Privacy policy

(1) Information about the Collection of Personal Data and Contact Details of the Controller

We greatly appreciate your interest in our website and would like to sincerely thank you for it. Below, we inform you about how we handle your personal data when using our website. Personal data refers to all data through which you can be personally identified.

The controller for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is sochili GmbH, Freie-Vogel-Straße 369, 44269 Dortmund, Tel.: +49 156 78476286, Email: hello@sochili.com. The controller for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" and the lock symbol in your browser's address bar.

(2) Data Collection when Visiting Our Website

During purely informative use of our website, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable, in anonymized form)

Processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No further disclosure or use of the data occurs. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

(3) Hosting

The hosting provider is IONOS SE, Elgendorfer Str. 57, 56410 Montabaur (hereinafter referred to as IONOS). When you visit our website, IONOS collects various log files, including your IP addresses. For details, please refer to the privacy policy of IONOS: https://www.ionos.com/terms-gtc/terms-privacy.

The use of IONOS is based on Art. 6 Para. 1 lit. f GDPR. We have a legitimate interest in the most reliable representation of our website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6 Para. 1 lit. a GDPR and § 25 Para. 1 TTDSG, insofar as the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) within the meaning of the TTDSG. Consent can be revoked at any time.

We have concluded a contract for order processing (AVV) for the use of the aforementioned service. This is a legally required contract that ensures that this service processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

(4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after you close your browser (so-called session cookies). Other cookies remain on your device and allow your browser to be recognized the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of your web browser's cookie settings.

Partially, cookies are used to simplify the order process by storing settings (e.g., remembering the content of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in case of granted consent, or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

Please note that you can set your browser to inform you about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find this information for the respective browsers under the following links:

Please note that if you do not accept cookies, the functionality of our website may be restricted.

(5) Contact

As part of contacting us (e.g., via contact form or email), personal data is collected. The data collected in case of using a contact form is evident from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after the final processing of your inquiry, provided that it can be inferred from the circumstances that the matter in question has been finally clarified and there are no legal retention obligations to the contrary.

WhatsApp Business

We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the "Business Version" of WhatsApp. If you contact us via WhatsApp in connection with a specific transaction (such as a placed order), we store and use the mobile phone number you use on WhatsApp, as well as your first and last name, in accordance with Art. 6 Para. 1 lit. b. GDPR, for the processing and response to your inquiry. On the basis of the same legal basis, we may ask you for additional data (order number, customer number, address, or email address) via WhatsApp to assign your request to a specific process.

If you use our WhatsApp contact for general inquiries (e.g., about the range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp, as well as your first and last name, in accordance with Art. 6 Para. 1 lit. f GDPR, based on our legitimate interest in providing the requested information efficiently and promptly.

Your data will only be used for answering your inquiry via WhatsApp. There is no transfer to third parties. Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact details of those users are stored who have also contacted us via WhatsApp.

This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts to their device by accepting the WhatsApp terms of use for the first time in accordance with Art. 6 Para. 1 lit. a GDPR. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded in this respect. For the purpose and scope of data collection and further processing and use of data by WhatsApp, as well as your related rights and privacy settings, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy.

Judge.me

If you have given us your explicit consent for this purpose during or after your order in accordance with Art. 6 Para. 1 lit. a GDPR, we will transmit your email address, as well as your order number and order date, to the review platform Judge.me of Judge.me LLC, PO Box 7403, Jackson, Wyoming 83002, USA, so that they can send you a review reminder by email. You can revoke your consent at any time by sending a message to the data controller or to Judge.me.

Within our website, functions for the collection and display of product reviews from the service Judge.me are also integrated. In this context, certain personal data is processed for the verification of customer reviews as part of the review submission. If you submit a review on our website, your first and last name, email address, order date and number, as well as name and, if provided, international references (GTIN/ISDNF), are collected, transmitted to Judge.me and evaluated there to decide on the legitimacy of a customer review for a specific order. These processes are carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in ensuring the authenticity of customer reviews by ensuring transaction-relatedness and preventing review abuse. After the review has been reviewed and approved, the data will be deleted by Judge.me. In all the aforementioned processes, personal data may also be transmitted to servers of Judge.me LLC in the USA. You can find the privacy policy of Judge.me here: https://judge.me/privacy

(6) Newsletter & Use of Customer Data for Direct Marketing

(1) With your consent, you can subscribe to our newsletter, through which we inform you about our current interesting offers. The advertised goods and services are named in the consent declaration.

