Privacy Policy

1. General information

1.1 What is personal data

Personal data is information that discloses or may disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

1.2 Handling of personal data

Personal data is used exclusively for the establishment of the contract, content design, execution or processing of the contractual relationship (Art. 6 (1 b) GDPR).

In addition, personal data will only be processed if we have obtained your consent to do so (Art. 6 (1 a) GDPR) or if the processing of the data is necessary for our legitimate interests and if the assessment shows that there are no overriding interests, fundamental rights or freedoms on your part to the contrary (Art. 6 (1 f) GDPR).

We may use data processors to process your personal data, with whom we have concluded a data processing agreement where necessary, but we will not pass on your personal data to third parties beyond this.

The data will only be passed on to the shipping company commissioned with the delivery for the fulfillment of the contract insofar as this is necessary for the delivery of ordered goods. In order to process payments, the required payment data will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

Your personal data will be processed in the EU and countries classified by the EU as safe or appropriate. If personal data is processed in the USA, care is taken to ensure that the services we use are certified under the "Data Privacy Framework".

1.3 Usage data

General technical information is collected when you visit the website. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.

1.4 Registration data

Registration is required to make full use of the functions of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose in accordance with your consent (Art. 6 (1 a) GDPR).

1.5 Duration of storage

We only store your personal data after the end of the purpose for which the data was collected for as long as this is required by law (in particular, tax law).

2. Your rights

2.1 Information

You can request information from us as to whether we are processing personal data about you, and if so, you have a right to be informed about this personal data and to receive further information referred to in Art. 15 of the GDPR.

2.2 Right to rectification

You have the right to rectify inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.

2.3 Right to erasure

You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to erase it immediately, in particular, if one of the following reasons applies:

• Your personal data are no longer necessary for the purposes they were collected or otherwise processed.
• You withdraw your consent on which the processing of your data was based, and there is no other legal basis for the processing.
• Your data has been processed unlawfully.

The right to erasure does not apply if your personal data is required to assert, exercise or defend our legal claims.

2.4 Right to restriction of processing

You have the right to demand that we restrict the processing of your personal data if

• you dispute the accuracy of the data, and we, therefore, check the accuracy,
• the processing is unlawful, and you oppose the erasure and request the restriction of use instead,
• we no longer need the data, but you need it to assert, exercise or defend legal claims,
• you have objected to the processing of your data, and it is not yet certain whether our legitimate reasons outweigh your reasons.

2.5 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or a contract and the processing is carried out by automated means.

2.6 Right of revocation

If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

2.7 General information and right to lodge a complaint

Exercising your above rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer.

3. Data security

3.1 Data security

All data on our website is protected by technical and organizational measures against loss, destruction, access, modification and dissemination.

3.2 Sessions and cookies

To operate the website, we use cookies or server-side sessions in which data can be stored. We ensure that no personal data is transferred from sessions or through cookies without your express consent and that cookies are only used if this is technically necessary for the website (e.g., spam protection for the contact form, shopping cart function) and thus the consideration shows that there are no overriding interests on your part to the contrary (Art. 6 (1 f) GDPR) or that you have given your express consent.

With your express consent, we use cookies to personalize content and advertisements, to offer functions for social media and to analyze access to our website. With your consent, we may share information about your use of our website with our social media, advertising and analytics partners. Our partners may be able to combine this information with other data that the partners already have about you.

The cookie tkt_lang only stores the language you have chosen (de or en) so that the website appears in that language on your next visit; without a choice of your own, the language follows your browser.

Below, you will find the domain, name and duration of the cookies used only based on your consent:

Note: Without your consent we only measure reach anonymously with Matomo (self-hosted, no cookies, shortened IP address, no user ID). The cookies listed above are set only after you consent to “Statistics” (Google Analytics) or “Marketing” (X/Twitter: guest_id_ads, guest_id_marketing, personalization_id, muc_ads, _twpid, up to 2 years, domain twitter.com/t.co). Meta and Reddit receive data server-side only and set no cookies via our site.

