Cookie policy

1. Cookies and Other Technologies
General Information
To enhance your experience on our website and enable certain features, we use technologies such as cookies on various pages. Cookies are small text files stored on your device. Some cookies are deleted when you close your browser (session cookies), while others remain on your device to recognize your browser on future visits (persistent cookies).
We use essential technologies for specific website functions (e.g., shopping cart). These cookies collect data like IP address, visit time, device and browser details, and usage information (e.g., shopping basket contents). This processing is justified by our legitimate interest in optimizing our services per Art. 6 para. 1 p. 1 lit. f GDPR.
Additionally, we use technologies to meet legal obligations (e.g., verifying consent to process personal data) and for web analytics and online marketing. Details on the legal basis for this data processing are in other sections of this privacy policy.
You can manage your cookie settings using these links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™.
If you have consented to these technologies under Art. 6 para. 1 p. 1 lit. a GDPR, you can withdraw your consent anytime by contacting us via the details provided in the privacy policy.

2. Use of Cookies and Other Technologies for Web Analysis and Advertising
If you have consented in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, we utilize cookies and other technologies from third-party providers on our website for web analysis and advertising. Data collected through these technologies will be deleted once the purpose has been fulfilled and the technology is no longer in use. You can withdraw your consent at any time with future effect. Details on how to revoke your consent are provided in the "Cookies and other technologies" section. For more information about our partnerships with individual providers, please refer to the specific technologies mentioned below. If you have questions regarding these providers or our agreements with them, please use the contact information provided in this privacy policy.

3.1 Use of Google Services for Web Analysis and Advertising
We use Google technologies provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Data collected automatically by Google about your use of our website is typically sent to and stored on servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. There is no adequacy decision by the European Commission for the USA. Our collaboration with Google is based on standard data protection clauses approved by the European Commission. If your IP address is collected, it will be anonymized before storage on Google’s servers. In exceptional cases, the full IP address may be sent to Google’s servers and then anonymized. Unless specified otherwise for individual technologies, data processing is governed by an agreement between jointly responsible parties under Art. 26 GDPR. For further details on Google’s data processing, refer to Google’s privacy policy.

Google Analytics
To analyze website usage, Google Analytics collects and stores data automatically (e.g., IP address, visit time, device and browser information, and usage details). This data is used to create pseudonymized usage profiles and may involve cookies. Generally, your IP address is not merged with other Google data. Data processing is conducted under an order processing agreement with Google.

To enhance marketing effectiveness, we have enabled data sharing with "Google products and services." This allows Google to access data collected by Google Analytics and use it to improve Google services. Data sharing under this setting is governed by an additional agreement between data controllers, and we do not control subsequent data processing by Google.

We also use the user ID function to assign a unique, permanent ID to your interaction data across one or more sessions on our online sites, enabling us to analyze your behavior across different devices and sessions.

For web analysis and advertising, the DoubleClick cookie, a Google Analytics extension, allows us to recognize your browser when you visit other websites. Google uses this information to generate reports on website activity and provide related services.

Google Ads
To serve targeted ads in Google search results and on third-party websites, we use the Google Remarketing Cookie when you visit our site. This cookie collects data (IP address, visit time, device and browser details, and website usage) to enable interest-based advertising through a pseudonymous CookieID based on the pages you visit. Further data processing occurs only if you have enabled "personalized advertising" in your Google account. If you’re logged into Google while visiting our site, Google may combine your data with Google Analytics information to create cross-device remarketing lists.

For analyzing website performance and tracking events, we use Google Ads Conversion Tracking to measure your behavior after visiting our site via a Google ad. This involves using cookies and collecting data (IP address, visit time, device and browser information, and interactions with specified events like website visits or newsletter subscriptions) to create pseudonymous usage profiles.

Google Maps
Google Maps collects data, including IP address and location details, to display geographical information. This data is transmitted to and processed by Google. We do not control this data processing.

Google reCAPTCHA
To prevent misuse of our web forms by automated software (bots), Google reCAPTCHA gathers data (IP address, visit time, browser information, and website usage) through JavaScript and cookies. It also evaluates cookies set by other Google services. Personal data from form input fields is not accessed or stored.

Google Fonts
To ensure consistent content presentation on our website, Google Fonts collects data (IP address, visit time, device and browser details) via script code, which is then processed by Google. We have no control over this subsequent data processing.

YouTube Video Plugin
When integrating YouTube content, data (IP address, visit time, device and browser information) is collected via the YouTube video plugin in extended data protection mode. This data is transmitted to Google and processed by Google only if you play a video.

