Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This only applies if no other information is provided in the subsequent processing operations. "Personal data" is all information that relates to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal information.
Every time you access our website, usage data is transmitted to us or our web host / IT service provider through your Internet browser and stored in protocol data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and to improve our offering.
Customer account Orders
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your customer account will then be deleted.
Collection, processing and transfer of personal data when placing orders
When you place an order, we only collect and process your personal data to the extent that this is necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR and is necessary for the fulfilment of a contract with you.
Your data will be passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to a minimum.
Contact Reviews Newsletter
Collection and processing when using the contact form
When you use the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves the purpose of establishing contact. By sending your message, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent.
You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. We only use your email address to process your request. Your data will then be deleted unless you have consented to further processing and use.
Data collection when writing a comment
When you comment on an article or post, we only collect your personal data (name, email address, comment text) to the extent you have made it available. The processing serves the purpose of enabling commenting and displaying comments. By submitting the comment, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your personal data will then be deleted.
When your comment is published, only the name you provide will be published.
Use of the email address for sending newsletters
We use your email address, regardless of the contract processing, exclusively for our own advertising purposes to send newsletters, provided that you have expressly consented to this. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Use of the email address for sending direct advertising
We use your email address, which we received as part of the sale of a product or service, to electronically send advertising for our own products or services that are similar to those you have already purchased from us, provided that you have not objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising your objection can be found in the imprint. You can also use the link provided in the advertising email. There are no costs for this other than the transmission costs according to the basic rates.
WhatsApp newsletter
We use your cell phone number exclusively to send our own advertising via WhatsApp, provided you have expressly consented to this. By registering for our WhatsApp newsletter, you consent to the storage of your phone number and to receiving advertising via WhatsApp. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time,
without affecting the legality of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time by notifying us or by unsubscribing from the WhatsApp list. We do not pass on your cell phone number to third parties and use it exclusively to send our own advertising. The other subscribers to our newsletter do not see your cell phone number and cannot send you WhatsApp messages either, as this is not a group but a broadcast list.
Merchandise management
Use of an external inventory management system
We use a merchandise management system to process contracts as part of order processing. For this purpose, your personal data collected as part of the order is transmitted to
exonn UG, Marie-Curie-Str. 2, 79618 Rheinfelden
.
Payment service provider Credit report
Using PayPal
Use of Klarna
Data collection and processing during credit checks by Creditreform Boniversum
Use of personal data when selecting Klarna as payment method
If you have chosen Klarna's payment services Klarna invoice and/or Klarna installment purchase as a payment option, you have consented to us collecting and transmitting to Klarna the following personal data necessary for processing the invoice purchase and an identity and credit check, such as first and last name, address, date of birth, gender, email address, IP address, telephone number, as well as the data necessary for processing the invoice purchase that are related to the order, such as the number of items, item number, invoice amount and taxes in percent. The data processing serves the purpose of offering the payment methods invoice purchase and installment purchase and the credit check required for this. The processing is carried out on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until the revocation.
This data is transmitted so that Klarna can create an invoice and carry out an identity and credit check to process your purchase with the invoice processing you have requested. Klarna requires the buyer's personal data in order to obtain information from credit agencies for the purpose of identity and credit checks. In Germany, these can be the following credit agencies:
- Schufa Holding AG, Kormoranweg 5, 65203 Wiesbaden
- Bürgel Wirtschaftsinformationen GmbH & Co. KG, Postfach 5001 66, 22701 Hamburg
- Creditreform Bremen Seddig KG, Contrescarpe 17, 28203 Bremen
- infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden.
As part of the decision on the establishment, implementation or termination of the contractual relationship, Klarna collects and uses information on the buyer's previous payment behavior and probability values for this behavior in the future, in addition to an address check. The calculation of these score values by Klarna is carried out on the basis of a scientifically recognized mathematical-statistical procedure. Klarna will also use your address data for this purpose. If this calculation shows that you do not have sufficient creditworthiness, Klarna will inform you immediately.
Revocation of the use of personal data by Klarna
1. You can revoke your consent to Klarna using your personal data at any time. However, Klarna may still be entitled to process, use and transmit your personal data if this is necessary for the contractual payment processing through Klarna's services, is legally required, or is required by a court or authority.
2. Of course, you can obtain information about the personal data stored by Klarna at any time. This right is guaranteed by the Federal Data Protection Act. If you as a buyer wish this or would like to inform Klarna of changes to the stored data, you can contact datenschutz@klarna.de.
