Privacy policy

Data Controller

The controller responsible for processing your personal data is:

müth tapes GmbH & Co. KG
Lukas-Welser Straße 4
28309 Bremen
Germany

Email: shop@mueth.de
Phone: (0421) 48 54 57 -0
Fax: (0421) 48 54 57 -29

Contact Details of the Data Protection Officer

You can reach our data protection officer using the following contact details:

INSECCO - Alsterbyte IT Solutions GmbH
Friedrich-Penseler-Straße 15
21337 Lüneburg
Germany

Email: datenschutz@insecco.de
Phone: 041319926770

Scope

This privacy notice applies to all pages of our website. It explains which personal data we collect from you when you visit our website, use our contact form, sign up for our newsletter, or use other online services we provide.

This notice applies regardless of whether you access our website via computer, tablet, or smartphone.

Please note: If you are redirected via links on our site to offers from other providers (e.g. social media platforms, payment service providers, or partner websites), their own privacy policy applies. We have no influence over such external content or its data protection measures.

Your Rights

Right to information about processing – You have the right to request a copy of the data we have stored about you at any time. (Art. 15 GDPR)
Right to rectification – You have the right at any time to have incorrect or incomplete data corrected. (Art. 16 GDPR)
Right to erasure ("right to be forgotten") – Under certain conditions, you may request erasure of your data. We will not delete certain data if we are legally required to retain it, or if doing so is impossible or disproportionate. In such cases, however, we only store the data for as long as necessary, and we have already implemented corresponding retention periods within our systems. (Art. 17 GDPR)
Right to restriction of processing – In certain cases, you may restrict our processing of your data. (Art. 18 GDPR)
Right to notification of recipients in the event of rectification, erasure, or restriction of processing. You have the right to be informed about these recipients. (Art. 19 GDPR)
Right to data portability – You have the right to have your personal data, which we process, transferred to another organization. (Art. 20 GDPR)
Right to object – You may object to certain processing purposes, such as direct marketing. (Art. 21 GDPR)
Right to withdraw consent – You may withdraw any consent you have given at any time. (Art. 7(3) GDPR)
Right to object to automated processing, including profiling – You have the right not to be subject to decisions based solely on automated processing (this does not include general advertising based on your age or gender). (Art. 22 GDPR)
Right to lodge a complaint – If you feel we are not fulfilling our responsibility for processing your personal data appropriately, you may file a complaint. You may contact us directly (Email: datenschutz@insecco.de, Phone: 04131 9926770, Post: Friedrich-Penseler-Straße 15, 21337 Lüneburg, Germany). We will take your concern seriously and process it within one month. You will receive prior confirmation of receipt of your request. You may also lodge a complaint with the data protection supervisory authorities. We would, of course, appreciate it if you reached out to us first so we can address your concern.
The supervisory authority responsible for us is:
Der Landesbeauftragte für Datenschutz und Informationsfreiheit (State Commissioner for Data Protection and Freedom of Information)
Dr. Timo Utermark
Georgstraße 122-124
27570 Bremerhaven
Germany
Tel.: +49 421 3612010 or +49 471 5962010
Email: office@datenschutz.bremen.de

Rules We Follow

When processing your data, we comply with the rules of the General Data Protection Regulation (GDPR). This means: we only collect data that is truly necessary, we use it only for the purposes we have disclosed to you, we store it only as long as necessary, and we use technical and organizational measures to ensure your data is protected.

Obligation to Provide Data (Contract Performance)

In some cases, we are legally required to collect certain data from you – for example, for invoicing, tax, or accounting purposes, or when entering into a contract with you. Without this information, we cannot fulfill our legal obligations and may not be able to provide certain services. We only request any other data when it is genuinely necessary or when you have given us your consent.

Data Security (Technical and Organizational Measures)

We protect your personal data using appropriate technical and organizational measures. These include, for example, access restrictions, encryption, and regular security checks. This ensures your data is treated confidentially and protected against misuse.

Profiling (Automated Decision-Making)

We do not carry out automated profiling within the meaning of the GDPR, i.e. there is no automated evaluation of your behavior to create personal profiles or for automated decision-making.

