INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT INFORMATION OF THE RESPONSIBLE CONTROLLER.

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you of the processing of your personal data when using our website. Personal data refers to any information that can be used to personally identify you.

1.2 The controller responsible for data processing on this website, in accordance with the General Data Protection Regulation (GDPR), is the store name; the controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the responsible controller). You can recognize an encrypted connection by "https://" and the lock icon in your browser's address bar.

---

2) DATA COLLECTION DURING VISITS TO OUR WEBSITE

When purely browsing our website without registering or otherwise providing us information, we collect only the data your browser sends to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary to display the website to you: the website visited, date and time of access, amount of data transferred in bytes, referrer, browser used, operating system used, IP address (if applicable: anonymized). Processing is based on Article 6(1)(f) GDPR on the grounds of our legitimate interest in improving the stability and functionality of our website. No further transfer or use of the data takes place. However, we reserve the right to inspect server log files afterward if there are concrete indications of illegal use.

---

3) COOKIES

To make your visit to our website attractive and enable the use of certain functions, we use so-called cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after ending your browser session (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third‑party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are placed, certain user information such as browser and location data as well as IP address values are collected and processed individually. Persistent cookies are automatically deleted after a predefined duration, which may vary depending on the cookie. Some cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping cart for a later visit).

If personal data is also processed via any of the cookies we have implemented, the processing is carried out in accordance with Article 6(1)(b) GDPR, either to fulfil the contract, or in accordance with Article 6(1)(f) GDPR to protect our legitimate interest in the best possible functionality of the website and a user‑friendly and efficient design of the visit.

We may work with advertising partners who help us make our online offer more attractive to you. For this purpose, cookies from partner companies (third‑party cookies) may also be stored on your hard drive when you visit our website. If we collaborate with such advertising partners, you will be informed separately and specifically about the use of such cookies and the scope of the information collected in the following sections.

Please note that you can configure your browser to notify you about cookie placement and decide individually whether to accept them or exclude acceptance of cookies in specific cases or in general. Each browser differs in how it manages cookie settings. This is described in the help function of each browser, which explains how to change your cookie settings. You can find these for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/nl-nl/help/17442/windows-internet‑explorer‑delete‑manage‑cookies
Firefox: https://support.mozilla.org/nl/kb/cookies‑toestaan‑en‑weigeren
Chrome: https://support.google.com/chrome/answer/95647?hl=nl
Safari: https://support.apple.com/nl-nl/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that site functionality may be limited if cookies are not accepted.

4) CONTACT WITH US

Personal data are collected when you contact us (e.g. via a contact form or e-mail). Which data is collected via a contact form is specified in that particular form. This data is stored and used solely for the purpose of answering your inquiries or contacting you and carrying out the associated technical administration. The legal basis for processing these data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact is intended to conclude a contract, the supplementary legal basis for processing is Art. 6(1)(b) GDPR. Your data is deleted once your inquiry has been finally processed, which is the case when, based on the circumstances, the matter is considered closed and no statutory retention obligations exist.

---

5) DATA PROCESSING WHEN CREATING A CUSTOMER ACCOUNT AND ENTERING INTO CONTRACTS

In accordance with Art. 6(1)(b) GDPR, personal data is collected and processed if you provide it in connection with the fulfilment of a contract or when opening a customer account. Which data is collected is specified in the respective forms. You may delete your customer account at any time by sending a notification to the data controller mentioned above. We store and use the information you have provided to fulfil the contract. After termination of the contract or deletion of your account, your data will be blocked for tax and commercial retention periods and deleted once those periods have expired, unless you have explicitly consented to further use of your data, or we have a legal right to further use, which we inform you of in this statement.

---

6) USE OF YOUR DATA FOR DIRECT MARKETING

6.1 Newsletter subscription via email

If you subscribe to our email newsletter, we regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing additional data is voluntary and used for personalized communication. We use the so-called double opt‑in procedure for newsletter subscription. This means we only send the newsletter once you have expressly confirmed that you want to receive it. You will then receive a confirmation email, asking you to confirm your subscription by clicking on a corresponding link.

By activating the confirmation link, you grant us permission to use your personal data in accordance with Art. 6(1)(a) GDPR. When subscribing to the newsletter, we record your IP address assigned by your Internet service provider (ISP), as well as the date and time of registration, to trace potential misuse. The data collected during subscription is used exclusively for newsletter advertising. You can unsubscribe at any time via the link in the newsletter itself or by contacting the data controller. After unsubscribing, your email address is immediately removed from our mailing list, unless you have given explicit consent for further use of your data or we have a legal right to retain your data, as stated in this policy.

