Status: October 2022

We appreciate your trust and handle your data conscientiously. It is therefore a matter of course for us to inform you in detail about the scope of the processing and use of your data.

The person responsible within the meaning of Art. 4 No. 7 General Data Protection Regulation (hereinafter: GDPR) is:

MEGOHA ARMY
represented by Fadime Arica

Reader Street. 43, 22049 Hamburg

Company registration number: UK 341862976

VAT ID: DE 341862976

 

Email : info@megoha.de

Website: https://www.megoha-army.de/

You can reach our data protection officer by post at the above company address with the addition – data protection officer – or by e-mail.

1. Basic information on data processing and legal bases

1.1 This data protection declaration explains the type, scope and purpose of the processing of personal data within our online offer and the websites, functions and content associated with it (hereinafter jointly referred to as "website"). The data protection declaration applies regardless of the domains, systems, platforms and devices used (e.g. desktop or mobile) on which the online offer is run.

1.2 According to the GDPR, personal data is “any information relating to an identified or identifiable natural person”; an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or one or more special features that express the physical , physiological, genetic, psychological, economic, cultural or social identity of that natural person.

1.3 We only process your personal data in compliance with the relevant data protection regulations. This means that your data will only be processed if there is legal permission, i.e. either if the data processing is required to provide our contractual services (e.g. processing orders) and our online services (Article 6 (1) sentence 1 lit. b) GDPR) required or data processing is required by law to fulfill our legal obligations (Art. 6 Para. 1 Sentence 1 lit. c) GDPR) or you have consented to data processing in accordance with Art. 6 Para. 1 Sentence 1 lit. a) GDPR or a Data processing is justified on the basis of our legitimate interests (ie interest in the analysis, optimization and economic operation and security of our online offer) within the meaning of Article 6 (1) sentence 1 lit. f) GDPR.

2. Collection of access data and log files

2.1 If you use our website purely for information purposes, i.e. without registering and without providing any other information, we collect the personal data that your browser transmits to our server (so-called server log files).

2.2 In this context, we collect your IP address, the date and time of the website request, the name and URL of the retrieved file, the website from which access is made (so-called referrer URL), the amount of data transferred in each case as well as information about the browser type and version used. This data is technically required for us to display our website to you and to ensure the stability, system security and functionality of the website.

2.3 The legal basis for data processing in the case of purely informational use of our website is Article 6 Paragraph 1 Clause 1 Letter f) GDPR. The corresponding legitimate interest follows from the data collection purposes listed above.

2.4 The under 2.2. We delete the data listed as soon as they are no longer required to achieve the purpose for which they were collected. With regard to the collection of data for the provision of the website, this is the case when the session has ended.

3. Data Security

3.1 When you visit our website, we use the widespread TSL method (Transport Layer Security) in conjunction with the highest level of encryption supported by your browser. This is usually a 256-bit encryption. If your browser does not support 256-bit encryption, we use 128-bit v3 technology instead. You can tell whether an individual page of our website is being transmitted in encrypted form by the closed representation of the key or lock symbol in the lower status bar of your browser.

3.2 We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

4. Disclosure of data to third parties

4.1 We use various external service providers to provide our services by way of order processing. We ensure that they are obligated to comply with the statutory data protection regulations. The relevant companies work for us by way of order processing (Art. 28 GDPR) and may only use the data that may be viewed or made available in accordance with our instructions. We meet our legal responsibility for appropriate data protection precautions at the companies commissioned by us by agreeing specific data security measures with them, carrying out regular checks (technical and organizational measures) and concluding contracts for order processing from the beginning of the use of the services.

4.2 Data will only be passed on to third parties within the framework of legal requirements. In particular, we only pass on your data to third parties if you have given your consent within the meaning of Article 6 Paragraph 1 Clause 1 Letter a) GDPR, the transfer on the basis of Article 6 Paragraph 1 Clause 1 Letter b) DSGVO is required for contractual purposes or you are justified on the basis of legitimate interests in accordance with Art. 6 Paragraph 1 Sentence 1 lit. Due to legal requirements (Art. 6 Para. 1 Sentence 1 lit. f) GDPR, we are obliged in certain cases (e.g. to clarify attempted fraud) to forward your personal data to the law enforcement authorities and, if necessary, to third parties who have been harmed.

4.3 If, within the framework of this data protection declaration, third-party content or other means (hereinafter jointly referred to as “third-party providers”) are named for the data processing operations and their registered office is in a third country, it can be assumed that data will be transferred to the countries where the third-party providers are registered. Third countries are countries in which the GDPR is not directly applicable law, i.e. basically countries outside the EU or the European Economic Area. Data is transferred to third countries either if compliance with an appropriate level of data protection is ensured, if we have your explicit consent or if there is another legal permission (cf. Art. 44 - 47 GDPR).

5. Automated Decision Making

Automated decision-making including profiling according to Art. 22 Para. 1 and 4 GDPR does not take place if our online services are merely used.

6. Data processing when contacting us

6.1 When contacting us (e.g. by e-mail), personal data is collected. Your data is your full name, e-mail address, telephone number if applicable, the specified subject ("subject"), the message. Which data is collected when using a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) sentence 1 lit. f) GDPR. If your contact is aimed at concluding a contract, the legal basis for processing is Art. 6 (1) sentence 1 lit. b) GDPR. Your data will be deleted once your request has been processed. This is the case if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.

6.2 In addition to the under 6.1. We also collect your IP address and the date and time of contact. The storage takes place on the basis of our legitimate interests, as well as your interests to protect against misuse and other unauthorized use in accordance with Article 6 (1) sentence 1 lit. f) GDPR. In principle, your data will not be passed on to third parties as part of the above-described acts of use, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 (1) sentence 1 lit. c) GDPR.

7. Data processing when opening a customer account and for contract or order and payment processing

7.1 In accordance with Article 6 Paragraph 1 Sentence 1 Letter b) GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or open a customer account through which you can view your order. The data we process includes, for example, your full name, address, contact details, your order, the names of your contact persons and your payment information. The specific data we collect when you open your customer account or process the contract can be seen from the respective input forms on our website. Your customer account is not public and cannot be indexed by search engines. You can also manage all data, including your customer account itself, in the protected customer area. A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data you provide solely for contract processing. After the contract has been fully processed or after your customer account has been deleted, your data will be blocked with regard to tax and commercial law retention periods or other legal reasons and deleted after these periods have expired, unless you have expressly consented to further use of your data or a legally permitted further use Data use has been reserved by our side. You are responsible for backing up your data before the end of the contract in the event of cancellation. In the event of termination or a deletion request, we are entitled to irretrievably delete all data stored by you during the contract period.

7.2 When opening a customer account for the first time and also after renewed registrations for the customer account as well as when using our online services (e.g. carrying out an order), we store in addition to the under 7.1. The data listed also includes your IP address and the date and time of contact. The storage takes place on the basis of our legitimate interests (Art. 6 Para. 1 Sentence 1 lit. f) GDPR), as well as your interests to protect against misuse and other unauthorized use. In principle, your data will not be passed on to third parties as part of the above-described acts of use, unless it is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 (1) sentence 1 lit. c) GDPR.