(2) For the registration for our newsletter, we use the double-opt-in procedure. This means that after your registration, we will send you an email to the specified email address, in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within [24 hours], your information will be blocked and automatically deleted after one month. In addition, we store your used IP addresses and the times of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) The only required information for sending the newsletter is your email address. The provision of additional data marked separately is voluntary and is used to address you personally. After your confirmation, we store your email address for the purpose of sending the newsletter. The legal basis is Art. 6 Para. 1 lit. a GDPR.

(4) You can revoke your consent to receive the newsletter and unsubscribe at any time. You can revoke this by clicking on the link provided in each newsletter email, by sending an email to (hello@sochili.com), or by sending a message to the contact details provided in the imprint. For sending our newsletters, we use the Klaviyo service provided by Klaviyo Inc., Boston, USA. Your data stored during the newsletter registration (email address, possibly name, IP address, date, and time of registration) will be transferred to a server of Klaviyo Inc. in the USA and stored there in compliance with the "U.S. Privacy Shield." For more information about privacy at Klaviyo, please visit: http://klaviyo.com/privacy/.

(5) We would like to point out that we evaluate your user behavior when sending the newsletter. For this evaluation, the emails sent contain web beacons or tracking pixels, which are one-pixel image files stored on our website. For the evaluations, we link the data mentioned in § 3 and the web beacons with your email address and an individual ID. With the data obtained in this way, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletters, which links you click on in them, and deduce your personal interests from this.

Right to Object:

You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us through another contact method. The information will be stored as long as you have subscribed to the newsletter. After unsubscribing, we store the data purely statistically and anonymously. Such tracking is also not possible if you have deactivated the display of images by default in your email program. In this case, the newsletter will not be displayed in full, and you may not be able to use all functions. If you manually display the images, the tracking mentioned above will occur.

(7) Data Processing for Order Processing

(1) To the extent necessary for the processing of contracts for delivery and payment purposes, the personal data collected by us will be transferred to the commissioned transport company and the commissioned bank in accordance with Art. 6 Para. 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided when placing the order (name, address, email address) to inform you personally by an appropriate means of communication (such as postal mail or email) within the legally prescribed period, in accordance with Art. 6 Para. 1 lit. c GDPR. Your contact data will be used strictly for communication about updates owed by us and will only be processed by us to the extent necessary for the respective information.

For the processing of your order, we also cooperate with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transmitted to these service providers according to the following information.

(2) Use of Special Service Providers for Order Processing

Billbee

For order processing, we use the multichannel software Billbee. The service provider is the German company Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany (headquartered in Detmold, NRW). More information about the data processed through the use of Billbee can be found in the privacy policy at https://www.billbee.io/rechtliches/datenschutz.

FFN Connect

For cooperation with our fulfillment service provider, we use the connector software FFN Connect. The service provider is the German company FFN Connect GmbH, Oberauer Straße 28, 01689 Niederau, Germany. More information about the data processed through the use of FFN Connect can be found in the privacy policy at https://ffn-connect.de/datenschutz.

(3) Use of Payment Service Providers (Payment Services)

Amazon Pay

If you choose the payment method "Amazon Pay," the payment processing will be carried out by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we will transmit your information provided during the order process along with the information about your order in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data is solely for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. If cookies are set by Amazon Pay, which are small text files that are stored on the end device, this is done solely based on your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. This consent can be revoked at any time via the "Cookie Consent Tool" implemented on the website. Further information about the privacy policy of Amazon Payments can be found at: https://pay.amazon.de/help/82974

Apple Pay

If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing will be carried out using the "Apple Pay" function of your iOS, watchOS, or macOS device operated by iOS, watchOS, or macOS by debiting a payment card stored in "Apple Pay." Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. In order to authorize a payment, entering a code previously determined by you and verifying via the "Face ID" or "Touch ID" function of your device is required.
For the purpose of payment processing, your information provided during the order process along with information about your order will be transferred to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the success of the payment.
If personal data is processed in the above-described transfers, the processing is carried out solely for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, approximate date, and time, and whether the transaction was successfully completed. Anonymization ensures that personal reference is completely excluded. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on the iPhone or Apple Watch to complete a purchase made through Safari on the Mac, the Mac and the authorization device communicate with encrypted channels on Apple servers. Apple does not process or store any of this information in a format that can identify you. You can deactivate the option to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac."
Further information on data protection with Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027

