Skip to main content

Shopping cart

Your shopping cart is empty

Privacy Policy

1) Introduction and contact details of the responsible party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data here refers to all data that can be used to identify you personally.

1.2 The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is

AHATRADE LIMITED

Address: Unit 2A, 17/F, Glenealy Tower, No.1 Glenealy
Central, Hong Kong S.A.R

Tel: +4924195504426

E-Mail: kontakt@amdor.de. The person responsible for processing personal data is the natural or legal person who, alone or together with others, decides on the purposes and means of processing personal data.

2) Data collection when visiting our website

When you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the site server (so-called "server log files"). When you access our website, we collect the following data, which are technically required for us to display the website to you:

  • Our visited website

  • Date and time at the time of access

  • Amount of data sent in bytes

  • Source/referral from which you arrived at the site

  • Browser used

  • Operating system used

  • IP address used (possibly in anonymized form)

The processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or otherwise used. We reserve the right, however, to subsequently check the server log files if there are specific indications of illegal use.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your end device. Some of these cookies are automatically deleted after the browser is closed (so-called "session cookies"), while others remain on your end device longer and enable the storage of site settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If personal data is processed via individual cookies used by us, the processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of given consent, or in accordance with Art. 6 Para. 1 lit. f GDPR for the purpose of safeguarding our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can set your browser to notify you about the setting of cookies and to decide individually on their acceptance or to exclude the acceptance of cookies for certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

4) Contact

4.1 Judge.me

For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

Exclusively on the basis of your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, we will transmit your email address and, if applicable, further customer data to the provider so that they can contact you via email with a review reminder.

You can revoke your consent at any time with future effect towards us or the provider.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

When transferring data to the provider's location, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.

4.2 Within the scope of contacting us (e.g., via contact form or email), personal data is processed – exclusively for the purpose of handling and responding to your concern and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your concern in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be concluded from the circumstances that the relevant matter has been finally clarified and provided there are no statutory retention obligations opposing this.

5) Comment function

Within the scope of the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you selected are stored and published on this website. Furthermore, your IP address is logged and stored. This storage of the IP address takes place for security reasons and in case the affected person violates the rights of third parties or posts illegal content via a submitted comment. We need your email address to contact you if a third party objects to your published content as illegal.

The legal bases for the storage of your data are Art. 6 Para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as illegal by third parties.

6) Use of customer data for direct marketing

6.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. Your email address is the only required field for sending the newsletter. The provision of further data is voluntary and is used to address you personally. For newsletter delivery, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter when you have confirmed your consent to receiving the newsletter by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you grant us your consent to the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. Here, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of subscription to be able to trace possible misuse of your email address at a later time. The data we collect when subscribing to the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After successful unsubscription, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to further use of data that is legally permitted and about which we will inform you in this declaration.

6.2 Klaviyo

The sending of our email newsletters and other commercial email communication is done via the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly email marketing, we transfer the data you provided at the time of subscription to this provider in accordance with Art. 6 Para. 1 lit. f GDPR, so that they can handle the email delivery on our behalf.

Subject to your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the provider will also carry out a statistical success analysis of email campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. During this process, end device information (e.g., time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data sets.

You can revoke your consent to email tracking at any time with future effect.

We have concluded an order processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.

6.3 Omnisend

The sending of our email newsletters is done via the following provider: Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, England

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we transfer the data you provided at the time of newsletter subscription to this provider in accordance with Art. 6 Para. 1 lit. f GDPR, so that they can handle the newsletter delivery on our behalf.

Subject to your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the provider will also carry out a statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. During this process, end device information (e.g., time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with future effect.

We have concluded an order processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

When transferring data to the provider's location, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.

6.4 Shopify Email

The sending of our email newsletters is done via the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we transfer the data you provided at the time of newsletter subscription to this provider in accordance with Art. 6 Para. 1 lit. f GDPR, so that they can handle the newsletter delivery on our behalf.

Subject to your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the provider will also carry out a statistical success analysis of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. During this process, end device information (e.g., time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with future effect.

We have concluded an order processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

When transferring data to Canada, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.

6.5 Cart reminders via email

If you abandon your purchase with us before completing the order, you have the option to be reminded once via email about the contents of your virtual shopping cart.