7.3 We use the shop system of the service provider Shopify International Limited , Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). When you visit our online shop, Shopify collects your IP address and information about the end device you are using and your browser (log file data, see section 2 above) on our behalf for the purpose of web hosting. The processing by Shopify takes place on the basis of Article 6 Paragraph 1 Clause 1 Letter f) GDPR based on our legitimate interest in a secure and reliable presentation of all basic functions in our online shop.

When you make a purchase on our website, Shopify also collects your name, email address, shipping and billing addresses, payment information, and other information related to the purchase. This data is processed on the basis of Article 6 Paragraph 1 Sentence 1 Letter b) GDPR for the purpose of fulfilling our contractual obligations to you.

Shopify stores cookies on your end device so that Shopify can provide us with its full hosting service. The setting of these cookies on your end device is technically absolutely necessary so that the basic website functions of our web shop can be technically displayed and executed in the first place. We have put together more information about which cookies are specifically used by Shopify in our cookie banner (under Details/further details). General information on the use and functionality of cookies can be found in our Cookie Policy .

As part of the aforementioned Shopify services, data may also be processed as part of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc .or Shopify (USA) Inc. In the case of the transmission of data to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by the European Commission's adequacy decision. If Shopify then sends that personal data to a country outside of Canada (e.g., if Shopify sends that data to their sub-processor), that data is protected by contractual obligations similar to those found in European Union Standard Contractual Clauses.

Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz .

7.4 One of the possible payment methods in our webshop is PayPal Express . PayPal Express is operated by PayPal (Europe) S.à rl & Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg as the responsible body. If you have selected "PayPal Express" as the payment method, it is necessary for PayPal to further process your payment, to transmit the following personal data to PayPal (Europe) S.á.rl & Cie, SCA: Total amount of the order and reference to the PayPal account.

If you have stored your PayPal account in our shop, you also have access (via PayPal) to your PayPal account email address. PayPal then sends the following data about your order back to us so that the order can be processed: Encrypted PayPal account number, e-mail address, first and last name and delivery address. This transmission is necessary to process your payment with the payment method you have selected, in particular to confirm your identity and to process, allocate and book your payment. The legal basis for the processing of your payment data is Art. 6 Para. 1 Sentence. 1 lit. b) GDPR. The data is processed exclusively for the purpose of payment processing.

Further information on PayPal's data protection can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE .

Otherwise you can also contact PayPal (Europe) S.à rl & Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg directly.

7.5 We also offer payment via Amazon Pay on our website. The provider of this payment service is primarily Amazon Payments Europe sca, secondarily Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all located at 5 Rue Plaetis, 2338 Luxembourg. With the payment via Amazon function, we enable you to use your customer data stored at Amazon for your online purchase in our shop without having to disclose your payment data. If you already have an Amazon.de customer account, you can pay immediately using the payment method stored there - either by direct debit or by credit card. To do this, click on the "Amazon Pay" button in the shopping cart and log in to your Amazon account. Then choose from your delivery addresses and payment methods and place the order. Amazon Pay does not pass on the payment data stored in your Amazon.de customer account to us and you do not have to enter this when placing your order. The legal basis for the processing of your payment data is Art. 6 Para. 1 Sentence. 1 lit. b) GDPR. The data is processed exclusively for the purpose of payment processing.

You can find more information and your order overview for paying via Amazon at https://pay.amazon.de/ .

When paying via Amazon Pay, all personal data communicated to Amazon Pay or collected by Amazon Pay are processed primarily by Amazon Pays sca (the "Controller") and secondarily by Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, controlled. By using Amazon Pay, you accept the Amazon Pay data protection regulations: https://pay.amazon.com/de/help/201751600

7.6 When selecting the payment method "by invoice (Klarna)". If you select "Installment purchase - (Klarna)", "Credit card", "Sofort Banking" and "Prepayment by bank transfer", "Paypal" or bank transfer (SEPA), the payment will be processed by Mollie BV ( https://www.mollie.com/ de ), Keizersgracht 126 1015 CW Amsterdam, The Netherlands (hereinafter "Mollie"). We pass on to Mollie the information you provided during the ordering process together with the information about your order in accordance with Article 6 (1) sentence 1 lit. b) GDPR. Your data will only be passed on for the purpose of payment processing and only to the extent that it is necessary for this. You can find more information about Mollie's data protection regulations at the following Internet address: https://www.mollie.com/de/privacy.

8.Cookies

Detailed information on all the cookies we use, their scope and functionality as well as their providers can be found in our cookie banner (under Cookie Policy and “More Details/Details”).

9. Newsletters

9.1 With the following information we explain the contents of our newsletter, the registration, dispatch and statistical evaluation procedures as well as your right of withdrawal.

9.2 We send e-mails and other electronic notifications with advertising information (hereinafter "newsletter") for the purpose of direct marketing only with your consent (Art. 6 Para. 1 Sentence 1 lit. a), Art. 7 DSGVO and § 7 Para . 2 No. 3 UWG) or on the basis of another legal permit (§ 7 Para. 3 UWG).

If you subscribe to our free newsletter, you will receive information about our products and promotions, valuable tips and news as well as exclusive offers. After registering, you will receive a confirmation email with an activation link to start receiving the newsletter.

9.3 In order to register for the newsletter, it is sufficient if you provide your e-mail address. Optionally, we ask you to enter your first name in order to address you personally in the newsletter.

9.4 Registration for our newsletter takes place in a so-called double opt-in procedure. i.e. After registering, you will receive an e-mail asking you to confirm your registration so that we can ensure that you are the owner of the e-mail address provided and wish to receive the notifications. By clicking on the confirmation link in the e-mail, you give us your consent to the use of your personal data in accordance with Article 6 (1) sentence 1 lit. a) GDPR. If you do not confirm your registration within 24 hours, the information will be blocked and automatically deleted after one month.
The registrations for the newsletter are logged in order to be able to prove the registration process in accordance with the legal requirements. This includes storing the time of registration and confirmation as well as your IP address.

9.5. You can unsubscribe from our newsletter at any time, ie revoke your consent or object to further receipt. To unsubscribe from the newsletter, you must click on the "Unsubscribe newsletter" link at the end of the newsletter or send an email to info@felaro.de and ask our customer service to unsubscribe from the newsletter. After you have unsubscribed, we will delete the data you provided when you registered from the list of recipients.

9.6. If you have consented to personalized advertising, we also process tracking data on your user behavior when you visit our web shop, including data from completed or canceled purchases and when using our newsletter, for the purpose of personalizing our newsletter. In addition, we can use the e-mail address used to assign your order history and the data stored about you for individual orders (e.g. your address, your shopping baskets or your purchasing behavior). Furthermore, we store data on your interests, your title and your date of birth, if and to the extent that you have provided this optional information when registering for the newsletter. The data will only be processed after your express consent (i) both to the setting of cookies for the purpose of collecting your tracking data (§ 25 Para. 1 Clause 1 TTDSG; cf. our cookie provisions) and (ii) to the processing of information obtained from the tracking data for the personalized newsletter via the corresponding newsletter registration mask (Article 6 (1) sentence 1 lit. a GDPR).

