1.3 To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) via HTTPS.

2. data collection when visiting our website

Each time you visit our website, our system automatically collects data and information that your browser transmits to our server (so-called “server log files”). The following data, which is technically necessary for us, is collected:

• Our visited website
• Date and time at the time of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Operating system used
• Browser used
• IP address used (if applicable: in anonymized form)

The legal basis for the processing is Art. 6 para. 1 lit. f DSGVO due to our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used in any other way. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.
We reserve the right to check the server log files retrospectively if there are concrete indications of illegal use. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.
In the case of storage of data in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or alienated, so that an assignment of the calling client is no longer possible. The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility for the user to object.

3. contact

If you contact us via contact form, the data entered in the input mask will be transmitted to us and stored. The collected data can be found in the respective input mask. When contacting us by e-mail, only the data you enter there will be transmitted to us.
The data will be used exclusively for processing the conversation and your request. The legal basis for the processing of the data, if the user has given his consent, is Art. 6 para. 1 lit. a) GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 para. 1 lit. f) GDPR. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b) GDPR. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected and provided that there are no statutory retention obligations to the contrary. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when the circumstances indicate that the matter in question has been conclusively clarified. The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by e-mail, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

4. cookies

Our website uses cookies.

Cookies are text files that are stored on the user’s terminal device. When a user accesses a website, a cookie may be stored on the user’s operating system. Some functions of our website cannot be offered without the use of cookies. This requires that the browser is recognized even after a page change. The user data collected through technically necessary cookies are not used to create user profiles. In the above-mentioned purposes also lies our legitimate interest in the processing of personal data pursuant to Art. 6 para. 1 lit. f) GDPR.

In addition, our website may use cookies that enable an analysis of the user’s surfing behavior (so-called third-party cookies). For more information on the scope, purpose, legal basis and objection options, please refer to the relevant sections of the respective chapter of this privacy policy.

You as a user have full control over the use of cookies. By changing the settings in your Internet browser, you can disable, restrict or delete the transfer of cookies. If you deactivate cookies for our website, it may no longer be possible to use all functions of the website to their full extent. You can prevent the transmission of Flash cookies by changing the Flash Player settings.

You can find help on the settings in the respective help menu of your browser under the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used here are deleted after you close your browser (so-called session cookies). Other cookies remain on your terminal device and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.

To manage the cookies and similar technologies used (tracking pixels, web beacons, etc.) and related consents, we use the consent tool “Real Cookie Banner”. Details on how “Real Cookie Banner” works can be found at <a href=”https://devowl.io/de/rcb/datenverarbeitung/” rel=”noreferrer” target=”_blank”>https://devowl.io/de/rcb/datenverarbeitung/</a>.

Legal bases for the processing of personal data in this context are Art. 6 para. 1 lit. c DS-GVO and Art. 6 para. 1 lit. f GDPR. Our legitimate interest is to manage the cookies and similar technologies used and the related consents.

The provision of personal data is neither contractually required nor necessary for the conclusion of a contract. You are not obliged to provide the personal data. If you do not provide the personal information, we will not be able to manage your consents.

7. use of your data for direct advertising

7.1 Newsletter

On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. The only mandatory information is your email address. If you make any other voluntary entries, these will only be used for personal addressing.

The legal basis for the processing of your data after registration for the newsletter is, if the user has given his consent, Art. 6 para. 1 lit. a GDPR. We obtain this by sending you a confirmation email containing a confirmation link after you have subscribed to the newsletter. When you click on this link, you also give your consent to receive the newsletter.
When sending the registration for the newsletter, we store your IP address and the date and time of registration. This storage serves to be able to trace a possible misuse of your e-mail address.

We use the data we collect when you register for the newsletter exclusively for the purpose of sending the newsletter.

The subscription to the newsletter can be cancelled by you at any time. For this purpose, there is a corresponding link in each newsletter. This also enables the revocation of consent to the storage of personal data collected during the registration process.