Your email address is the only required field for sending this reminder. The provision of further data is voluntary and may be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which ensures that you only receive a notification when you have confirmed your consent to this by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you grant us your consent to the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR for sending a cart reminder. Here, we store the IP address entered by your Internet Service Provider (ISP) as well as the date and time of subscription to be able to trace possible misuse of your email address at a later time. The data we collect when subscribing to our email notification service is used strictly for the intended purpose.

You can cancel cart reminders at any time by sending a corresponding message to the responsible party mentioned at the beginning. After successful cancellation, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further use of data that is legally permitted and about which we will inform you in this declaration.

7) Data processing for order processing

7.1 Insofar as required for contract processing for delivery and payment purposes, the personal data we collect is transferred to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.

If we are obliged to provide you with updates for goods with digital elements or for digital products under a corresponding contract, we process the contact data you provided during the order to inform you personally within the scope of our statutory information obligations in accordance with Art. 6 Para. 1 lit. c GDPR. Your contact data is used strictly for the purpose of communicating updates we are obliged to provide, and for this purpose, we only process it to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us wholly or partially in performing concluded contracts. Certain personal data is transferred to these service providers in accordance with the information below.

7.2 To fulfill our contractual obligations towards our customers, we work with external shipping partners. We transmit your name, delivery address, and, if required for delivery, your phone number, exclusively for the purpose of delivering goods in accordance with Art. 6 Para. 1 lit. b GDPR to a shipping partner selected by us.

7.3 CJ Dropshipping

For order processing, we use the following provider: YIWU CUJIA TRADE CO.,LTD, F2, Building 8,No.89, Siyuan Road, Yidong Industrial Zone,Niansanli St, China

Name, address, and possibly further personal data are transferred to the provider for the sole purpose of processing the online order in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data only takes place to the extent necessary for actual order processing.

7.4 Order Printer Pro

For order processing, we use the following provider: FORSBERG+TWO, Tranegårdsvej 74, 2900, Hellerup, Denmark

Name, address, and possibly further personal data are transferred to the provider for the purpose of processing the online order in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data only takes place to the extent necessary for actual order processing. The provider is also used for bookkeeping. Thus, the provider processes incoming and outgoing invoices and possibly also our company's bank transactions to automatically record invoices, match them to transactions, and create financial accounting from this in a semi-automated process.

If personal data is processed here, the processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in efficient organization and documentation of our business processes.

7.5 Track123

For the purpose of shipment tracking, we use the services of the following provider: Shenzhen LINGXING Network Technology Co., Ltd., Nanshan District, 35-36F, Building A7, Creative City, Shenzhen, GD, 518000, China

In accordance with Art. 6 Para. 1 lit. f GDPR, we transfer certain customer data (email address, first and last name, and address) together with the shipment number to the provider on the basis of our legitimate interest in effective and informative customer communication as well as transparent and reliable shipping processing that is also in the customer's interest after the parcel is dispatched, so that the provider can send shipping notifications and status updates for delivery on our behalf or make them accessible to the customer in another way.

The data is not transferred by the provider to third parties and is processed exclusively for the purpose mentioned above. After shipment is completed, the data is deleted by the provider.

We have concluded an order processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

7.6 Transfer of personal data to shipping service providers

- Deutsche Post

As a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We transfer your email address and/or phone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent to this in the order process. Otherwise, we only transfer the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Your consent can be revoked at any time with future effect towards the responsible party mentioned above or towards the provider.
- DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We transfer your email address and/or phone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent to this in the order process. Otherwise, we only transfer the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Your consent can be revoked at any time with future effect towards the responsible party mentioned above or towards the provider.
- DHL Express

As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

We transfer your email address and/or phone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent to this in the order process. Otherwise, we only transfer the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Your consent can be revoked at any time with future effect towards the responsible party mentioned above or towards the provider.
- Österreichische Post

As a transport service provider, we use the following provider: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria

We transfer your email address and/or phone number to the provider in accordance with Art. 6 Para. 1 lit. a GDPR before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent to this in the order process. Otherwise, we only transfer the recipient's name and delivery address to the provider for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

Your consent can be revoked at any time with future effect towards the responsible party mentioned above or towards the provider.
- Post CH

As a transport service provider, we use the following provider: Post CH (Schweizerische PostAG, Switzerland, Wankdorfallee 4, 3030 Bern)

We transfer your email address and/or phone number to the provider before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent to this in the order process. Otherwise, we only transfer the recipient's name and delivery address to the provider for the purpose of delivery. The transfer only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.
Your consent can be revoked at any time with future effect towards the responsible party mentioned above or towards the provider.