3.2 Use of Facebook Services for Web Analysis and Advertising
Use of Facebook Pixel
We utilize the Facebook Pixel technology from Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). The Facebook Pixel automatically collects and stores data, including your IP address, visit time, device and browser information, and details about your interactions with our website (such as page visits or newsletter subscriptions). This data is used to create pseudonymous usage profiles. Additionally, through extended data matching, Facebook collects and stores hashed personal identifiers (like names, email addresses, and phone numbers) for matching purposes.
When you visit our site, the Facebook Pixel sets a cookie that assigns a pseudonymous CookieID to recognize your browser on other websites. Facebook then combines this information with data from your Facebook account to generate reports on website activity and to provide related services, particularly for personalized and targeted advertising.

Data collected by Facebook is typically transmitted to and stored on servers of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Since there is no European Commission adequacy decision for the USA, our cooperation with Facebook is based on standard data protection clauses approved by the European Commission. For more details on how Facebook processes data, refer to Facebook's privacy policy.

Facebook Analytics
Using Facebook Analytics, we generate statistics about visitor activity on our website based on data collected by the Facebook Pixel. This data processing is done under an order processing agreement with Facebook and helps us optimize the presentation and marketing of our site.

Facebook Ads
We use Facebook Ads to promote our website both on Facebook and across other platforms. While we set the parameters for each advertising campaign, Facebook handles the precise implementation, including the placement of ads to individual users. Unless specified otherwise for individual technologies, data processing is conducted based on an agreement between joint controllers under Art. 26 GDPR. Our joint responsibility with Facebook is limited to data collection and transmission to Facebook Ireland; subsequent data processing by Facebook Ireland is not included.

Based on visitor statistics generated by the Facebook Pixel, we run group-based advertising on Facebook through Facebook Custom Audiences, defining target groups based on their characteristics. Facebook acts as our processor for extended data matching in this context.
Using the pseudonymous CookieID set by the Facebook Pixel, we also engage in personalized advertising through Facebook Pixel Remarketing.

With Facebook Pixel Conversions, we track your behavior after you reach our site via a Facebook ad for web analytics and event tracking. This data processing is carried out under an order processing agreement with Facebook.

3.3. Use of TikTok Services for Web Analysis and Advertising
We use the TikTok Pixel on our website, a tool provided by:

• TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, and
• TikTok Information Technologies UK Limited, WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom (collectively referred to as “TikTok”).

The TikTok Pixel is a JavaScript code snippet that helps us track and analyze visitor activity on our site. It collects and processes information about user interactions with our website and the devices used (referred to as event data).
The data gathered by the TikTok Pixel is utilized to optimize our ad targeting, enhance ad delivery, and deliver personalized advertising. This event data is transmitted to TikTok to improve the relevance of the ads you see.
The TikTok Pixel uses cookies to store information on your device. The storage or retrieval of this information only occurs with your consent. The legal basis for collecting and transmitting personal data to TikTok is Article 6 (1) (a) GDPR. You can withdraw your consent at any time through our consent management tool.
Our collaboration with TikTok in managing this event data is governed by a joint processing agreement. This agreement outlines our respective data protection responsibilities, including:

• Our Responsibility: To provide you with information as required under Articles 13 and 14 GDPR regarding the joint processing of personal data.
• TikTok’s Responsibility: To facilitate the exercise of data subject rights under Articles 15 to 20 GDPR concerning the personal data TikTok handles after transmission.

You can review the agreement between us and TikTok here.
TikTok is solely responsible for the processing of event data after it is transmitted. For detailed information on how TikTok processes personal data, including their legal basis for processing and how you can exercise your rights against TikTok, please refer to TikTok’s data policy.


4. Integration of Trusted Shops Trustbadge and Other Widgets
We integrate Trusted Shops widgets (e.g., the Trusted Shops Trustbadge) on our website to showcase Trusted Shops services (like the seal of approval and collected ratings) and to offer Trusted Shops products to customers post-purchase.

This integration supports our legitimate interests in optimal marketing and secure shopping, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR. The Trustbadge and associated services are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne (Trusted Shops), with whom we share joint data protection responsibilities under Art. 26 GDPR. Details of our joint responsibilities are outlined below in compliance with Art. 26 (2) GDPR.

The Trustbadge is served by a US CDN provider (content delivery network). Data protection is ensured through standard data protection clauses and additional contractual measures. For more information on Trusted Shops GmbH’s data protection practices, see their privacy policy.

When the Trustbadge is accessed, a server log file is created, which includes your IP address, date and time of access, data transferred, and the requesting provider (access data). Your IP address is anonymized immediately after collection to prevent personal identification. The server log file is stored securely and is either deleted or anonymized within 90 days. This helps us and Trusted Shops prevent abuse and fraud, optimize services, and ensure the smooth operation of the website and Trusted Shops widgets, as per Art. 6 para. 1 p. 1 lit. f GDPR.

