data protection

Data protection

The person responsible for data processing is:

Dietmar JOST
Wilhelmstrasse 17
Hachenburg
Germany
hello@jost-bags.com

Telephone: 0266295130

We have an ext. Data protection officer appointed for our company:

Alexander Schultz
Karst IT GmbH
At Stadtgraben 3
56626 Andernach
Tel.: 02632 / 9459-0
a.schulz@karst-it.de

We are pleased about your interest in our online shop.
The protection of your Privacy is very important to us.
Below we inform you in detail about the handling of your
data. The processing of your data takes place on the
basis of the GDPR and in accordance with Section 96
Paragraph 3 TKG.

1. Access data and hosting

You can visit our websites without providing any personal
information. Each time a website is accessed, the web
server only automatically saves a so-called server log
file, which, for example, stores the name of the requested
file, your IP address, the date and time of the retrieval,
the amount of data transferred and the requesting provider
(access data) and documents the retrieval. These access
data are evaluated exclusively for the purpose of ensuring
trouble-free operation of the site and the improvement of
our offer. This serves the purpose of safeguarding our
legitimate interests, which prevail in weighing our interests,
in a correct presentation of our offer in accordance with
Art. 6 paragraph 1 sentence 1 letter f GDPR. All access data
shall be deleted one month after the end of your page visit.

Hosting

The services for hosting and displaying the website are
partly provided by our service providers as part of processing
on our behalf. Unless otherwise explained in this privacy
policy, all access data and all data collected in the forms
provided for this website will be processed on their servers.
If you have any questions about our service providers and the
basis of our cooperation with them, please contact the contact
option described in this privacy policy.

Our service providers are located and/or use servers in
the USA and other countries outside the EU and the EEA.
There is no adequacy decision of the European Commission
for these countries. Our cooperation with them is based on
standard data protection clauses of the European Commission.

2. Data processing for contract processing and
to contact us

2.1 Data processing for contract processing

We collect personal data when you provide it to us as part of your
Order or when contacting us (e.g. via contact form or email
Email) voluntarily. Mandatory fields are marked as such because we are in
In these cases, the data is mandatory for contract processing or for processing your data
You need to contact us and you will not be able to place the order without this information
complete or cannot send the contact. Which dates
are collected can be seen from the respective input forms.

We use the data you provide to process the contract and
Processing your inquiries (including inquiries about and processing any existing ones
Warranty and performance disruption claims as well as any statutory
Update obligations) in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR. Further information
to the processing of your data, in particular to the transfer to ours
Find service providers for the purpose of order, payment and shipping processing
Please see the following sections of this data protection declaration. After complete
To process the contract, your data will be used for further processing
restricted and after expiry of any tax and commercial law requirements
Retention periods in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR will be deleted unless you do so
expressly consent to further use of your data in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR
have consented or we have consented to any further use of data
reserved as permitted by law and which we inform you about in this statement
inform.

Merchandise management system

We use external merchandise management systems for order and contract processing
service provider. Our service providers are responsible for order processing
active with us. If you have any questions about our service providers and the basis of our
Cooperation with them, please contact the in this
Contact option described in the privacy policy.

2.2 Contacting us

As part of customer communication, we collect data to process your inquiries
in accordance with Art. 6 Paragraph 1 Sentence 1 Letter b GDPR, personal data if you provide it to us
when you contact us (e.g. via contact form, live chat tool or email
Email) voluntarily. Mandatory fields are marked as such because we are in
In these cases we absolutely need the data to process your contact.
Which data is collected can be seen from the respective input forms.
Once your request has been fully processed, your data will be deleted unless you
does not expressly imply any further use of your data in accordance with Article 6 Paragraph 1 Sentence 1 Letter a
DSGVO have consented or we have agreed to something that goes beyond this
We reserve the right to use data that is permitted by law and about which we inform you in this
inform statement.

3. Data processing for the purpose of
Shipping processing

We provide your data to fulfill the contract in accordance with Article 6 Paragraph 1 Sentence 1 Letter b GDPR
the shipping service provider commissioned with the delivery, insofar as this is necessary
Delivery of ordered goods is required.

Data transfer to shipping service providers for the purpose of
Shipping notice

If you give us your express consent during or after your order
If you have given your consent, we give your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a
DSGVO forward your email address to the selected shipping service provider
this before delivery for the purpose of delivery notification or coordination
can contact you.

Consent can be given at any time by sending a message to the following address:
Contact option described in the privacy policy or directly
Shipping service provider can be revoked at the contact address listed below
become. After revocation, we will delete the data you provided for this purpose, unless you do so
have expressly consented to further use of your data or we have
We reserve the right to use data beyond this, which is permitted by law and
about which we inform you in this statement.