Hosting

Shopify

We use Shopify as the technical platform for providing and operating our online shop. The provider and contracting party for merchants in the EMEA region is:

Shopify International Limited
2nd Floor, 1–2 Victoria Buildings
Haddington Road
Dublin 4, D04 XN32
Ireland

Further information on data protection at Shopify can be found at: https://www.shopify.com/de/legal/datenschutz

Processing of Technical Access Data

When you access our online shop, Shopify may process technical access data. This may include in particular the IP address, date and time of access, pages and content accessed, referrer URL, browser and operating system information, transferred data volumes, and HTTP status codes.

This processing is carried out to provide our online shop securely, reliably, and functionally, to analyze errors, to detect abusive access, and to ensure IT security.

The legal basis for this processing is Art. 6(1)(f) GDPR. Our legitimate interest lies in the secure, reliable, and technically proper provision of our online shop.

Cookies and Comparable Technologies

Shopify uses cookies and comparable technologies. Insofar as these technologies are technically necessary, their use is based on Section 25(2) TDDDG (German Telecommunications Digital Services Data Protection Act). The related processing of personal data is based on the applicable legal basis under Art. 6(1) GDPR, in particular Art. 6(1)(f) GDPR or – where processing is necessary for the performance of a contract – Art. 6(1)(b) GDPR.

Insofar as cookies or comparable technologies are not technically necessary, they are only used with your consent. The legal basis for storing information on your device or accessing already stored information in this case is Section 25(1) TDDDG. The subsequent processing of personal data is based on Art. 6(1)(a) GDPR.

You can withdraw any consent given at any time with future effect via the settings of our consent management tool.

Roles of Shopify and Recipients

Insofar as Shopify processes personal data on our behalf, this is based on a data processing agreement pursuant to Art. 28 GDPR. Shopify may also process personal data for its own purposes and thus as an independent controller, for example in connection with the security, administration, and further development of Shopify's services. The privacy information and contractual arrangements of Shopify apply in this regard.

Recipients of the data may include Shopify International Limited, companies affiliated with Shopify, as well as sub-processors engaged by Shopify. Shopify provides a current overview of its sub-processors at the following link:

https://help.shopify.com/de/manual/privacy-and-security/privacy/subprocessors

Payment service providers, shipping service providers, analytics providers, marketing providers, and providers of additional Shopify apps used are described separately in the relevant sections of this privacy notice.

Transfers to Third Countries

Processing of personal data in countries outside the European Economic Area cannot be ruled out. Shopify describes, in particular, transfers within the Shopify corporate group as well as to sub-processors.

For certain transfers, Shopify relies on the European Commission's adequacy decision for Canada. For other transfers, Shopify, according to its own statements, uses the European Commission's Standard Contractual Clauses as well as supplementary safeguards under its Data Processing Addendum. Shopify also notes that personal data of European merchants and customers, while partly stored in Europe, may still be subject to international transfers.

Further information on international data transfers at Shopify can be found at: https://help.shopify.com/de/manual/privacy-and-security/privacy/international-data-transfers/onward-transfers

Retention Period

Technical access data is only stored for as long as necessary for the purposes stated. It is then deleted or anonymized, unless legal retention obligations or legitimate reasons for longer storage exist.

The specific retention period depends on the respective data category, the processing system, Shopify's technical deletion concepts, as well as the settings and additional services we use.

Registration in the Online Shop

You have the option of registering in our online shop to use additional features, such as managing your orders, saving delivery addresses, or viewing past purchases. We use the data entered during registration exclusively for the purpose of providing and using your customer account and processing your orders.

The mandatory information requested during registration must be provided completely and accurately. Otherwise, setting up a customer account is not possible.

As part of registration, we use a double opt-in process. This means that after entering your data, you will receive an email at the address you provided asking you to confirm your registration. Your customer account will only be activated after this confirmation. This ensures that the registration was actually carried out by the holder of the email address. We store the time of registration, the time of confirmation, and the IP address in order to be able to provide proof of consent.

For important information, such as changes to our services, security-related adjustments, or technically necessary changes to your customer account, we use the email address provided during registration to inform you.

The data entered during registration is processed to establish and carry out the usage relationship regarding the customer account, as well as, where applicable, to initiate and perform purchase contracts (Art. 6(1)(b) GDPR). Insofar as confirmation takes place as part of the double opt-in process, the processing is additionally based on Art. 6(1)(a) GDPR (consent).

The data stored during registration is retained by us for as long as your customer account exists. After deletion of your customer account, the data will be deleted, provided no legal retention obligations (e.g. under commercial or tax law) prevent this.