When transferring data to the provider's location, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.

7.7 Use of payment service providers

- Amazon Pay

This website offers one or more online payment methods from the following provider: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment details (including name, address, bank and card information, currency, and transaction number) provided to us during the order process as well as information about the content of your order are transferred to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
- Apple Pay

If you choose the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the "Apple Pay" function of your end device operated with iOS, watchOS, or macOS by charging a payment card stored in "Apple Pay". Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. To authorize a payment, you must enter a code you have previously set and verify it using your device's "Face ID" or "Touch ID" function.

For the purpose of payment processing, the information you provided during the order along with information about your order is transmitted in encrypted form to Apple. Apple then re-encrypts this data with a developer-specific key before transferring the data to the payment service provider of the payment card stored in Apple Pay to process the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment success.

If personal data is processed in the described transfers, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Apple stores anonymized transaction data, including the approximate purchase amount, approximate date and time, and indication of whether the transaction was completed successfully. Anonymization completely excludes personal association. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on iPhone or Apple Watch to complete a purchase you made via Safari on Mac, the Mac and the authorization device communicate via an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac".

Further information on data protection with Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027
- giropay

This website offers one or more online payment methods from the following provider: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment details (including name, address, bank and card information, currency, and transaction number) provided to us during the order process as well as information about the content of your order are transferred to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
- Google Pay

If you choose the "Google Pay" payment method from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is carried out via the "Google Pay" application of your mobile end device operated with at least Android 4.4 ("KitKat") and equipped with NFC functionality by charging a payment card stored in Google Pay or a payment system verified there (e.g., PayPal). To authorize a Google Pay payment of more than €25, you must first unlock your mobile end device using the respective verification method set up (e.g., facial recognition, password, fingerprint, or pattern).

For the purpose of payment processing, the information you provided during the order along with information about your order is transferred to Google. Google then transmits your payment information stored in Google Pay in the form of a once-assigned transaction number to the originating website, which is used to verify a completed payment. This transaction number does not contain any information about the real payment details of your payment methods stored in Google Pay, but is created and transmitted as a once-valid numeric token. For all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is carried out exclusively in the relationship between the user and the originating website by charging the payment method stored in Google Pay.

If personal data is processed in the described transfers, the processing takes place exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and possibly the offer associated with the transaction.

According to Google, this processing takes place exclusively in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data, and optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with further information collected and stored by Google during the use of other Google services.

The terms of use of Google Pay can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection with Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna

This website offers one or more online payment methods from the following provider: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment details (including name, address, bank and card information, currency, and transaction number) provided to us during the order process as well as information about the content of your order are transferred to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will also be prompted during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data for an alternative payment method).

To safeguard our legitimate interest in verifying the creditworthiness of our customers, this data is transferred by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided as well as further data (e.g., shopping cart, invoice amount, order history, payment experience), whether the selected payment option can be granted with regard to payment and/or default risks.

For the decision within the application review, in addition to provider-internal criteria in accordance with Art. 6 Para. 1 lit. f GDPR, identity and credit information from the following credit agencies may be included:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is required for contractual payment processing.
- Masterpayment

This website offers one or more online payment methods from the following provider: Masterpayment LTD, 483 Green Lanes, London, N13 4BS, United Kingdom

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment details (including name, address, bank and card information, currency, and transaction number) provided to us during the order process as well as information about the content of your order are transferred to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will also be prompted during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data for an alternative payment method).

To safeguard our legitimate interest in verifying the creditworthiness of our customers, this data is transferred by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided as well as further data (e.g., shopping cart, invoice amount, order history, payment experience), whether the selected payment option can be granted with regard to payment and/or default risks.

For the decision within the application review, in addition to provider-internal criteria in accordance with Art. 6 Para. 1 lit. f GDPR, identity and credit information from the following credit agencies may be included:

  • Creditreform Boniversum GmbH, Hammfelddamm 13, 41460 Neuss, Germany Tel.: +49 (0)2131-109-501, Fax: -557

  • CRIF GmbH, Friesenweg 4, Haus 12, 22763 Hamburg, Germany Tel.: +49 (0)40-89803-0, Fax: -419

  • SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Germany Tel.: +49 (0)611-9278-0, Fax: -109

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is required for contractual payment processing.

