Data protection

Privacy Policy

  1. Introduction and Contact Details of the Controller

1.1 We are delighted that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when using our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Joe Willenweber, Christopher 26, 50670, Email: joewillenweber@gmx.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser's address bar.

  1. Data Collection When Visiting Our Website

When you use our website purely for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The website visited
  • Date and time of access
  • Amount of data sent in bytes
  • Source/referrer from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Data is not passed on or used in any other way. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

  1. Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage duration in the cookie settings overview of your web browser. If personal data is also processed through individual cookies we use, this processing is carried out in accordance with Art. 6(1)(b) GDPR to fulfill the contract, in accordance with Art. 6(1)(a) GDPR in the case of given consent, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit. You can set your browser so that you are informed about the setting of cookies and decide individually on their acceptance, or exclude the acceptance of cookies for certain cases or generally. Please note that if you do not accept cookies, the functionality of our website may be limited.

  1. Contact

When you contact us (e.g. via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your inquiry, and only to the extent necessary for that purpose. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively clarified, provided no statutory retention obligations preclude this.

  1. Comment Function

Within the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you chose are stored and published on this website. Furthermore, your IP address is stored for security reasons, to enable identification of the author in the event of unlawful comments. Your email address is stored so that we can contact you should a third party object to your published content as unlawful.

  1. Use of Customer Data for Direct Marketing

Signing Up for Our Email Newsletter

If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing further data is voluntary and is used to personally address you. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receiving it by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you sign up for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending an appropriate message to the controller named at the beginning. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further use of data that is permitted by law and about which we inform you in this declaration.

  1. Data Processing for Order Processing

7.1 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data we collect is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided when ordering (name, address, email address) in order to personally inform you, as part of our statutory information obligations pursuant to Art. 6(1)(c) GDPR, about upcoming updates via a suitable means of communication (e.g. by post or email) within the legally prescribed period. Your contact data is used strictly for the intended purpose of communications about updates we owe, and is processed by us for this purpose only to the extent necessary for the respective communication.

To process your order, we also work with the following service provider(s), who support us in whole or in part in carrying out concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

7.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We pass on your name and delivery address, and, if necessary for delivery, your phone number, exclusively for the purpose of delivering goods pursuant to Art. 6(1)(b) GDPR, to a shipping partner selected by us.

7.3 Use of Payment Service Providers

  • Amazon Pay If you select "Amazon Pay" as the payment method, payment processing is carried out via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter "Amazon Payments"), to whom we pass on the information you provide during the ordering process along with information about your order in accordance with Art. 6(1)(b) GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. If cookies (small text files stored on the device) are set when using Amazon Pay, this is done exclusively on the basis of your explicit consent pursuant to Art. 6(1)(a) GDPR. This consent can be revoked at any time via the "cookie consent tool" implemented on the website. Further information on Amazon Payments' privacy policy can be found at: https://pay.amazon.de/help/82974
  • Apple Pay If you choose "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, as the payment method, payment processing is carried out via the "Apple Pay" function of your device running iOS, watchOS, or macOS, by charging a payment card stored in "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. To authorize a payment, you must enter a code you have previously set, as well as verify via the "Face ID" or "Touch ID" function of your device. For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay in order to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number as well as a transaction-specific, dynamic security code to the originating website to confirm successful payment. Insofar as personal data is processed in the transmissions described, processing is carried out exclusively for the purpose of payment processing pursuant to Art. 6(1)(b) GDPR. Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was completed successfully. Anonymization completely excludes any reference to a specific person. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services. If you use Apple Pay on the iPhone or Apple Watch to complete a purchase made via Safari on a Mac, the Mac and the authorizing device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that could identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac." Further information on data protection for Apple Pay can be found at: https://support.apple.com/de-de/HT203027
  • Google Pay If you choose "Google Pay" from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") as the payment method, payment processing is carried out via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with NFC functionality, by charging a payment card stored in Google Pay or a payment system verified there (e.g. PayPal). To authorize a payment via Google Pay exceeding €25, you must first unlock your mobile device using the verification method you have set up (e.g. facial recognition, password, fingerprint, or pattern). For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is passed on to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a one-time transaction number, which is used to verify that a payment has been made. This transaction number contains no information about the actual payment data of the payment method stored in Google Pay, but is created and transmitted as a one-time valid numeric token. In all transactions via Google Pay, Google acts merely as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay. Insofar as personal data is processed in the transmissions described, processing is carried out exclusively for the purpose of payment processing pursuant to Art. 6(1)(b) GDPR. Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos you attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction. According to Google, this processing is carried out exclusively pursuant to Art. 6(1)(f) GDPR on the basis of the legitimate interest in proper invoicing, verification of transaction data, and optimization and maintenance of the Google Pay service. Google also reserves the right to combine the processed transaction data with additional information collected and stored by Google when using other Google services. Google Pay's terms of use can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de Further information on data protection for Google Pay can be found at: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
  • giropay When paying via "giropay," payment processing is carried out via giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to whom we pass on the information you provide during the ordering process along with information about your order. Your data is passed on in accordance with Art. 6(1)(b) GDPR exclusively for the purpose of payment processing and only to the extent necessary for this purpose. Further information on giropay GmbH's privacy policy can be found at: https://www.giropay.de/rechtliches/datenschutzerklaerung
  • PayPal When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data as part of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). This is done in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing. For the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6(1)(f) GDPR on the basis of PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, is included in the calculation of the score values. For further data protection information, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
  • SOFORT If the payment method "SOFORT" is selected, payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we pass on the information you provide during the ordering process along with information about your order in accordance with Art. 6(1)(b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is passed on exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. Further information on SOFORT's privacy policy can be found at: https://www.klarna.com/sofort/datenschutz
  1. Online Marketing