Klarna

When selecting a Klarna payment service, payment processing is carried out by Klarna Bank AB (publ), https://klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address) and data related to the order (e.g., invoice amount, items, delivery method) are transmitted to Klarna for the purpose of identity and credit checks, if you have explicitly consented to this during the order process in accordance with Art. 6 Para. 1 lit. a GDPR. You can find out which credit agencies your data may be forwarded to at: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit check can include probability values (so-called score values). If score values are included in the result of the credit check, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data, among other things, flows into the calculation of the score values. The information received about the statistical probability of default is used by Klarna to make a balanced decision about the establishment, execution, or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the person responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for the contractually agreed payment processing.
Your personal data is treated in accordance with the applicable data protection regulations and in accordance with the information in Klarna's privacy policy for individuals located in Germany: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy or for individuals located in Austria: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

PayPal

If you choose PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal as your payment method, your data will be transferred to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer takes place only to the extent necessary for payment processing.
For payment methods offered by PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be forwarded to credit agencies based on Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. The result of the credit check with respect to the statistical probability of default is used by PayPal to make a balanced decision on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values flow into the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, address data. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractually agreed payment processing.

Shopify Payments

We use the payment service provider "Shopify Payments," 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via Shopify Payments, the payment processing will be carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will transfer your data provided during the order process along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer of your data is solely for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. For more information about the privacy policy of Shopify Payments, please visit: https://www.shopify.com/legal/privacy. For data protection information on Stripe Payments
Europe Ltd., please visit: https://stripe.com/de/privacy.

SOFORT

When selecting the payment method "SOFORT," the payment processing is carried out by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we transfer your information provided during the order process along with information about your order in accordance with Art. 6 Para. 1 lit. b GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).
The transfer of your data takes place solely for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. For more information about the privacy policy of SOFORT, please visit: https://www.klarna.com/sofort/datenschutz

(4) Transfer of Personal Data to Shipping Service Providers

Shipping Partner

For shipping processing, order-relevant data (contact and delivery data) is transmitted to our shipping partner: LagerPlus GmbH, Löhdorfer Straße 51, 42699 Solingen, Germany, represented by Rebecca Eisenberg. Contact: info@lagerplus.de, +49 (0) 212 250 85 220.

Deutsche Post

If the delivery of the goods is carried out by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will forward your email address in accordance with Art. 6 Para. 1 lit. a GDPR to Deutsche Post before delivering the goods for the purpose of coordinating a delivery date or for delivery notification, if you have provided your express consent for this during the order process. Otherwise, we will only forward the recipient's name and delivery address to Deutsche Post for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. The transfer will only be made to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with Deutsche Post or delivery notification is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the data controller mentioned above or vis-à-vis Deutsche Post.

(8) Use of Social Media Plugins

We use so-called social plugins ("plugins") from Instagram, operated by Instagram LLC, 1601 Willow Road, Menlo Park, CA 94025, USA ("Instagram"), on our website.

We use the so-called two-click solution. This means that when you visit our site, no personal data is initially transmitted to Instagram. The plugin in the form of images is labeled "Follow us on Instagram." We offer you the option to communicate directly with Instagram via the button. Only if you click on the marked field and activate it, Instagram will receive the information that you have visited our website. In addition, the data mentioned under § 1 of this statement will be transmitted. By activating the plugin, personal data about you will be transmitted to Instagram and stored there (by US providers in the USA).

We have no influence on the data collected and data processing operations, nor do we have full knowledge of the extent of data collection, the purposes of processing, and the retention periods. We also do not have information about the deletion of data collected by Instagram.

When you interact with the plugin, especially by clicking on the plugin image, your browser establishes a direct connection to Instagram's servers. The content of the plugin is transmitted directly to your browser by Instagram and embedded in the page. By integrating the plugin, Instagram receives the information that your browser has accessed our website, even if you do not have an Instagram profile or are not logged into Instagram at the moment. This information (including your IP address) is transmitted by your browser directly to a server of Instagram in the USA and stored there. If you are logged into Instagram, Instagram can directly associate your visit to our website with your Instagram account. The information is also published on your Instagram account and displayed to your contacts. We recommend that you regularly log out of a social network, especially before activating the button, as this way you can avoid an association with your profile on Instagram.