DHL Parcel GmbH
Sträßchensweg 10
53113 Bonn
Germany

United Parcel Service Deutschland S.à rl & Co. OHG
Görlitzer Straße 1

41460 Neuss

Germany

DPD Germany GmbH
Wailandtstrasse 1

63741 Aschaffenburg
Germany

4. Data processing for payment processing

We work with them when processing payments in our online shop
Partners together: technical service providers, credit institutions, payment service providers.

4.1 Data processing for transaction processing

Depending on the payment method selected, we provide the information required to process the payment
The data necessary for the payment transaction is sent to our technical service providers
who work for us in the context of order processing, or to those commissioned by them
credit institutions or to the selected payment service provider, if this is necessary
Processing the payment is required. This serves to fulfill the contract in accordance with Article 6
Paragraph 1 S. 1 lit. b GDPR. In some cases, the payment service providers charge the fees for the
Process the payment required data yourself, e.g. on your own website
or via technical integration in the ordering process. In this respect, the following applies
Data protection declaration of the respective payment service provider.

If you have any questions about our payment processing partners and the basis
our cooperation with you, please contact the information in this
Contact option described in the privacy policy.

4.2 Data processing for the purpose of fraud prevention and
optimizing our payment processes

If necessary, we provide our service providers with additional data, which they provide together with
the data necessary to process the payment as our processor
for the purpose of fraud prevention and optimizing our payment processes
(e.g. invoicing, processing disputed payments, supporting the
accounting). This serves to protect data in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR
our legitimate interests predominate in the context of a balancing of interests
Interests in our protection against fraud or in an efficient one
Payment management.

4.3 Identity and creditworthiness check when selecting Klarna
Payment services

Klarna direct debit, purchase on account via Klarna

If you choose the payment services of Klarna Bank AB (publ), Sveavägen
46, 111 34 Stockholm, Sweden (hereinafter Klarna), we will direct your
Data in the context of payment and contract processing in accordance with Art. 6 Para. 1 Sentence 1 lit.
b) GDPR to Klarna. This data is transmitted so that Klarna can
Create an invoice according to your desired invoice processing and an
Can carry out identity and creditworthiness checks. Please understand,
that we can only offer you the respective Klarna payment method if it is
based on the results of the credit check. Detailed
Information on this and the credit agencies used is available here
Klarna’s data protection information can be found here.

4.4 Identity and credit check when selecting purchase
Invoice via PayPal and Ratepay

If you choose the purchase on account payment method (offered via Ratepay GmbH,
Franklinstraße 28-29, 10587 Berlin (hereinafter Ratepay) and PayPal (Europe) S.à rl
et Cie, SCA, 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter PayPal))
If you decide, we will forward your data as part of payment and contract processing
in accordance with Art. 6 Paragraph 1 Sentence 1 Letter b) GDPR to Ratepay. The transmission of this
Data is provided so that Ratepay can process the invoice you want
can create an invoice and carry out an identity and credit check.
Please understand that we will invoice you for the purchase via Ratepay
can only offer if this is based on the results of the credit check
is made possible. Detailed information about this and the ones used
Credit agencies can be found in Ratepay's data protection information.
Additional information on data protection at PayPal can be found here.

5. Advertising by email, post

5.1 Email newsletter with registration and newsletter tracking

If you register for our newsletter, we will use this for this purpose
necessary or separately communicated data to you regularly
our email newsletter based on your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a
GDPR. You can unsubscribe from the newsletter at any time
either by sending a message to the contact option described below or
via a link provided in the newsletter. Delete after logout

We will remove your email address from the recipient list, unless you expressly include one
You have consented to further use of your data in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR
or we reserve the right to use data beyond this
is permitted by law and about which we inform you in this statement.

We would like to point out that we monitor your user behavior when sending the newsletter
evaluate. We also analyze your use of our newsletter
Measurement, storage and evaluation of opening rates and click rates
Purposes of designing future newsletter campaigns (“newsletter tracking”).

For this evaluation, the emails sent contain single-pixel technologies (e.g
so-called web beacons, tracking pixels) that are stored on our website. For the
In particular, we link evaluations to the following “newsletter data”

the page from which the page was requested (so-called referrer URL),
the date and time of the call,

the description of the type of web browser used,

the IP address of the requesting computer,

the E-Mail adress,

the date and time of registration and confirmation

and the one-pixel technologies with your email address or your IP address and, if applicable.
an individual ID. Links contained in the newsletter may also contain this ID.

If you do not want newsletter tracking, you can do so at any time - as before
described - to unsubscribe from the newsletter.

The information will be stored for as long as you subscribe to the newsletter
have.

5.2 Newsletter dispatch

The newsletter and the newsletter tracking presented above may be used
also by our service providers as part of processing on our behalf
sent. If you have any questions about our service providers and the basis of our
Cooperation with them, please contact the in this
Contact option described in the privacy policy.

Our service providers are located and/or use servers in the following countries
The European Commission has decided to ensure an adequate level of data protection
determined: United Kingdom.

