Privacy policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Acqua Alpes GmbH, Dr. Gustav-Markt-Weg 16, 6401 Inzing, Österreich, Tel.: +43 512 327788, Fax: +43 512 32778840, E-Mail: parfum@acquaalpes.com. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.

2) Data Collection When You Visit Our Website

When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time at the moment of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.

3) Hosting & Content Delivery Network

3.1 Shopify

For the hosting of our website and the display of the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Kanada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. oder Shopify (USA) Inc.

All data collected on our website is processed on the provider's servers. We have concluded an order processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

In case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

3.2 Fastly

We use a content delivery network offered by the following provider: Fastly Inc., 475 Brannan St. #300, San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts faster via a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 (1) point f GDPR. We have concluded an order processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

4) Cookies

In order to make your visit to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. In some cases, these cookies are automatically deleted again after the browser is closed (so-called "session cookies"), in other cases, these cookies remain on your end device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the duration of the storage in the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies set by us, the processing is carried out either in accordance with Art. 6 (1) point b GDPR for the performance of the contract, in accordance with Art. 6 (1) point a GDPR in the case of consent given or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

You can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contacting Us

5.1 Zendesk

This website uses a live chat system offered by the following provider: Zendesk Inc, 1019 Market St, San Francisco, USA

The processing of personal data transmitted via chat is carried out either in accordance with Art. 6 (1) point b GDPR, to the extent necessary for the initiation or execution of the contract, or in accordance with Art. 6 (1) point f GDPR based on our legitimate interest in the effective support of our site visitors. Unless otherwise required by law, your data transmitted will be deleted once the relevant facts have been conclusively clarified. Furthermore, additional information may be collected and evaluated by means of cookies for the purpose of creating pseudonymised user profiles.

However, this information will not be used to identify you personally and will not be merged with other data records. To the extent this information has a personal reference, the processing is carried out in accordance with Art. 6 (1) point f GDPR based on our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.

The placing of cookies may be prevented by appropriate browser settings. However, the functionality of our website may be restricted in such a case. You may object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future.

We have concluded an order processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorised disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

5.2 When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration.

The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.

5.3 Zendesk

We use the e-mail ticketing system of the following provider to process customer requests: Zendesk International Ltd, 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland

If you make contact requests by e-mail via our website, these are stored and organised in the ticketing system to enable chronological processing and to improve the service experience. You can always view the current status of the processing of your request via the individually assigned ticket number.

For the organisation and processing of requests, personal data is collected according to the scope of its provision, but in any case surname, first name and e-mail address, transferred to the provider, stored there and processed.

The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, in answering your request as quickly as possible and in optimising our service offer in accordance with Art. 6 (1) point f GDPR.

We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

5.4 WhatsApp Business

We offer visitors to our website the opportunity to contact us via the WhatsApp news service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "Business Version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific business transaction (e.g. an order placed), we will store and use the mobile telephone number you use at WhatsApp and - if provided - your first name and surname in accordance with Art. 6 para. 1 lit. b. GDPR to process and answer your request. Based on the same legal basis, we will ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address), if necessary, in order to be able to allocate your enquiry to a specific transaction.

If you use our WhatsApp contact for general enquiries (e.g. about the range of services, availability or our website), we will store and use the mobile phone number you use at WhatsApp and - if provided - your first and last name in accordance with Art. 6 Para. 1 lit. f GDPR based on our justified interest in the efficient and prompt provision of the requested information.

Your data will always be used only to answer your request via WhatsApp. Your data will not be passed on to third parties.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book saves only the WhatsApp contact data of those users who have also contacted us via WhatsApp.

This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transmission of his WhatsApp telephone number from the address books of his chat contacts in accordance with Art. 6 Para. 1 lit. a GDPR when using the app on his device for the first time by accepting the WhatsApp terms of use. The transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to WhatsApp's data protection information: https://www.whatsapp.com/legal/?eea=1#privacy-policy

6) Data Processing When Opening a Customer Account and for Contract Processing

Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this data when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.