Instagram stores the data collected about you as usage profiles and uses them for advertising, market research, and/or personalized design of its website. Such evaluation is carried out in particular (even for users who are not logged in) for the purpose of displaying personalized advertising and informing other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, and you must contact Instagram to exercise this right.

For more information on the purpose and scope of data collection and further processing and use of the data by Instagram, as well as your related rights and privacy settings, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/.

If you do not want Instagram to directly associate the data collected through our website with your Instagram account, you must log out of Instagram before visiting our website. You can also completely block the loading of Instagram plugins with add-ons for your browser, such as the script blocker "NoScript" (http://noscript.net/).

The legal basis for using the plugins is Art. 6 Para. 1 lit. f GDPR.

(9) Online Marketing & Retargeting

(1) Facebook Pixel

Within our online offering, we use the "Facebook Pixel" from the social network Facebook in the mode of extended data matching, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
Based on explicit consent, when a user clicks on an advertisement we have placed on Facebook and is directed to our linked page, Facebook Pixel appends an additional parameter to the URL of our linked page. This URL parameter is then written to the user's browser via a cookie set by our linked page. Additionally, specific customer data such as email addresses that we collect on our website linked to the Facebook ad during activities like purchases, account logins, or registrations, are captured (extended data matching). Facebook Pixel reads this cookie and enables the forwarding of data, including specific customer data, to Facebook.
With the help of the Facebook Pixel with extended data matching, Facebook can identify the visitors of our online offering as a target audience for displaying advertisements ("Facebook Ads"). Therefore, we use the Facebook Pixel with extended data matching to display our Facebook Ads only to Facebook users who have shown an interest in our online offering or exhibit certain characteristics (e.g., interests in specific topics or products determined based on visited websites) that we transmit to Facebook ("Custom Audiences"). The use of the Facebook Pixel with extended data matching also ensures that our Facebook Ads correspond to the potential interests of users and do not appear annoying. This way, we can evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad ("Conversion"). Compared to the standard version of Facebook Pixel, the extended data matching feature helps us measure the effectiveness of our advertising campaigns better by capturing more associated conversions.
All transmitted data is stored and processed by Facebook, allowing a connection to the respective user profile, and Facebook can use the data for its advertising purposes according to Facebook's data usage policy (https://www.facebook.com/about/privacy/). The data can enable Facebook and its partners to display advertisements on and outside of Facebook.
These processing operations are carried out solely with the explicit consent pursuant to Art. 6 Para. 1 lit. a GDPR. Consent to the use of the Facebook Pixel may only be given by users who are older than 16 years. If you are younger, we ask you to seek permission from your legal guardian. The information generated by Facebook is usually transmitted to and stored on a server of Facebook, and this may involve transmission to servers of Meta Platforms Inc. in the USA. You can revoke your given consent at any time with effect for the future. To exercise your right of withdrawal, remove the checkmark set in the "Cookie Consent Tool" embedded on the website next to the setting for "Facebook Pixel."

(2) Google Ads Remarketing

Our website uses the features of Google Ads Remarketing, allowing us to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in your browser, which enables interest-based advertising based on the pages you have visited, using a pseudonymous cookie ID. The processing is based on our legitimate interest in the optimal marketing of our website pursuant to Art. 6 Para. 1 lit. f GDPR. Further data processing will only take place if you have consented to Google linking your Internet and app browser history with your Google Account and using information from your Google Account to personalize ads that you view on the web.
If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define cross-device remarketing target group lists. Your personal data will be temporarily linked with Google Analytics data in order to create target groups. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.
For details on the processing triggered by Google Ads Remarketing and Google's handling of data from websites, please see: https://policies.google.com/technologies/partner-sites You can permanently opt out of Google Ads Remarketing by downloading and installing the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996? Further information and Google's privacy policy regarding advertising can be found here: https://www.google.com/policies/technologies/ads/
To the extent legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service in the "Cookie Consent Tool" provided on the website or follow the above-described option to object.