Our service providers are located and/or use servers in these countries: USA,
Australia. There is no adequacy decision for this country/these countries

European Commission. Our cooperation with you is based on this
Guarantees: European Commission Standard Data Protection Clauses.

5.3 Postal advertising and your right to object

In addition, we reserve the right to use your first and last name as well as your
To use the postal address for your own advertising purposes, for example to send mail
interesting offers and information about our products by post. This
serves to protect our predominant interests in the context of a balancing of interests
legitimate interests in advertising to our customers in accordance with Art. 6
Paragraph 1 S. 1 lit. f GDPR. You can consent to the storage and use of your data
for these purposes at any time by sending a message to the information in this data protection declaration
object to the contact option described.

The advertising mail is processed on our behalf
a service provider to whom we pass on your data for this purpose.

6. Cookies and other technologies
6.1 General information

In order to make visiting our website attractive and the use of certain
We use technologies on various sites to enable functions
including so-called cookies. Cookies are small text files that are sent automatically
be stored on your device. Some of the cookies we use
will be sent again after the end of the browser session, i.e. after closing your browser
deleted (so-called session cookies). Other cookies remain on your device and
enable us to recognize your browser the next time you visit (persistent
cookies).

Protection of privacy on end devices

When using our online offering, we use absolutely necessary technologies
to provide the expressly requested telemedia service
can. Storing or accessing information on your device
Information that is already stored in your device is required in this respect
no consent.

Functions that are not absolutely necessary require storage
Information in your device or access to information that is already in
stored on your device, your consent. We would like to point out that:
Failure to grant consent may result in parts of the website not being usable without restrictions
could be. Any consent you may have given will remain in effect until you do so

Adjust or reset the respective settings in your device.

Any downstream data processing through cookies and others
Technologies

We use such technologies to use certain functions
our website (e.g. shopping cart function) is absolutely necessary. Through this
Technologies include IP address, time of visit, device and browser information.
Information and information about your use of our website (e.g.
Information about the contents of the shopping cart) is collected and processed. This serves in
Within the framework of a balancing of interests, predominant legitimate interests in a
optimized presentation of our offer in accordance with Art. 6 Paragraph 1 Sentence 1 Letter f GDPR.

We also use technologies to fulfill legal obligations,
to which we are subject (e.g. consent to the processing of your
to be able to provide evidence of personal data) as well as web analysis and online
Marketing. Further information on this including the respective legal basis
for data processing can be found in the following sections of this
Data protection. If necessary, we also use technologies
which are not listed individually in this data protection declaration. Further information
about these technologies including the respective legal basis for them
Data processing can be found on the Usercentrics platform. You can reach this
by clicking the fingerprint button in the bottom right or left corner
click on the page.

You can find the cookie settings for your browser at the following links:

Microsoft EdgeTM / SafariTM / ChromeTM / FirefoxTM / OperaTM

To the extent that you consent to the use of the technologies in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR
If you have consented, you can revoke your consent at any time
Message the contact option described in the data protection declaration.
Alternatively, you can click the fingerprint button on the right or left
Click on the bottom corner of the page. If you do not accept cookies, you may
Functionality of our website may be limited.

6.2 Use of Usercentric's consent management platform
Consent management

We use the Usercentrics Consent Management platform on our website
(“Usercentrics”) to inform you about cookies and other technologies
information that we use on our website and yours, if applicable
legally required consent to the processing of your personal data

Collect, manage and document data using these technologies. This
is in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR to fulfill our legal obligations
Obligation in accordance with Art. 7 Para. 1 GDPR is required to give your consent
To be able to prove that we are processing your personal data
subject to. Usercentrics is an offer from Usercentrics GmbH, Sendlinger Straße 7,
80331 Munich, Germany which processes your data on our behalf. At
When you visit our website, the Usersentrics web server stores a so-called
Server log file, which also includes your anonymized IP address, date and time
Visit, device and browser information and information about your
Contains consent behavior. Your data will be deleted after three years if you
does not expressly imply any further use of your data in accordance with Article 6 Paragraph 1 Sentence 1 Letter a
DSGVO have consented or we have agreed to something that goes beyond this
We reserve the right to use data that is permitted by law and about which we inform you in this
inform statement.

7. Information on third country transfers
(Data transfer to third countries)

We use technologies from service providers on our website
Server locations are located in third countries outside the EU or EEA
can. These include, among others, the USA. As in the case of the USA, there is no
The EU Commission's adequacy decision is an appropriate one
level of data protection by means of other appropriate guarantees. The ECJ
decided in July 2020 that the Privacy Shield Agreement between the EU and
the USA can no longer be used to transfer personal data to the USA
to transfer. This means that the sectoral adequacy decision is there
lifted.

