1.1 Thank you for visiting our website. In the following, we would like to inform you about how we handle your personal data when you use our website. Personal data are basically all data with which you can be personally identified.
1.2 The person responsible for the processing of data on our website in terms of the General Data Protection Regulation (GDPR) is
Dr. Andreas Pirscher
1.3 To protect the security of your data during transmission, we use state-of-the-art encryption procedures (e.g. SSL or TSL) via HTTPS.
Whenever you visit our website, our system automatically records data and information that your browser sends to our server (so-called “server log files”). The following data, which is technically necessary for us, is collected:
*Our visited website
*Date and time of access
*Amount of data sent in bytes
*Source/reference from which you reached the page
*Operating system used
*Used IP address (possibly: in anonymised form)
The legal basis for the processing is art. 6 para. 1 lit. f GDPR due to our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
We reserve the right to subsequently check the server log files if there are concrete indications of illegal use. The data will be deleted as soon as they are no longer required for the purpose for which they were collected. In the case of the collection of data for the purpose of providing the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this period is possible. In this case, the IP addresses of the users are deleted or alienated so that an allocation of the calling client is no longer possible. The collection of data for the provision of the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility of objection on the part of the user.
Help on the settings can be found in the respective help menu of your browser under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Some of the cookies used here are deleted again after closing your browser (so-called session cookies). Other cookies remain on your end device and enable us or our partner companies (third party cookies) to recognise your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.
4.1 If you would like to order in our web shop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to process your order.
In some cases we work together with external service providers to process your order. For this purpose we have to pass on the personal data required for this purpose.
If we commission transport companies with the delivery of your goods, we pass on the data required for the delivery of the goods to the respective transport company. For the processing of payments, we will pass on your data to the commissioned credit institute as necessary. If we use payment service providers, you will also be informed about this in the following. The legal basis for the passing on of your data is art. 6 para. 1 lit. b GDPR.
4.2 Transfer of your personal data to shipping service providers
If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery and within the scope of what is required under art. 6 para. 1 lit. b GDPR. Only if you have given your express consent during the ordering process do we pass on your e-mail address to DHL in accordance with art. 6 para. 1 lit. a GDPR before the goods are delivered for the purpose of coordinating a delivery date or for the purpose of announcing delivery. Your consent can be revoked at any time with future effect vis-à-vis the above-mentioned responsible party or the transport service provider DHL.
If the goods are delivered to you by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will only pass on the name of the recipient and the delivery address to DPD for the purpose of delivery and within the scope of what is necessary in accordance with art. 6 para. 1 lit. b GDPR. Only if you have given your express consent during the ordering process do we pass on your e-mail address to DPD in accordance with art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for the purpose of announcing delivery. Your consent can be revoked at any time with future effect vis-à-vis the above-mentioned person responsible or the transport service provider DPD.
4.3 Use of payment service providers
If you choose the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal, payment will be processed by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).
In accordance with art. 6 para. 1 lit. b GDPR, we will pass on your personal data to PayPal as necessary. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal.
For this purpose, your payment data may be passed on to credit agencies in accordance with art. 6 para. 1 lit. f GDPR due to PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit assessment with regard to the statistical probability of non-payment to decide on the provision of the respective payment method.
The credit rating information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, but not exclusively, address data are included in the calculation of the score values.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.
If a payment method of the payment service provider Stripe is selected, the payment will be processed by Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (hereinafter referred to as “stripe”).
In accordance with art. 6 para. 1 lit. b GDPR, we will pass on your personal data together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) to stripe in accordance with art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary.
If you open a customer account with us, personal data will be collected and processed in accordance with art. 6 para. 1 lit. b GDPR. The scope of the data can be seen from the input form. The data entered by you will be stored and used by us for the purpose of contract processing.
You can delete your customer account at any time. This can be done by sending a message to the address of the person responsible or, if offered, directly in the customer account. In this case, we will also block your data with regard to tax and commercial law retention periods and delete it after these periods have expired. This can only be opposed by your consent to permanent storage or legally permitted further use of your data on our part.
If you contact us via contact form, the data entered in the input mask will be transmitted to us and stored. The collected data can be taken from the respective input mask. If you contact us by e-mail, only the data you enter there will be transmitted to us.
The data will be used exclusively for processing the conversation and your request. The legal basis for the processing of the data is art. 6 para. 1 lit. a) GDPR if the user has given his consent. The legal basis for the processing of data transmitted in the course of sending an e-mail is art. 6 para. 1 lit. f) GDPR. If the e-mail contact is aimed at the conclusion of a contract, the additional legal basis for processing is art. 6 para. 1 lit. b) GDPR. The data will be deleted as soon as they are no longer required for the purpose for which they were collected and provided that there are no statutory retention obligations to the contrary. For personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be concluded from the circumstances that the matter in question has been conclusively clarified. The user has the opportunity to revoke his or her consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case the conversation cannot be continued.
If you use the comment function of our website, in addition to your comment content, information on the time of the comment’s creation as well as the commentator name you have chosen will be saved and published on the website. In addition, your IP address is logged and saved.
