Privacy Policy

1) Introduction and contact details of the person responsible

We are pleased that you are visiting our website and thank you for your interest. In the following we will inform you about the handling of your personal data when using our Personal data are all data with which you can be personally identified.
Responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Natur Vital Handels GmbH, Wirtschaftszeile Ost 10, 4482 Ennsdorf bei Enns, Austria, Tel. : 0043-7223-20806, Email: office@klinopur. com. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.
The person responsible has appointed a data protection officer who can be reached as follows: "Dr. Franz Reitbauer, Wirtschaftszeile Ost 10, 4482 Ennsdorf Enns, f. reitbauer@klinopur. com, +43 664 101 3688"
For security reasons and to protect the transmission of personal data and other confidential content (e.g. B. Orders or inquiries to the person responsible) an SSL or. TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser line.

2) Introduction and contact details of the person responsible

Our data protection declaration is based on the terms used by the European legislator in the context of the data protection regulation (DSGVO). Our data protection declaration should be legible and understandable for the general public, but also for our customers and business partners. To ensure this, we would first like to explain some of the terms used.

Personal Data

Personal data is any information about a specific or identifiable natural person ("data subject"). An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or by one or more specific characteristics of the physical, physiological, genetic, mental , economic, cultural or social identity of that natural person.

Affected

Any identified or identifiable natural person whose personal data has been processed by the person responsible for processing is affected.

Processing

Processing is any operation or set of operations carried out on personal data, whether automatically collected, recorded, organized, structured, stored, adapted or modified, accessed, consulted, used, through transmission, dissemination or otherwise made accessible, aligned or combined, restricted, deleted or destroyed.

Profiling

Profiling means any form of automated processing of personal data consisting of the use of personal data to evaluate certain aspects of a natural person, in particular to analyze or predict aspects of work performance, economic situation, health, personal preferences , interests, reliability, conduct, location or movements of that natural person.

Pseudonymization

Pseudonymisation is the processing of personal data in such a way that the personal data can no longer be assigned to a specific person without the use of additional information, provided that this additional information is kept separately and is subject to technical and organizational measures to ensure that the personal data cannot be assigned to a specific or identifiable natural person.

Responsible controllers)

Responsible for the processing is the natural or legal person, public authority, agency or other body which alone or jointly with others determines the purposes and means of the processing of personal data; where the purposes and means of such processing are determined by Union or Member State law, the controller or the specific criteria for their nomination may be determined by Union or Member State law.

Processor Processor)

Processor is a natural or legal person, authority, authority or other body that processes personal data on behalf of the person responsible or processed by the controller.

recipient Recipient)

Recipient is a natural or legal person, public authority, agency or other body to which the personal data is passed on, regardless of whether it is a third party or not. However, authorities that may receive personal data in the context of a specific investigation under Union or Member State law are not considered recipients; the processing of this data by these authorities is carried out in accordance with the applicable data protection regulations, according to the purposes of the processing.

Third party

Third party is a natural or legal person, public authority, agency or body other than the data subject, controller, processor and persons authorized to process personal data under the direct supervision of the controller or processor.

consent Consent)

The consent of the data subject is any freely given, specific, informed and unequivocal statement of the wishes of the data subject, through which they declare their consent to the processing of their personal data by means of a statement or an unequivocal affirmation.

3) Data collection when visiting our website

If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the site server (so-called. "Server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you came to the page
Used browser
Operating system used
IP address used (possibly : in anonymous form)

The processing takes place in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

We delete or block the personal data of the person concerned as soon as the purpose of storage no longer applies. Deletion can also take place if this has been provided for by the European or national legislator in EU regulations, laws or other regulations to which our company is subject. The data will also be blocked or deleted if a storage period prescribed by the standards mentioned expires, unless there is a need for further storage of the data for the conclusion or fulfillment of a contract.

4) Hosting & Content Delivery Network

Shopify

We use the system of the following provider to host our website and display the page content: Shopify International Limited, Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data is also transferred to: Shopify Inc. , 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc. , Shopify Payments (USA) Inc. or Shopify (USA) Inc.

