Data protection

––––––––––––––––––––
Privacy Policy
––––––––––––––––––––

1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the processing of your personal data when you use our website. Personal data means any data that can be used to identify you personally.
1.2 The controller for the processing of personal data on this website within the meaning of the General Data Protection Regulation (GDPR) is BIMONI GmbH, Stahlgruberring 32, 81829 Munich, Germany, Tel.: 08972488890, Email: service@bimoni.de. The controller for the processing of personal data is the natural or legal person that alone or jointly with others decides on the purposes and means of the processing of personal data.

2) Data collection when visiting our website
2.1 When you use our website solely for informational purposes, i.e., when you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website we visited
- Date and time of access
- Amount of data sent in bytes
- Source/referral from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing takes place pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files ex post if there are concrete indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” string and the padlock symbol in your browser bar.

3) Hosting & Content Delivery Network
3.1 Amazon Web Services
For hosting our website and displaying the page content, we use the system of the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg
Data may also be transmitted to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties. 
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
3.2 Shopify
For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
In the event of a data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
3.3 AWS CloudFront
We use a content delivery network from the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg
This service allows us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing takes place to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
Data may also be transmitted to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
3.4 Cloudflare
We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service allows us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing takes place to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted when the browser is closed (so-called “session cookies”), while some cookies remain on your device longer and enable the storage of page settings (so-called “persistent cookies”). In the latter case, you can find out the storage duration in the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies we use, the processing takes place pursuant to Art. 6(1)(b) GDPR either for the performance of the contract, pursuant to Art. 6(1)(a) GDPR in the event of given consent, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the visit to the page.
You can set your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for certain cases or generally.
Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contact
5.1 Judge.me
For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom
Solely on the basis of your express consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address and, if applicable, further customer data to the provider so that it can contact you with a review reminder by email.
You can revoke your consent at any time with effect for the future towards us or the provider.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
In the event of a data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
5.2 In the context of contacting us (e.g., via a contact form or email), personal data is processed – solely for the purpose of processing and answering your inquiry and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in answering your inquiry pursuant to Art. 6(1)(f) GDPR. If your contact is aimed at a contract, then Art. 6(1)(b) GDPR is the additional legal basis for the processing. Your data will be deleted when it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that no statutory retention obligations prevent this.

6) Comment function
In the context of the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you chose is stored and published on this website. Furthermore, your IP address is also logged and stored. This storage of the IP address takes place for security reasons and in the event that the person concerned violates the rights of third parties by submitting a comment or posts unlawful content. We need your email address to contact you if a third party should object to your published content as unlawful.
The legal bases for the storage of your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

7) Data processing when opening a customer account
Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. Which data is required for account opening can be found in the input mask of the corresponding form on our website.
Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted provided that all contracts concluded regarding it have been fully settled, no statutory retention periods prevent this, and we no longer have a legitimate interest in further storage.

8) Use of customer data for direct advertising
8.1 Registration for our email newsletter
If you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and will be used to be able to address you personally. For newsletter distribution, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter after you have expressly confirmed your consent to receive the newsletter by clicking a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR. Here, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can later trace a possible misuse of your email address. The data we collect when registering for the newsletter will be used strictly for the specified purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this declaration.
8.2 Klaviyo
The sending of our email newsletters and other promotional email communications takes place via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA
On the basis of our legitimate interest in effective and user-friendly email marketing, we pass on the data you provided when registering to this provider pursuant to Art. 6(1)(f) GDPR so that it can handle the email distribution on our behalf.
Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also carries out a statistical success evaluation of email campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. In doing so, device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to email tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects the data of our visitors and prohibits disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
8.3 Omnisend
The sending of our email newsletters takes place via this provider: Soundest Ltd., Unit a3, Gateway Tower, 32 Western Gateway, London E16 1YL, England
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider pursuant to Art. 6(1)(f) GDPR so that it can handle the newsletter distribution on our behalf.
Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. In doing so, device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects the data of our visitors and prohibits disclosure to third parties.
In the event of a data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
8.4 Shopify Email
The sending of our email newsletters takes place via this provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider pursuant to Art. 6(1)(f) GDPR so that it can handle the newsletter distribution on our behalf.
Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also carries out a statistical success evaluation of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. In doing so, device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded a data processing agreement with the provider, which protects the data of our visitors and prohibits disclosure to third parties.
In the event of a data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
8.5 Cart reminders by email
In the event that you abandon your purchase with us before completing the order, you have the option to be reminded once by email of the contents of your virtual shopping cart.
The only mandatory information for sending this reminder is your email address. Providing further data is voluntary and will be used, if applicable, to be able to address you personally. For email distribution, we use the so-called double opt-in procedure, which ensures that you only receive a notification after you have expressly confirmed your consent regarding this by clicking a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR for sending a cart reminder. Here, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can later trace a possible misuse of your email address. The data we collect when registering for our email notification service will be used strictly for the specified purpose.
You can unsubscribe from cart reminders at any time by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this declaration.