The legal basis for the storage of your data is art. 6 para. 1 lit. b and f GDPR. The IP address is saved for security reasons and in the event that the person concerned violates the rights of third parties or publishes illegal content by submitting a comment. Your e-mail address is required in order to contact you in the event that a third-party objects to your published content as illegal. We reserve the right to delete comments if they are objected to as illegal by third parties.
7.1 If You subscribe to follow-up comments, you will first receive a confirmation email (double opt-in procedure) in which you must confirm that you are the owner of the email address provided. The legal basis for data processing in the case of subscribing to comments is art. 6 para. 1 lit. a GDPR. A commentary subscription can be cancelled at any time with effect for the future in accordance with the details in the confirmation e-mail.
On our website you can subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. Only your email address is mandatory. If you make further voluntary entries, these will only be used for personal contact.
The legal basis for the processing of your data after registration for the newsletter is art. 6 para. 1 lit. a GDPR if the user has given his consent. We obtain this by sending you a confirmation e-mail after registering for the newsletter, which contains a confirmation link. When you click on this link, you also give your consent to receive the newsletter.
When you send your registration for the newsletter, we save your IP address as well as the date and time of your registration. This storage serves the purpose of tracing a possible misuse of your e-mail address.
8.2 Newsletter for existing customers
If you purchase goods or services on our website and enter your e-mail address, we may subsequently use this to send you a newsletter. In such a case, the newsletter will only be used to send direct advertising for our own similar goods or services.
The legal basis for the dispatch of the newsletter as a result of the sale of goods or services is § 7 para. 3 UWG and Art. 6 para. 1 lit. f GDPR. In this respect, data processing is based solely on our justified interest in personalised direct advertising.
If you have already objected to the use of your email address for direct marketing purposes, you will not receive this newsletter. However, you have the possibility of objecting to the use of your e-mail address for the purpose stated here at a later date and at any time. After receipt of your objection, the use of your e-mail address for advertising purposes will be immediately discontinued.
We send our newsletter via the service provider CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede (hereinafter referred to as “CleverReach”). We will pass on the data you entered when registering for the newsletter to CleverReach. This disclosure is made in accordance with art. 6 para. 1 letter f GDPR due to our legitimate interest in using a secure, user-friendly and promotionally effective newsletter system.
The data entered when ordering the newsletter (e.g. e-mail address) is stored on the CleverReach servers in Germany or Ireland. Your data will be used by CleverReach for sending and statistical evaluation of the newsletter on our behalf. For this purpose, the newsletter emails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. In this way it can be traced whether a newsletter email was opened, and which links were clicked on. With the help of this conversion tracking, it can also be traced whether an action (such as the purchase of an article from our shop) was carried out after opening a link from the newsletter. In addition, technical information is also recorded (e.g. time of access, your IP address, browser type and/or operating system). This data is collected pseudonymously and is not linked to your other personal data. If you do not wish to receive the data analysis described here, you must unsubscribe from the newsletter. There is a contract with CleverReach.
Further information on data analysis by CleverReach can be found here:
Own evaluation reminder
After your express consent pursuant to art. 6 para. 1 lit. a GDPR, you will receive an e-mail from us as a one-off reminder to submit an evaluation of your order. You can revoke your consent at any time by sending a message to the person responsible for processing your data.
Use of YouTube videos
If you don’t want the assignment with your profile on YouTube, you have to log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them.
Such evaluation is carried out in particular in accordance with art. 6 para. 1 lit. a GDPR on the basis of your express consent.
You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. Irrespective of any reproduction of the embedded videos, a connection to the Google network “DoubleClick” is established each time this website is accessed, which may trigger further data processing operations without our influence.
Data may also be transmitted to the servers of Google LLC. in the USA. Further information on data protection at “YouTube” can be found in the provider’s data protection declaration at:
Google Universal Analytics
We use the web analysis service Google Analytics (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for this website. Google Analytics uses “cookies”. These are text files which are stored on your computer and which enable an analysis of your use of the website. The information thus generated about your use of this website (including the abbreviated IP address) is transferred to a Google server and stored there, whereby a transfer to the USA is possible.
We use Google Analytics with the extension “_anonymizeIp()”, which ensures anonymisation of the IP address by shortening it and excludes a direct personal reference. Your IP address is therefore truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. In exceptional cases, the full IP address is transferred to a Google server, including in the USA, and only shortened there. In these exceptional cases this processing is carried out in accordance with art. 6 (1) lit. f GDPR. Our legitimate interest lies in the statistical analysis of user behaviour for optimisation and marketing purposes.
On our behalf, Google uses this information to evaluate your use of the website, to create reports on website activities and to provide us with further services associated with the use of the website and the internet. There is no consolidation of your IP address collected in this context with other data from Google.
You can prevent the storage of cookies by changing the settings of your browser accordingly.
You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the following browser plug-in:
Alternatively, you can set an opt-out cookie:
This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will have to click on this link again.
This website also uses Google Analytics for a cross-device analysis of visitor flows, which is carried out via a user ID. You can deactivate the cross-device analysis of your usage in your customer account under “My data”, “personal data”.