All data collected on our website is processed on the provider's servers. We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

When data is transferred to Canada, an appropriate level of data protection is guaranteed by an adequacy decision by the European Commission.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc. , 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing takes place to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. kind 6 para. 1 lit. f GDPR We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

OneDrive Personal Cloud Storage

Your consent data will be processed for the use of this website and the use of the integrated consent management platform. We use OneDrive Personal Cloud Storage from Microsoft OneDrive. The server locations are within the European Union. Due to the judgment of the ECJ of 16. July 2020 (case C311/18) the transfer of personal data to the USA was declared unlawful on the basis of the Privacy Shield. We would like to inform you that it cannot be ruled out that the data will be transmitted to the USA and accessed by the security authorities there in accordance with Art. 50 U S C §1881(b)(4), 50 U. S C § 1881a (= FISA 702) could be exposed.

5) Cookies

What are cookies & co?

Web browser cookies

A web browser cookie is a small text file that is sent from a website to your computer or mobile device, where it is stored by your web browser. Web browser cookies may store information such as your IP address or other identifier, browser type, and information about the content you view and interact with on the Digital Services. By storing such information, web browser cookies can store your preferences and settings for online services and analyze how you use online services.

Tracking Technologies: Web Beacons/Gifs, Pixels, Page Tags, Script

Email and mobile applications may contain small, transparent image files or lines of code to record how you interact with them. This information is used to help website and app publishers better analyze and improve their services.

Use, legal basis and purpose

We use cookies to make our website more user-friendly. Some elements of our website require that the calling browser can be identified even after a page change. 2 functional cookies are set before consent is given. The "PHPSESSID" cookie is used to recognize the browser language and thus display the language of the website appropriately. After closing the browser, this cookie is deleted again. The "wBounce" cookie only contains the value "true". This value is used to recognize whether the user has seen a pop-up before or not. If they've already interacted with it, we don't want to show it to them again for a period of time. In addition, we set the two IAB cookies "euconsent" and "eupubconsent". These cookies are saved if a user does not want to be tracked. The same applies to storing data in local storage. This only serves to remind us if a user has not given his consent. Otherwise we would have to query this again with every page view. The cookies mentioned and the storage of data in local storage only enable functionalities that are intended to contribute to a positive user experience on our website. We do not set cookies with personal data without consent. We also use cookies on our website, which enable an analysis of the surfing behavior of users. When accessing our website, the user is informed about the use of cookies for analysis purposes and their consent to the processing of the personal data used in this context is obtained. In this context, there is also a reference to this data protection declaration. The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a GDPR. The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these it is necessary that the browser is recognized even after a page change. We need cookies for the following applications: Acceptance of language settings. The user data collected by technically necessary cookies are not used to create user profiles. Analysis cookies are used to improve the quality of our website and its content. Through the analysis cookies we learn how the website is used and can thus constantly optimize our offer.

duration

Cookies are stored on the user's computer and transmitted to our site. Therefore, as a user, you also have full control over the use of cookies. By changing the settings in your Internet browser, you can deactivate or restrict the transmission of cookies. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

6) Contacting

6. 1 judge. me

For rating reminders, we use the services of the following provider: Judge. me LLC, PO Box 7403, Jackson, Wyoming 83002, USA

Exclusively on the basis of your express consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your e-mail address and, if applicable, further customer data to the provider so that they can contact you by e-mail with a rating reminder.

You can revoke your consent to us or the provider at any time with effect for the future.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

When contacting us (e.g. B. via contact form or e-mail) personal data will be processed - exclusively for the purpose of processing and answering your request and only to the extent required for this.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 para. 1 lit. f GDPR If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.

The processing of the personal data from the input mask serves us solely to process your request. If contact is made by email, this is also the necessary legitimate interest in the processing of the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

If you have requested product information or an offer, we reserve the right to store the data for two years in order to measure the profitability of our sales and marketing. Otherwise, we will delete the data as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is over when it can be inferred from the circumstances that the facts in question have been finally clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

The user(s) have the option to revoke their consent to the processing of personal data at any time. If the user contacts us by email, he/she can object to the storage of his/her personal data at any time. In such a case, the conversation cannot be continued. All personal data that was saved in the course of making contact will be deleted in this case.