7) Commentary Function

Within the scope of the commentary function on this website, in addition to your comment, information on the time of writing the comment and the name of the commentator you have chosen is stored and published on the website. Furthermore, your IP address is logged and stored. This IP address is stored for security reasons, in case the person concerned violates the rights of third parties or posts illegal content by submitting a comment. We need your e-mail address to contact you if a third party should object to your published content as unlawful. The legal basis for the storage of your data is Art. 6 (1) point b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.

8) Use of Client Data for Direct Advertising

8.1 Subscribe to our e-mail newsletter

If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an appropriate link.

By activating the confirmation link, you give us your consent for the use of your personal data pursuant to Art. 6 (1) point a GPPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration for the purpose of tracing any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the promotional purposes by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data, or we reserve the right to a more extensive use your data which is permitted by law and about which we inform you in this declaration.

8.2 Sending the newsletter to existing customers

If you have provided us with your e-mail address when purchasing products, we reserve the right to regularly send you offers for products similar to those already purchased by e-mail. Pursuant to Section 7 (3) German law against unfair competition, we do not need to obtain separate consent from you. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1) point f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the future use of your e-mail address for the aforementioned advertising purpose at any time by notifying the controller named at the beginning of this document. In this regard, you only have to pay the transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

8.3 Klaviyo

Our e-mail newsletters are sent via this provider: Klaviyo", 225 Franklin St, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) point f GDPR so that they can send the newsletter on our behalf.

Subject to your express consent pursuant to Art. 6 (1) point a GDPR, the provider also carries out a statistical analysis of the success of newsletter campaigns by means of web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. In the process, end device information (e.g. time of page view, IP address, browser type and operating system) is also collected and analysed, but not combined with other data records.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded an order processing agreement with the provider, which safeguards the data of our website visitors and prohibits a transfer to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

8.4 Omnisend

Our e-mail newsletters are sent via this provider: Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, United Kingdom

We have concluded an order processing agreement with the provider, which safeguards the data of our website visitors and prohibits a transfer to third parties.

In case of data transfer to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

8.5 Shopify Email

Our e-mail newsletters are sent via this provider: Shopify Email, Shopify International Limited, Victoria Buildings, 2., 1-2 Haddington Road, Dublin 4, D04 XN32, Irland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Kanada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. oder Shopify (USA) Inc.

We have concluded an order processing agreement with the provider, which safeguards the data of our website visitors and prohibits a transfer to third parties.

In case of data transfer to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

8.6 WhatsApp newsletter

If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. Only your mobile phone number is required for sending the newsletter.

To send the newsletter, please add our mobile phone number to the address book of your mobile phone and send us the message "Start" via WhatsApp. By sending this WhatsApp message, you give us your consent to use your personal data in accordance with Art. 6 (1) point a GDPR for the purpose of sending the newsletter. We will then add you to our newsletter distribution list.

The data we collect when you subscribe to the newsletter will be processed exclusively for the purpose of addressing you in an advertising manner by the newsletter. You can unsubscribe from the newsletter at any time by sending us the message "Stop" via WhatsApp. After unsubscribing, your mobile phone number will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this policy.

Please note that WhatsApp obtains access to the address book of the mobile device used by us for sending the newsletter and automatically transfers telephone numbers stored in the address book to a Facebook server in the USA.

For sending our WhatsApp newsletter, we therefore use a mobile end device in whose address book only the WhatsApp contact data of our newsletter recipients are stored. This ensures that each person whose WhatsApp contact data is stored in our address book has already consented to the transfer of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 (1) point a GDPR when using the app on their device for the first time by accepting the WhatsApp terms of use. A transfer of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.