9) Data processing for order fulfillment
9.1 To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data we collect will be disclosed to the appointed transport company and the appointed credit institution pursuant to Art. 6(1)(b) GDPR.
If we owe you updates for goods with digital elements or for digital products based on a relevant contract, we process the contact details you provide when placing the order to inform you personally of our legal information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of communicating updates that we owe you and are processed for this purpose only to the extent necessary for the respective information.
To fulfill your order, we also work with the following service provider(s), who assist us wholly or partially in executing contracts. Certain personal data is disclosed to these service providers in accordance with the following information.
9.2 DreamRobot
For order fulfillment, we use the following provider: DreamRobot GmbH, Eckendorfer Str. 2-4, 33609 Bielefeld, Germany
Your name, address, and, if applicable, other personal data are disclosed to the provider exclusively for the purpose of processing the online order pursuant to Art. 6(1)(b) GDPR. Your data is disclosed only to the extent actually necessary for fulfilling the order.
9.3 Disclosure of personal data to shipping service providers
- Deutsche Post
As a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
Pursuant to Art. 6(1)(a) GDPR, we disclose your email address and/or telephone number to the provider before delivery of the goods for the purpose of coordinating a delivery time or providing a delivery notification, provided you have given your express consent to this during the ordering process. Otherwise, pursuant to Art. 6(1)(b) GDPR, we only disclose the recipient's name and the delivery address to the provider for the purpose of delivery. The disclosure only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery time with the provider or delivery notification is not possible.
Consent can be revoked at any time with future effect by notifying the controller designated above or the provider.
- DHL
As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
Pursuant to Art. 6(1)(a) GDPR, we disclose your email address and/or telephone number to the provider before delivery of the goods for the purpose of coordinating a delivery time or providing a delivery notification, provided you have given your express consent to this during the ordering process. Otherwise, pursuant to Art. 6(1)(b) GDPR, we only disclose the recipient's name and the delivery address to the provider for the purpose of delivery. The disclosure only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery time with the provider or delivery notification is not possible.
Consent can be revoked at any time with future effect by notifying the controller designated above or the provider.
9.4 Use of payment service providers (payment services)
- Apple Pay
If you choose the payment method "Apple Pay" by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment is processed via the "Apple Pay" feature of your device running iOS, watchOS, or macOS by charging a payment card stored in "Apple Pay". Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. Therefore, authorizing a payment requires entering a code previously set by you and verification using your device's "Face ID" or "Touch ID" feature.
For the purpose of processing the payment, the information you share during the ordering process, together with information about your order, is disclosed to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the successful payment.
If personal data is processed during the transmissions described above, the processing is carried out exclusively for the purpose of processing the payment pursuant to Art. 6(1)(b) GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and approximate time, and whether the transaction was successfully completed. Anonymization completely excludes any personal connection. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
If you use Apple Pay on the iPhone or Apple Watch to complete a purchase made via Safari on the Mac, the Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that could identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac".
Further privacy information about Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027
- Google Pay
If you choose the payment method "Google Pay" by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment is processed via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function by charging a payment card stored in Google Pay or a payment system verified there (e.g., PayPal). To authorize a payment via Google Pay of more than €25, you must first unlock your mobile device using the verification method you have set up (e.g., facial recognition, password, fingerprint, or pattern).
For the purpose of processing the payment, the information you share during the ordering process, together with information about your order, is disclosed to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a uniquely issued transaction number, which is used to verify the payment. This transaction number contains no information about the actual payment details of your payment method stored in Google Pay; instead, it is created and transmitted as a one-time valid numerical token. In all transactions via Google Pay, Google merely acts as an intermediary to process the payment. The transaction is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay.
If personal data is processed during the transmissions described above, the processing is carried out exclusively for the purpose of processing the payment pursuant to Art. 6(1)(b) GDPR.
Google reserves the right to collect, store, and analyze certain transaction-specific information for every transaction made via Google Pay. This includes the date, time, and amount of the transaction; the merchant's location and description; a description of the goods or services purchased provided by the merchant; photos you have attached to the transaction; the name and email address of the seller and buyer or sender and recipient; the payment method used; your description of the reason for the transaction; and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively pursuant to Art. 6(1)(f) GDPR on the basis of a legitimate interest in proper accounting, the verification of transaction data, and the optimization and continued operation of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when you use other Google services.
The Google Pay Terms of Service can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further privacy information about Google Pay can be found at the following web address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Klarna
This website offers one or more online payment methods from the following provider: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden
When you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data shared during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, is disclosed to them pursuant to Art. 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
When you select a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data about an alternative payment method).
To protect our legitimate interest in assessing the creditworthiness of our customers, we forward this data to the provider pursuant to Art. 6(1)(f) GDPR for the purpose of a credit check. Based on the personal data you have provided and other data (such as your shopping cart, invoice amount, order history, and payment history), the provider assesses whether the payment option you have selected can be granted in view of payment and/or default risks.
In addition to the provider's internal criteria, identity and credit information from the following credit reporting agencies may also be included in the decision-making process during the application review pursuant to Art. 6(1)(f) GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data, among other things but not limited to, is included in the calculation of the score values.
You can object to this processing of your data at any time by sending us a message or by notifying the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of the payment.
- PayPal
This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
When you select a payment method from the provider where you pay in advance, your payment data shared during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, is disclosed to them pursuant to Art. 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
When you select a payment method where we pay in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data about an alternative payment method).
In such cases, to protect our legitimate interest in assessing your creditworthiness, we forward this data to the provider pursuant to Art. 6(1)(f) GDPR for the purpose of a credit check. Based on the personal data you have provided and other data (such as your shopping cart, invoice amount, order history, and payment history), the provider assesses whether the payment option you have selected can be granted in view of payment and/or default risks.
The credit report may contain probability values (so-called score values). To the extent that score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data, among other things but not limited to, is included in the calculation of the score values.
You can object to this processing of your data at any time by sending us a message or by notifying the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of the payment.
- Shopify Payments
This website offers one or more online payment methods from the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
When you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data shared during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, is disclosed to them pursuant to Art. 6(1)(b) GDPR. In this case, your data is disclosed exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
9.5 Electronic cancellation option for ongoing consumer contracts
Consumers who have entered into contracts on this website for ongoing paid contracts (e.g., subscription contracts) have the option to cancel them via an electronic button in accordance with the applicable cancellation periods.
Clicking the button leads to a confirmation page where the consumer can provide further details about the cancellation, clearly identify themselves, and subsequently submit their cancellation electronically.
The collection of personal data and its transmission to us is carried out pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for the proper processing of the cancellation. The provided personal data is also used pursuant to Art. 6(1)(b) GDPR to confirm receipt of the cancellation declaration and the time of cancellation electronically in text form. Another legal basis for processing is Art. 6(1)(c) GDPR. We are legally required to provide an electronic cancellation option for consumer contracts entered into in the course of electronic commerce for ongoing paid contracts.
9.6 Electronic withdrawal function for distance contracts
Consumers who enter into contracts on this website for which a statutory right of withdrawal exists have the option to declare the withdrawal via an electronic withdrawal function in accordance with the applicable withdrawal provisions.
When using the withdrawal function, in addition to information identifying the contract to be withdrawn, other personal information such as the consumer's first and last name and email address must also be provided or confirmed.
The collection of this information and its transmission to us is carried out pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for the proper processing of the withdrawal. The provided personal data is also used pursuant to Art. 6(1)(b) GDPR to confirm receipt of the withdrawal declaration by email. Another legal basis for processing is Art. 6(1)(c) GDPR. We are legally required to provide an electronic withdrawal function for paid consumer distance contracts.