7) Data processing when opening a customer account

According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.

Registration is required to fulfill the customer or partner contract or to carry out pre-contractual measures.

Your customer account can be deleted at any time and can be done by sending a message to the above G address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded have been completed, there are no legal retention periods to the contrary and we have no legitimate interest in further storage.

8) Use of customer data for direct marketing

Subscription to our email newsletter

If you register for our e-mail newsletter, we will send you information about our offers on a regular basis. The only mandatory information for sending the newsletter is your e-mail address. Providing further data is voluntary and is used to be able to address you personally. For sending the newsletter we use the so-called Double opt-in procedure that ensures that you only receive the newsletter if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data we collect when registering for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned at the beginning. After you have unsubscribed, your e-mail address will be deleted immediately from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

Klavio

Our e-mail newsletter is sent via this provider: Klaviyo, 225 Franklin St, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter in accordance with Art. kind 6 para. 1 lit. f GDPR to this provider so that they can take over the sending of the newsletter on our behalf.

Subject to your express consent acc. kind 6 para. 1 lit. a DSGVO, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the content of the newsletter. End device information (e.g. B. Time of call,

IP address, browser type and operating system) is collected and evaluated, but not merged with other databases.

You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded an order processing contract with the provider that protects the data of our site visitors and prohibits disclosure to third parties.

If you cancel your purchase from us before completing the order, you have the option of being reminded of the contents of your virtual shopping cart once by e-mail

The only mandatory information for sending this reminder is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called Double opt-in procedure that ensures that you only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO for sending a shopping cart reminder. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The ones we use when logging in to our

E-mail notification service will be used strictly earmarked.

You can unsubscribe from the shopping cart reminders at any time by sending a message to the person named above. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

Goods availability notification by email

You can opt-in to receive email notifications of stock availability for items that are temporarily unavailable. We will send you a one-time email message about the availability of the item you have selected. The only mandatory information for sending this notification is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called Double opt-in procedure that ensures that you only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data collected by us when registering for our email notification service for the availability of goods is used strictly for the intended purpose.

You can unsubscribe from the availability notifications at any time by sending a message to the responsible person named above. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.

9) Data processing for order processing

Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be processed in accordance with Article 6 Para. 1 lit. b GDPR passed on to the commissioned transport company and the commissioned credit institution.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provide when ordering (name, address, e-mail address) in order to inform you within the framework of our legal information obligations in accordance with Art . 6 para. 1 lit. c GDPR via a suitable communication channel (e.g. by post or e-mail) about upcoming updates in the legally stipulated period. Your contact details will be used strictly earmarked for notifications about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the information in question.

To process your order, we also work together with the following service provider(s), who support us in whole or in part in the implementation of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

Odoo

We use the following provider for order processing: Odoo S. A , Chaussée de Namur 40, 1367 Grand-Rosière, Belgium

Name, address and any other personal data will be processed in accordance with Art. 6 para. 1 lit. b DSGVO passed on to the provider for the purpose of processing the online order. Your data will only be passed on to the extent that this is actually necessary to process the order. The provider is also used for bookkeeping. In this way, the provider processes incoming and outgoing invoices and, if necessary, also the bank transactions of our company in order to automatically record invoices, match them to the transactions and create the financial accounting from this in a partially automated process.

If personal data is also processed here, the processing takes place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in an efficient organization and documentation of our business processes.

Credit check

If we make advance payments, e.g. B. when purchasing on account, we obtain identity and creditworthiness information from specialized service companies (credit agencies). For this purpose, we transmit your personal data required for a credit check to the following company(ies):

SCHUFA Holding AG

Passing on of personal data to shipping service providers

DPD

As a transport service provider, we use the following provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

We provide your e-mail address and/or telephone number in accordance with Art. 6 para. 1 lit. a DSGVO before the delivery of the goods for the purpose of coordinating a delivery date or to the supplier for the delivery notification, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery in accordance with Art. 6 para. 1 lit. b DSGVO only the name of the recipient and the delivery address to the provider. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or the delivery notice is not possible.

Your consent can be revoked at any time with effect for the future from the above-mentioned person responsible or from the provider.