For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, please refer to the WhatsApp privacy policy: https://www.whatsapp.com/legal/privacy-policy-eea?lang=en

8.7 Notification by e-mail of stock availability
If our online shop provides the possibility of informing you by e-mail about the time of availability for selected, temporarily unavailable items, you can subscribe to our e-mail notification service for product availability. If you register for our e-mail notification service for product availability, we will send you a one-time message by e-mail about the availability of the article you have selected. The only mandatory information needed to send this notification is your e-mail address. The indication of further data is voluntary and is used if appropriate, in order to be able to address you personally. We use the so-called double opt-in procedure when sending this notification. This means that we will only send you a corresponding notification after you have expressly confirmed that you agree to receive such a message. We will then send you a confirmation e-mail asking you to click on a link to confirm that you wish to receive such notification.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. When you register for our e-mail notification service for product availability, we store your IP address as registered by the internet service provider (ISP) as well as the date and time of registration in order to be able to track any possible misuse of your e-mail address at a later time. The data collected by us when you register for our e-mail notification service regarding the availability of goods is used exclusively for the purpose of informing you about the availability of a particular item in our online shop. You can cancel the e-mail notification service for the availability of goods at any time by sending a corresponding message to the controller in charge of data processing named at the beginning. After you have unsubscribed, your e-mail address will be deleted immediately from our distribution list, unless you have expressly consented to the further use of your data or unless we reserve the right to make further use of your data in accordance with the law about which we inform you in this declaration.

9) Processing of Data for the Purpose of Order Handling

9.1 Transmission of image files for order processing by e-mail

On our website, we offer customers the opportunity to order the customization of products by sending image files via e-mail. The submitted image motif is used as a template for the customization of the selected product.

Using the e-mail address provided on the website, the customer can transmit one or more image files to us from the memory of the end device used. We then collect, store, and use files transmitted in this way exclusively to produce the customized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed in the following paragraphs. Any further disclosure will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) point b GDPR. After final processing of the order, the transmitted image files are automatically and completely deleted.

9.2 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally by suitable means of communication (e.g. by post or e-mail) about upcoming updates within the legally stipulated period of time within the framework of our statutory duty to inform pursuant to Art. 6 (1) lit. c GDPR. Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

9.3 We work with external shipping partners to fulfil our contractual obligations to our customers. We pass on your name as well as your delivery address exclusively for the purpose of delivering goods to a shipping partner selected by us, pursuant to Art. 6 (1) point b GDPR.

9.4 Use of special service providers for fulfillment

9.5 SendCloud

We use the following provider for order processing: SendCloud GmbH, Kanalstr. 10, 80538 Munich, Germany

Name, address and, if applicable, other personal data will be passed on to the provider in accordance with Art. 6 (1) point b GDPR exclusively for the purpose of processing the online order. Your data will only be passed on insofar as this is actually necessary for the processing of the order.

9.6 Passing on Personal Data to Shipping Service Providers

9.7 Austrian Post

We use the following provider as transport service provider: Austrian Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria

We pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, if you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The transmission only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery announcement is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

9.8 BRT

We use the following provider as transport service provider: BRT S.p.A., Piazza Diaz 7 - 20123 Milano / Italy

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

9.9 DHL

We use the following provider as transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

9.10 DPD

We use the following provider as transport service provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

9.11 GLS

We use the following provider as transport service provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

9.12 Post CH

We use the following provider as transport service provider: Schweizerische Post AG, Schweiz, Wankdorfallee 4, 3030 Bern

We pass on your e-mail address and/or telephone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, if you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery. This information will only be passed on if it is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or notification of delivery is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

In case of data transfer to the provider's location, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

9.13 SDA

We use the following provider as transport service provider: SDA EXPRESS COURIER S.P.A., Viale Europa, 175 – 00144 – Roma / Italy

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

9.14 UPS

We use the following provider as transport service provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

9.15 Use of Payment Service Providers

9.16 Amazon Pay

Online payment methods from the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue John F. Kennedy, L-1855 Luxembourg

If you select a payment method of the provider for which you make an advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the purpose of processing payment with the provider and only to the extent necessary for this purpose.