9.7. If you buy goods from us, we will in future send you information e-mails for similar goods in accordance with Section 7 (3) UWG even without prior consent. These e-mails are only sent after an order has been completed. You can request at any time that you no longer receive such informational e-mails from us. To do this, please send an email to info@felaro.de and ask our customer service to unsubscribe from the newsletter or click on the "Unsubscribe from newsletter" link at the end of one of our newsletters. You will not incur any costs other than the transmission costs according to the basic tariffs.

9.8 Our newsletters contain a so-called "web beacon", ie a pixel-sized file that is retrieved from the server of the shipping service provider when the newsletter is opened. As part of this retrieval, technical information, such as information about the browser and your system, as well as your IP address and time of retrieval, are initially collected. This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on the retrieval locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to the individual newsletter recipients. However, it is neither our intention nor that of the shipping service provider (see Section 9.9.) to monitor individual users. Rather, the evaluations serve us to recognize your reading habits and to adapt our content to you or to send different content according to your interests. The legal basis for this is Article 6 Paragraph 1 Letter b) GDPR.

9.9 Our e-mail newsletter is sent via the technical service provider Emarsys eMarketing Systems GmbH, Zeppelinstrasse 2, 85399 Hallbergmoos, Germany, to whom we transmit your newsletter registration data.

This provider works for us within the framework of order data processing within the meaning of Art. 28 GDPR and is contractually obliged to ensure the protection of your data through suitable technical and organizational measures. In addition, the data mentioned will not be passed on to third parties.

Emarsys' privacy policy is available at https://emarsys.com/privacy-policy/

9.10 The newsletter is sent on the basis of your consent in accordance with Art. 6 Para. 1 Sentence 1 lit. a) GDPR or, if consent is not required, on the basis of our legitimate interests in direct marketing (Art. 6 Para. 1 Sentence 1 lit f) GDPR), if and to the extent that this is required by law, e.g. B. in the case of existing customer advertising (§ 7 Para. 3 UWG), is permitted. Insofar as we commission a service provider to send emails, this is done on the basis of our legitimate interests (Article 6 (1) sentence 1 lit. f) GDPR). The registration and statistical evaluation procedure is logged on the basis of our legitimate interests (Art. 6 Para. 1 Sentence 1 lit. f) GDPR) to prove that it was carried out in accordance with the law. Our legitimate interest is based on the use of a user-friendly and secure newsletter system that serves both our business interests and meets your expectations.

10. Social Media Platforms

On our website you will find links to social media platforms from Facebook, Pinterest, Instagram, Spotify and Houzz, where we are represented and offer content. These are static links. We do not use social media plugins. We also use the services of Vimeo and Twitter.

We are represented on social media to get in touch with our customers, interested parties and other users and to provide information about products, events or competitions.

We would like to point out that when you visit the corresponding pages, personal data is collected and processed by the respective provider of the social media service. If you use our offers in the respective social network as a logged-in member, you consent to the data processing in accordance with Article 6 (1) sentence 1 lit ) before.

10.1 We use the technical platform of Meta Platforms Ireland Ltd., 4 Grand Canal Square Grand Canal Harbour, Dublin 2, Ireland ( Facebook ) for the information service mentioned.

Please note that you are responsible for using this Facebook page, including its functions. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our Facebook page, Facebook records your IP address, among other things. This and other information is used to provide us, as the operator of the Facebook pages, with statistical data on the use of our Facebook page. Facebook provides more information on this under the following link: https://www.facebook.com/help/pages/insights . However, we would like to point out that Facebook only provided us with anonymous data in the course of the Facebook Insights evaluation, which does not allow any conclusions to be drawn about individual users.

We cannot provide any information on whether and how Facebook also uses data from visitors to our Facebook page for its own purposes. We also have no information as to whether your data is passed on to third parties, combined with data from other Facebook offers, how long Facebook stores data and whether page visits are assigned to individual users. You can read about what information Facebook actually receives and how Facebook uses it in Facebook's data usage guidelines. In the data usage guidelines you will also find further contact options for Facebook and the setting options for advertisements.

The data usage guidelines can be found here:
https://www.facebook.com/about/privacy

You can find Facebook's full data policies here:
https://www.facebook.com/full_data_use_policy

We also use the " Lead Ads " function from Facebook to collect and process certain personal data from interested parties - so-called leads - via a contact form displayed on Facebook websites (so-called "instant form"). The content and scope of the data requested in this form depends on the focus of the respective lead campaign. The processing of the data is strictly linked to the purposes pursued with the respective lead ad campaign. These purposes are clearly stated in the lead ad or on the form provided before the specified data is transmitted. Depending on the orientation of the lead ad campaign, the legal basis for data processing is either your express consent (e.g. for direct advertising measures such as registering for the e-mail newsletter) or our legitimate interest in optimal marketing of our offer.

According to the information provided by Facebook, Facebook stores your IP address when you visit our Facebook page. According to Facebook, this is made anonymous and deleted after a storage period of 90 days (German IP addresses). In addition, Facebook stores information about the end devices that you use for the visit. The assignment of IP addresses may result in the identification of individual users.

Facebook also stores cookies with your Facebook ID on your device if you are logged in to Facebook. This cookie enables Facebook to track your page views within Facebook. This applies to our Facebook page as well as to the Facebook pages of other providers. If you use a Facebook button embedded in a website, Facebook can associate this use with your profile. This enables Facebook to offer you advertising that results from your user behavior. You can avoid this by logging out of Facebook before you visit our Facebook page and deactivating the "stay logged in" function. In addition, you must delete all cookies from your end device and restart your browser. You can then use our Facebook page without your Facebook ID being processed.

If you want to use functions on Facebook to interact with us (like, comment, share, message, etc.), you will be shown a login screen. This form of interaction is only possible for registered members of Facebook. Further information on the Facebook data policy can be found under the following link:
https://www.facebook.com/about/privacy

10.2 For the short message service offered here, we use the technical platform and services of Twitter Inc., 795 Folsom St., Suite 600, San Francisco, CA 94107, USA.

Please note that you are responsible for using Twitter, including its functions. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating).
If you use Twitter, your data will be stored and processed outside the European Union. The data that may be transmitted in the process includes your IP address, the application used and information about the end device you are using. Data relating to your location and websites accessed may also be affected.

Twitter links this collected data to your Twitter account and may be able to create a behavioral profile. We cannot influence the type and extent of the data collected by Twitter. We also have no influence on whether Twitter passes on your data to third parties or for what purposes Twitter uses the stored data.
Under the following link you will find information about which data Twitter claims to collect and process:
https://twitter.com/privacy?lang=en

If you have a Twitter account and want to view information about the data you have stored on Twitter, you can do so using the following link:
https://support.twitter.com/articles/20172711#

You also have the option of using the Twitter data protection form to send your questions about data protection directly to Twitter. You also have the option of downloading your Twitter archive:
https://support.twitter.com/forms/privacy
https://support.twitter.com/articles/20170320#

We ourselves do not collect or process any other personal data from your direct use of Twitter. We use Twitter Analytics for a statistical analysis of our activities on Twitter. This function enables us to optimally design our presence on Twitter and does not allow any conclusions to be drawn about the data of individual users.