As a transport service provider, we use the following provider: DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, Leopoldsdorf 2333, Austria

Your consent can be revoked at any time with effect for the future from the above-mentioned person responsible or from the provider.

Use of payment service providers (payment services)

Amazon Pay

One or more online payment methods from the following provider are available on this website: Amazon Payments Europe s. c a , 38 avenue J f Kennedy, L-1855 Luxembourg

If you select a payment method from the provider for which you make an advance payment (e.g. credit card payment), the payment data you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the Content of your order according to Art. 6 para. 1 lit. b DSGVO passed on. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent that it is necessary for this.

Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

When selecting a payment method in which the provider makes an advance payment (e.g. purchase on account or installment or direct debit), you will also be asked during the ordering process to enter certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, information about an alternative means of payment).

In order to safeguard our legitimate interest in determining the solvency of our customers, we use this data in accordance with Art. 6 para. 1 lit. f DSGVO forwarded to the provider for the purpose of a credit check. Based on the personal data you provide and other data (e.g. shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have selected can be granted with regard to payment and/or bad debt risks.

For the decision in the context of the application review, in addition to provider-internal criteria according to Art. 6 para. 1 lit. f DSGVO also identity and creditworthiness information from the following credit agencies are included:

https://cdn. of course. com/1. 0/shared/content/legal/terms/0/de_de/credit_rating_agencies

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain continues to be entitled to process your personal data if this is necessary for contractual payment processing.

Mollie

One or more online payment methods from the following provider are available on this website: Mollie B. V , Keizersgracht 313, 1016 EE Amsterdam, The Netherlands

Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S. a right l et Cie, p. C A , 22-24 Boulevard Royal, L-2449 Luxembourg

Collection agency

We reserve the right to transfer your data to the debt collection service provider IDG Inkasso Direkt GmbH, Wienerstr. 131, 4020 Linz, insofar as our payment claim has not been settled despite a previous reminder. In this case, the claim will be collected directly by the debt collection service provider.

The transfer of your data serves to fulfill the contract in accordance with Art. 6 para. 1 p. 1 lit. b GDPR and the protection of our overriding legitimate interests in an effective assertion or

Enforcement of our payment claim according to Art. 6 para. 1 p. 1 lit. f GDPR

Credit check

Should we make advance payments (e.g. B. Delivery on account), we reserve the right to carry out a credit check based on mathematical-statistical procedures in order to protect our legitimate interest in determining the solvency of our customers. We transmit the personal data required for a credit check in accordance with Art. 6 para. 1 lit. f GDPR to the following service provider:

SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany

The credit report may contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical process. Among other things, but not exclusively, address data is included in the calculation of the score values. We use the result of the credit check in relation to the statistical probability of payment default for the purpose of deciding on the establishment, implementation or termination of a contractual relationship.

You can object to this processing of your data at any time by sending a message to the person responsible for data processing or to the aforementioned credit agency. However, we may remain continues to be entitled to process your personal data if this is necessary for contractual payment processing.

CRIF Bürgel GmbH Radlkoferstrasse 2 81373 Munich Germany

Universum Business GmbH Hanauer Landstrasse 164 60314 Frankfurt am Main Germany

arvato infoscore GmbH Rheinstraße 99 76532 Baden-Baden Germany

10) Online Marketing

Facebook pixel to create custom audiences

Within our online offering, we use the "Facebook Pixel" service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook")

If a user clicks on an advertisement placed by us on Facebook, the URL of our linked page is extended by a parameter using "Facebook Pixel". After forwarding, this URL parameter is then entered into the user's browser by a cookie that our linked page sets itself.

This makes it possible for Facebook to use the visitors of our online offer as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the service to only display the Facebook ads we have placed to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. B. interests in certain topics or products, which are determined based on the websites visited), which we transmit to Facebook (so-called. "Custom Audiences").

On the other hand, "Facebook Pixel" can be used to track whether users were redirected to our website after clicking on a Facebook ad and what execution actions they take there (so-called. "Conversion Tracking").

The data collected is anonymous to us, so we cannot draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes.

All the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

The information generated by Facebook is usually transmitted to a Facebook server and stored there; in this context, there may also be a transfer to servers of Meta Platforms Inc. come in the US.

11) Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called Cookies, i.e. text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "Web beacons" (small invisible graphics), through the use of which simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This can also lead to a transmission to the servers of Google LLC. come in the US.

Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.

All of the processing described above, in particular the reading of information on the end device used via cookies and/or web beacons, will only be carried out if you have given us permission in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. Without this consent, Google AdSense will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

Google's privacy policy can be viewed here: https://www. google. de/policies/privacy/

12) Web Analytics Services

Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

Google (Universal) Analytics is used on this website exclusively without the use of cookies, which means that the service never sets cookies on your end device.

Instead, the local memory of your browser is used to store an individual ID assigned by Google (Universal) Analytics, which enables an analysis of your use of the website. For this purpose, certain user information is processed via the ID. This information includes your

IP address, which is shortened by Google by the last digits in order to exclude direct personal reference.

The information is transmitted to Google servers and processed there. Transmissions to Google LLC based in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All of the processing described above, including the storage of information on the end device used in the form of the ID, only takes place if you have given us your express consent in accordance with Art. kind 6 para. 1 lit. a DSGVO have granted.

Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can revoke your consent at any time with effect for the future.

To exercise your revocation, you can download and install the browser plug-in available under the following link: https://tools. google. com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin or within browsers on mobile devices, you can revoke your consent by clicking on the following link to set an opt-out cookie that will prevent future collection by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again):

Disable Google Analytics

We have concluded an order processing contract with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For the transmission of data to the USA, Google relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

Further legal notices relating to Google (Universal) Analytics, including a copy of the aforementioned Standard Contractual Clauses, can be found at https://policies. google. com/privacy?hl=de&gl=de and at https://policies. google. com/technologies/partner-sites

Demographic Characteristics

Google (Universal) Analytics uses the special function "demographic characteristics" and can use it to create statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be assigned to a specific person and will be deleted after being stored for a period of two months.

Google Signals

As an extension to Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics acc. kind 6 para. 1 lit. a DSGVO analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop the cross-device analysis, you can turn off the "Personalized advertising" function in the settings of your

Deactivate Google accounts. To do this, follow the instructions on this page: https://support. google. com/ads/answer/2662922?hl=de You can find more information about Google Signals under the following link: https://support. google. com/analytics/answer/7532985?hl=de

UserIDs

The "UserIDs" function can be used on this website as an extension to Google (Universal) Analytics. If you consent to the use of Google (Universal) Analytics acc. kind 6 para. 1 lit. a GDPR, have set up an account on this website and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.

Hotjar

This website uses the web analytics service of the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), the service collects and stores pseudonymised visitor data, including information on the end device used such as the IP address and browser information, to evaluate them for statistical analyzes of usage behavior on our website and to create pseudonymised usage profiles. Among other things, the evaluation of movement patterns (so-called Heatmaps) are possible, which show the duration of page visits and interactions with page content (e.g. B text input, scrolling, clicks and mouse-overs). Pseudonymization basically excludes a direct personal reference. A combination with other clear data collected about you does not take place.

All of the processing described above, in particular the reading out or saving of information on the end device used, will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Google Analytics 4

This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics sets 4 cookies, which are stored as small text modules on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude direct personal reference.

The information is transmitted to Google servers and processed there. Transmissions to Google LLC based in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.

All of the processing described above, in particular the setting of cookies on the end device used, only takes place if you have given us your express consent in accordance with Art. kind 6 para. 1 lit. a DSGVO have granted.

Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.

We have concluded an order processing contract with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For the transmission of data to the USA, Google relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

Further legal information on Google Analytics 4, including a copy of the Standard Contractual Clauses referred to, can be found at https://policies. google. com/privacy?hl=de&gl=de and under https://policies. google. com/technologies/partner-sitesGoogle

Google Tag Manager

This website uses the "Google Tag Manager", a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter:

"Google").

The Google Tag Manager offers a technical basis for bundling various web applications, including tracking and analysis services, and being able to calibrate, control and attach conditions via a uniform user interface. The Google Tag Manager itself does not store or read any information on user devices. The service also does not carry out any independent data analyses. However, the Google Tag Manager transmits your IP address to Google when the page is accessed and may store it there. Also a transmission to servers of Google LLC. In the US it is possible.