9.17 Apple Pay
If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your terminal device operated with iOS, watchOS or macOS by debiting a payment card deposited with "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. In order to release a payment, it is therefore necessary to enter a code previously defined by you and to verify it using the "Face ID" or "Touch ID" function of your terminal.
For the purpose of payment processing, your information provided during the ordering process, along with information about your order, will be transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website from which the purchase was made can access the payment information. After the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment.
If personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple retains anonymised transaction data, including the approximate amount of the purchase, the approximate date and time and whether the transaction was completed successfully. Anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on iPhone or the Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate through an encrypted channel on Apple's servers. Apple does not process or store this information in any format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone preferences. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac".
For more information about Apple Pay privacy, please visit the following web address: https://support.apple.com/en-gb/HT203027

9.18 Klarna

Online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

When selecting a payment method of the provider with which the provider makes advance payments (such as invoice purchase or instalment purchase or direct debit), you will also be asked to provide certain personal data (first name and surname, street, house number, postcode, city, date of birth, e-mail address, telephone number, if applicable data on alternative means of payment) during the ordering process.

In order to safeguard our legitimate interest in determining the solvency of our customers, this data is passed on to the provider by us for the purpose of a credit check in accordance with Art. 6 (1) point f GDPR. On the basis of the personal data provided by you as well as further data (such as shopping cart, invoice total, order history, payment history), the provider checks whether the payment option selected by you can be granted with regard to payment and/or bad debt risks.

In addition to internal provider criteria, identity and creditworthiness information from the following credit agencies may also be included in the decision-making process as part of the application review in accordance with Art. 6 (1) point f GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

9.19 Paypal

Online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

9.20 Paypal Checkout

Online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

9.21 Shopify Payments

Online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Irland

9.22 SOFORT

Online payment methods from the following provider are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

10) Online Marketing

10.1 Facebook pixel for creating custom audiences (with Cookie Consent Tool)
Within our online offer, the so-called "Facebook pixel" of the social network Facebook is applied. It is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland (hereinafter "Facebook").
If a user clicks on an advertisement placed by us, which is displayed on Facebook, an addition is added to the URL of our linked page by Facebook pixels. If our page allows data to be shared with Facebook via pixels, this URL parameter is written into the user's browser via a cookie, which is set by the linked page itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is able to determine visitors of our online offer as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, the Facebook pixel to display Facebook ads placed by us will be presented only to Facebook users who have shown an interest in our online offer or who demonstrate certain characteristics (e.g., interest in certain topics or products determined by means of the websites visited) which we will transmit to Facebook (so-called "custom audiences"). When using Facebook pixels, we also want to ensure that our Facebook ads match the potential interest of users and are not annoying. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were forwarded to our website after clicking on a Facebook ad ("conversion").
The collected data is anonymous and does not provide us with any information about the user’s identity. However, the data is stored and processed by Facebook to enable a connection to the respective user profile and to allow Facebook to use the data for its own advertising purposes in accordance with the Facebook Data Usage Guidelines (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to serve advertisements on and off Facebook.
The data processing associated with the use of the Facebook Pixel is only carried out with your express consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, remove the tick next to the setting for the "Facebook Pixel" in the "Cookie Consent Tool" embedded on the website.

10.2 Google AdSense
This website uses Google AdSense, a web ad service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland ("Google"). Google AdSense uses so-called cookies. These are text files are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses "web beacons" (small invisible graphics) to collect information, which can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated by those cookies and/or web beacons (including your IP address) about your use of this website will normally be transmitted to a server of Google and will be stored there. When using Google AdSense, personal data may also be transmitted to the servers of Google LLC. in the USA.
Google will use the information obtained in this way to analyze your usage of this website with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. The information collected by Google may be transferred to third parties, if this is prescribed by law and/or if third parties process this data by request of Google.
All processing described above, in particular the reading of information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GPDR. Without this consent, Google AdSense will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For more information about Google's privacy policy, please visit: https://privacy.google.com/intl/en-GB/take-control.html?categories_activeEl=sign-in