In the settings of your Twitter account, you have the option to restrict the processing of your data by Twitter ("Privacy and Security"). Here you also have the option of restricting Twitter's access to your contact and calendar data, photos and location data on your end device. Information on this can be found on Twitter under the following links:
https://support.twitter.com/articles/105576#
https://twitter.com/de/privacy

10.3 We use the Instagram technical platform (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland) for the service mentioned. Instagram collects personal data from you when you visit this site.

By processing information, Instagram is able to distribute advertising to its users through its own network. At the same time, data processing by Instagram enables us to use statistics that Instagram makes available to us. In this way, we can optimally design our own content and reach users better. Portions of these statistics include demographic and geographic information. However, we have no influence on the underlying personal data. This data is not known to us in full.

It is likely that Meta Platforms Ireland Ltd. data collected about you will be stored and processed outside of the European Union. As a user of Instagram, you can influence the storage of data and the recording of user behavior by Instagram in your profile settings by making the appropriate settings.
Instagram users can use the settings for advertising preferences to influence the extent to which their user behavior may be recorded when visiting our Instagram page.

Further information can be found in the Facebook and Instagram settings:

https://www.facebook.com/login.php?next
https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen
https://www.instagram.com/accounts/login/?next=/accounts/privacy_and_security/
de-de.facebook.com/help/instagram/245100253430454/?helpref=uf_share
or the form for the right of objection at:
https://www.facebook.com/help/contact/1994830130782319

If you object to the setting of cookies by Meta Platforms Ireland Ltd. and want to prevent the associated processing of your data, set your browser so that no cookies from third-party providers or Instagram are permitted.

Further information on the handling of personal data
a setting of cookies by you
on Instagram can be found in their privacy policy at https://help.instagram.com/519522125107875 or at http://instagram.com/about/legal/privacy/ .

For the purpose of integrating publicly visible Instagram posts about our "Felaro" brand on our website, we use the "Shoppable Instagram & UCG" application from Foursixty Inc., 101 Spadina Ave Ste 206, Toronto, Ontario, M5V 2K2, Canada. When using the functions of FourSixty Inc., your IP address and other log file data - such as the date and time of the web request - are processed by FourSixty.

The legal basis for the processing of personal data when using the "Shoppable Instagram & UCG" application is your prior consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR. You can revoke your consent to us at any time with effect for the future via our cookie banner.

As part of data processing by FourSixty Inc., data is transferred to Canada. The appropriate level of data protection is guaranteed by the adequacy decision of the European Commission. If FourSixty Inc. then sends that personal data to a country outside of Canada (e.g., if FourSixty sends that data to its sub-processor), that data is protected by contractual obligations similar to those found in European Union Standard Contractual Clauses.

Further information on how FourSixty handles personal data can be found here: https://foursixty.com/460/privacy

10.4 On our website, videos of the corresponding articles are displayed for selected articles. To do this, we use the Vimeo service, a service provided by Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA. In addition, we maintain our own VIMEO channel.

Each time you visit our website, which is equipped with such a component, this component causes the browser you are using to download a corresponding representation of the Vimeo component. If you visit our site and are logged in to Vimeo at the same time, Vimeo uses the information collected by the component to recognize which specific page you are visiting and assigns this information to your personal Vimeo account. For example, if you click the "Play" button or make comments, this information will be sent to your personal Vimeo user account and stored there. In addition, the information that you have visited our site is passed on to Vimeo. This happens regardless of whether you click on the component/comment, whether you have used it or not.

If you want to prevent this transmission and storage of data about you and your behavior on our website by Vimeo, you must log out of Vimeo before you visit our site.

Vimeo places permanent cookies on your end device in order to guarantee functionality and to analyze user behavior. You can prevent the storage of cookies on your end device by making the appropriate settings in your browser. Vimeo's data protection notices provide more detailed information on this, in particular on the collection and use of data by Vimeo:
https://vimeo.com/privacy

10.5 For the social media service offered on our Pinterest fan page, we use the technical platform and services of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
We would like to point out that you use this Pinterest page and its functions at your own risk. This applies in particular to the use of the interactive functions (e.g. commenting, sharing, rating).
When you visit our Pinterest page, Pinterest collects, among other things, log data that the browser automatically transmits when you visit the website (such as the IP address, the address of visited websites with Pinterest functions and the activities carried out on them, search history, type and setting of the browser, date and time of the request, how you use Pinterest, and cookie and device data). In addition, Pinterest also collects device information, such as device type, operating system, etc., clickstream data and conclusions about your use of the service, as well as information that is made available to Pinterest by third parties (e.g. when linking the account with Facebook or Google). Pinterest provides a list of the technical information that Pinterest collects during use under the following link:
https://policy.pinterest.com/de/technical-information-we-collect-when-you-use-our-service

In addition, Pinterest and some of its partners set and read cookies in your browser. This includes both session cookies and persistent cookies. The cookies and the data they collect are partially assigned to the respective Pinterest account of the user. Pinterest provides further information on the use of cookies and the processing of information read from them under the following link: https://policy.pinterest.com/de/cookies

Depending on the specific settings in your end device, Pinterest may also collect location data from users in order to adjust the advertising displayed even more precisely. Mobile device users can control exactly what information Pinterest receives from their mobile device through their device settings. Pinterest provides information on issuing the location service for iOS devices under the following link: https://help.pinterest.com/de/article/ios-location-permissions and Pinterest provides information on issuing the location service for Android under the following link: https:/ /help.pinterest.com/en/article/android-permissions

Pinterest also collects information about Pinterest users from online advertisers and third-party providers in order to analyze the effectiveness of advertising on the portal. Pinterest links this information with information from your Pinterest account to show you personalized advertising. Pinterest provides more information about personalized ads on the portal and a way to deactivate personalization under the following link:
https://help.pinterest.com/de/article/personalized-ads-on-pinterest

Pinterest also provides information about the use of and control options for users in relation to third-party providers of analysis services and advertising providers under the following link:
https://help.pinterest.com/de/article/third-party-analytics-or-advertising-providers-pinterest-uses-or-allows

The service provides information about which third parties Pinterest may pass on user data to under the following link: https://help.pinterest.com/de/article/ads-performance-reporting

The data collected about you in this context will be processed by Pinterest and may be transferred to countries outside the European Union. Pinterest describes what data Pinterest receives and how it is used in general terms in its privacy policy. There you will also find information about how to contact Pinterest and various ways to assert your data protection rights.

The data protection information is available under the following link:
https://policy.pinterest.com/de/privacy-policy

Pinterest provides further information on possible data protection settings for Pinterest accounts under the following link:
https://help.pinterest.com/de/article/edit-account-privacy

The extent to which Pinterest processes and/or shares your data with third parties beyond the manner explained in the data protection information is beyond our control and cannot be checked by us.
As the provider of the information service, we do not collect or process any data from your use of the Pinterest service.

10.6 We use Spotify , a tool for music and podcasts, on our website. Service provider is the Swedish company Spotify AB, Regeringsgatan 19, SE-111 53 Stockholm, Sweden. You can find out more about the data processed by using Spotify in the privacy policy at https://www.spotify.com/de/legal/privacy-policy/ .

10.7 We also link to the Houzz service on our website, a service provided by Houzz Inc., 285 Hamilton Avenue, 4th Floor, Palo Alto, CA 94301, USA, registered in Delaware, USA, registration number 4500640.
If you are logged into your Houzz account, you can link the content of our pages to your Houzz profile by clicking on the Houzz button. This allows Houzz to associate your visit to our site with your user account. We would like to point out that we, as the provider of the pages, have no knowledge of the content of the transmitted data or how it is used by Houzz.
For more information, see Houzz's privacy policy: https://www.houzz.de/privacyPolicy

10.8 We have integrated YouTube videos into our website, which are stored on https://www.youtube.com and can be played directly from our website. YouTube is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. All of our videos are embedded in "extended data protection mode", which means that no data about you as a user is transmitted to YouTube before you play the videos. Only when you play the videos will the data specified below be transmitted. We have no influence on this data transmission. Data processing and data categories By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. This is possible because by embedding the URL, YouTube automatically sets a cookie in its browser after the respective video has been played. This stores personal data such as the IP address and behavior on the site and forwards it to YouTube. The IP address, date and time of the request, time zone difference to Greenwich Mean Time (GMT), content of the request (specific page), access status/HTTP status code, amount of data transferred in each case, website from which the request comes, browser, Operating system and its interface, language and version of the browser software. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether there is no user account. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. Further information on the purpose and scope of the data collection and its processing by YouTube can be found in the data protection declaration. There you will also find further information on your rights and setting options to protect your privacy: https://www.google.de/intl/de/policies/privacy

As part of the use of YouTube, Google Ireland Ltd. the personal data described above, if necessary, for the purposes listed here in the United States to the parent company Alphabet Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043. The USA is a third country within the meaning of the GDPR, in which there is no European level comparable level of data protection prevails.
The transmission takes place regardless of whether Google provides a user account through which you are logged in or whether there is no user account. You can find Google Ireland's data protection officer at: https://support.google.com/policies/troubleshooter/7575787?hl=en

The legal basis for the processing of personal data when using the YouTube API is your prior consent in accordance with Article 6(1)(a) GDPR. You can revoke your consent to us at any time with effect for the future via our cookie banner. The legal basis for the transmission of personal data to the USA when using the YouTube API is your consent in accordance with Article 49 (1) (a) GDPR. You can revoke your consent to us at any time with effect for the future. In addition, we have agreed standard contractual clauses with Google in accordance with Article 46 (2) (c) GDPR, which are also the legal basis for the transmission of the data processed by Google to the United States of America and have taken further measures where possible. This ensures that Google ensures a handling and protection of your personal data that is comparable to the European data protection level and enforces it through appropriate measures.

11. Online Marketing

We work with third party advertising partners to collect data about your use of our website in order to provide targeted advertising and to measure the performance of our advertising campaigns. The external partners commissioned by us can collect this data with the help of tracking technologies, e.g. B. pixels, cookies, APIs and SDKs.

11.1 If you have given your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR, we use the TikTok Information Technologies UK Limited (6th Floor, One London Wall, London EC2Y 5EB, hereinafter "TikTok" for these purposes. ) provided TikTok Pixel . This is a code that we have implemented on our website. If you have given your express consent, this code will be used to connect to the TikTok servers when you visit our website in order to track your behavior on our website. For example, when you buy a product on our website, the TikTok pixel is triggered and saves your actions on our website in one or more cookies. Personal data such as your IP address and email address, as well as other information such as device ID, device type and operating system can also be transmitted to TikTok. TikTok uses email or other login or device information to identify users of our website and to associate their actions with a TikTok user account. TikTok uses this data to display targeted and personalized advertising to its users and to create interest-based user profiles. The data collected is anonymous and cannot be viewed by us and can only be used by us to measure the effectiveness of advertisements placed.
Your data will always be processed within the EU or the EEA. A corresponding order processing contract was concluded with TikTok for this purpose. In the event that personal data is transferred to countries outside the EU or the EEA, this data transfer takes place within the framework of standard contractual clauses (Article 46 GDPR), which represent contracts adopted by the European Commission for the transfer of personal data to so-called third countries ; In addition, we take additional measures where possible. In order to ensure an appropriate level of data protection, TikTok also carries out case-by-case reviews of transfers of personal data to third countries and reviews and analyzes the legal regulations in relevant third countries.
All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 Paragraph 1 Letter a) GDPR. Without this consent, the TikTok pixel will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the cookie banner provided on the website.
TikTok's privacy policy can be found here:
https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE

11.2 Within our online offer, the so-called " Facebook Pixel " of the social network Facebook is used, which is operated by Meta Platform Inc., 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
If a user clicks on an advertisement placed by us, which is played on Facebook, the URL of our linked page is added by Facebook Pixel. If our site allows data to be shared with Facebook via pixels, this URL parameter is written to the user's browser via a cookie, which our linked site sets itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.

With the help of the Facebook pixel, Facebook is on the one hand able to determine the visitors of our online offer as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel to only display the Facebook ads we have placed to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, which are based on the visited website). websites are determined), which we transmit to Facebook (so-called “Custom Audiences”). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and are not annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by understanding whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

The data collected by Facebook pixels is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook data usage guidelines (https://www.facebook.com/policy.php). Facebook and its partners can enable the placement of advertisements on and outside of Facebook.

The data processing associated with the use of the Facebook pixel will only take place if you have given your express consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR.

You can revoke your consent at any time with effect for the future. You can see which cookies are used by Facebook pixels in our cookie banner.

11.3 This website uses the online advertising program " Google Ads " and, as part of Google Ads , conversion tracking by Google Ireland Limited , Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. We use Google Ads to draw attention to our attractive offers with the help of advertising (so-called Google Adwords Conversion) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are pursuing the goal of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your end device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked via the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. come in the US. In the event that personal data is transferred to countries outside the EU or the EEA, this data transfer takes place within the framework of standard contractual clauses (Article 46 GDPR), which represent contracts adopted by the European Commission for the transfer of personal data to so-called third countries ; In addition, we take additional measures where possible. You can find the order data processing agreement we have concluded with Google together with standard contractual clauses (Google Ads Data Processing Terms) at https://business.safety.google/adsprocessorterms/

Details on the processing triggered by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR. Without this consent, Google Ads Conversion Tracking will not be used during your visit to the site.

You can see which cookies are used by Google Ads in our cookie banner. You can revoke your consent via our cookie banner at any time with effect for the future.