10) Web analytics services
10.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.
By default, Google (Universal) Analytics sets cookies when you visit the website. These are stored as small text files on your device and collect certain information. This information also includes your IP address, which Google shortens by removing the last digits to prevent direct identification.
The information is transmitted to Google's servers and further processed there. This may also include transmissions to Google LLC, which is based in the USA.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet use. The IP address transmitted by your browser and shortened within the scope of Google Analytics is not combined with other data from Google. The data collected through the use of Google (Universal) Analytics is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on the device you use, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to the website. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information about Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites
Demographic characteristics
Google (Universal) Analytics uses the special "demographic characteristics" feature and can create statistics that provide insights into the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This can be used to identify target groups for marketing activities. However, the collected data cannot be assigned to any specific person and is deleted after being stored for two months.
Google Signals
As an extension of Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including for cross-device conversions, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable the "Personalized ads" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
User IDs
As an extension of Google (Universal) Analytics, the "User IDs" feature can be used on this website. If you have consented to the use of Google (Universal) Analytics pursuant to Art. 6(1)(a) GDPR, have set up an account on this website, and are logged in with this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
10.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These are stored as small text files on your device and collect certain information. This information also includes your IP address, which Google shortens by removing the last digits to prevent direct identification.
The information is transmitted to Google's servers and further processed there. This may also include transmissions to Google LLC, which is based in the USA.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet use. The IP address transmitted by your browser and shortened within the scope of Google Analytics is not combined with other data from Google. The data collected through the use of Google Analytics 4 is stored for two months and then deleted.
All processing described above, in particular the setting of cookies on the device you use, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special "demographic characteristics" feature and can create statistics that provide insights into the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This can be used to identify target groups for marketing activities. However, the collected data cannot be assigned to any specific person and is deleted after being stored for two months.
Google Signals
As an extension of Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including for cross-device conversions, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable the "Personalized ads" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de
User IDs
As an extension of Google Analytics 4, the "User IDs" feature can be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have set up an account on this website, and are logged in with this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
10.3 Microsoft Clarity
This website uses the web analytics service provided by the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including device information such as the IP address and browser information, to evaluate it for statistical analysis of usage behavior on our website and to create pseudonymized usage profiles. This includes, among other things, the analysis of movement patterns (so-called heatmaps), which show the duration of website visits as well as interactions with website content (e.g., text input, scrolling, clicks, and mouse-overs). Pseudonymization generally precludes direct identification. The data is not combined with clear data about you collected in other ways.
All processing described above, in particular the reading or storage of information on the device you use, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by disabling this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
10.4 Shopify Analytics
This website uses the web analytics service provided by the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including device information such as the IP address and browser information, to evaluate it for statistical analysis of usage behavior on our website and to create pseudonymized usage profiles. Pseudonymization generally precludes direct identification. The data is not combined with clear data about you collected in other ways.
All processing described above, in particular the reading or storage of information on the device you use, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by disabling this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which protects our website visitors' data and prohibits disclosure to third parties.
For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision by the European Commission.