10.3 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to serve ads relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to identify which ads are shown in which browser and to prevent them from being shown more than once.
In addition, GMP can use cookie IDs to record so-called conversions that relate to ad requests. This is the case, for example, when a user sees a GMP advertisement and later, using the same browser, calls up the advertiser's website and makes a purchase via this website. According to Google, GMP cookies contain no personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of these tools and therefore inform you as follows according to our state of knowledge: By integrating GMP, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can allocate the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address. In the context of the use of GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.
All processing described above, in particular the reading of information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GPDR. Without this consent, GMP will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
You can obtain further information about the data protection regulations of GMP by Google at the following Internet address: https://policies.google.com/privacy?gl=de&hl=en

11) Retargeting/Remarketing/ Referral Advertising

Google Ads Remarketing
This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the concern of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize if the user has clicked on the ad and has been directed to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across Google Ads customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have chosen conversion tracking. Customers learn the total number of users who clicked on their ad and who were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in the USA.
Details on the processing operations initiated by Google Ads conversion tracking and on Google's handling of data collected from websites can be found here: https://policies.google.com/technologies/partner-sites?hl=en
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, Google Conversion Tracking will not be used during your visit to the website.
You can permanently disable the setting of cookies by Google Ads Conversion Tracking for advertising preferences. You may download and install the browser plug-in available at the following link: https://support.google.com/ads/answer/7395996?
Please note that certain functions of this website may not be available or may be restricted if you have deactivated the use of cookies.
Further information about Google’s privacy policy can be viewed at:
http://www.google.com/policies/technologies/ads/

12) Site Functionalities

12.1 Vimeo Videos

his website uses plugins to display and play videos from the following provider: Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA

When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. This involves certain information, including your IP address, being transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, to create playback statistics and to prevent abusive behavior.

If you are logged into a user account maintained by the provider during your visit to the site, your data will be directly assigned to your account when you click on a video. If you do not wish to have your data assigned to your account, you must log out before clicking on the play button.

All the above-mentioned processing, in particular the setting of cookies for reading out information on the end device used, only takes place if you have given us your express consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

12.2 YouTube Videos

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland

Data may also be transmitted to: Google LLC., USA.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, to create playback statistics and to prevent abusive behavior.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

12.3 Applications for job advertisements
On our website, we advertise current vacancies in a separate section, for which interested parties can apply by e-mail using the contact address provided.
If applicants want to be included in the application process, they must provide us with all personal details required for a well-founded and informed assessment and selection in conjunction with their application by e-mail.
The required data should include general personal information (name, address, telephone or electronic contact) as well as performance-specific evidence showing the qualifications required for the advertised position. In addition, health-related information may be required, which in the interest of social protection must be given special attention to regarding the applicant's person according to labor and social law.
The components an application must contain to be considered and the form in which these components must be sent by e-mail can be found in the respective job advertisement.
After receipt of the application sent using the e-mail contact address supplied, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. In the event of queries arising in the course of processing the application, we will use either the e-mail address supplied by the applicant with his application or a telephone number supplied, at our discretion.
The legal basis for such processing, including the contacting of applicants for queries, is basically Art. 6 (1) point b GDPR in conjunction with Art. 26 (1) Federal Data Protection Act. According to these provisions, the completion of the application procedure is deemed to be the initiation of an employment contract.
If special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application procedure, processing will take place in accordance with Art. 9 (2) point b GDPR, so as to enable us to exercise the rights arising from labor law, social security and social protection law and to fulfil our obligations in this regard.
The processing of special categories of data may also be based cumulatively or alternatively on Art. 9 (1) point h GDPR if it is used for the purposes of health care or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, health or social care or for the management of systems and services in the health or social sector.
If, in the course of the evaluation described above, the applicant is not selected or if an applicant withdraws his application prematurely, his data transmitted by e-mail as well as all electronic correspondence including the original application e-mail will be deleted at the latest after 6 months following a corresponding notification. This period shall be determined on the basis of our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligation to provide evidence under the regulations governing the equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6 (1) point b GDPR in conjunction with Art. 26 (2) Federal Data Protection Act for the purposes of implementing the employment relationship.