Cookies

Our website uses cookies. Cookies are small text files stored on your device. Some cookies are necessary for our website to function properly (e.g. for page navigation or security).
Other cookies help us improve the website or personalize it for you – for example, by evaluating your usage behavior anonymously or displaying relevant content.

You can decide for yourself which cookies to allow. Necessary cookies cannot be deselected, as otherwise the website would not function properly. You can change your settings at any time or withdraw your consent via our cookie selection window (consent tool).

SSL/TLS Encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser's address line changes from "http://" to "https://" and by the lock symbol in your browser bar.

When SSL/TLS encryption is activated, data you transmit to us cannot be read by third parties.

Server Log Files

The website provider automatically collects information in server log files that your browser automatically transmits. This data includes information such as browser type and version, operating system used, referrer URL, hostname of the accessing computer, time of the server request, and IP address. This information is not combined with other data sources.

This data processing serves the purpose of technically error-free presentation and security of the website. The stored information is deleted after seven days unless there is a legitimate suspicion of unlawful use, requiring further investigation. It is not possible for us to identify you based on the stored information. Therefore, Articles 15 to 22 GDPR do not apply pursuant to Art. 11(2) GDPR, unless you provide further information that enables your identification.

Payment Options

We offer various payment options. The available payment methods are: advance payment, purchase on account, or via the following payment service providers:

American Express

We offer various payment options so that you can process your order conveniently and securely. In doing so, we process your first and last name, your email address, your IP address, your bank details, as well as contract-related data. The data is provided directly by you as part of your order and the selection or use of your desired payment method.

Your data is processed in order to offer you various payment options and enable convenient and appropriate payment processing.

The legal bases for this processing are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), and Art. 6(1)(f) GDPR (legitimate interest). We also comply with Section 270a of the German Civil Code (BGB), which, among other things, prohibits charging additional fees for certain payment methods.

As part of payment processing, your data may be transferred to internal departments as well as external service providers. As payment service providers, we use American Express Europe S.A. (Germany branch) and American Express Payments Europe, S.L. (Germany branch), Güterplatz 1, 60327 Frankfurt am Main, Germany. Further information on the provider can be found in American Express's legal notices: https://www.americanexpress.com/de/legal/impressum.html.

A transfer of your data to third countries cannot be ruled out depending on internal corporate or technical processing. We store your data for as long as necessary for the stated purposes, but for a maximum of six months, unless legal retention obligations or other legal reasons require longer storage.

Apple Pay

allows you to process your order conveniently and securely using a stored debit, credit, or prepaid card. In doing so, your first and last name, email address, IP address, payment and card information, as well as contract-related data may be processed. Additionally, information about your device, device settings, device usage patterns, your location, as well as details about your Apple Account activity may be processed for setting up and using Apple Pay. The data is either provided directly by you or collected in the course of using Apple Pay, your device, your bank or card issuer, and the payment transaction.

Your data is processed in order to provide Apple Pay as a payment option, verify your payment authorization, process the payment transaction, and prevent fraud. When you use Apple Pay in apps or on websites, the information necessary for payment processing is transmitted to the respective app, website, or merchant. Your full card number is not disclosed to the merchant. The legal bases for this processing are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), and Art. 6(1)(f) GDPR (legitimate interest). We also comply with Section 270a BGB, which, among other things, prohibits charging additional fees for certain payment methods.

As part of payment processing, your data may be transferred to internal departments as well as external service providers. Apple Pay is provided as a payment service provider or technical service provider by Apple Inc. or its relevant subsidiaries. The Apple Pay provider may vary depending on location. Further information on the processing of personal data by Apple Pay can be found in Apple's privacy policy: https://www.apple.com/de/legal/privacy/data/de/apple-pay/

A transfer of your data to third countries, particularly in connection with internal corporate or technical processing by Apple and affiliated companies, cannot be ruled out. Your data is generally stored only for as long as necessary for the respective processing purposes or as required by law. For payment processing, we store the data we process until the respective purpose no longer applies, but for a maximum of six months, unless legal retention obligations or other legal reasons require longer storage. Apple states that it likewise only stores personal data for as long as necessary to fulfill the respective purposes or legal requirements.

Google Pay

allows you to process your order conveniently and securely using a stored debit, credit, or prepaid card. In doing so, we process your first and last name, email address, IP address, payment and card information, as well as contract- and transaction-related data. Depending on usage, information about your device, your Google Account activity, your location, and the payment method used may also be processed. The data is either provided directly by you or collected in the course of using Google Pay, your device, your bank or card issuer, and the payment transaction.