11) Retargeting/Remarketing and Conversion Tracking
11.1 Meta Pixel
Within our online offer, we use the "Meta Pixel" service provided by the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")
If a user clicks on an advertisement we have placed on Facebook and/or Instagram, the URL of our linked page is appended with a parameter using the "Meta Pixel". This URL parameter is then entered into the user's browser via a cookie set by our linked page itself after redirection.
This allows Meta, on the one hand, to define visitors to our online offer as a target audience for displaying ads (so-called "Ads"). Accordingly, we use the service to show the Facebook and/or Instagram ads we place only to users who have also shown an interest in our online offer or who exhibit certain characteristics (e.g., interests in certain topics or products determined by the websites visited), which we transmit to Meta (so-called "Custom Audiences").
On the other hand, the "Meta Pixel" can be used to track whether users were redirected to our website after clicking on an advertisement and what actions they take there (so-called "Conversion Tracking").
The data collected is anonymous to us, so it does not allow us to draw conclusions about the identity of the users. However, the data is stored and processed by Meta, so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.
All processing described above, in particular the setting of cookies to read information on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is generally transmitted to a Meta server and stored there; in this context, it may also be transmitted to Meta Platforms Inc. servers in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.2 Microsoft Advertising
This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
This makes it possible to specifically target visitors to our websites with personalized, interest-based advertising who have already shown interest in our shop and our products. The display of advertising materials is based on a cookie-based analysis of previous and current usage behavior.
In cases involving retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor the advertising individually to the stored information. These cookies are small text files stored on your computer or mobile device. This allows you to be shown advertising that is highly likely to correspond to your product and information interests.
All processing described above, in particular the setting of cookies to read information on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without this consent, the use of retargeting technology during your visit to the site will be omitted.
You can revoke your consent at any time with future effect. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.3 Google Ads Conversion Tracking
This website uses the "Google Ads" online advertising program and, within Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads offering to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. We do this to show you advertising that is of interest to you, make our website more interesting for you, and achieve a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an Ads ad placed by Google. Cookies are small text files stored on your device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Every Google Ads customer receives a different cookie. Cookies can therefore not be tracked via the websites of Google Ads customers. The information obtained with the help of the conversion cookie, which also includes your IP address, is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page equipped with a conversion tracking tag. However, they do not receive any information that would allow users to be personally identified. Within the scope of using Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies to read information on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de
Please note that certain functions of this website may not be available or may only be available in a limited capacity if you have deactivated the use of cookies.
Google's privacy policies can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