This processing will only be carried out if you inform us in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. Without this consent, Google Tag Manager will not be used during your visit to the site. You can revoke your consent at any time with effect for the future To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

LogRocket

LogRocket is a specialized web analytics service provided by LogRocket Inc. based in Boston, Massachusetts. It is designed to collect a wealth of data about user behavior, including JavaScript errors, stack traces, and browser metadata. It is also able to process feedback and survey information.

The purpose of data collection by LogRocket is to analyze user behavior and collect feedback. The technologies used to transmit data include cookies, web logs and web beacons. With regard to the data collected, various information is collected, including the date and time of the visit, device type, geographic location, IP address, mouse movements, pages visited, screen resolution and others.

The processing of the data is legally based on Art. 6 para. 1 p. 1 lit. a GDPR. The data will be processed and stored in the European Union, but may also be transferred to third countries, including the United States. It is important to note that there are risks associated with processing by US authorities if there is a transfer to the US. The data is stored for a period of 365 days and then deleted if it is no longer required.

As recipients of the data, LogRocket Inc. , Amazon Web Services EMEA SARL and Datadog Inc. listed. For more information, including the privacy policy and cookie policy, visit the LogRocket website. It is also possible to revoke the processing of the data by LogRocket.

Finally, it should be noted that LogRocket cookies have a maximum storage period of one year.

13) Retargeting/ remarketing and conversion tracking

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing, with which we advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Any further data processing will only take place if you have agreed to Google linking your Internet and app browser history to your Google account and using information from your Google account to personalize ads that you see on the web regard. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data in order to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. come in the US.

Details on the processing initiated by Google Ads Remarketing and how Google handles data from websites can be found here: https://policies. google. com/technologies/partner-sites

You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available under the following link: https://support. google. com/ads/answer/7395996?

Further information and the data protection regulations regarding advertising and Google can be found here: https://www. google. com/policies/technologies/ads/

- Google Ads conversion tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") . We use Google Ads to draw attention to our attractive offers with the help of advertising material (so-called Google Adwords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are pursuing the goal of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files that are stored on your end device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, we and Google can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked via the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who opt for

Conversion tracking. Customers learn the total number of users who clicked on their ad and to one with a

conversion tracking tag page were forwarded. However, they do not receive any information with which users can be personally identified. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. come in the US.

Details on the processing triggered by Google Ads Conversion Tracking and on how Google handles data from websites can be found here: https://policies. google. com/technologies/partner-sites

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available under the following link: https://www. google. com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not work or may only work to a limited extent if you have disabled the use of cookies.

Google's privacy policy can be viewed here: https://www. google. de/policies/privacy/

14) Page functionalities

Youtube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data can also be transmitted to: Google LLC. , United States

If you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.

If you are logged into a user account with the provider during your visit to the site, your data will be assigned directly to your account when you click on a video. If you do not wish to be assigned to your account, you must log out before pressing the play button.

All of the aforementioned processing, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent in accordance with Art. kind 6 para. 1 lit. a DSGVO have granted. You can revoke your consent at any time with effect for the future by deactivating this service using the “Cookie Consent Tool” provided on the website.

15) Trusted Shops Trustbadge

Graphic elements from the following provider are integrated on our website to display external customer ratings and/or an externally awarded quality mark: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany

If you call up a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements properly. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed, this is done in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the optimal marketing of our offer and the attractive design of our website.

Google reCAPTCHA

On this website we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data can also be transmitted to: Google LLC, USA. For the visual design of the Captcha window, the provider uses "Google Fonts", i.e. fonts downloaded from the Internet by Google. There is no processing of further information than the ones mentioned above, which are already transmitted to Google via the functionality of ReCaptcha.

The service checks whether an entry is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is taken by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the end device used, identification data for the browser and operating system type used as well as the date and duration of the visit and transmits these for evaluation Provider's server.

The legal basis is our legitimate interest in determining individual personal responsibility on the Internet and avoiding misuse and spam in accordance with Art. 6 para. 1 lit. f GDPR

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

16) Tools and Miscellaneous

Cookie Consent Tool

This website uses a so-called.