(3) TikTok Pixel

This website uses the "TikTok Pixel," a tracking technology of the social network "TikTok" operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok").
Using cookies (small text files stored on the used device), information about browsing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored there, and evaluated to enable interest-based and personalized product recommendations on TikTok. The information typically includes device ID, device type, timestamp, operating system, and IP address. The information can be associated with the user's profile by using additional information stored by TikTok about the user, for example, due to ownership of an account on the social network "TikTok."
TikTok can also link the information collected via the pixel with additional information collected by TikTok on other websites and/or in connection with the use of the social network "TikTok" to create pseudonymous usage profiles. Under no circumstances can the collected information be used to personally identify visitors to this website. The TikTok Pixel also enables us to track the effectiveness of advertisements on TikTok. If a user is redirected from an ad on TikTok to pages on this website and the cookies have not expired, the Pixel records certain predefined user actions and can trace them (e.g., completed transactions, leads, website search queries, product page views).
When such an action is executed, your browser sends an HTTP request (request) from the cookie via the TikTok Pixel to the TikTok server, transmitting specific action information. Through this transmission, TikTok can create statistics about user behavior on our website following redirection from a TikTok ad, which helps us optimize our offering. All the above-described processes, particularly the setting of cookies to read information on the device used, are only carried out if you have explicitly given your consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, the TikTok Pixel will not be used during your site visit. You can revoke your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with TikTok for the use of the TikTok Pixel, obliging TikTok to protect our site visitors' data and not share it with third parties. TikTok generally transfers collected information outside the European Economic Area and relies on the European Commission's standard data protection clauses to ensure compliance with European data protection levels. Further information on TikTok's privacy policy can be found here: https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE

(10) Plugins and Tools

(1) Shopify

We use the Shopify tool for maintaining an online shop. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. The provider processes meta/communication data (e.g., device information, IP addresses) in the EU. The legal basis for processing is Art. 6(1)(a) GDPR. Processing is based on consent. Data subjects can revoke their consent at any time by contacting us using the contact details provided in our privacy policy. The revocation does not affect the lawfulness of processing carried out before the revocation. The data will be deleted as soon as the purpose of its collection has ceased to apply and there is no legal retention obligation. Further information can be found in the provider's privacy policy at https://www.shopify.de/legal/datenschutz.

(2) Google Fonts (Local Hosting)

This site uses Google Fonts for the uniform display of fonts, provided by Google. The Google Fonts are locally installed, and there is no connection to Google servers. For more information about Google Fonts, visit https://developers.google.com/fonts/faq and Google's privacy policy: https://policies.google.com/privacy?hl=en.

(3) Google reCAPTCHA

We use "Google reCAPTCHA" on this website. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland. reCAPTCHA is used to check whether data entry on this website (e.g., in a contact form) is done by a human or an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, duration of the website visitor's stay on the website, mouse movements made by the user). The data collected during the analysis is forwarded to Google. The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place. The storage and analysis of the data are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.
If consent has been obtained, processing will only take place based on Art. 6(1)(a) GDPR and § 25(1) TTDSG to the extent that the consent includes the storage of cookies or access to information on the user's end device (e.g., device fingerprinting) as defined in the TTDSG. The consent can be revoked at any time. For more information about Google reCAPTCHA, see Google's privacy policy and terms of use at: https://policies.google.com/privacy?hl=en and https://policies.google.com/terms?hl=en.

(11) Web Analytics Services

(1) Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies," which are text files placed on your device, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. This website uses Google (Universal) Analytics with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes direct personal reference. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website activity and internet usage to us. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data. Google Analytics allows the creation of statistics with statements about age, gender, and interests of website visitors based on an evaluation of interest-related advertising and the use of third-party information. However, data records collected via "demographic features" cannot be attributed to a specific person. Details about the processing triggered by Google Analytics and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites. All the above-described processes, especially the setting of Google Analytics cookies to read information on the device used, are only carried out if you have explicitly given your consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google Analytics will not be used during your site visit. You can revoke your given consent at any time. To exercise your right of withdrawal, please disable this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obliges Google to protect our website visitors' data and not to share it with third parties. For the transmission of data from the EU to the USA, Google relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA. Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en.