Your data is processed in order to offer you Google Pay as a payment option, verify your payment authorization, process the payment transaction, and prevent fraud or other misuse. When you use Google Pay in an app or on a website, the information necessary for payment processing may be transmitted to the respective app, website, or merchant. This may include, for example, your postal code and certain information about your payment method, so that taxes, shipping costs, and other order costs can be calculated and the acceptance of the payment method verified. The legal bases for this processing are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), and Art. 6(1)(f) GDPR (legitimate interest). We also comply with Section 270a BGB, which, among other things, prohibits charging additional fees for certain payment methods.

As part of payment processing, your data may be transferred to internal departments as well as external service providers. This includes, in particular, Google or affiliated companies, merchants, payment service providers, card issuers, payment networks, and other service providers, insofar as this is necessary to carry out the transaction, manage the account, verify the payment method, or prevent fraud and misuse. For users in the European Economic Area, Google Ireland Limited is generally responsible for processing personal data in connection with Google Payments, unless it concerns sellers on a Google marketplace. Further information can be found in the Google Payments privacy notices as well as the Google Pay terms of use.

A transfer of your data to third countries, particularly in connection with internal corporate or technical processing by Google and affiliated companies, cannot be ruled out. We store the data we process generally until the respective processing purpose no longer applies, but for a maximum of six months, unless legal retention obligations or other legal reasons require longer storage. Google states that it may store personal data in connection with Google Payments for as long as the service is used or as required to comply with legal proceedings and obligations.

Klarna

We offer the payment option via Klarna Bank AB (publ.), a public limited company under Swedish law, Sveavägen 46, 111 34 Stockholm, Sweden, Email: inkorg@klarna.se, so that you can process your order conveniently and securely. The following data is processed in this context: name, first name, email, IP address, bank details, and corresponding contract data. We obtain this data because you provide it yourself. The data is stored until the purpose no longer applies, but for a maximum of 6 months or until the end of legal retention periods. We pass your data on to internal and external parties, but not to third countries.

The legal bases for this are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(f) GDPR (legitimate interest), and Section 270a BGB (prohibition of additional fees).

Maestro

allows you to pay for your order conveniently and securely using a Maestro debit card. In doing so, we process your first and last name, email address, IP address, payment and card data, as well as contract- and transaction-related data. The data is provided directly by you as part of your order and the selection or use of your desired payment method. As part of payment processing, additional information regarding the card used, the card issuer, the merchant, the time, and the transaction amount may be processed. Maestro is a debit card system operated by Mastercard.

Your data is processed in order to enable payment via Maestro, process the payment transaction, verify your payment authorization, and prevent fraud or other misuse. The legal bases for this processing are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), and Art. 6(1)(f) GDPR (legitimate interest). We also comply with Section 270a BGB, which, among other things, prohibits charging additional fees for certain payment methods.

As part of payment processing, your data may be transferred to internal departments as well as external service providers. This includes, in particular, the credit institution engaged for payment processing, Mastercard or Mastercard Europe SA, card issuers, payment service providers, payment networks, and other service providers, insofar as this is necessary to carry out the transaction, verify payment authorization, manage the account, or prevent fraud. Mastercard Europe SA, Chaussée de Tervuren 198A, 1410 Waterloo, Belgium, is used as the service provider or payment network for the Maestro payment brand. Further information on the processing of personal data by Mastercard can be found in Mastercard's privacy policy.

A transfer of your data to third countries, particularly in connection with internal corporate or technical processing by Mastercard, card issuers, payment service providers, or affiliated companies, cannot be ruled out. We store the data we process generally until the respective processing purpose no longer applies, but for a maximum of six months, unless legal retention obligations or other legal reasons require longer storage. Mastercard may also transfer personal data to other countries in connection with payment processing, fraud prevention, and other legitimate purposes.

Mastercard

allows you to pay for your order conveniently and securely using a Mastercard. In doing so, we process your first and last name, email address, IP address, payment and card data, as well as contract- and transaction-related data. The data is provided directly by you as part of your order and the selection or use of your desired payment method. As part of payment processing, additional information regarding the card used, the card issuer, the merchant, the time, and the transaction amount may be processed.