Appropriate guarantees in the form of contractually agreed standard contractual clauses
of the EU Commission or binding internal data protection regulations (Binding
Corporate Rules) are possible in principle, but require an approval
Contracting parties must check in advance whether there is an adequate level of protection
can be guaranteed. According to the ECJ ruling, this may be necessary
be required to take additional protective measures.

With the third-party technologies we use, we have personal information
Process data in a third country such as the USA, in principle the data required by the EU
Standard data protection clauses issued by the Commission and still valid
agreed. If possible, we will also agree on additional guarantees
should ensure that there is adequate data protection in the USA or elsewhere
third countries is guaranteed.

Regardless, it may happen that, despite all contractual and technical considerations

Measures the level of data protection in the third country does not correspond to that of the EU. For
In these cases, if necessary, we will ask you for your cookie consent
Consent in accordance with Article 49 Paragraph 1 Letter a GDPR to the transmission of your data
personal data to a third country. This applies in particular to the
Data transfer to the USA.

There is a particular risk that (US) authorities may not do so from an EU perspective
receive sufficiently limited access rights to your personal data,
without us as the data exporter or you as the data subject noticing this and
You may not have any legal remedies available to you
to prevent this or to take action against such access.

8. Use of cookies and other technologies

If you have given your consent in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR,
We use the following cookies and others on our website
Third Party Technologies. After the purpose ceases to exist and the end of its use
The respective technology used by us will be those collected in this context
Data deleted. You can revoke your consent at any time with effect for the future
withdraw. Further information about your cancellation options can be found here
“Cookies and other technologies” section. More information including
The basis of our cooperation with the individual providers can be found at
the individual technologies. If you have any questions about the providers and the basis of our
Cooperation with them, please contact the in this
Contact option described in the privacy policy.

8.1 Use of Google services

We use the technologies of Google Ireland Ltd. presented below,
Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Those through Google
Information automatically collected by technologies about your use of our website
Websites are usually sent to a server of Google LLC, 1600 Amphitheater
Parkway Mountain View, CA 94043, USA and stored there. For the USA
there is no adequacy decision from the European Commission. Our
Cooperation with them is based on standard data protection clauses
European Commission. Nothing about the individual technologies
If otherwise is stated, the data processing takes place on the basis of a for
agreement concluded between the respective technology
Responsible in accordance with Art. 26 GDPR. Further information about the
Data processing by Google can be found in Google's data protection information.

Google Analytics

For the purpose of website analysis, Google Analytics uses data (IP address,
Time of visit, device and browser information and information about
Your use of our website) is automatically collected and stored from which
Usage profiles are created using pseudonyms. You can do this
Cookies are used. If you visit our website from the EU, your
IP address on a server located in the EU to derive location data
stored and then immediately deleted before the traffic is processed
is forwarded to other Google servers. The data processing takes place on
Basis of an agreement on order processing by Google.

For the purpose of optimized marketing of our website, we have
Data sharing settings enabled for “Google Products and Services” . So
Google can access the data collected and processed by Google Analytics
access and then use it to improve Google services. The
Data is shared with Google as part of these data sharing settings
Basis of an additional agreement between those responsible. We have
no influence on subsequent data processing by Google.

For the purpose of optimized marketing of our website, we use the so-called user
ID function . This feature allows us to use your interaction data with one or more people
a unique, permanent ID for several sessions on our online presence
and thus your user behavior across devices and sessions
analyze.

We also use the to create and carry out tests
Google Analytics extension feature Google Optimize .

Web analysis is carried out using the Google Analytics extension function
Signals enable so-called “cross-device tracking”. As far as your internet-enabled ones
Devices are linked to your Google account and you have the “personalized” setting
If you have “Advertising” enabled in your Google account, Google may report on your
Create usage behavior (especially user numbers across devices), even if
You change your device. Processing of personal data
This does not happen to us, we only receive signals based on Google
created statistics.

For web analysis and advertising purposes, Google's extension function is used
Analytics uses the so-called DoubleClick cookie to recognize your browser
Allows you to visit other websites. Google will use this information to
To compile reports on website activity and to provide additional information with the
to provide services related to website use.

Google AdSense

Our website markets space for ads via Google AdSense
third party providers. These ads will be presented to you in various places on this website
Website displayed. The ad is displayed via the so-called DoubleClick cookie
interest-based advertising through the collection and processing of data (IP
Address, time of visit, device and browser information as well
Information about your use of our website) as well as automatic assignment
a pseudonymous UserID, which can be used to identify interests based on visits
on this and other websites.

Google Ads

For advertising purposes in Google search results and on third-party websites
When you visit our website, the so-called Google Remarketing cookie is set
automatically through the collection and processing of data (IP address, time
of the visit, device and browser information and information about your usage
our website) and using a pseudonymous CookieID and based on the
The pages you visit enable interest-based advertising. One above
Any further data processing will only take place if you consent to the setting
have “personalized advertising” activated in your Google account. Are you in this one?
If you are logged in to Google while visiting our website, Google uses this
Your data combined with Google Analytics data to create audience lists for
Create and define cross-device remarketing.