12.4 Adobe Fonts (Typekit)

This site uses so-called web fonts from the following provider to display fonts in a uniform manner: Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA

When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In this process, certain browser information, including your IP address, is transmitted to the provider.

The processing of personal data while establishing the connection with the provider of the fonts is only carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website. If your browser does not support web fonts, a standard font will be used by your computer.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

12.5 Google Web Fonts

This site uses so-called web fonts from the following provider to display fonts in a uniform manner: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data is also transferred to: Google LLC, USA

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

12.6 reCAPTCHA

On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA window, the provider uses "Google Fonts", i.e., fonts loaded from the Internet by Google. No further information is processed except that mentioned above, which is already transmitted to Google via the functionality of ReCaptcha.

The service checks whether an input is made by a natural person or abusively by machine and automated processing with the aim of blocking spam, DDoS attacks and similar automated malicious attacks. To ensure whether an action is performed by a human being and not by an automated bot, Cloudflare Turnstile collects the IP address of the end device used, the recognition data of the browser, the operating system type and the date and duration of the visit and transmits these data to the provider's servers to be evaluated.

This process is based on our legitimate interest in determining individual responsibility when using the Internet and in preventing abuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.

13) Tools and Miscellaneous

13.1 This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users in the form of an interactive user interface when they access the page, on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box. Using the tool, all cookies/services requiring consent are only loaded if the respective user provides the corresponding consent by ticking the corresponding box. This ensures that such cookies are only set on the respective end device of the user if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) point GDPR based on our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Further legal basis for the processing is Art. 6 (1) point c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13.2 - Google Maps
Our website uses Google Maps (AP’I) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (country) maps in order to display geographical information visually. Using this service will show you our location and will make it easier for you to find us.
When you access the sub-pages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers. When using Google Maps, personal data may also be transmitted to the servers of Google LLC. in the USA. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place according to Art. 6 (1) point f GDPR, on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles. If you want to do so, you must contact Google to exercise this right.
If you do not agree to the future transmission of your data to Google in the context of using Google Maps, you may completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. In this case, Google Maps as well as the map display on this website cannot be used.
The Google terms of use can be found at: https://policies.google.com/terms?hl=en. The additional terms of use can be found at: https://www.google.com/intl/en-US_US/help/terms_maps.html.
You can find detailed information on data protection in connection with the use of Google Maps on Google's website ("Google Privacy Policy") at: https://policies.google.com/privacy?hl=en.
To the extent required by law, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the procedure described above for submitting an objection.

13.3 - sevDesk

For the execution of the accounting, we use the service of the cloud-based accounting software of the following provider: sevDesk GmbH, Hauptstraße 115, 77652 Offenburg, Germany

The provider processes incoming and outgoing invoices and, if applicable, also the bank transactions of our company in order to automatically record invoices, match them to the transactions and create the financial accounting from this in a semi-automated process.

Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions.

14) Rights of the Data Subject

14.1 The applicable data protection law grants you the following comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data:

Right of access by the data subject pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw a given consent pursuant to Art. 7 (3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

14.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

15) Duration of Storage of Personal Data

The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).

If personal data is processed basis on an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes his consent.

If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.

When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.

If personal data is processed for the purpose of direct marketing based on Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.

Version: 27.05.2023, 19:04:08 Uhr

Language

Currency

Privacy policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

2) Data Collection When You Visit Our Website

3) Hosting & Content Delivery Network

4) Cookies

5) Contacting Us

6) Data Processing When Opening a Customer Account and for Contract Processing

7) Commentary Function

8) Use of Client Data for Direct Advertising

9) Processing of Data for the Purpose of Order Handling

10) Online Marketing

11) Retargeting/Remarketing/ Referral Advertising

12) Site Functionalities

13) Tools and Miscellaneous

14) Rights of the Data Subject

15) Duration of Storage of Personal Data

Language

Currency