Your data is processed in order to enable payment via Mastercard, process the payment transaction, verify your payment authorization, and prevent fraud or other misuse. The legal bases for this processing are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), and Art. 6(1)(f) GDPR (legitimate interest). We also comply with Section 270a BGB, which, among other things, prohibits charging additional fees for certain payment methods.

As part of payment processing, your data may be transferred to internal departments as well as external service providers. This includes, in particular, the credit institution engaged for payment processing, Mastercard or Mastercard Europe S.A., card issuers, payment service providers, payment networks, and other service providers, insofar as this is necessary to carry out the transaction, verify payment authorization, manage the account, or prevent fraud. Mastercard Europe S.A., Chaussée de Tervuren 198A, 1410 Waterloo, Belgium, is used for this purpose. Further information on the processing of personal data by Mastercard can be found in Mastercard's privacy policy.

PayPal

We offer the payment option via PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, Email: impressum@paypal.com, so that you can process your order conveniently and securely. The following data is processed in this context: name, first name, email, IP address, bank details, and corresponding contract data. We obtain this data because you provide it yourself. The data is stored until the purpose no longer applies, but for a maximum of 6 months or until the end of legal retention periods. We pass your data on to internal and external parties, but not to third countries.

The legal bases for this are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), Art. 6(1)(f) GDPR (legitimate interest), and Section 270a BGB (prohibition of additional fees).

Shop Pay

allows you to process your order conveniently and securely. In doing so, your first and last name, email address, IP address, payment and card data, your billing and shipping address, as well as contract- and transaction-related data may be processed. The data is provided directly by you as part of your order and use of Shop Pay, or collected in connection with payment processing, your Shopify account, and the payment method used.

Your data is processed in order to provide Shop Pay as a payment option, process the payment transaction, verify your payment authorization, and prevent fraud or other misuse. Depending on the payment method, your data may also be transmitted to payment service providers, card issuers, and other companies involved in payment processing. The legal bases for this processing are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), and Art. 6(1)(f) GDPR (legitimate interest). We also comply with Section 270a BGB, which, among other things, prohibits charging additional fees for certain payment methods.

As part of payment processing, your data may be transferred to internal departments as well as external service providers. Shopify International Limited, 2nd Floor Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, is used as the provider of Shop Pay and its related Shopify services. Depending on the payment method chosen, other payment processors, financial institutions, card providers, and service providers may also be involved. Further information on the processing of personal data by Shopify and Shop Pay can be found in Shopify's privacy policy.

A transfer of your data to third countries, particularly to Canada or the United States, cannot be ruled out in connection with internal corporate or technical processing by Shopify, affiliated companies, and payment service providers. We store the data we process generally until the respective processing purpose no longer applies, but for a maximum of six months, unless legal retention obligations or other legal reasons require longer storage. Shopify may also store personal data for as long as necessary to provide its services, fulfill legal obligations, or handle legal proceedings.

Union Pay

allows you to pay for your order conveniently and securely using a UnionPay card. In doing so, we process your first and last name, email address, IP address, payment and card data, as well as contract- and transaction-related data. The data is provided directly by you as part of your order and the selection or use of your desired payment method. As part of payment processing, additional information regarding the card used, the card issuer, the merchant, the time, and the transaction amount may be processed.

Your data is processed in order to enable payment via UnionPay, process the payment transaction, verify your payment authorization, and prevent fraud or other misuse. The legal bases for this processing are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), and Art. 6(1)(f) GDPR (legitimate interest). We also comply with Section 270a BGB, which, among other things, prohibits charging additional fees for certain payment methods.

As part of payment processing, your data may be transferred to internal departments as well as external service providers. This includes, in particular, the credit institution engaged for payment processing, UnionPay or UnionPay International, card issuers, payment service providers, payment networks, and other service providers, insofar as this is necessary to carry out the transaction, verify payment authorization, manage risk, or prevent fraud. Union Pay International Co., Ltd., German Branch, An der Welle 4, 60322 Frankfurt am Main, Germany, is used as the service provider or payment network. Further information on the processing of personal data by UnionPay can be found in UnionPay's privacy policy.

A transfer of your data to third countries, particularly in connection with internal corporate or technical processing by UnionPay, card issuers, payment service providers, or affiliated companies, cannot be ruled out. We store the data we process generally until the respective processing purpose no longer applies, but for a maximum of six months, unless legal retention obligations or other legal reasons require longer storage. UnionPay may also transfer personal data to other countries in connection with payment processing, fraud prevention, and other legitimate purposes.