For website analysis and event tracking, we measure via Google Ads
Conversion tracking Your subsequent usage behavior if you have a
Advertisements from Google Ads reached our website. You can do this
Cookies are used and data (IP address, time of visit, device and
Browser information and information about your use of our website
Events specified by us, such as visiting a website or
Newsletter registration) are collected, from which using
Pseudonym usage profiles are created.

Google Maps

Google uses Google to display geographical information visually
Maps data about your use of the Maps functions, in particular the IP address
as well as location data, collected, transmitted to Google and subsequently by Google
processed. We have no influence on this subsequent data processing.

Google reCAPTCHA

For the purpose of protecting against misuse of our web forms and spam
Google collects reCAPTCHA data (IP) through automated software (so-called bots).
Address, time of visit, browser information and information about your
Use of our website) and uses a so-called JavaScript and cookies
Analyzing your use of our website. There are also others, through Google
Services evaluate cookies stored in your browser. A reading or
Saving personal data from the input fields of the respective
form does not take place.

Google Tag Manager

Through Google Tag Manager we can access various codes and services
manage our website. Processed during implementation of each tag
Google may also collect personal data (e.g. IP address, online
Identifiers (including cookies)). The data processing takes place on the basis of a
Agreement on order processing by Google.

By using the Google Tag Manager, various options can be integrated
Achieve services/technologies.

Unless you do not wish to use individual tracking services and therefore do so
deactivated, the deactivation remains for all affected tracking tags
exist that are integrated by the Google Tag Manager.

8.2 Use of Microsoft services

We use the Microsoft Ireland technologies presented below
Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown,
Dublin 18, D18 P521, Ireland (“Microsoft”). Data processing is carried out on a basis
an agreement between jointly responsible parties in accordance with Art. 26 GDPR. The
information about you automatically collected by Microsoft technologies
Use of our website is usually sent to a Microsoft server
Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and transferred there
saved. There is no European adequacy decision for the USA
Commission. Our cooperation with them is based on
European Commission standard data protection clauses. More advanced
Information about data processing by Microsoft can be found in the
Microsoft's data protection information.

Microsoft Advertising

For advertising purposes in Bing, Yahoo and MSN search results as well as on the
Third-party websites use so-called Microsoft Advertising when you visit our website

Remarketing cookies are set automatically through collection and processing
of data (IP address, time of visit, device and browser information
as well as information about your use of our website) and by means of a
pseudonymous CookieID and based on the pages you visit
interest-based advertising enables.

For website analysis and event tracking, we measure via Microsoft
Advertising Universal Event Tracking (UET) your subsequent usage behavior,
if you visit our website via an ad from Microsoft Advertising
have arrived. Cookies can be used for this purpose and data (IP address, time of
Visit, device and browser information and information about your usage
our website based on events specified by us, such as visiting a website
Website or newsletter registration) are collected from which use
Usage profiles can be created using pseudonyms. As far as your internet-enabled devices
linked to your Microsoft account and you have the “Interest-based
If you haven't disabled "Advertising" in your Microsoft account, Microsoft reports
about usage behavior (especially user numbers across devices),
even if you change your device, so-called “cross-device tracking”. A processing
We do not receive any personal data in this respect
Statistics created solely on the basis of Microsoft UET.

8.3 Use of Facebook services
Use of Facebook Pixel

We use the Facebook pixel as described below
Technologies from Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland
(“Facebook (by Meta)” or “Meta Platforms Ireland”). Become a pixel with the Facebook
Data (IP address, time of visit, device and browser information as well
Information about your use of our website based on information provided by us
Events such as visiting a website or subscribing to a newsletter) automatically
collected and stored from which using pseudonyms
Usage profiles are created. As part of the so-called extended data comparison
Information is also collected in hashed form for comparison purposes
stored with which individuals can be identified (e.g. names, e-mails).
email addresses and telephone numbers). This is done when you visit our website
The Facebook pixel automatically sets a cookie, which is automatically sent using a
pseudonymous CookieID recognizes your browser when others visit
Websites enabled. Facebook (by Meta) will share this information with others
Combine data from your Facebook account and use it to create reports about
to compile the website activities and to do more with the

Services related to website use, in particular personalized and
to provide group-based advertising.

The information automatically collected by Facebook (by Meta) technologies
About your use of our website is usually sent to a Meta server
Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and transferred there
saved. There is no European adequacy decision for the USA
Commission. If the data transfer to the USA is our responsibility
our cooperation is based on standard data protection clauses
European Commission. Further information about data processing
through Facebook can be found in Facebook's data protection information (by Meta).

Facebook analytics

As part of the Facebook Business Tools, the Facebook Pixel
Data collected about your use of our website statistics
Visitor activities created on our website. The data processing takes place on
Basis of an agreement on order processing by Facebook (by
Meta). Your analysis serves to optimally present and market our services
Website.