Facebook Pixel for Creating Custom Audiences with Advanced Matching (with Cookie Consent Tool) Our online offering uses the so-called "Facebook Pixel" of the social network Facebook in advanced matching mode, operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). Based on the user's explicit consent, when a user clicks on an advertisement displayed by us on Facebook, Facebook Pixel adds a parameter to the URL of our linked page. This URL parameter is then written into a cookie in the user's browser after redirection, which is set by our linked page itself. In addition, this cookie captures specific customer data, such as the email address, which we collect on our website linked to the Facebook ad during processes such as purchases, account registrations, or sign-ups (advanced matching). The cookie is then read by Facebook Pixel, enabling the data, including the specific customer data, to be forwarded to Facebook. With the help of the Facebook Pixel with advanced matching, Facebook is able to precisely determine visitors to our online offering as a target audience for displaying ads (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel with advanced matching to display the Facebook ads placed by us only to those Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products, determined based on the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel with advanced matching, we also want to ensure that our Facebook ads correspond to users' potential interests and do not come across as intrusive. This also allows us to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook advertisement (so-called "conversion"). Compared to the standard version of Facebook Pixel, the advanced matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions. All transmitted data is stored and processed by Facebook, making it possible to link it to the respective user profile, and Facebook may use the data for its own advertising purposes in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and off Facebook. These processing operations are carried out exclusively upon the granting of explicit consent pursuant to Art. 6(1)(a) GDPR. The information generated by Facebook is generally transmitted to a Facebook server and stored there; this may also involve transmission to Meta Platforms Inc.'s servers in the USA. You can revoke your given consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

  1. Retargeting/Remarketing/Referral Advertising

Pinterest Retargeting Pixel This website integrates a pixel (Pinterest Tag) from Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) ("Pinterest"). With the help of the pixel, information about website visitors' browsing behavior can be collected, stored, and evaluated in pseudonymized form. This information can be linked to the user's identity with the help of additional information that Pinterest has stored about the user, for example due to ownership of an account on the "Pinterest" social network. Pinterest uses an algorithm to analyze browsing behavior and can then display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest may also combine the information collected via the pixel with other information that Pinterest has collected via other websites and/or in connection with the use of the "Pinterest" social network, thereby creating pseudonymized usage profiles. However, the collected information can never be used to personally identify visitors to this website. All processing operations described above, in particular the setting of cookies for reading information on the device used, are only carried out if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