VISA

allows you to pay for your order conveniently and securely using a Visa card. In doing so, we process your first and last name, email address, IP address, payment and card data, as well as contract- and transaction-related data. The data is provided directly by you as part of your order and the selection or use of your desired payment method. As part of payment processing, additional information regarding the card used, the card issuer, the merchant, the time, the amount, and the currency of the transaction may be processed.

Your data is processed in order to enable payment via Visa, process the payment transaction, verify your payment authorization, and prevent fraud or other misuse. The legal bases for this processing are Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract performance), and Art. 6(1)(f) GDPR (legitimate interest). We also comply with Section 270a BGB, which, among other things, prohibits charging additional fees for certain payment methods.

As part of payment processing, your data may be transferred to internal departments as well as external service providers. This includes, in particular, the credit institution engaged for payment processing, Visa or Visa Europe Limited, card issuers, payment service providers, payment networks, and other service providers, insofar as this is necessary to carry out the transaction, verify payment authorization, manage risk, or prevent fraud. Visa Europe Limited, 1 Sheldon Square, London W2 6TT, United Kingdom, is used as the service provider or payment network. The German branch, Visa Europe Management Services Limited, is located at Neue Mainzer Straße 66–68, 60311 Frankfurt am Main, Germany. Further information on the processing of personal data by Visa can be found in Visa's global privacy notice.

A transfer of your data to third countries, particularly to the United States, Singapore, Australia, the United Kingdom, or other countries, cannot be ruled out in connection with internal corporate or technical processing by Visa, card issuers, payment service providers, or affiliated companies. Visa states that it generally applies appropriate safeguards, in particular Standard Contractual Clauses, for transfers of personal data from the European Economic Area. We store the data we process generally until the respective processing purpose no longer applies, but for a maximum of six months, unless legal retention obligations or other legal reasons require longer storage.

Contact Form

You can use our contact form to get in touch with us quickly and easily, for example for general or specific questions, to arrange an appointment, or to share suggestions. In doing so, we process the data you enter, in particular your first name, last name, address (street, house number, postal code, city), email address, phone number, as well as the content of your message. We obtain this data from your own entries via the contact form.

We provide the contact form so that interested parties and customers can reach us easily, efficiently, and in a data-protection-compliant manner. At the same time, it enables us to process inquiries, get in touch with you, and – if desired – schedule appointments or provide further information. It also serves customer communication and customer acquisition purposes.

The legal basis for this processing is – depending on the content of your inquiry – Art. 6(1)(a) GDPR (consent), Art. 6(1)(b) GDPR (contract initiation or performance), as well as Art. 6(1)(f) GDPR (legitimate interest in efficient communication and processing of inquiries).

Recipients of the data may include internal departments as well as – insofar as necessary for processing – external parties. No specific service provider is named here.

We store the data until the purpose no longer applies, but for a maximum of 6 months, unless legal retention obligations or legitimate interests require longer storage. The data is not transferred to a third country.

Social Media

Facebook

Because we have integrated Facebook on our website (e.g. via a plug-in or pixel), Facebook can detect that you have visited our site. In doing so, data such as your IP address or usage behavior may be transmitted to Facebook – even if you are not logged in there. The following data is processed: IP address, device information, pages accessed, click behavior, and, if applicable, Facebook login data (if you are logged in there). This data comes from the individuals concerned themselves or from the system. We do this to share content, measure the reach of our website, deliver more targeted advertising, and display only relevant offers.

The legal bases for this are Art. 6(1)(b) GDPR (contract/initiation), Art. 6(1)(f) GDPR (legitimate interest in communication), Art. 26 GDPR (joint controllership), and Art. 46 GDPR (EU Standard Contractual Clauses).

Your data is transmitted to internal parties, external parties, and to a third country. We do not store any data ourselves. Facebook may process and store the data in accordance with its own privacy policy.

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
https://www.facebook.com/about/privacy

Because we have integrated LinkedIn on our website (e.g. via a plug-in or pixel), LinkedIn can detect that you have visited our site. In doing so, data such as your IP address or usage behavior may be transmitted to LinkedIn – even if you are not logged in there. The following data is processed: IP address, device information, pages accessed, click behavior, and, if applicable, LinkedIn login data (if you are logged in there). This data comes from the individuals concerned themselves or from the system. We do this to share content, measure the reach of our website, deliver more targeted advertising, and display only relevant offers.

