and configuration options for the Cookie Consent Tool are available directly in the corresponding user interface on our website.
10.2 Judge.me
To verify and publish customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom
If you submit a review on our website, your first and last name, email address, order date and number, as well as the product name and international references (GTIN/ISDNF) are collected, sent to the provider, and evaluated there to verify the legitimacy of a customer review for a specific order. This processing takes place pursuant to Art. 6 Para. 1 lit. f GDPR, based on our legitimate interest in guaranteeing the authenticity of customer reviews by ensuring they are linked to a transaction, and preventing review abuse. After the review check and approval is complete, the data is deleted by the provider.
When data is transferred to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.
11) Rights of the data subject
11.1 Applicable data protection law grants you, as the data subject, the following rights against the controller with regard to the processing of your personal data (right of access and right to intervention), with references to the applicable legal basis for each condition of exercise:
-
Right of access pursuant to Art. 15 GDPR;
-
Right to rectification pursuant to Art. 16 GDPR;
-
Right to erasure pursuant to Art. 17 GDPR;
-
Right to restriction of processing pursuant to Art. 18 GDPR;
-
Right to notification pursuant to Art. 19 GDPR;
-
Right to data portability pursuant to Art. 20 GDPR;
-
Right to withdraw granted consents pursuant to Art. 7 Para. 3 GDPR;
-
Right to lodge a complaint pursuant to Art. 77 GDPR.
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS, YOU HAVE THE UNCONDITIONAL RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA THAT CONCERNS YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE THIS OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL IMMEDIATELY CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.
12) Duration of storage of personal data
The duration for which personal data is stored is determined based on the respective legal basis, the purpose of processing, and – if applicable – the respective statutory retention periods (e.g. commercial and tax retention periods).
When processing personal data on the basis of an explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR, the affected data is stored until you revoke your consent.
If statutory retention periods apply to data processed in the context of legal or legal-like obligations based on Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the retention period expires, unless it is no longer required to fulfill or establish a contract, and/or we no longer have a legitimate interest in continuing to store it.
When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 Para. 1 lit. f GDPR, this data is stored until you exercise your right to object pursuant to Art. 21 Para. 2 GDPR.
Unless otherwise stated in the other information in this statement regarding specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.