Facebook Ads (Ads Manager)

We use Facebook Ads to advertise this website on Facebook (by Meta) and on
other platforms. We determine the parameters of the respective advertising campaign.
For the exact implementation, especially the decision about the placement of the
Facebook (by Meta) is responsible for advertising to individual users. So much for them
If nothing different is specified for the individual technologies, this will take place
Data processing based on an agreement between us
Responsible in accordance with Art. 26 GDPR. The shared responsibility
is limited to collecting the data and transmitting it to Meta Platforms
Ireland. The subsequent data processing by Meta Platforms Ireland is subject to this
not recorded.

Based on visitor activity statistics created via Facebook Pixel
On our website we operate via Facebook Custom Audience
group-based advertising on Facebook (by Meta) by using the characteristics of the
determine the respective target group. As part of the determination of the respective
Facebook (by
Meta) as our processor.

Based on the pseudonymous cookie ID set by the Facebook pixel and the
We collect data about your usage behavior on our website

personalized advertising via Facebook Pixel Remarketing .

We measure conversions via Facebook Pixel for web analysis and event tracking
Your subsequent usage behavior when you click on a Facebook ad
Ads reached our website. The data processing takes place on the basis of a
Agreement on order processing by Facebook (by Meta).

8.4 Other providers of web analysis and online marketing
services

Use of Hotjar for web analysis

For the purpose of website analysis, technologies from Hotjar Ltd., Level 2, St
Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta (“Hotjar”)
automatically data (IP address, time of visit, device and browser information)
Information and information about your use of our website) is collected and
stored, from which usage profiles are created using pseudonyms
become. Cookies can be used. The pseudonymized ones
Usage profiles are created without a separate, express consent
not with personal data about the bearer of the pseudonym
merged. Hotjar works for us on our behalf.

Use of Pinterest Tag for web analysis and advertising purposes

For web analysis and advertising purposes on Pinterest and third-party websites
When you visit our website, we use technologies from Pinterest Europe Ltd.,
Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”) automatically
through the collection and processing of data (IP address, time of visit,
Device and browser information and information about your use of our
Website based on events specified by us, such as visiting a website
or newsletter registration) and using a pseudonymous CookieID and on
Based on the pages you visit, interest-based advertising
enabled. The data collected is used using pseudonyms
Usage profiles created. Pinterest will share this information with additional data
Merge with your Pinterest account and use it to generate reports about the
Compile website activities and other related website usage
to provide related services. We have no influence on that
Data processing by Pinterest and received only on the basis of Pinterest Tag
created statistics. In this way we measure for website analysis and
Event tracking Your subsequent usage behavior when you have a
Advertisements from Pinterest reached our website. The one from Pinterest

Information collected automatically is usually sent to a server
Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA and transferred there
saved. There is no European adequacy decision for the USA
Commission. Our cooperation with them is based on
European Commission standard data protection clauses. Data processing
takes place on the basis of an agreement between those jointly responsible
in accordance with Art. 26 GDPR.

Use of Optimizely for web analysis

For the purpose of website analysis and to carry out A/B tests
Technologies from Optimizely GmbH, Christophstraße 15-17, 50670 Cologne (“Optimizely”)
Data (IP address, time of visit, device and browser information as well
Information about your use of our website) is collected and stored
which usage profiles are created using pseudonyms. For this
Cookies can be used. The pseudonymized usage profiles are
without express consent to be given separately
personal data about the bearer of the pseudonym are brought together. The
Information automatically collected by Optimizely about your use of our website
Websites are usually sent to a server at Optimizely, Inc. 631 Howard Street,
Suite 100 San Francisco, CA 94105, USA and stored there. For the USA
there is no adequacy decision from the European Commission. Our
Cooperation with them is based on standard data protection clauses
European Commission. The data processing takes place on the basis of a
Agreement between jointly responsible parties in accordance with Art. 26 GDPR.

Using Criteo for online marketing

About the advertising partner Criteo SA, 32 Rue Blanche, 75009 Paris, France (“Criteo”)
We advertise this website in search results and on third party websites. At
Visiting our website will automatically receive a retargeting cookie from Criteo or
their partners set, using a pseudonymous CookieID and based on the
The pages you visit enable interest-based advertising. The
Data processing takes place on the basis of an agreement between us
Responsible in accordance with Art. 26 GDPR. We determine the parameters of each
advertising campaign. For the exact implementation (e.g. the decision about the
Criteo is responsible for the placement of the individual advertisements. Those through the Criteo
automatically collected data (IP address, time of visit, device and
Browser information and information about your use of our website)
may be combined by Criteo with information from other sources
merged and sent to Criteo advertising partners.