When transferring data to the provider's location, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.
- Paypal

This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider where you pay in advance, your payment details (including name, address, bank and card information, currency, and transaction number) provided to us during the order process as well as information about the content of your order are transferred to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

If you select a payment method where we pay in advance, you will also be prompted during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data for an alternative payment method).

To safeguard our legitimate interest in verifying your creditworthiness in such cases, this data is transferred by us to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provided as well as further data (e.g., shopping cart, invoice amount, order history, payment experience), whether the selected payment option can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is required for contractual payment processing.
- Paypal Checkout

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay later" via PayPal, we transfer your payment data as part of the payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "Pay later" via PayPal. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in verifying your creditworthiness. The result of the credit check regarding statistical payment default probability is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is required for contractual payment processing.

If the "Invoice Purchase" PayPal payment method is available and selected, your payment data is first transmitted to PayPal to prepare the payment, after which PayPal forwards this to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to process the payment. The legal basis is in each case Art. 6 Para. 1 lit. b GDPR. In this case, RatePay performs an identity and credit check on its own behalf to verify creditworthiness according to the principle already mentioned above, and transfers your payment data to credit agencies on the basis of legitimate interest in verifying creditworthiness in accordance with Art. 6 Para. 1 lit. f GDPR. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment data is first transmitted to PayPal to prepare the payment in accordance with Art. 6 Para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal then transmits your payment data to the respective provider in accordance with Art. 6 Para. 1 lit. b GDPR to process the payment:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

Further data protection information can be found in PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments

This website offers one or more online payment methods from the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment details (including name, address, bank and card information, currency, and transaction number) provided to us during the order process as well as information about the content of your order are transferred to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
- Sofortüberweisung

This website offers one or more online payment methods from the following provider: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment details (including name, address, bank and card information, currency, and transaction number) provided to us during the order process as well as information about the content of your order are transferred to the provider in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.

8) Online marketing

Goaffpro Affiliate

We participate in the affiliate program of the following provider: Oxybit Enterprises Pvt Ltd, 16, Sector 20, Part 1, HUDA, Sirsa, Haryana -125055, India

In this context, we have placed links on our website that lead to offers on the provider's or third-party websites ("partner sites").

To measure the success of an affiliate link, evaluate orders generated via such a link, and calculate corresponding commission payments, the provider uses cookies and/or comparable technologies that are generally set on the partner sites and for which we are not responsible under data protection law. Here, the provider regularly processes the IP address and possibly further end device information.

All the above-described processing, in particular the reading or storing of information on the end device you are using, only takes place if you have given your express consent for this in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke the consent you have given at any time with future effect by using the cookie consent management options on the partner sites.

9) Retargeting/ Remarketing and Conversion Tracking

9.1 Meta Pixel with advanced data matching

Within our online offering, we use the service "Meta Pixel" of the following provider in the advanced data matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

If a user clicks on an ad we placed on Facebook or Instagram, the URL of the linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into the user's browser after forwarding via a cookie that the linked page itself sets. Furthermore, this cookie captures specific customer data such as the email address that we collect on our website linked to the Facebook or Instagram ad during processes such as purchase completions, account logins, or registrations (advanced data matching). The cookie is then read and enables the transmission of data including the specific customer data to Meta.

We use "Meta Pixel" with advanced data matching to make our ads (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to users' interests or have certain characteristics (e.g., interest in certain topics or products determined based on the visited websites) that we transmit to Meta (so-called "Custom Audiences").

Furthermore, we analyze the effectiveness of our ads by tracking whether users are redirected to our website after clicking on an ad (conversion). Compared to the standard version of "Meta Pixel", the advanced data matching function helps us better measure the effectiveness of our advertising campaigns by capturing more assigned conversions.

All transmitted data is stored and processed by Meta, so that assignment to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with Meta's data usage guidelines (https://www.facebook.com/about/privacy/). The data can enable Meta and its partners to display ads on and off Facebook.

All the above-described processing, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent for this in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke the consent you have given at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is generally transmitted to a server of Meta and stored there; in this context, transmission may also occur to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.