6.2 Sending email newsletters to existing customers

If you have provided us with your email address in connection with the purchase of goods or services, we reserve the right to regularly send you emails about similar products or services from our range. This does not require separate consent.

Processing in this context is based solely on our legitimate interest in personalized, direct advertising, in accordance with Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, you will not receive such emails. You may object at any time to the use of your email address for the aforementioned marketing purpose by sending a message to the data controller. Only shipping costs according to the applicable basic rates may be charged. After receiving your objection, the use of your email address for marketing purposes ceases immediately.

---

7) DATA PROCESSING IN CONNECTION WITH ORDER FULFILMENT

7.1 The personal data we collect is forwarded to the shipping company responsible for delivery, insofar as this is necessary for delivering the goods. Your payment data is forwarded to the financial institution responsible for payment processing, to the extent required. If we use payment service providers, we explicitly inform about this below. The legal basis for the data transfer is Art. 6(1)(b) GDPR.

7.2 Use of payment service providers

• PayPal

When paying via PayPal, PayPal credit card, direct debit via PayPal, or—if offered—“purchase on invoice” or “installment purchase” via PayPal, we transfer your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22‑24 Boulevard Royal, L‑2449 Luxembourg (“PayPal”) in connection with payment processing. The transfer is based on Art. 6(1)(b) GDPR and only to the extent necessary for the payment.

PayPal reserves the right to perform a credit check for payment methods such as credit cards via PayPal, direct debit via PayPal, or—if offered—“purchase on invoice” or “installment purchase” via PayPal. To this end, your payment data may be transferred to credit reporting agencies in accordance with Art. 6(1)(f) GDPR based on PayPal’s legitimate interest in assessing your ability to pay. The credit assessment may include score values based on a scientifically recognized statistical-mathematical method. Address data may be included in the calculation. You can find more information about data protection and the credit agencies used in PayPal’s Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy‑full

You may object to this data processing at any time by contacting PayPal. However, PayPal may still be entitled to process your personal data if necessary for contractual payment processing.

– SOFORT

If you choose the payment method “SOFORT”, payment is made via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (“SOFORT”), to whom we transfer the information you have provided during the ordering process, as well as information about your order, pursuant to Art. 6(1)(b) GDPR. Sofort GmbH is part of Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your information is transferred only for the purpose of processing payment with the payment service provider SOFORT and only to the extent necessary for that purpose. You can find more information about SOFORT’s data protection regulations at: https://www.klarna.com/sofort/datenschutz

---

8) REMINDER FOR REVIEW SUBMISSION

Personal review reminder (not sent via a customer review system)

We use your email address to send a one‑time reminder to submit a review of your order in the review system we use, provided you gave us your explicit consent to do so during or after your order, in accordance with Art. 6(1)(a) GDPR.

You may revoke your consent at any time by sending a notification to the data controller.

---

9) USE OF SOCIAL MEDIA

SOCIAL PLUGINS 9.1

Facebook plugins with Shariff solution

Our website uses so-called social plugins (“plugins”) from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

To better protect your data when visiting our website, these buttons are not fully integrated as plugins, but only implemented via HTML links. This integration ensures no connection to Facebook’s servers is made when opening a page on our website with such buttons. Only when you click the button is a new browser window opened and Facebook’s page loaded to allow you to interact with the plugins (after login if necessary).

Facebook Inc., based in the USA, is certified under the EU‑US Privacy Shield framework, which ensures compliance with the applicable level of data protection in the EU.

You can find information on the purpose and scope of data collection, further processing and use of data by Facebook, and your privacy rights and settings in Facebook’s data protection information: https://www.facebook.com/policy.php

---

9.2 Google+ plugins with Shariff solution

Our website uses so-called social plugins (“plugins”) from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

To better protect your data, these buttons are implemented only via HTML links instead of full plugins. This solution ensures no connection to Google+ servers occurs when a page loads. Upon click, a new browser window opens and displays the Google+ page, where you may interact with the plugins (after login if necessary).

Google LLC, based in the USA, is certified under the EU‑US Privacy Shield agreement, guaranteeing compliance with EU data protection standards.

Further information on Google’s data collection and usage and your rights can be found in Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/

---

9.3 Instagram plugin with Shariff solution

Our website uses so‑called social plugins (“plugins”) from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).

To better protect your data, these buttons are integrated only via HTML links and not full plugins. This ensures no connection to Instagram’s servers when the page is opened. Upon click, Instagram’s webpage opens in a new window, where you can interact with the plugins (after login if necessary).

Instagram LLC, based in the USA, is certified under the Privacy Shield framework, ensuring compliance with EU data protection standards.

Purpose, scope, and further use of your data by Instagram, as well as your rights and privacy options, can be found in Instagram’s data protection information: https://help.instagram.com/155833707900388/

---

10) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).