Use of AWIN for online marketing

About the advertising partner AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany
(“AWIN”) we market space for third-party advertisements. These ads will
displayed to you in various places on this website. Using cookies can
AWIN can track the progress of the respective order and in particular
understand that you clicked on the respective ad and then the product
have ordered. For this purpose, data (IP address, time of visit, device and
Browser information and information about your use of our website)
collected, transmitted to AWIN and processed by AWIN. We have no influence on
this data processing. The data processing takes place on the basis of a
Agreement between jointly responsible parties in accordance with Art. 26 GDPR.

9. Integration of the Trusted Shop Trustbadge/
other widgets

To display the Trusted Shops services (e.g. seal of quality, collected
Reviews) as well as the offer of Trusted Shops products for buyers after a
Orders include Trusted Shops widgets on this website.

This serves to protect our interests as part of a balancing of interests
overriding legitimate interests in optimal marketing
Enabling safe shopping in accordance with Article 6 Paragraph 1 Sentence 1 Letter f GDPR. The
Trustbadge and the services advertised with it are an offer from Trusted Shops
AG, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we work together
Art. 26 GDPR is the person responsible for data protection. We will inform you in
Within the scope of this data protection information, we will describe the essential ones below
Contract contents according to Art. 26 Paragraph 2 GDPR.

As part of the joint agreement between us and Trusted Shops AG
If you have any questions about data protection or to assert responsibility, please contact us
Please give your rights to the Trusted Shops using the information in the
Contact options provided in data protection information. Independently of
However, you can always contact the responsible person of your choice. Your request
If necessary, the answer will then be sent to the other person responsible
passed on.

9.1 Data processing when integrating the trust badge/other
Widgets

The trust badge is provided by a US CDN (content delivery) provider.
Network). An adequate level of data protection is ensured
Standard data protection clauses and other contractual measures ensured.

When you access the trust badge, the web server automatically saves a so-called
Server log file, which also contains your IP address, date and time of access
Amount of data and the requesting provider (access data) and the retrieval
documented. The IP address is anonymized immediately after collection,
so that the stored data cannot be assigned to you personally. The
Anonymized data is used in particular for statistical purposes and for
Error analysis used.

9.2 Data processing after order completion

If you have given your consent, the trust badge will take effect after the order has been completed
to order information stored in your device (order total,
Order number, product purchased if applicable) as well as email address and your email address
Address is hashed using a one-way cryptographic function. The hash value becomes
then with the ordering information in accordance with Article 6 Paragraph 1 Sentence 1 Letter a GDPR
Trusted Shops transmitted.

This is to check whether you are already registered for Trusted Shops services
are. If this is the case, further processing will take place in accordance with the agreement between you
and Trusted Shops. If you are not already for
the services are registered or your consent to automatic recognition
If you do not grant the trust badge, you will then be given the opportunity to log in manually
to register for the use of the services or to secure them as part of your
if necessary, to conclude an existing user agreement.

For this purpose, the trust badge applies to the following after completing your order
Information stored in the device you use:
Order total, order number and email address. This is necessary so that we
Can offer you buyer protection. A transmission of the data to Trusted
Shops will only take place once you have actively signed up for buyer protection
Click on the correspondingly labeled button in the so-called trust card
decide. If you decide to use the services, the following applies
further processing according to the contractual agreement with Trusted Shops in accordance with Art.
6 Paragraph 1 Letter b GDPR to complete your registration for buyer protection and the
To be able to secure your order and, if necessary, to send you invitations to review afterwards
can be sent by email.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging
a. The legal basis is Article 6 Paragraph 1 Letter f GDPR for the purpose of ensuring a

trouble-free operation. Processing in third countries (USA and Israel) may occur.
take place. An adequate level of data protection is achieved in the case of the USA
Standard data protection clauses and other contractual measures as well as in the case of
Israel secured through an adequacy decision. Further information
you can get it here.

10. Social media

10.1 Social plugins from Facebook (by Meta), Instagram (by Meta),
Pinterest, WhatsApp

Social buttons from social networks are used on our website.
These are simply integrated into the page as HTML links, so that when you call them up
Our website does not yet have a connection to the servers of the respective provider
will be produced. If you click on one of the buttons, the website opens
respective social network in a new window of your browser. There you can
e.g. press the Like or Share button.

10.2 Our online presence on Facebook (by Meta), Instagram
(by Meta), YouTube, Pinterest, LinkedIn

To the extent that you have given your consent to this in accordance with Article 6 Paragraph 1 Sentence 1 Letter a of the GDPR
given by the respective social media operator, will be displayed when you visit our website
Online presence on the social media mentioned above your data for
Automatically collected and stored for market research and advertising purposes
Usage profiles are created using pseudonyms. These can
can be used, for example, to display advertisements inside and outside the platforms
to switch to websites that presumably correspond to your interests. For this purpose, as a rule
Cookies used. The detailed information on the processing and use of the
Data from the respective social media operator as well as a contact option and
Your rights in this regard and setting options to protect you
Privacy, please refer to the data protection information linked below
Provider. If you still need help with this, you can contact us
turn around.