"Cookie Consent Tool". The "Cookie-Consent-Tool" is displayed to users when the page is accessed in the form of an interactive user interface, on which consent can be given for certain cookies and/or cookie-based applications by ticking the box. By using the tool, all cookies/services that require consent are only loaded if the respective user gives their consent by ticking the box. This ensures that such cookies are only set on the respective end device of the user if consent has been given.

The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed here.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, allocating or logging cookie settings, this takes place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and therefore in a legally compliant design of our website.

Further legal basis for the processing is Art. 6 para. 1 lit. c GDPR As the person responsible, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

Further information about the operator and the setting options of the

Cookie consent tools can be found directly in the corresponding user interface on our website.

More tools - Shopify

We also use applications from the Shopify App Store, for example to make our offers more user-friendly and to handle ordering processes. Here are details of the apps we use:

Transcy:

AI Language Translate, a service provided by OneCommerce, is used to translate our website. You can get an overview of this application and its interface here: https://apps. shopify. com/transcy-multiple-languages Information about the data protection of this app can be found under the following link: https://onecommerce. io/privacy-policy/

PageFly Landing Page Builder

We use the BraveBits Co. PageFly app to design attractive pages. , JSC, 6th floor, 68 Hoang Dao Thuy St. , Nhan Chinh, Thanh Xuan District, Hanoi, Vietnam 100000. This app provides solutions for merchants who use Shopify to build pages for their stores. Under the following privacy policy https://www. sellersmith. com/pages/privacy-policy you can read how personal data is collected, used and shared when installing or using the app in connection with Shopify.

Appstle Subscriptions

If you decide to subscribe on our website, we use the Appstle Subscription app from Appstle Inc. , 6258 Sparrow Avenue, Burnaby, BC V5E 2T9. As part of this process, the information you provide (name, address, email address, phone number, and IP address and geolocation) is shared with Appstle. The legal basis for this is Art. 6 para. 1 lit. b GDPR. The transfer of data to the USA is based on the standard contractual clauses of the EU Commission.

You can find data protection information about Appstle under the following link: https://subscription-admin. appstle. com/privacy-policy

Bundle Bear – Volume Discounts

In the event that you opt for a product bundle on our website, we use Conversion Bear's Bundle Bear app. During this process, the information you provide (such as name, address, email address, phone number, IP address and geolocation) will be forwarded to Conversion Bear. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission.

You can find further data protection information about Conversion Bear here: https://www. conversionbear. com/.

17) Rights of the data subject

The applicable data protection law grants you the following data subject rights (rights to information and intervention) vis-à-vis the person responsible for the processing of your personal data, whereby reference is made to the legal basis given for the respective exercise requirements:
- Right to information according to 15 GDPR;
- Right to rectification according to 16 GDPR;
- Right to erasure according to 17 GDPR;
- Right to restriction of processing in accordance with 18 GDPR;
- Right to information according to 19 GDPR;
- Right to data portability according to 20 GDPR;
- Right to revoke granted consent in accordance with Article 7 Para. 3 GDPR;
- Right to complain according to 77 GDPR.

RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF A BALANCING OF INTERESTS IN OUR PREVIOUS LEGITIMATE INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE EN.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA INVOLVED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPREHENSIVE REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING IS FOR THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING. YOU MAY OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP THE PROCESSING OF THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

18) Duration of storage of personal data

The duration of the storage of personal data is based on the respective legal basis, the purpose of the processing and - if relevant - also based on the respective statutory retention period (e.g. B. commercial and tax retention periods).

When processing personal data on the basis of an express consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.

Are there any legal retention periods for data that are collected within the framework of legal transactions or obligations similar to legal transactions on the basis of Art. 6 para. 1 lit. b GDPR are processed, these data are routinely deleted after the retention periods have expired, provided they are no longer required to fulfill or initiate a contract and/or we have no legitimate interest in further storage.

When processing personal data on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you have exercised your right of objection in accordance with Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

When processing personal data for the purpose of direct advertising on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until you have exercised your right of objection in accordance with Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

As of July 2023