TikTok Pixel This website uses the "TikTok Pixel," a tracking technology of the social network "TikTok" by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"). With the help of cookies (small text files stored on the device used), information about browsing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored there, and evaluated in order to enable the delivery of interest-based and personalized product recommendations on TikTok. The information collected and processed in pseudonymized form generally includes the device ID, device type, timestamp, operating system used, and IP address. This information can be linked to the user's identity with the help of additional information that TikTok has stored about the user, for example due to ownership of an account on the "TikTok" social network. TikTok may also combine the information collected via the pixel with other information that TikTok has collected via other websites and/or in connection with the use of the "TikTok" social network, thereby creating pseudonymized usage profiles. However, the collected information can never be used to personally identify visitors to this website. The TikTok Pixel also allows us to track the effectiveness of advertisements on TikTok. If a user is redirected from an advertisement on TikTok to pages of this website and the cookies have not yet expired, the pixel records certain user actions predefined by us and can track them (e.g. completed transactions, leads, search queries on the website, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie via the TikTok Pixel to TikTok's server, transmitting certain information about the action. Through this transmission, TikTok can create statistics on usage behavior on our website following redirection from a TikTok advertisement, which we use to optimize our offering. All processing operations described above, in particular the setting of cookies for reading information on the device used, are only carried out if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website. We have entered into a data processing agreement with TikTok for the use of the TikTok Pixel, obligating TikTok to protect our website visitors' data and not to pass it on to third parties. TikTok generally transmits collected information outside the European Economic Area and relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with the European data protection standard.

  1. Website Functionalities
  • Best Currency Converter This website uses the "Best Currency Converter" service provided by Grizzly Apps SRL, Str. Muresului Nr. 7 Bloc E23, Scara B, Apartament 15, Brasov, Romania ("Best Currency Converter"). Based on our legitimate interest in displaying prices in the local currency of your location, Best Currency Converter collects your IP address in accordance with Art. 6(1)(f) GDPR and evaluates it in order to adapt price displays on the website to your location. The IP address is not stored permanently. Furthermore, after the initial currency adjustment, Best Currency Converter sets a functional cookie in the browser of the device you are using, in order to store the currency setting for the duration of a session. This cookie is automatically deleted after the session ends. Further information on the privacy policy of "Best Currency Converter" can be found at https://currency.grizzlyapps.com/privacy-policy
  1. Rights of the Data Subject

11.1 Applicable data protection law grants you the following rights as a data subject (rights to information and intervention) with respect to the controller regarding the processing of your personal data; the applicable legal basis is referenced for the respective requirements for exercising these rights:

  • Right to information pursuant to Art. 15 GDPR;
  • Right to rectification pursuant to Art. 16 GDPR;
  • Right to erasure pursuant to Art. 17 GDPR;
  • Right to restriction of processing pursuant to Art. 18 GDPR;
  • Right to notification pursuant to Art. 19 GDPR;
  • Right to data portability pursuant to Art. 20 GDPR;
  • Right to withdraw consent given pursuant to Art. 7(3) GDPR;
  • Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, TO THIS PROCESSING WITH EFFECT FOR THE FUTURE. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING YOUR DATA FOR DIRECT MARKETING PURPOSES.

  1. Duration of Storage of Personal Data

The duration of storage of personal data is determined based on the respective legal basis, the processing purpose, and, where applicable, additionally based on the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, this data is stored until the data subject withdraws their consent.

Where statutory retention periods exist for data processed as part of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods expire, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights, and freedoms of the data subject, or the processing serves the assertion, exercise, or defense of legal claims.

When personal data is processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Flagging a few issues in the source document itself: section 1.2 has an incomplete address ("Christopher 26 50670" — missing street type and city, and likely misspelled, since earlier documents in this conversation list "Christophstraße 26, 50670 Köln"). I translated it as given but you'll want to fix that in the German original too. This is your Datenschutzerklärung, a legally required document, so I'd strongly recommend a lawyer review it before publishing, particularly given the long list of third-party processors (Facebook, TikTok, Pinterest, various payment providers) — those need to accurately reflect what your site actually uses.