4. Newsletter

If you subscribe to our newsletter, we will use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 (1 a) GDPR.
You can unsubscribe from the newsletter at any time, either by sending a message to us using the contact options provided in the legal notice, by deactivating the relevant messages in the user settings or by clicking on the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

5. Comments

If you use the comment function on our website, the time of creation, your chosen pseudonym and temporarily also your IP address will be stored in addition to these comments. This is done so that we can protect our rights in the event of unlawful content.

6. Presence on social media platforms

We use the following social media platforms for company presentation and communication (explicit reference is made to the data protection declarations and opt-out options below).

These social media platforms may process personal data outside the EU; in this respect, we refer you to the above data protection declarations of the social media platforms.

The respective social media platforms may be able to create user profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior can be stored independently of your device. For example, your usage profile can be used to place advertisements that presumably correspond to your interests.

We process the personal data exclusively for communication with you via the social media platform you have selected and to optimize our online presence, and ensure that no interests on your part are affected that outweigh this legitimate interest on our part (Art. 6 (1 f) GDPR). If you have already given the respective operator of the social media platform effective consent to the corresponding data processing, your personal data will also be processed on the basis of this consent (Art. 6 (1 a) GDPR).

7. Services from third-party providers

7.1 Social media links and social sharing

We have our own social media pages with third-party providers that can be reached via links from this website. By using the links, you can access the respective websites of the third-party providers (e.g., Facebook, X, Instagram) and also share our content. Here, no data transfer takes place by calling up our website. To avoid unnecessary data transfer, we recommend logging out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider simply by using the link.

7.2 Shopify

7.2.1 Hosting by Shopify

We use the store system of the service provider Shopify (operated by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland) to host and display the online store. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. as part of further processing on behalf of Shopify. The use of Shopify is based on our legitimate interest (Art. 6 I p. 1 f GDPR) in being able to offer you an appealing store or website and to facilitate our processing. In the context of contract processing, the legal basis is Art. 6 (1 b) GDPR. You can view Shopify's privacy policy here: https://www.shopify.de/legal/datenschutz

7.2.2 Shopify Analytics

We also use the analytics tool Shopify Analytics (operated by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). In addition to processing your IP address, the tool also uses cookies. The information and data about the use of our website that the cookies collect is transferred to Shopify and analyzed there. This enables us to track the use of our website and optimize it accordingly. Shopify Analytics is only used with your consent (Art. 6 (1 a) GDPR). You can view Shopify's privacy policy here: https://www.shopify.de/legal/datenschutz
You can find more information about Shopify Analytics at https://help.shopify.com/de/manual/reports-and-analytics/shopify-reports

7.2.3 Shopify Payments

We also use the payment service provider Shopify Payments (operated by Shopify Payments Inc., 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2, Ireland). If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process together with the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1 b) GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information about Shopify Payments' data protection in their privacy policy: https://www.shopify.com/legal/privacy
The privacy policy of Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

7.3 Klarna

In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer the following payment options:

• Invoice: The payment period is 14 days from the dispatch of the goods or, in the case of other services, the provision of the service. You can find the invoice terms here: https://cdn.klarna.com/1.0/shared/content/legal/terms/EID/de_de/invoice?fee=0
• Installment purchase: With Klarna's financing service, you can pay for your purchase flexibly in monthly installments of at least 1/24 of the total amount (but at least EUR 6.95) or under the conditions otherwise specified in the checkout. Payment by installments is due at the end of each month after Klarna has sent you a monthly invoice. Further information on installment purchases, including the General Terms and Conditions and the European standard information for consumer credit, can be found here: https://cdn.klarna.com/1.0/shared/content/legal/terms/EID/de_de/account
• Immediately: Your account will be debited immediately after placing the order.
• Credit card (Visa/ Mastercard)
• Direct debit: The amount will be debited after the goods have been dispatched. You will be informed of the date by e-mail.

The legal basis for this is Art. 6 (1 b) GDPR.