(2) Google Ads Conversion Tracking

We use the online advertising program "Google Ads" on our website, including conversion tracking. Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If you click on an ad served by Google, a conversion tracking cookie is placed on your computer. These cookies have a limited validity and do not contain personal data. If you visit certain pages on our website and the cookie has not yet expired, we and Google can recognize that you have clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. As a result, cookies cannot be tracked through the websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics. We learn the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. We do not receive any information that personally identifies users. Your data may be transmitted to the USA. For the USA, there is no adequacy decision by the European Commission. The data transfer is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks. The use of cookies or similar technologies takes place with your consent based on § 15(3) S. 1 TMG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data takes place with your consent based on Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing based on the consent until the revocation. Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy.

(3) Use of Google AdSense

We use the AdSense function of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") to display advertisements on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller for your data. Google Ireland Limited is the affiliated company responsible for processing your data and ensuring compliance with the applicable data protection laws. The data processing serves the purpose of renting advertising space on the website and targeting visitors to the website with interest-based advertising. This function allows visitors to the provider's website to be shown personalized, interest-based advertising from the Google Display Network. Google uses cookies to analyze website usage, allowing them to recognize you. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. For the USA, there is no adequacy decision by the European Commission. The data transfer is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks. Google may transfer this information to third parties if required by law or if third parties process this data on behalf of Google. Google will never associate your IP address with other Google data. The use of cookies or similar technologies takes place with your consent based on § 15(3) S. 1 TMG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data takes place with your consent based on Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing based on the consent until the revocation. Further information and Google's privacy policy can be found at: https://www.google.com/policies/technologies/ads/ and https://www.google.de/policies/privacy.

(4) Hotjar

Our website uses Hotjar, an analytics software provided by Hotjar Ltd., 3 Lyons Range- 20 Bisazza Street- Sliema SLM 1640, Malta (http://www.hotjar.com). Hotjar allows us to analyze how you use the website. Hotjar uses cookies and a tracking code to collect data that is transmitted to the Hotjar server. This data includes device-related information such as IP address, device screen size, device type, and browser information such as type and version, geographic location, and language settings. Additionally, your email address along with your first and last name may be transmitted if you have provided us with this information. User interactions such as mouse movement, visited pages, date, and time of use are regularly transmitted to Hotjar. Your IP address is automatically anonymized by Hotjar and stored only in this form. In addition, website users are assigned a "unique user identifier (UUID)," which allows Hotjar to capture recurring users of our website without linking to your personal data. You can prevent Hotjar from collecting and using your data via the link https://www.hotjar.com/opt-out.

(12) Rights of the Data Subject

(1) The applicable data protection law grants you, as a data subject, certain rights with respect to the processing of your personal data by the data controller (us), as outlined below. To exercise these rights, please refer to the legal basis indicated for each right:

Right to information pursuant to Art. 15 GDPR
Right to rectification pursuant to Art. 16 GDPR
Right to erasure ("right to be forgotten") pursuant to Art. 17 GDPR
Right to restriction of processing pursuant to Art. 18 GDPR
Right to notification pursuant to Art. 19 GDPR
Right to data portability pursuant to Art. 20 GDPR
Right to withdraw consent pursuant to Art. 7(3) GDPR
Right to lodge a complaint pursuant to Art. 77 GDPR

(2) Right to Object

If the processing of personal data is based on Art. 6(1)(e) or (f) GDPR, you have the right to object to the processing of your personal data for reasons that arise from your particular situation, including profiling based on those provisions. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims (objection pursuant to Art. 21(1) GDPR).
If your personal data are processed for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; this also applies to profiling insofar as it is associated with such direct marketing. If you object, your personal data will no longer be used for direct marketing purposes (objection pursuant to Art. 21(2) GDPR).

(13) Duration of Storage of Personal Data

The duration of the storage of personal data is based on the respective legal basis, the processing purpose, and – if applicable – additionally based on the respective statutory retention period (e.g., commercial and tax retention periods).

For personal data processed on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR, such data will be stored until you revoke your consent.

If there are statutory retention periods for data that is processed within the framework of legal or quasi-legal obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer necessary for the fulfillment or initiation of a contract and/or there is no longer a legitimate interest in our continued storage.

For personal data processed on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object according to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

For personal data processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object according to Art. 21(2) GDPR.

Unless otherwise indicated in the other information in this declaration about specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: March 11 2023