9.2 Adverfly

This website uses the conversion tracking technology of the following provider: Adverfly GmbH, Südring 1a, 51702 Bergneustadt

If you arrived on our website from an ad on the provider's domain, the success of the ad can be traced using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).

For this purpose, certain end device and browser information is read via the tracking technology, including possibly your IP address, to record and evaluate predefined user actions (e.g., completed transactions, leads, searches on the website, visits to product pages) by us. This enables the creation of statistics about user behavior on our website after being redirected from an ad, which we use to optimize our offering.
All the above-described processing, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent for this in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke the consent you have given at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

9.3 TikTok Pixel

This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

If you arrived on our website from an ad on the provider's domain, the success of the ad can be traced using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).

For this purpose, certain end device and browser information is read via the tracking technology, including possibly your IP address, to record and evaluate predefined user actions (e.g., completed transactions, leads, searches on the website, visits to product pages) by us. This enables the creation of statistics about user behavior on our website after being redirected from an ad, which we use to optimize our offering.

All the above-described processing, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent for this in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke the consent you have given at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

10) Tools and Other

10.1 Cookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain valid user consent for cookies requiring consent and cookie-based applications. The "cookie consent tool" is displayed to users when the page is called up in the form of an interactive interface, where consent for specific cookies and/or cookie-based applications can be granted by checking boxes. Here, the tool only loads all cookies/services requiring consent if the respective user gives corresponding consent by checking the boxes. This ensures that such cookies are only set on the user's end device if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here.

If personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings in individual cases, this takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.

The further legal basis for the processing is also Art. 6 Para. 1 lit. c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.

Where necessary, we have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the setting options of the cookie consent tool can be found directly in the corresponding interface on our website.

10.2 Judge.me

For the verification and publication of customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

If you submit a review on our website, your first and last name, email address, order date and number, as well as name and international references (GTIN/ISDNF) are collected, transmitted to the provider, and evaluated there to decide on the legitimacy of a customer review for a specific order. These processes take place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in ensuring the authenticity of customer reviews by ensuring transaction specificity and preventing review abuse. After the completed review check and approval, the data is deleted by the provider.

When transferring data to the provider's location, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.

11) Rights of the affected party

11.1 Applicable data protection law grants you the following affected party rights against the responsible party regarding the processing of your personal data (rights of inquiry and intervention), with reference to the relevant legal basis for the respective exercise requirements:

  • Right to information in accordance with Art. 15 GDPR;

  • Right to rectification in accordance with Art. 16 GDPR;

  • Right to erasure in accordance with Art. 17 GDPR;

  • Right to restriction of processing in accordance with Art. 18 GDPR;

  • Right to notification in accordance with Art. 19 GDPR;

  • Right to data portability in accordance with Art. 20 GDPR;

  • Right to revoke given consent in accordance with Art. 7 Para. 3 GDPR;

  • Right to lodge a complaint in accordance with Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS DUE TO OUR OVERWHELMING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH FUTURE EFFECT FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE RELEVANT DATA. FURTHER PROCESSING WILL REMAIN RESERVED HOWEVER, IF WE CAN SHOW COMPELLING PROTECTABLE REASONS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING, OR DEFENDING LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US TO CARRY OUT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING AT ANY TIME. YOU CAN EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The duration of storage of personal data is determined based on the respective legal basis, the purpose of processing, and – where applicable – additionally based on the respective statutory retention periods (e.g., commercial and tax retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6 Para. 1 lit. a GDPR, the relevant data is stored until you revoke your consent.

If statutory retention periods exist for data processed within the framework of legal or legal-like obligations on the basis of Art. 6 Para. 1 lit. b GDPR, this data is routinely deleted after the expiry of the retention periods, provided it is no longer required for the fulfillment of or preparation for a contract and/or we have no further legitimate interest in continuing to store it.

When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, the data is stored until you exercise your right to object in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling protectable reasons for the processing that outweigh your interests, rights, and freedoms, or the processing is for the purpose of asserting, exercising, or defending legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 Para. 1 lit. f GDPR, the data is stored until you exercise your right to object in accordance with Art. 21 Para. 2 GDPR.

Unless otherwise specified in the other information in this declaration about specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.


logo-paypal paypal