Cookies
Analysis Advertising
The data processing described in this section, in particular the setting of cookies, is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest:
- in the needs-based and targeted design of the website, e.g. with analysis and statistics tools
- to target site visitors with interest-based advertising, e.g. with conversion tracking
You have the right to object at any time to the processing of personal data concerning you based on Art. 6 (1) (f) GDPR, for reasons arising from your particular situation.
Use of Google Analytics
We use the web analysis service Google Analytics from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website.
If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and compliance with applicable data protection laws.
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services related to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google Analytics uses cookies that enable an analysis of your use of the website. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there. IP anonymization is activated on this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google has certified itself under the US-EU data protection agreement “Privacy Shield” and is therefore committed to complying with European data protection guidelines.
You can prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link [https://tools.google.com/dlpage/gaoptout?hl=de].
To prevent Google Analytics from collecting and storing data across devices, you can set an opt-out cookie. Opt-out cookies prevent your data from being collected in the future when you visit this website. You must opt out on all systems and devices used for this to have a comprehensive effect. If you delete the opt-out cookie, requests will be sent to Google again. If you click here, the opt-out cookie will be set: Deactivate Google Analytics.
You can find more information about terms of use and data protection at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/.
Use of Google Ads Conversion Tracking
Use of Facebook Remarketing
We use the "Custom Audiences" remarketing function from Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA; "Facebook") on our website.
The application serves the purpose of targeting website visitors with interest-based advertising on the social network Facebook.
For this purpose, the Facebook remarketing tag has been implemented on the website. This tag establishes a direct connection to the Facebook servers when you visit the website. This sends the Facebook server information about which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you will then be shown personalized, interest-based Facebook ads.
Your data may be transferred to the USA. Facebook has certified itself under the US-EU data protection agreement "Privacy Shield" and is therefore committed to complying with European data protection guidelines.
You can deactivate the "Custom Audiences" remarketing function here.
For more information about the collection and use of data by Facebook, your rights in this regard, and options for protecting your privacy, please see Facebook’s privacy policy at https://www.facebook.com/about/privacy/.
Plugins
Use of social plug-ins using the “2-click solution”
We use social network plug-ins on our website using the "2-click solution". No connections are made to the social network servers without your express consent and therefore no data is transmitted.
With the standard integration of plug-ins, when you access the pages of our website that contain such a plug-in, a link is established between your computer and the servers of the social network provider, and the plug-in is displayed on the page by sending a message to your browser. Both your IP address and the information about which of our pages you have visited are transmitted to the provider's servers. This applies regardless of whether you are registered or logged in to the social network. Data is also transmitted for unregistered or unlogged users. If you are also logged in to the Facebook social network, this information is assigned to your personal user account. When you use the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account, which you can only prevent by logging out before using the plug-in. So that you retain control over your data, we have decided to initially deactivate the corresponding button. You can recognize this by the grayed-out button. Without your express consent - in the form of activating the button - no link to the social network server is established and consequently no data is transmitted.
Only when you activate the button does the button become active (highlighted in color) and a direct connection to the social network servers is established.
By activating it, you give your consent to the transfer of your data to the respective provider of the social network. This includes both your IP address and the information about which of our pages you have visited. If you are connected to one or more of your social network accounts at the same time, the information collected will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your user accounts on the social networks before visiting our website and before activating the buttons.
The social networks named below are integrated using the "2-click function". Further information on the scope and purpose of the collection and use of data as well as your rights and options for protecting your privacy can be found in the linked data protection notices of the providers.