The use of the payment methods invoice, installment purchase and direct debit also requires a positive credit check, as we make advance payments and ship the goods. We, therefore, have a legitimate interest in the information (Art. 6 (1 f) GDPR). In this respect, we forward your data to Klarna for the purpose of address and credit checks as part of the purchase initiation and processing of the purchase contract. Further information and Klarna's terms of use can be found here: https://cdn.klarna.com/1.0/shared/content/legal/terms/EID/de_de/user
You can find general information about Klarna here: https://www.klarna.com/de/
You can view Klarna's privacy policy here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

7.4 Further payment options

In addition to payment by credit card, Klarna's payment methods and processing via Shopify Payments, it is also possible to carry out the payment process via the following payment provider:

PayPal (PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (City), Luxembourg)
Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full/

Google Pay (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
Privacy policy: https://www.google.de/intl/de/policies/privacy

The following of your data is regularly transmitted to the third-party providers for payment processing and processed by them:

• Your e-mail address
• Your address
• Details of your order
• Your IP address
• Phone number
• Bank details

The transfer and processing of your personal data by the payment provider is necessary so that you can make the payment through them. The legal basis for this is Art. 6 (1 b) GDPR (processing for the performance of a contract).

7.5 Braintree (PayPal)

If you use our services for a fee, we will pass on your data to the online payment service Braintree from PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) for payment processing. The legal basis for this is Art. 6 (1 b) GDPR. PayPal receives your e-mail address, address and details of the items you have purchased from us. Information provided to Braintree is not under our control and is subject to the privacy policy of PayPal or Braintree.

You can view PayPal's privacy policy here:
https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE

You can view Braintree's privacy policy here:
https://www.braintreepayments.com/en-de/legal/braintree-privacy-policy.

7.6 Reach measurement, analytics and advertising (Matomo, Google Tag Manager, Google Analytics, Meta, Reddit, X)

Without consent: anonymous reach measurement

We measure the use of our website with Matomo, which we host ourselves. Without your consent this happens without cookies: the IP address is shortened before storage, no user ID is set and no profile is created across visits. The data is received by our own server container (server-side Google Tag Manager, sGTM), which we operate on Google Cloud (Google Cloud Run, data centre in Belgium, EU), and forwarded to our Matomo. Legal basis is our legitimate interest in a functioning website and in knowing its reach (Art. 6 (1 f) GDPR).

With consent “Statistics”: Google Analytics and Matomo with events

If you agree to “Statistics” in the cookie banner, we additionally use Google Analytics 4 (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) via sGTM and record events in Matomo (e.g. pages viewed, dialogs opened, purchases). Google Analytics uses cookies (see the table above), a shortened IP address, device and browser information and approximate location; the data is usually transmitted to Google servers in the United States on the basis of the EU–U.S. Data Privacy Framework and/or the EU Commission’s Standard Contractual Clauses. Legal basis is your consent (Art. 6 (1 a) GDPR). Google’s privacy policy: https://policies.google.com/privacy.

With consent “Marketing”: Meta, Reddit and X

If you agree to “Marketing”, certain events (e.g. page views, purchases) are forwarded server-side from sGTM to the Meta Conversions API (Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland; Facebook and Instagram) and to Reddit (Reddit Ireland Limited, Dublin, Ireland) in order to measure campaigns and show relevant advertising. In addition the X pixel (X Corp. / Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland) is loaded in your browser; it sets X cookies (see the table above). Meta and Reddit set no cookies via our site. Legal basis is your consent (Art. 6 (1 a) GDPR). Privacy policies: https://www.facebook.com/privacy/policy, https://www.reddit.com/policies/privacy-policy, https://twitter.com/en/privacy.

You can withdraw your consent at any time with effect for the future using the “Adjust Cookies” button below (both switches off = withdrawal). With consent “Statistics”, Matomo shows us the user name of logged-in users, and events relating to a wallet may contain the last 6 characters of the wallet address. The events we record contain no e-mail addresses and no complete wallet addresses; without consent they contain no names either.

Purposes of processing

• Analytics and statistical evaluation of user behavior
• Optimization of our website and marketing
• Reach and success measurement of advertising campaigns

Storage period

Data will be deleted or anonymized as soon as it is no longer required for analysis purposes. Google Analytics data is typically retained for 14 months.

You can adjust your cookie consent here: Adjust Cookies

8. Contacting us

You are welcome to use the following contact options to contact us regarding data protection. Controller within the meaning of the GDPR: