Privacy Policy

1. Introduction

With the following information, we would like to provide you as the "data subject" an overview of the processing of your personal data by us and your rights under data protection laws. Using our websites is generally possible without providing personal data. However, if you would like to use special services of our company via our website, the processing of personal data may be necessary. If the processing of personal data is required and there is no legal basis for such processing, we generally obtain your consent.

The processing of personal data, such as your name, address, or email address, is always carried out in accordance with the General Data Protection Regulation (GDPR) and in compliance with the applicable national data protection regulations for "Woodberg GmbH."Through this privacy policy, we would like to inform you about the scope and purpose of the personal data we collect, use, and process.

As the data controller, we have implemented numerous technical and organizational measures to ensure the most complete protection of personal data processed through this website. However, internet-based data transmissions may generally have security vulnerabilities, so absolute protection cannot be guaranteed. For this reason, you are free to transmit personal data to us via alternative means, such as by phone or by post.

2. Responsible

The responsible party within the meaning of the GDPR is:

Woodberg GmbH
Schulstrasse 11
64283 Darmstadt
Germany

Phone: +49 (0)6151 6291766
Fax: +49 (0)6151 62917669
Email: support@woodberg.de

Representatives of the responsible party: Armin Pourhosseini, Christian Jüttner

3. Definitions

The privacy policy is based on the terminology used by the European legislator when enacting the General Data Protection Regulation (GDPR). Our privacy policy is intended to be easily readable and understandable for both the public and our customers and business partners. To ensure this, we would like to explain the terms used in advance.

In this privacy policy, we use the following terms, among others:

3.1 Personal Data

Personal data is any information that relates to an identified or identifiable natural person. An identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier, or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural, or social identity of that natural person.

3.2 Data Subject

A data subject is any identified or identifiable natural person whose personal data is processed by the data controller (our company).

3.3 Processing

Processing is any operation or set of operations performed on personal data, whether or not by automated means, such as the collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

3.4 Restriction of Processing

Restriction of processing is the marking of stored personal data with the aim of limiting its future processing.

3.5 Profiling

Profiling is any form of automated processing of personal data that consists of using personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning work performance, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements of that natural person.

3.6 Pseudonymization

Pseudonymization is the processing of personal data in such a manner that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures that ensure that the personal data is not attributed to an identified or identifiable natural person.

3.7 Processor

A processor is a natural or legal person, public authority, agency, or other body that processes personal data on behalf of the controller.

3.8 Recipient

A recipient is a natural or legal person, public authority, agency, or other body to whom personal data is disclosed, regardless of whether it is a third party or not. However, authorities that may receive personal data in the course of a specific investigation under Union law or the law of the Member States are not considered recipients.

3.9 Third Party

A third party is a natural or legal person, public authority, agency, or other body other than the data subject, the controller, the processor, and the persons who, under the direct authority of the controller or the processor, are authorized to process the personal data.

3.10 Consent

Consent is any freely given, specific, informed, and unambiguous indication of the data subject's wishes, by which they signify agreement to the processing of personal data relating to them, by means of a statement or a clear affirmative action.

4. Legal basis for processing

Art. 6 para. 1 lit. a GDPR (in conjunction with § 15 para. 3 DDG) serves as the legal basis for processing operations where we obtain consent for a specific processing purpose.

If the processing of personal data is necessary for the performance of a contract to which you are a party, as is the case, for example, with processing operations that are necessary for the delivery of goods or the provision of other services or benefits, the processing is based on Art. 6 para. 1 lit. b GDPR. The same applies to processing operations that are necessary for the performance of pre-contractual measures, such as in cases of inquiries about our products or services.

If our company is subject to a legal obligation that requires the processing of personal data, such as to fulfill tax obligations, the processing is based on Art. 6 para. 1 lit. c GDPR.

In rare cases, the processing of personal data may be necessary to protect vital interests of the data subject or another natural person. This would be the case, for example, if a visitor were to be injured in our premises and subsequently their name, age, health insurance data, or other vital information needed to be disclosed to a doctor, a hospital, or other third parties. In that case, the processing would be based on Art. 6 para. 1 lit. d GDPR.

Ultimately, processing operations could be based on Art. 6 para. 1 lit. f GDPR. Processing operations that are not covered by any of the aforementioned legal bases are based on this legal basis if the processing is necessary for the purposes of legitimate interests pursued by our company or a third party, provided that the interests, fundamental rights, and freedoms of the data subject do not override those interests. Such processing operations are particularly permitted to us because they were specifically mentioned by the European legislator. He held the view that a legitimate interest could be assumed if you are a customer of our company (Recital 47 Sentence 2 GDPR).

5. Technology

5.1 SSL/TLS Encryption

This page uses SSL or TLS encryption to ensure the security of data processing and to protect the transmission of confidential content, such as orders, login data, or contact requests that you send to us as the operator. You can recognize an encrypted connection by the fact that in the address bar of the browser instead of "http://" it shows "https://" and by the lock symbol in your browser bar.

We use this technology to protect your transmitted data.

5.2 Data Collection When Visiting the Website

When using our website for informational purposes only, that is, if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (in so-called "server log files"). Our website collects a series of general data and information with each access to a page by you or an automated system. This general data and information is stored in the server's log files. The following can be collected:

the types and versions of browsers used,
the operating system used by the accessing system,
the website from which an accessing system reaches our website (so-called referrer),
the subpages that are accessed via an accessing system on our website,
the date and time of access to the website,
an Internet Protocol address (IP address),
the Internet service provider of the accessing system.

When using this general data and information, we do not draw conclusions about your person. Rather, this information is needed to

correctly deliver the content of our website,
optimize the content of our website as well as the advertising for it,
ensure the permanent functionality of our IT systems and the technology of our website, and
provide law enforcement authorities with the necessary information for prosecution in the event of a cyber attack.

The data and information collected are therefore evaluated by us on the one hand statistically and further with the aim of increasing data protection and data security in our company, ultimately ensuring an optimal level of protection for the personal data we process. The data from the server log files are stored separately from all personal data provided by a data subject.

The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest arises from the purposes listed above for data collection.

5.3 Encrypted Payment Transactions

If there is an obligation to provide us with your payment data (e.g., account number for direct debit authorization) after the conclusion of a paid contract, this data is required for payment processing.

Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the fact that the address bar of the browser changes from "http://" to "https://" and by the lock symbol in your browser bar.

We use this technology to protect your transmitted data.

6. COOKIES

6.1 General Information about Cookies

We use cookies on our website. These are small files that your browser automatically creates and stores on your IT system (laptop, tablet, smartphone, etc.) when you visit our site.

The cookie contains information that is generated in connection with the specific device used. However, this does not mean that we gain direct knowledge of your identity.

The use of cookies serves, on the one hand, to make the use of our offering more pleasant for you. For example, we use so-called session cookies to recognize that you have already visited individual pages of our website. These are automatically deleted after you leave our site.

In addition, we also use temporary cookies to optimize user-friendliness, which are stored on your device for a specific set period of time. If you visit our site again to use our services, it will be automatically recognized that you have already been with us and which entries and settings you have made, so you do not have to enter them again.

On the other hand, we use cookies to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you. These cookies allow us to automatically recognize that you have already been with us during a subsequent visit to our site. These cookies are automatically deleted after a defined period of time.

6.2 Legal Basis for the Use of Cookies

The data processed by cookies that are necessary for the proper functioning of the website are required to safeguard our legitimate interests as well as those of third parties pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR.

For all other cookies, you have given your consent via our opt-in cookie banner in accordance with Art. 6 para. 1 lit. a GDPR.

7. Content of our website

7.1 Registration as a User

You have the option to register on our website by providing personal data.