Google+ der Google LLC (1600 Amphitheatre Parkway, Mountain View, Kalifornien, 94043 USA):
https://www.google.com/intl/de/+/policy/+1button.html
https://policies.google.com/privacy
https://adssettings.google.com/authenticated
Facebook der Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
https://www.facebook.com/policy.php
Twitter (Twitter Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA):
https://twitter.com/personalization
AddThis der Oracle America, Inc. (500 Oracle Parkway, Redwood Shores, CA 94065, USA)
https://www.addthis.com/privacy/privacy-policy
Instagram der Instagram LLC. (1601 Willow Road, Menlo Park, CA 94025, USA):
http://instagram.com/legal/privacy/
Use of Facebook plug-ins
Use of the Google “+1” button
This website uses the “+1” button of the social network Google Plus of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California, 94043 USA, (hereinafter “Google”). When you visit a page on our website with the “+1” button, a connection is established to the Google servers in the USA and the button is displayed on the page by a message to your browser. Both your IP address and the information about which of our pages you have visited are transmitted to the Google server. This applies regardless of whether you are registered or logged in to Google Plus. Data is also transmitted for unregistered or unlogged users. The “+1” button is not used to record your visits to the Internet. When a “+1” button is displayed, Google does not permanently log your browser history and does not evaluate your visit to a page with a “+1” button in any other way. Google stores data about your visit for about two weeks for system maintenance and troubleshooting purposes. However, this data is not structured according to individual profiles, user names or URLs and is not forwarded to us. If you are also a member of Google Plus and are logged in to Google Plus at the time you use the plug-in, the information collected about your page visit will be linked to your Google Plus account and made known to other users. In the case of interactions that are possible with the various Google plug-ins, the corresponding information about you will also be collected, transmitted to Google and stored. You can see an overview of the different types of Google plug-ins here: https://developers.google.com/+/web/
If you have made your profile publicly accessible in the Google Plus settings, Google may display your "+1" as references together with your profile name and photo in Google services, such as in search results or in your Google profile, or elsewhere on websites and advertisements on the Internet. If you do not want Google to assign the collected information directly to your Google Plus profile, you must log out of Google Plus before visiting our website. You can find more information about the collection and use of data by Google, your rights in this regard and options for protecting your privacy in Google's privacy policy: www.google.com/intl/de/+/policy/+1button.html.
You also have the option of preventing Google plug-ins from loading by installing appropriate add-ons in your browser.
Use of Addthis plug-ins
This website uses "Addthis" plug-ins provided by Oracle America, Inc., 500 Oracle Parkway, Redwood Shores, CA 94065, USA; hereinafter referred to as AddThis. With the "Addthis" plug-in, AddThis enables the use of so-called share buttons with which you can recommend individual pages via social networks on the Internet or save them with various bookmark providers (bookmarking service). You can view the various Addthis logos that contain the plug-in at the following link: https://www.addthis.com/get/sharing
When you access pages on our website that contain such a plug-in, a connection is established to the AddThis servers in the USA and the plug-in is displayed on the page by sending a message to your browser. Both your IP address and the information about which of our pages you have visited are transmitted to the AddThis server. Cookies are used in this regard. Cookies are small text files that are stored locally in the cache of the website visitor's Internet browser. The cookies enable the Internet browser to be recognized. AddThis creates anonymized user profiles from this data. These are used to tailor online offers even better to the respective needs.
Further information on the collection and processing of the transmitted data by AddThis can be found at www.addthis.com/privacy/privacy-policy.
You can object to the collection and storage of data by AddThis at any time with effect for the future by setting a so-called "opt-out cookie" on the website www.addthis.com https://www.addthis.com/privacy/opt-out.
You also have the option of preventing the Addthis plug-ins from loading by installing appropriate add-ons in your browser.
Use of Twitter plug-ins
Use of Instagram plug-ins
Use of YouTube
Use of Google Maps
We use the function for embedding GoogleMaps from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") on our website.
If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and complying with applicable data protection laws.
The function enables the visual display of geographical information and interactive maps. When you visit pages that have GoogleMaps embedded, Google also collects, processes and uses data from visitors to the websites.
Your data may also be transmitted to the USA. Google has certified itself under the US-EU data protection agreement "Privacy Shield" and is therefore committed to complying with European data protection guidelines.
The processing is carried out on the basis of Art. 6 (1) (f) GDPR due to the legitimate interest in the needs-based and targeted design of our website.
You can find more information about the collection and use of data by Google in Google's privacy policy at https://www.google.com/privacypolicy.html. There you also have the option of changing your settings in the data protection center so that you can manage and protect your data processed by Google.
Rights of data subjects and storage period
Duration of storage
After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular those under tax and commercial law, and then deleted after the deadline has expired, unless you have consented to further processing and use.
Rights of the data subject
If the legal requirements are met, you have the following rights under Articles 15 to 20 of the GDPR: Right to information, to rectification, to erasure, to restriction of processing, to data portability. In addition, according to Article 21 Paragraph 1 of the GDPR, you have the right to object to processing based on Article 6 Paragraph 1 f of the GDPR and to processing for the purposes of direct marketing. Contact us if you wish. You can find the contact details in our legal notice.
Right to complain to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.
Right of objection
If the personal data processing listed here is based on our legitimate interest in accordance with Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation. After objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.