Your data is transmitted to internal parties, external parties, and to a third country. We do not store any data ourselves. LinkedIn may process and store the data in accordance with its own privacy policy.

LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
https://de.linkedin.com/legal/privacy-policy

Instagram

Because we have integrated Instagram on our website (e.g. via a plug-in or pixel), Instagram can detect that you have visited our site. In doing so, data such as your IP address or usage behavior may be transmitted to Instagram – even if you are not logged in there. The following data is processed: IP address, device information, pages accessed, click behavior, and, if applicable, Instagram login data (if you are logged in there). This data comes from the individuals concerned themselves or from the system. We do this to share content, measure the reach of our website, deliver more targeted advertising, and display only relevant offers.

Your data is transmitted to internal parties, external parties, and to a third country. We do not store any data ourselves. Instagram may process and store the data in accordance with its own privacy policy.

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland
https://privacycenter.instagram.com/policy

Shipping, Delivery, and Returns

As part of processing and fulfilling orders, we process personal data required for shipping, delivery, and, where applicable, the handling of returns, complaints, and refunds.

In particular, we process:

Name of the contact person or recipient,
Company name,
Delivery and, where applicable, billing address,
Email address and phone number, insofar as necessary for delivery or coordination with the recipient,
Order, shipping, and return data.

This processing is carried out to fulfill the contract concluded with the respective business customer, to organize and carry out delivery, and to process returns, complaints, and refunds. The legal basis is Art. 6(1)(b) GDPR. Insofar as contact data of contacts who are not themselves a contracting party is processed, this is generally based on Art. 6(1)(f) GDPR. Our legitimate interest lies in the orderly handling of orders and deliveries as well as in efficient communication with the relevant contacts.

To carry out shipping, we transmit the necessary data to the shipping, logistics, and, where applicable, fulfillment service providers we engage. This may include transmitting the name, delivery address, and – where necessary – the email address, phone number, and shipping or order information. This transmission only takes place insofar as necessary for delivery, shipment tracking, delivery notifications, or processing a return.

Insofar as we use external service providers for storage, order picking, shipping, or returns processing, these providers may likewise receive the order and contact data required for these purposes. The service providers used are determined according to actual data flows and contractual arrangements.

For returns, complaints, and refunds, we process the information required for this purpose, in particular order, item, contact, and communication data, as well as information on the reason for and handling of the return or complaint. This data is processed in order to organize the return, review the process, carry out a refund or replacement delivery, and, where applicable, handle legal or contractual claims.

The data is deleted as soon as it is no longer required for the stated purposes. Order, shipping, return, and refund data is additionally stored insofar as legal retention obligations exist or storage is necessary to assert, exercise, or defend legal claims. After expiry of the statutory retention periods or once the respective storage purpose no longer applies, the data is deleted, unless another legal basis for further storage exists.

A transfer of personal data to countries outside the European Economic Area cannot be ruled out insofar as shipping, logistics, fulfillment, or returns service providers engaged by us, or their sub-processors, carry out corresponding processing. In this case, the transfer is based on the applicable legal requirements of Art. 44 et seq. GDPR. Further information on the service providers actually used and any transfers to third countries can be found in the relevant sections of this privacy notice.

DPD

When you order goods from us, the data required for shipping is transmitted to our shipping service provider so that your order can be delivered to the address you provided. In doing so, we process in particular your first and last name as well as your address (street, house number, postal code, city). We obtain this data from your own information provided during the ordering process.

We use the shipping service provider to send ordered goods and to ensure fulfillment of the contract (delivery). The legal basis for this processing is in particular Art. 6(1)(b) GDPR (contract performance). Depending on the individual case, the processing may also be based on Art. 6(1)(f) GDPR (legitimate interest in efficient shipping processing) and – where relevant – Art. 6(1)(a) GDPR (consent).

Recipients of the data may include internal departments as well as external parties. The service provider is DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany, Tel.: 06021 8430, Email: info@dpd.de. Further information can be found in DPD's privacy notice: https://www.dpd.com/de/de/datenschutz/.

We store the shipping data for as long as necessary to comply with legal requirements or until the purpose no longer applies, but for a maximum of 6 months. According to the information available to us, the data is not transferred to a third country.

Language