DoubleClick uses cookies to display relevant ads, improve campaign reporting, and prevent repetitive ads for the same user. Google uses a cookie ID to identify which ads are shown in which browser, preventing duplicate display. The processing is based on our legitimate interest in optimal marketing of our website in accordance with Art. 6(1)(f) GDPR.

DoubleClick cookies may also be used to record so‑called conversions, e.g. when a user clicks an ad and later makes a purchase on the advertiser’s site. According to Google, these cookies contain no personal information.

Your browser automatically connects to Google’s servers. We have no control over the scope of data collection and further use. Through integration of DoubleClick, Google receives information that you visited our site or clicked one of our ads. If you are logged into a Google account, this activity may be linked to your account. Otherwise, Google may still register and store your IP address.

If you do not wish to participate in tracking, you can disable conversion tracking cookies by blocking cookies from the domain www.googleadservices.com via this link: https://www.google.de/settings/ads. Note that this setting is removed if you delete your cookies. You can also find information and opt‑out options at www.aboutads.info. You can configure your browser to notify you of cookie placement and individually decide whether to accept them. If you refuse cookies, functionality of our website may be limited.

Google LLC, based in the USA, is certified under the Privacy Shield framework, ensuring compliance with EU data protection standards.

Further information about DoubleClick and data protection at Google can be found here: https://www.google.de/policies/privacy/

---

10.2 Use of Google AdWords conversion tracking

This website uses the online advertising program “Google AdWords” which includes Google AdWords conversion tracking from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to raise awareness of our attractive offers on external sites via ad banners. By using campaign data, we can measure the success of individual advertising measures. Our goal is to show you ads that are relevant, make our website more attractive, and ensure a fair calculation of advertising costs.

The conversion cookie is activated when a user clicks a Google AdWords ad. Cookies are small text files stored on your system. These cookies typically expire after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can see that the user clicked the ad and was redirected to this page. Each Google AdWords customer receives a separate cookie. Cookies cannot be tracked across AdWords customers’ websites. Information collected by the conversion cookie is used to generate conversion statistics for AdWords customers who have opted into conversion tracking. Customers are informed about how many users clicked their ad and were redirected to a conversion-tagged page. However, they receive no information that can identify the user personally.

If you do not want to participate in tracking, you can disable the Google conversion cookie via your browser settings. You will then not be included in conversion statistics. We use Google AdWords on the basis of our legitimate interest in targeted advertising in accordance with Art. 6(1)(f) GDPR.

Google LLC, based in the USA, is certified under the EU‑US Privacy Shield agreement, which ensures compliance with the EU’s applicable data protection level.

You can find more information about Google’s privacy policy at: https://www.google.de/policies/privacy/

You can permanently disable advertising cookies via your browser software or by downloading and installing the browser plugin via the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that some features of this website may be unavailable or limited if you disable the use of cookies.

---

11) WEB ANALYTICS SERVICES Google (Universal) Analytics

– Google Universal Analytics

This website uses Google Analytics, a web analytics service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies” (text files stored on your computer) to analyze how users use the website. Information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to and stored on a Google server in the USA.

This website uses Google Analytics only with the “_anonymizeIp()” extension, which ensures anonymization of the IP address by truncating it and thus excluding direct personal identification. This truncation takes place within EU member states or other countries that have joined the European Economic Area. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there. In such exceptional cases, processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in statistical analysis of user behaviour for optimization and marketing.

Google will use this information on our behalf to analyze website usage, prepare reports on web activity, and provide other services related to website and internet usage. The IP address sent by your browser as part of Google Analytics will not be associated with other Google data.

You can refuse use of cookies by selecting the relevant settings in your browser. However, please note that you may not be able to use all features of this website fully. You can also prevent Google from collecting data generated by the cookie and related to your usage of the website (including your IP address), and from processing these data, by downloading and installing the browser plugin at: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin or on browsers on mobile devices, you can click the following link to set an opt‑out cookie, which prevents future data collection by Google Analytics on this website (the opt‑out cookie only works in this browser and on this domain – if you delete your cookies, you must click the link again):
Deactivate Google Analytics

Google LLC, based in the USA, is certified under the Privacy Shield agreement, which guarantees compliance with the EU’s data protection standard.

This website also uses Google Analytics for cross‑device analysis of visit flows via a user‑ID. When the site is accessed for the first time, the user is assigned a unique, permanent and anonymized ID, which is set across devices and sessions. This enables linking interaction data from different devices and sessions to a single user. The user ID contains no personal data and is not transferred to Google.

You may object to this data collection and storage at any time with effect for the future. You must deactivate Google Analytics on all devices you use—for example, in another browser or on a mobile device.