12.1 Google reCAPTCHA
We use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) in accordance with art. 6 para. 1 lit. f GDPR due to our legitimate interest in preventing abuse and spam.
reCAPTCHA is a function which is intended to ensure that an entry is made by a natural person. The service sends your IP address and any other data required by Google for the service reCAPTCHA to Google.
When using Google reCAPTCHA, your personal data may also be transferred to the servers of Google LLC. in the USA.
12.2 Google Maps
We use “Google Maps” (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Google Maps is used to display interactive maps and to provide directions. By using Google Maps, information on the use of this website, including your IP address and the (start) address entered in the route planner function, can be transmitted to Google. When you call up a website of our internet presence that contains Google Maps, your browser establishes a direct connection with the Google servers. The map content is transmitted by Google directly to your browser and integrated into the website by it. We therefore have no influence on the extent of the data collected by Google in this way. According to our state of knowledge, this is at least the following data:
We have no influence on the further processing and use of the data by Google and therefore cannot accept any responsibility for this. If you are logged in to Google, your data will be assigned directly to your Google account. If you do not want this assignment, you must log out of Google. Google stores your data (including the data of users who are not logged in) as user profiles and evaluates them. Such evaluation is carried out in accordance with art. 6 para. 1 letter a GDPR on the basis of your express consent.
Weitere Information on data protection can be found here:
12.3 Google Web Fonts
We use so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) for the uniform display of fonts. When you visit our website, your browser loads the required web fonts into the browser cache.
To do this, your browser must connect to Google’s servers, which will transmit your IP address to Google. In this case, your personal data may also be transmitted to the servers of Google LLC. in the USA. The legal basis for this is in accordance with art. 6 para. 1 lit. a GDPR, namely your express consent.
If your browser does not support web fonts or you refuse to use them, a standard font will be used by your computer.
Details on Google Web Fonts can be viewed here:
13.1 The applicable data protection law grants you comprehensive data protection rights (rights of access and intervention) vis-à-vis the responsible person for the processing of your personal data, about which we inform you below:
– Right to information according to art. 15 GDPR:
You can request confirmation from the person responsible whether personal data concerning you is being processed by the person responsible. In addition, you have the right to be informed about the purpose, the categories of personal data, the recipients, the planned duration of the storage and about the existence of other rights such as correction of the data or the existence of a right of appeal to a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed about the guarantees that apply pursuant to art. 46 GDPR when your data is transferred to third countries;
– Right of correction according to art. 16 GDPR:
You have the right to have incorrect data relating to you corrected and/or to have your incomplete data stored by us completed without delay; the correction or completion must take place without delay.
– Right to restrict processing in accordance with art. 18 GDPR:
You have the right to demand the restriction of the processing of your personal data as long as the accuracy of your data which you dispute is being verified, if you refuse to have your data deleted due to unlawful data processing and demand instead the restriction of the processing of your data, if you require your data for the assertion, exercise or defence of legal claims, after we no longer require these data after the purpose has been achieved, or if you have lodged an objection for reasons relating to your particular situation, as long as it has not yet been established whether our legitimate reasons outweigh the objection.
If the processing of personal data relating to you has been restricted, such data may be processed, with the exception of storage, only with your consent or for the purpose of pursuing, exercising or defending legal claims or protecting the rights of another natural or legal person or on grounds of an important public interest of the Union or of a Member State. If the restriction on processing is restricted, you will be informed by the responsible person before the restriction is lifted.
– Right to deletion in accordance with art. 17 GDPR:
You have the right to request the immediate deletion of your personal data if the requirements of art. 17 para. 1 GDPR are fulfilled. However, this right of deletion does not exist in particular – not conclusively – if the processing is necessary for the exercise of the right to freedom of expression and information, for the fulfilment of a legal obligation, for reasons of public interest or for the assertion, exercise or defence of legal claims.
– Right to information in accordance with art. 19 GDPR:
If you have exercised your right to rectification, erasure or limitation of processing, the responsible person is obliged to notify all recipients to whom your personal data have been disclosed of this rectification, erasure or limitation of processing, unless this is impossible or involves a disproportionate effort. You also have the right to be informed of these recipients.
– Right to data transferability according to art. 20 GDPR:
You have the right to receive your personal data communicated to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically possible.
– Right of revocation according to art. 7 para. 3 GDPR:
You have the right to object at any time to the processing of personal data concerning you which is carried out pursuant to art. 6, para. 1 lit. e) or f) GDPR; this also applies to profiling based on these provisions. You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. Revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
– Right of appeal under art. 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State in which you are resident, your place of work or the place where the alleged infringement is committed, if you consider that the processing of personal data relating to you is in breach of the GDPR.
13.2 Right of objection
You have the right to object to the processing of your data at any time with effect for the future, if we process your data on the basis of our predominant legitimate interest after weighing up the interests. If you exercise this right of objection, we will stop processing your data unless there are demonstrably compelling reasons for termination worthy of protection or if further processing serves the exercise or defence of legal claims.
The duration of the storage of personal data depends in each case on statutory retention periods. After these periods have expired, we routinely delete the data if they are no longer required for the fulfilment or initiation of the contract and/or if we have no legitimate interest in the continued storage.