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available under the following link: https://www.google.com/settings/ads/plugin ?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

You can find more information about Google's data protection regulations at the following Internet address: https://www.google.de/policies/privacy/

11.4 With your consent, we use Google AdSense , a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, on our website. Google AdSense uses so-called cookies, text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, which can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This can also lead to a transmission to the servers of Google LLC. come in the US. In the event that personal data is transferred to countries outside the EU or the EEA, this data transfer takes place within the framework of standard contractual clauses (Article 46 GDPR), which represent contracts adopted by the European Commission for the transfer of personal data to so-called third countries ; In addition, we take additional measures where possible. You can find the order data processing contract we have concluded with Google together with standard contractual clauses (Google Ads Data Processing Terms) at https://business.safety.google/adsprocessorterms/

Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

The processing of data described is carried out in accordance with Article 6 (1) sentence 1 lit. This processing also serves our financial interest in exploiting the economic potential of our website by displaying personalized third-party advertising content for a fee.

You can find more information about Google's data protection regulations at the following Internet address:
https://www.google.de/policies/privacy/

You can permanently deactivate cookies for advertising preferences by preventing them by setting your browser software accordingly, or you can download and install the browser plug-in available under the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

For the processing of your data as described above, we have obtained your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the cookie banner provided on the website.

11.5 This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display text and fonts correctly.

For this purpose, the browser you are using must connect to the Google servers. This can also result in the transmission of personal data to the servers of Google LLC. come in the US. In this way, Google becomes aware that our website has been accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offering. This represents a legitimate interest within the meaning of Article 6 Paragraph 1 Clause 1 Letter f) GDPR. If your browser does not support web fonts, a standard font will be used by your computer.

As mentioned above, Google also processes your data in the USA. Since, in the opinion of the European Court of Justice, there is currently no adequate level of protection for data transfer to the USA, this can be associated with various risks for the legality and security of data processing. In this international data transfer, Google uses the so-called standard contractual clauses of the European Commission, which guarantee compliance with European data protection standards. You can find the order data processing contract we have concluded with Google together with standard contractual clauses (Google Ads Data Processing Terms) at https://business.safety.google/adsprocessorterms/

You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/ .

11.6 On our website we use the function of the social plug-in provider of ShareThis from ShareThis Inc. (4005 Miranda Ave, Suite 100, Palo Alto, 94304 California, USA). These plugins allow users to set bookmarks and post or share the relevant content on social networks (e.g. Twitter, Facebook or WhatsApp).

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the ShareThis servers. ShareThis transmits the content of the plugin directly to your browser and integrates it into the page. Through the integration, ShareThis receives the information that your browser has accessed the corresponding page of our website. If you use the ShareThis function while you are also logged in to the corresponding service (e.g. Twitter, Facebook), the visit to our website can be assigned to your user account there. ShareThis itself does not receive any of your personal data, but keeps anonymous usage statistics about the shared content. This data is regularly deleted there. Further information on data collection, evaluation and processing of your data by ShareThis.Inc as well as your related rights can be found in the data protection declaration of ShareThis.Inc at http://sharethis.com/privacy-manifesto .

If you do not want your visit to our website to be associated with your user accounts on the relevant social networks or social bookmarking services, we recommend that you do not use the relevant fields of ShareThis on our website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the cookie banner provided on the website.

11.7 We use the Shogun Marketing Automation Tool from Shogun Labs Inc. (340 South Lemon Avenue Suite 1085 Walnut, CA 91789 USA) on the basis of your prior consent in accordance with Art. . Shogun is a content management tool that is integrated with the ecommerce store and includes features like page builder and AB testing. The use of Shogun serves to optimally display the products in the web shop. When using this tool, cookies are set and, for example, your log file data (e.g. IP address) is collected, whereby this data can be transmitted to a server of Shogun Labs Inc. in the USA and stored there. We have concluded an order processing agreement with Shogun Labs Inc. for the use of Shogun, which obliges Shogun Labs Inc. to protect the data of our site visitors and not to pass it on to third parties. For the transmission of data from the EU to the USA, Shogun relies on so-called standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA (see here https://getshogun.com/dpa ).

Further information on Shogun can be found here: https://getshogun.com/privacy

You can see which cookies Shogun specifically uses in our cookie banner (there under “Details” and in our “Cookie Policy”).

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the cookie banner provided on the website.

11.8 We use the Algolia service from Algolia, Inc., 301 Howard Street, Suite 300, San Francisco, CA 94105, USA on the website.

The Algolia search is used in the interest of good accessibility and easy findability of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 Sentence. 1 lit. f) GDPR. The cookies used by Algolia are absolutely necessary to enable the display of filters and sorting on the website. On the other hand, the search bar on our website can only be displayed by using the Algolia search service. As part of data processing by Algolia, data is transferred to the USA. According to the case law of the European Court of Justice (judgment of July 16, 2020, case no.: C-311/18 ("Schrems II")), there is no adequate level of data protection in the USA. In addition, there may be state surveillance measures in the USA, where no adequate legal protection can be claimed against these measures. To protect your data in the USA, we have concluded a data processing agreement (“Data Protection Addendum”) with Algolia based on the currently applicable Standard Contractual Clauses of the European Commission (Module 2) in order to enable the transmission of your personal data to Klaviyo and where possible further measures taken.

You can see which cookies are actually used by Algolia in our cookie banner.

When searching with Algolia, the following visitor data is stored by Algolia: time of search, search term, IP address.

Search data from individuals is automatically deleted after 90 days; deletion is not possible before then.

We have concluded an order processing agreement with Algolia Inc. for the use of Algolia, which obliges Algolia Inc. to protect the data of our website visitors and not to pass it on to third parties (see the order processing agreement here: https://www. algolia.com/pdf/DPA-latest.pdf ). For more information, see Algolia's privacy policy, which you can access here: https://www.algolia.com/policies/privacy/

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the cookie banner provided on the website.

11.9 Technical means of communication (pop-up)

This website uses the provider Klaviyo from Klaviyo Inc. (125 Summer Street, Boston MA, 02111, USA). Klaviyo is a program that displays pop-ups and overlay windows for information purposes and better user guidance on our website. The windows can be controlled according to certain rules (e.g. number of page visits). Klaviyo also sets cookies for this purpose (see our cookie policy). Among other things, your IP address and user ID may be collected. The data will only be processed after your express consent (i) both to the setting of cookies for the purpose of collecting your tracking data (§ 25 Para. 1 Clause 1 TTDSG; cf. our cookie provisions) and (ii) to the processing of information obtained from the tracking data. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the cookie banner provided on the website.

As part of data processing by Klaviyo, data is transferred to the USA. According to the case law of the European Court of Justice (judgment of July 16, 2020, case no.: C-311/18 ("Schrems II")), there is no adequate level of data protection in the USA. In addition, there may be state surveillance measures in the USA, where no adequate legal protection can be claimed against these measures. To protect your data in the USA, we have concluded a data processing agreement (“data protection addendum”) with Klaviyo based on the currently applicable standard contractual clauses of the European Commission (module 2) in order to enable the transmission of your personal data to Klaviyo and, if possible to take further measures. You can find these provisions in the engagement agreement we have with Klaviyo: https://www.klaviyo.com/privacy/dpa.