Facebook (by Meta) is an offer from Meta Platforms Ireland Ltd., 4 Grand Canal
Square, Dublin 2, Ireland (“Meta Platforms Ireland”). Which is provided by Meta Platforms Ireland
automatically collected information about your use of our online presence
Facebook (by Meta) are usually sent to a server of Meta Platforms, Inc., 1
Hacker Way, Menlo Park, California 94025, USA and stored there. For
The USA does not have an adequacy decision from the European Commission.

Our cooperation with you is based on standard data protection clauses
European Commission. Data processing as part of your visit
Facebook (by Meta) Fanpage is based on an agreement between
jointly responsible persons in accordance with Art. 26 GDPR. Further information
(Information about Insights data) can be found here.

Instagram (by Meta) is an offer from Meta Platforms Ireland Ltd., 4 Grand Canal
Square, Dublin 2, Ireland (“Meta Platforms Ireland”) The through Meta Platforms Ireland
automatically collected information about your use of our online presence
Instagram is usually sent to a server owned by Meta Platforms, Inc., 1 hacker
Way, Menlo Park, California 94025, USA and stored there. For the USA
there is no adequacy decision from the European Commission. Our
Cooperation with them is based on standard data protection clauses
European Commission. Data processing as part of your visit
Instagram (by Meta) Fanpage is based on an agreement between
jointly responsible persons in accordance with Art. 26 GDPR. Further information
(Information about Insights data) can be found here.

Pinterest is an offer from Pinterest Europe Ltd., Palmerston House, 2nd Floor,
Fenian Street, Dublin 2, Ireland (“Pinterest”). Those automatically collected by Pinterest
Information about your use of our online presence on Pinterest is stored in the
Usually to a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107,
Transferred to the USA and stored there. There is none for the USA
adequacy decision of the European Commission. Our
Cooperation with them is based on standard data protection clauses
European Commission.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin
4, Ireland (“Google”). The information about you that Google automatically collects
Use of our online presence on YouTube is usually sent to a server
Google LLC, 1600 Amphitheater Parkway Mountain View, CA 94043, USA
and saved there. There is no adequacy decision for the USA
European Commission. Our cooperation with them is based on
European Commission standard data protection clauses.

LinkedIn is an offering from LinkedIn Ireland Unlimited Company, Wilton Place,

Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn
About your use of our online presence on LinkedIn is usually sent to one
Server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA
transferred and stored there. There is no adequacy decision for the USA
European Commission. Our cooperation with them is based on
European Commission standard data protection clauses.

11. Contact options and your rights
11.1 Your Rights

As a data subject, you have the following rights:

In accordance with Article 15 GDPR, you have the right to receive information to the extent specified therein
to request information about your personal data processed by us;
According to Art. 16 GDPR, you have the right to immediately correct incorrect or
To complete your personal data stored by us
demand;

in accordance with Art. 17 GDPR you have the right to have your data stored by us deleted
to request personal data, unless further processing

to exercise the right to freedom of expression and information;
to fulfill a legal obligation;

for reasons of public interest or

to assert, exercise or defend legal claims
is required;

in accordance with Art. 18 GDPR you have the right to restrict the processing of your data
to request personal data, to the extent that

you dispute the accuracy of the data;

the processing is unlawful but you object to its deletion;

we no longer need the data, but you use it to assert
need to exercise or defend legal claims or

You have lodged an objection to the processing in accordance with Art. 21 GDPR
have;

In accordance with Art. 20 GDPR, you have the right to your personal data that you provide to us
provided in a structured, common and machine-readable format
format or the transmission to another person responsible
demand;

in accordance with Art. 77 GDPR you have the right to complain to a supervisory authority.
As a rule, you can contact your usual supervisory authority
your place of residence or place of work or our company headquarters.

Right to object

As far as we are concerned to protect our interests in the context of a balancing of interests
overriding legitimate interests personal data as explained above
You can process this data with effect for the future
contradict. If the processing takes place for direct marketing purposes,
You may exercise this right at any time as described above. As far as processing goes
If the data is used for other purposes, you only have the right to object if this is the case
Reasons arising from your particular situation.

After exercising your right to object, we will process your personal data
we will not process it further for these purposes unless we are obliged to do so
demonstrate legitimate reasons for processing that reflect your interests, rights
and freedoms prevail, or if the processing of the assertion,
Exercising or defending legal claims.

This does not apply if the processing is carried out for direct marketing purposes. Then
We will no longer process your personal data for this purpose.

11.2 Contact options

If you have any questions about the collection, processing or use of your personal data,
for information, correction, restriction or deletion of data as well as revocation
consent given or objection to a specific use of data
Please contact us directly using the contact details in our legal notice.

Data protection declaration created with the Trusted Shops legal copywriter