7.2 Sendinblue
We send our newsletters via Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin (hereinafter referred to as “Sendinblue”).
We disclose the data you entered when subscribing to the newsletter in accordance with Art. 6 para. 1 lit. f DSGVO to Sendinblue in order to protect our legitimate interest in using an effective, secure and user-friendly newsletter system.
The data entered when ordering the newsletter (e.g. e-mail address) is stored on Sendinblue’s servers in Germany. Your data will be used by Sendinblue to send and statistically evaluate the newsletters on our behalf. For this purpose, the newsletter emails contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. In this way, it is possible to track whether a newsletter email has been opened and which links from it have been clicked. With the help of this conversion tracking, it is also possible to track whether an action (such as the purchase of an item from our store) was carried out after opening a link from the newsletter. In addition, technical information is also collected (e.g. the time of the retrieval, your IP address, browser type and/or operating system). This data is only collected pseudonymously and is not linked to your other personal data. If you do not wish to receive the data analysis described here, you must unsubscribe from the newsletter. There is an order processing contract with Sendinblue.

For details on Sendinblue’s privacy policy, please see:
https://de.sendinblue.com/legal/privacypolicy/

8. rights of the data subject

8.1 The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, which we inform you about below:

– Right to information according to Art. 15 DSGVO:
You may request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have a right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and about the existence of other rights such as correction of the data or the existence of a right of appeal to a supervisory authority, the origin of your data if they were not collected by us, the existence of automated decision-making including profiling and, if applicable. meaningful information about the logic involved and the scope and intended effects of such processing that affect you, as well as your right to be informed about what guarantees exist in accordance with Article 46 of the GDPR when your data is transferred to third countries;

– Right to rectification pursuant to Art. 16 DSGVO:
You have a right to the immediate correction of incorrect data concerning you and/or the completion of your incomplete data stored by us; the correction or completion must take place immediately.

– Right to restriction of processing pursuant to Art. 18 DSGVO:
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is verified, if you refuse the deletion of your data due to unauthorized data processing and instead request the restriction of the processing of your data, if you need your data for the assertion, exercise or defense of legal claims after we no longer need this data after the purpose has been achieved or if you have objected on the grounds of your particular situation as long as it has not yet been determined whether our legitimate reasons prevail;
Where the processing of personal data concerning you has been restricted, such data may be processed, with the exception of their storage, only with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the restriction of processing has been restricted, you will be informed by the controller before the restriction is lifted.

– Right to erasure pursuant to Art. 17 DSGVO:
You have the right to request the immediate deletion of your personal data if the conditions of Art. 17 para. 1 GDPR are fulfilled. However, this right to erasure does not exist in particular – not conclusively – if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims

– Right to information pursuant to Art. 19 GDPR:
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to notify all recipients to whom your personal data have been disclosed of this rectification or erasure of the data or restriction of processing, unless this is impossible or involves a disproportionate effort. You also have the right to be informed about these recipients.

– Right to data portability according to Art. 20 DSGVO:
You have the right to receive your personal data disclosed to us in a structured, common and machine-readable format or to request that it be transferred to another responsible party, insofar as this is technically possible;

– Right of withdrawal according to Art. 7 para. 3 GDPR:
You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 para. 1 lit. e) or f) DSGVO; this also applies to profiling based on these provisions.
You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The revocation of consent shall not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

– Right to lodge a complaint pursuant to Art. 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

8.2 Right of objection

You have the right to object to the processing of your data at any time with effect for the future if we process your data on the basis of our overriding legitimate interest after weighing up your interests.
If you exercise this right of objection, we will terminate the processing of your data if there are no demonstrably overriding compelling legitimate grounds for the termination or if the further processing serves the exercise or defense of legal claims.

9. duration of the storage of personal data

The duration of the storage of personal data depends in each case on statutory retention periods. After expiry of this period, we routinely delete the data if it is no longer required for the fulfillment or initiation of the contract and/or we have no further legitimate interest in continuing to store it.