In order to be able to offer its service, Klaviyo may share such personal data with its partner companies. If this is the case, Klaviyo enters into an agreement with them that contains provisions on data protection that offer a level of protection that is at least as high as the provisions of the data protection agreement that Klaviyo has entered into with us. A list of companies affiliated with Klaviyo can be found here: https://www.klaviyo.com/legal/subprocessors .

Klaviyo's privacy policy can be found at https://www.klaviyo.com/privacy .

12. Web Analytics Services

12.1 This website uses Google (Universal) Analytics 4 , a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your end device and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the abbreviated IP address) is usually transmitted to a Google server and stored there. It can also be transmitted to the servers of Google LLC. come in the US. This website uses Google (Universal) Analytics exclusively with the "_anonymizeIp()" extension, which ensures anonymization of the IP address by shortening it and excludes direct personal reference. As a result of the extension, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be sent to a Google LLC server. broadcast in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services related to website activity and internet usage.

The IP address transmitted by your browser as part of Google (Universal) Analytics is not merged with other Google data. This variant uses the service of a third party (Extreme Tracker: extreme-ip-lookup.com ) to obtain information about the IP. No user IP addresses are stored, only the service provider information is stored as a user-defined dimension.

Using a special function, the so-called "demographic characteristics", Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and using third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target group-optimized alignment of marketing measures. However, data records collected via the "demographic characteristics" cannot be assigned to a specific person.

Details on the processing initiated by Google Analytics and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All of the processing described above will only be carried out if you have given us your express consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR. Without this consent, Google Analytics will not be used during your visit to the site.

You can see which cookies are used by Google Analytics in our cookie banner. You can revoke your consent at any time with effect for the future via the cookie banner.

We have concluded an order processing contract with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. For the transmission of data from the EU to the USA, Google relies on the so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European data protection level in the USA.

Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

This website also uses the Google Signals service as an extension of Google Analytics. With Google Signals we can have cross-device reports created by Google (so-called "Cross Device Tracking"). If you have activated "personalized ads" in your settings in your Google account and you have linked your Internet-enabled devices to your Google account, Google can use Google Analytics in accordance with Art. 6 Para. 1 Sentence 1 a) GDPR analyze across devices and create database models based on this. The registrations and device types of all site visitors who were logged into a Google account and carried out a conversion are taken into account. The data shows, among other things, on which device you clicked on an ad for the first time and on which device the associated conversion took place. We do not receive any personal data from Google, only statistics based on Google Signals.

You have the option of deactivating the "Personalized ads" function in the settings of your Google account and thus switching off the cross-device analysis. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de You can read more information about Google Signals here: https://support.google.com/analytics/ answer/7532985?hl=de

12.2 Our website also uses the offer of Microsoft Clarity (One Microsoft Way, Redmond, WA 98052-6399, USA) on the basis of Art. 6 Paragraph 1 Sentence 1 lit To better understand experiences and to optimize the offer on this website. Clarity's technology helps us get a better understanding of our users' experiences, such as how much time users spend on which pages, how far they scroll, and which links or areas are clicked the most. We can adapt our offer precisely to the feedback from our users. Clarity works with cookies and other technologies to collect information about the behavior of our users and their end devices, in particular the IP address of the device (is only recorded and stored in an anonymous form), screen size, device type, information about the browser used, location (country only). Clarity stores this information in a pseudonymised user profile, the storage period is 1 year. The information is neither used by Clarity nor by us to identify individual users or merged with other data about individual users. For more information, see the Microsoft Clarity privacy statement. As part of data processing by Microsoft Clarity, data is transferred to the USA. According to the case law of the European Court of Justice (judgment of July 16, 2020, case no.: C-311/18 ("Schrems II")), there is no adequate level of data protection in the USA. In addition, there may be state surveillance measures in the USA, where no adequate legal protection can be claimed against these measures. To protect your data in the USA, we have concluded a data processing agreement (“data protection addendum”) with Microsoft Clarity based on the currently applicable standard contractual clauses of the European Commission (module 2) in order to enable the transmission of your personal data to Microsoft Clarity. You can find these terms in the order agreement we have with Microsoft Clarity: https://docs.microsoft.com/de-de/compliance/regulatory/offering-eu-model-clauses .

Microsoft Clarity, as a data controller, is secure and GDPR compliant for visitors to this website. If you would like to read more about Microsoft Clarity or how Microsoft may use your information, please click here:
https://privacy.microsoft.com/de-de/privacystatement .

You can see which cookies are used by Microsoft Clarity in our cookie banner. You can revoke your consent at any time with effect for the future via the cookie banner.

12.3 The services of Criteo SA (32 Rue Blanche, 75009 Paris, France) are used on our website based on your consent (Art. 6 Para. 1 Sentence 1 lit. a) GDPR). Criteo collects and stores your browser type/version, IP address and time of the server request as well as other information about your possible interests, for marketing and optimization purposes.
Criteo's technologies enable our advertising campaigns and advertising content to be evaluated. Criteo uses cookies for this purpose. Criteo uses an algorithm to analyze surfing behavior and can then display targeted product recommendations as personalized advertising banners on other websites (so-called publishers). Any other use or disclosure to third parties does not take place. For more information on Criteo's technology, see the Criteo Privacy Policy.

By using Criteo, additional cookies are loaded from contractual partners with whom Criteo works. An overview of all publishers and networks from which pixels are loaded can be found here.
You can find out which cookies are specifically used by Criteo and its advertising partners in our cookie banner (under Details/further details).

You can also deactivate the Criteo services altogether under the following link:

https://www.criteo.com/de/privacy/disable-criteo-services-on-internet-browsers/

For more information about Criteo's technology, see the Criteo privacy policy https://www.criteo.com/de/privacy/ .

12.4 We use Google's service called Google Tag Manager . "Google" is a group of companies and consists of the companies Google Ireland Ltd. (provider of the service), Gordon House, Barrow Street, Dublin 4, Ireland and Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA and other affiliated companies of Google LLC.

We have concluded an order processing contract with Google. The Google Tag Manager is an auxiliary service and only processes personal data for technically necessary purposes. The Google Tag Manager ensures that other components are loaded, which in turn may collect data. The Google Tag Manager does not access this data.

For more information about Google Tag Manager, see Google's privacy policy.

Please note that American authorities, such as secret services, could possibly gain access to personal data due to American laws such as the Cloud Act, which is inevitably exchanged with Google due to the Internet Protocol (TCP) when this service is integrated. To protect your data in the USA, we have concluded a data processing agreement (“data protection addendum”) with Google based on the currently applicable standard contractual clauses of the European Commission (module 2) in order to enable the transmission of your personal data to Google.

13. Retargeting/ Remarketing/ Referral Advertising

This website also uses retargeting technology from Nosto Solutions Ltd., Schützenstr. 6, 10117 Berlin or Nosto Solutions Ltd, Bulevardi 21 00180 Helsinki, Finland (“ Nosto ”). This retargeting technology uses so-called cookies, i.e. text files that are stored on your computer or mobile device and that enable an analysis of your use of the website.