This can be done via Google’s browser plugin (https://tools.google.com/dlpage/gaoptout?hl=de). Alternatively, you can click the following link to set an opt‑out cookie that prevents future data collection by Google Analytics on this website (the opt‑out cookie works only in this browser and for this domain; if you delete cookies, click the link again):
Deactivate Google Analytics

You can find more information about Universal Analytics here:
https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

12) RETARGETING/REMARKETING/RECOMMENDATION ADVERTISEMENTS

Facebook Custom Audience via pixel method

This website uses the “Facebook pixel” from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

If expressly permitted, this method can be used to track user behaviour after they have seen or clicked on a Facebook advertisement. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising activities.

The data collected is anonymous to us and therefore provides no information about the user’s identity. However, the data is stored and processed by Facebook, allowing it to be linked to the respective user profile, and Facebook may use the information for its own advertising purposes in accordance with Facebook’s Privacy Policy: https://www.facebook.com/about/privacy/

Facebook and its partners may then be allowed to display ads on and off Facebook. For this purpose, a cookie may be stored on your device. Such processing only occurs if you have expressly given consent pursuant to Art. 6(1)(a) GDPR.

Consent to use the Facebook pixel may only be given by persons over 13 years old. If you are younger, please obtain parental consent. Facebook Inc., headquartered in the USA, is certified under the EU‑US Privacy Shield, ensuring compliance with the applicable EU data protection level.

To block cookies, you can configure your browser to stop storing cookies or delete existing ones. Note that disabling cookies may cause certain website functions to not work properly. You can also block third‑party cookies such as those from Facebook via this Digital Advertising Alliance link: https://www.aboutads.info/choices/

---

Google AdWords Remarketing

This website uses the remarketing feature of Google AdWords, enabling us to advertise this website in Google search results and on third‑party sites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

For this purpose, Google stores a cookie in your browser, allowing the display of interest‑based ads based on a pseudonymous cookie ID and the pages you have visited.

Processing is based on our legitimate interest in optimal marketing of our website in accordance with Art. 6(1)(f) GDPR.

Further processing of data only occurs if you have consented to Google linking your browser history and app activity with your Google account and using this information for personalized ads. If you are logged in to your Google account while visiting our website, your data (including Google Analytics data) may be used to form remarketing audiences across devices. Your personal data is temporarily combined with Google Analytics data to form audiences.

You can permanently disable advertising cookies via the browser plugin available here: https://www.google.com/settings/ads/onweb/

You can also find information on cookies and customization options here: https://www.google.com/policies/technologies/ads/

---

13) DATA SUBJECTS’ RIGHTS

13.1 Applicable data protection laws grant you extensive rights vis‑à‑vis the data controller regarding the processing of your personal data. In particular, you have the following rights:

• Right of access (Art. 15 GDPR): You have the right to access the personal data we process about you, including purposes, categories of data, recipients, storage period, automated decisions, transfers to third countries, etc.

• Right to rectification (Art. 16 GDPR): You have the right to have inaccurate or incomplete personal data corrected immediately.

• Right to erasure (Art. 17 GDPR): You have the right to have your personal data erased if the conditions in Article 17(1) are met. However, this does not apply if processing is necessary for freedom of expression, legal claims, legislation, etc.

• Right to restriction of processing (Art. 18 GDPR): You have the right to request restriction of processing, for example if you contest the accuracy of the data or object to the processing and it has not yet been resolved.

• Right to notification (Art. 19 GDPR): If you have exercised rights to rectification, erasure, or restriction, we must notify third parties to whom the data has been disclosed—unless it is impossible or disproportionately difficult.

• Right to data portability (Art. 20 GDPR): You have the right to receive the data you have provided in a structured, commonly used and machine-readable format, or to transfer it to another controller, if technically feasible.

• Right to withdraw consent (Art. 7(3) GDPR): You may withdraw previously given consent at any time. This does not affect the lawfulness of processing before withdrawal.

• Right to lodge a complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority in the country where you reside, work, or where the alleged infringement occurred.

---

13.2 Right to object

If we process your personal data based on our legitimate interest (Art. 6(1)(f) GDPR), you have the right to object to such processing based on your particular situation.

If you exercise your right to object, we will stop processing the relevant data. However, we may continue processing if we demonstrate compelling legitimate grounds that override your interests, rights and freedoms—or if it is necessary for the establishment, exercise or defence of legal claims.

If we process your data for direct marketing, you can object at any time. We will then cease processing for that purpose.

---

14) RETENTION PERIOD FOR PERSONAL DATA

The retention period for personal data is determined by statutory retention periods (e.g. tax and commercial law requirements). Once these periods expire, the data is routinely deleted, provided that it is no longer necessary for fulfilling or completing a contract and/or we no longer have a legitimate purpose for retention.