12) Site Functionality
12.1 Integration of the Instagram Feed via Mintt Studio
On our website, we use the services of Mintt Studio, Rua Parque da República 116, 4430-164 Vila Nova de Gaia, Portugal, to display preview images of our Instagram profile. Cookies, i.e., small text files stored locally in your internet browser's cache, are used for this purpose.
The widget establishes a connection to the servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Instagram") when visitors visit our website. Through this, Instagram receives certain browser information, including your IP address. In individual cases, transmission to servers of Meta Platforms Inc. based in the USA is also possible.
All processing described above, in particular the setting of cookies to read information on the device used, only takes place if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
12.2 - Google reCAPTCHA
On this website, we use the CAPTCHA service provided by the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA.
For the visual design of the Captcha window, the provider uses "Google Fonts", i.e., fonts loaded from the internet by Google. No processing of additional information beyond that mentioned above, which is already transmitted to Google via the functionality of ReCaptcha, takes place here.
The service checks whether an entry is made by a natural person or through unauthorized machine and automated processing, and blocks spam, DDoS attacks, as well as similar automated malicious access. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this to the provider's servers for evaluation. Cookies, i.e., small text files stored in the device's browser, may be used for this purpose.
If the processing described above is based on cookies, these will only be set if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.
If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual personal responsibility on the internet and avoiding abuse and spam pursuant to Art. 6(1)(f) GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

13) Tools and Other Items
13.1 DATEV
For bookkeeping, we use the cloud-based accounting software service provided by the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany
The provider processes incoming and outgoing invoices as well as, if applicable, our company's bank transactions to automatically record invoices, match them to transactions, and create financial accounting from this in a semi-automated process.
If personal data is also processed in this context, the processing is based on our legitimate interest in the efficient organization and documentation of our business transactions pursuant to Art. 6(1)(f) GDPR.
13.2 Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain valid user consent for cookies requiring consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users in the form of an interactive user interface when the page is loaded, on which consent for specific cookies and/or cookie-based applications can be given by checking boxes. In doing so, through the use of the tool, all cookies/services requiring consent are only loaded if the respective user gives the corresponding consent by checking the boxes. This ensures that such cookies are set on the respective user's device only in the event of given consent.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed here.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our online presence.
Another legal basis for processing is Art. 6(1)(c) GDPR. As the data controller, we are under a legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
Where necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the setting options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

14) Rights of the Data Subject
14.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) against the data controller regarding the processing of your personal data, whereby the requirements for the respective exercise are referred to the cited legal basis:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to revoke given consent pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH FUTURE EFFECT.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNING YOU. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPULSIVE PROTECTABLE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE THE PROCESSING OF THE DATA CONCERNING YOU FOR DIRECT MARKETING PURPOSES.

15) Duration of Storage of Personal Data
The duration of storage of personal data is determined by the respective legal basis, the processing purpose, and – where applicable – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).
When processing personal data on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you revoke your consent.
If statutory retention periods exist for data processed pursuant to Art. 6(1)(b) GDPR in the context of legal or quasi-legal obligations, this data will be routinely deleted after the retention periods expire, provided it is no longer required for contract fulfillment or contract initiation and/or we no longer have a legitimate interest in continued storage.
When processing personal data on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling protectable grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
When processing personal data for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.
Unless otherwise stated in the other information of this declaration regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright notice: This privacy policy was created by the IT-Recht Kanzlei IT lawyers and is protected by copyright (https://www.it-recht-kanzlei.de)

As of: 11.08.2026, 20:37:58