You can see which cookies are used by Nosto in our cookie banner. You can revoke your consent at any time with effect for the future via the cookie banner.

We use Nosto's retargeting technology to target our website visitors who are already interested in our shop and our products with personalized, interest-based advertising. The advertising material is displayed on the basis of a cookie-based analysis of previous usage behavior, but only pseudonymised personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests and thus adapt the advertising individually to the stored information.

Your data will be processed on the basis of your consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR and for transmission to a third country in connection with Article 49 Paragraph 1 Letter a GDPR. You grant this by accepting the use of cookies on our website. Furthermore, when you visit our website within the cookie banner, you can individually allow or deselect the cookies we use by ticking the appropriate box.

Data collected concerns IP address (visiting IP and IP address geolocation, email address, country, zip code).

The information generated by the cookie about your use of this website is also transmitted to Nosto servers or its subcontractors in the USA and stored there. According to the case law of the European Court of Justice (judgment of July 16, 2020, case no.: C-311/18 ("Schrems II")), there is no adequate level of data protection in the USA. In addition, there may be state surveillance measures in the USA, where no adequate legal protection can be claimed against these measures. In order to still guarantee adequate protection of your data, we have concluded EU standard contractual clauses with Nosto and have taken further measures where possible.

Further information and the data protection regulations regarding advertising and Nosto can be found here:
https://www.nosto.com/data-privacy/
https://cdn.www.nosto.com/wp-content/uploads/DPA-102019.pdf

14. AWIN Affiliate Program

This website uses the performance advertising network of AWIN AG, Eichhornstraße 3, 10785 Berlin. Awin is a German affiliate network that offers affiliate marketing. Affiliate marketing is an Internet-based form of sales that enables commercial operators of Internet sites, the so-called merchants or advertisers, to place advertising, which is usually remunerated via click or sale commissions, on third-party Internet sites, i.e. with sales partners who are also affiliates or publishers are called to show. The merchant provides an advertising medium via the affiliate network, i.e. an advertising banner or other suitable means of internet advertising, which is subsequently integrated by an affiliate on its own website or via other channels such as keyword advertising or e-mail Marketing, to be advertised.

As part of its tracking services, AWIN stores cookies on the end devices of users, the websites or other online offers on the basis of your previously given consent in accordance with Article 6 Paragraph 1 Clause 1 Letter a) GDPR to document transactions (e.g. leads and sales). visit or use its customers (e.g. register for a newsletter or place an order in an online shop). These cookies serve the sole purpose of correctly allocating the success of an advertising medium and the corresponding billing within its network.

You can see which cookies are used by AWIN in our cookie banner. You can revoke your consent to the setting of cookies set by AWIN at any time with effect for the future via the cookie banner.

Personal data is not collected, processed or used by AWIN. Only the information about when a specific advertising medium was clicked on by a device is placed in a cookie. An individual sequence of digits, which cannot be assigned to the individual user, is stored in the AWIN tracking cookies, with which the partner program of an advertiser, the publisher, and the time of the user's action (click or view) are documented. AWIN also collects information about the end device from which a transaction is carried out, e.g. the operating system and the calling browser.

If you would like further information on data processing by AWIN, you can find it here: https://www.awin.com/de/datenschutzerklarung .

15. Data subject rights

15.1 The applicable data protection law grants you comprehensive data subject rights (rights to information and intervention) vis-à-vis the person responsible with regard to the processing of your personal data, about which we will inform you below:

• Right to information in accordance with Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data was or will be disclosed, the planned Storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if they were not collected from you by us, Existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing on you, as well as your right to information about the guarantees under Art. 46 GDPR when your data is forwarded to third countries;
• Right to rectification in accordance with Art. 16 GDPR: You have the right to immediate rectification of incorrect data concerning you and/or completion of your incomplete data stored by us;
• Right to deletion in accordance with Art. 17 GDPR: You have the right to request the deletion of your personal data if the requirements of Art. 17 Para. 1 GDPR are met. However, this right does not apply in particular if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims;
• Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you contest, is checked, if you refuse to delete your data due to inadmissible data processing and instead Request restriction of the processing of your data if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved or if you have lodged an objection for reasons of your particular situation, as long as it is not yet clear whether our legitimate reasons prevail;
• Right to information according to Art. 19 DSGVO: If you have asserted the right to correction, deletion or restriction of processing against the person responsible, he is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this correction or deletion of the data or Restriction of processing, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
• Right to data transferability in accordance with Art. 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request transmission to another person responsible, insofar as this is technically feasible;
• Right to revoke granted consent in accordance with Art. 7 Para. 3 GDPR: You have the right to revoke your consent to the processing of data at any time with effect for the future. In the event of revocation, we will delete the data concerned immediately, unless further processing can be based on a legal basis for processing without consent. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent up to the point of revocation;
• Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement.

15.2 Objection or revocation against data processing

If you have given your consent to the processing of your data, you can revoke this at any time. Such a revocation affects the admissibility of the processing of your personal data after you have given it to us. The admissibility of the processing of your data up to the time of your revocation remains unaffected. The easiest way to revoke your consent is to use the contact details given above.

Insofar as we base the processing of your personal data on the balancing of interests (Art. 6 Para. 1 Sentence 1 lit. f) GDPR), you can object to the processing in accordance with Art. 21 Para.1 GDPR. This is the case if the processing is not necessary to fulfill a contract with you. If you exercise such an objection, we ask that you explain the reasons why we should not process your personal data in the way we have done. In the event of an objection, we will examine the situation and will either stop or adjust the data processing or show you our compelling reasons worthy of protection on the basis of which we will continue the processing.

Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can best exercise your objection under the contact details given above.

16. Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the processing purpose and - if relevant - also based on the respective statutory retention period (e.g. commercial and tax retention periods).

Stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed, unless other periods are specified below.

When processing personal data on the basis of an express consent in accordance with Article 6 Paragraph 1 Sentence 1 lit. a) GDPR, this data will be deleted if the person concerned revokes his consent.
If there are legal retention periods for data that are processed within the framework of legal transactions or obligations similar to legal transactions on the basis of Article 6 (1) sentence 1 lit. b) GDPR, these data will be routinely deleted after the retention periods have expired, provided they are no longer required to fulfill the contract or contract initiation are required and we have no legitimate interest in further storage.
When processing personal data on the basis of Article 6 Paragraph 1 Clause 1 Letter f) GDPR, this data will be deleted if the data subject exercises his or her right of objection in accordance with Article 21 Paragraph 1 GDPR, unless we can provide compelling data worthy of protection Reasons for processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Article 6 Paragraph 1 Clause 1 Letter f) GDPR, this data is stored until the data subject exercises his or her right of objection in accordance with Article 21 Paragraph 2 GDPR.

17. Changes to the Privacy Policy

We reserve the right to change the data protection declaration in order to adapt it to changed legal situations or to changes in the service and data processing. However, this only applies with regard to declarations on data processing. If your consent is required or parts of the data protection declaration contain provisions of the contractual relationship with you, the changes will only be made with your consent.

You are asked to inform yourself regularly about the content of the data protection declaration.