If you use Trusted Shops products after placing an order or if you’re already registered, additional personal data is sent to Trusted Shops GmbH. Order data is automatically collected for this purpose. A neutral parameter, the email address hashed by a cryptographic one-way function, is used to check your registration status. The hashed email address is transmitted and then deleted after the check.

This process determines if you are registered with Trusted Shops GmbH and is necessary for fulfilling our and Trusted Shops' legitimate interests in providing buyer protection and transactional evaluation services, in line with Art. 6 (1) sentence 1 lit. f GDPR. If you are registered, further processing will follow the agreement between you and Trusted Shops. If not registered, you will be given the chance to register. Any non-registrant data is automatically deleted by Trusted Shops, making personal identification impossible.

For data protection queries or to exercise your rights under our joint responsibility, please contact Trusted Shops GmbH using their contact details here. Additional data protection information can be found in the link provided. Alternatively, you can contact us using the information in this privacy notice; we will forward your query to the relevant party if necessary.

5. Social Media

5.1 Social Plugins from Facebook, Twitter, Instagram, Pinterest
Our website features social buttons from various social networks. These buttons are integrated as HTML links, meaning no direct connection is made with the servers of these networks when you visit our site. If you click on any of these buttons, a new window will open in your browser, directing you to the respective social network where you can interact, such as clicking the Like or Share button.

5.2 Our Online Presence on Social Media
If you consent to the respective social media operators as per Art. 6 para. 1 p. 1 lit. a GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our social media profiles on platforms like Facebook, Twitter, Instagram, YouTube, Pinterest, LinkedIn, and Xing. This data helps create pseudonymous usage profiles, which may be used for targeted advertising based on your interests. Cookies are often used for this purpose. For detailed information about how each social media operator processes data, including contact options and your privacy settings, please refer to their respective privacy policies linked below. If you need further assistance, feel free to contact us.

Facebook: Operated by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). Data collected by Facebook Ireland is usually transmitted to and stored on servers of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Since there is no European Commission adequacy decision for the USA, our cooperation is based on standard data protection clauses from the European Commission. Data processing on our Facebook fan page is governed by an agreement between jointly responsible parties according to Art. 26 GDPR. For more details (including Insights data), see here.

Twitter: Operated by Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland ("Twitter"). Data collected by Twitter is transmitted to and stored on servers of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA. There is no European Commission adequacy decision for the USA; our cooperation is based on standard data protection clauses from the European Commission.

Instagram: Operated by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Facebook Ireland"). Data collected by Facebook Ireland is transmitted to and stored on servers of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. There is no European Commission adequacy decision for the USA. Our cooperation is based on standard data protection clauses from the European Commission. Data processing on our Instagram page is based on an agreement between jointly responsible parties as per Art. 26 GDPR. For more details (including Insights data), see here.

YouTube: Operated by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Data collected by Google is transmitted to and stored on servers of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. There is no European Commission adequacy decision for the USA; our cooperation is based on standard data protection clauses from the European Commission.

Pinterest: Operated by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest"). Data collected by Pinterest is transmitted to and stored on servers of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. There is no European Commission adequacy decision for the USA; our cooperation is based on standard data protection clauses from the European Commission.

LinkedIn: Operated by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland ("LinkedIn"). Data collected by LinkedIn is usually transmitted to and stored on servers of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. There is no European Commission adequacy decision for the USA; our cooperation is based on standard data protection clauses from the European Commission.

Xing: Operated by New Work SE, Dammtorstraße 30, 20354 Hamburg, Germany.


6.Using of Cloudflare Turnstile

We use Cloudflare Turnstile (referred to as "Turnstile") on our website. The provider of Turnstile is Cloudflare Inc., located at 101 Townsend St, San Francisco, CA 94107, USA (referred to as "Cloudflare").
Turnstile is employed to verify whether data entries on our site (such as those in a contact form) are made by humans or automated systems. To perform this check, Turnstile analyzes various characteristics of the website visitor’s behavior.
This analysis starts automatically as soon as a visitor accesses a page with Turnstile enabled.
Turnstile examines various data points (e.g., IP address, time spent on the website, and mouse movements) and forwards this information to Cloudflare.
The legal basis for processing this data is Article 6 (1) (f) GDPR, which allows for processing based on the legitimate interest of protecting the website from abusive automated access and spam. If consent has been obtained, processing will be conducted in accordance with Article 6 (1) (a) GDPR and Section 25 (1) TTDSG, provided that the consent includes the use of cookies or access to information on the user’s device (e.g., device fingerprinting) as per the TTDSG. Consent can be withdrawn at any time.
Data processing is governed by standard contractual clauses, which can be reviewed here: Cloudflare Standard Contractual Clauses.
For further details on Cloudflare Turnstile, please consult the privacy policy available at Cloudflare Privacy Policy.