The personal data transmitted to us is determined by the respective input mask used for registration. The personal data you provide will be collected and stored exclusively for internal use by us and for our own purposes. We may arrange for the transfer to one or more processors, such as a parcel service provider, who will also use the personal data exclusively for internal use attributable to us.

By registering on our website, the IP address assigned to you by your Internet Service Provider (ISP), the date, and the time of registration are also stored. The storage of this data is based on the premise that this is the only way to prevent the misuse of our services, and this data may enable the clarification of committed crimes if necessary. In this respect, the storage of this data is necessary for our protection. In principle, this data will not be disclosed to third parties unless there is a legal obligation to disclose or the disclosure serves the prosecution of criminal offenses.

Your registration, with the voluntary provision of personal data, also serves to offer you content or services that can only be offered to registered users by their nature. Registered individuals are free to change the personal data provided during registration at any time or to have it completely deleted from our database.

We will provide you with information upon request at any time about which personal data about you is stored. Furthermore, we will correct or delete personal data at your request, provided that there are no legal retention obligations to the contrary. A data protection officer named in this privacy policy and all other employees are available to the data subject as contacts in this regard.

The processing of your data is carried out in the interest of a comfortable and easy use of our website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

7.2 Data Processing When Opening a Customer Account and for Contract Execution

In accordance with Art. 6 para. 1 lit. b GDPR, personal data is collected and processed when you provide it to us for the execution of a contract or when opening a customer account. The data collected can be seen from the respective input forms. Deleting your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data you provide for contract execution. After the complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after the expiration of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by us, which we will inform you about below.

7.3 Data Processing for Order Processing

The personal data we collect will be passed on to the transport company commissioned with the delivery as part of the contract execution, as far as this is necessary for the delivery of the goods. We will pass on your payment data to the bank involved in the payment processing, provided this is necessary for the payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

7.4 Contract Conclusions in Online Shop, Retailer, and Goods Shipping

We only transmit personal data to third parties if this is necessary for the execution of the contract, for example, to the companies entrusted with the delivery of the goods or the bank commissioned with the payment processing. Further transmission of the data does not take place or only if you have expressly consented to the transmission. Your data will not be passed on to third parties without your explicit consent, for example, for advertising purposes.

The basis for data processing is Art. 6 para. 1 lit. b GDPR, which permits the processing of data for the fulfillment of a contract or pre-contractual measures.

7.5 Contacting / Contact Form

In the context of contacting us (e.g., via contact form or email), personal data is collected. The data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after your inquiry has been conclusively processed, which is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

7.6 Application Management

We collect and process the personal data of applicants for the purpose of handling the application process. The processing may also take place electronically. This is particularly the case when an applicant submits corresponding application documents electronically, for example, via email. If we conclude an employment contract with an applicant, the transmitted data will be stored for the purpose of handling the employment relationship in compliance with legal regulations. If no employment contract is concluded with the applicant, the application documents will be automatically deleted six months after the notification of the rejection decision, unless there are other legitimate interests on our part that oppose deletion. Other legitimate interests in this sense include, for example, a duty to provide evidence in proceedings under the General Equal Treatment Act (AGG).

The legal basis for processing your data is Art. 88 GDPR in conjunction with § 26 para. 1 BDSG.

8. Newsletter & Email Marketing

8.1 Newsletter Sending to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, from our range via email. For this purpose, we do not need to obtain separate consent from you in accordance with § 7 para. 3 UWG. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send any emails. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning by sending an email to support@woodberg.de. Upon receipt of your objection, the use of your email address for advertising purposes will be immediately discontinued.

8.2 Newsletter

Our website provides you with the opportunity to subscribe to our company's newsletter. The personal data transmitted to us when ordering the newsletter can be seen from the input mask used for this purpose.

We regularly inform our customers and business partners about our offers via a newsletter. Our company's newsletter can generally only be received if

you have a valid email address and
you have registered for the newsletter.

A confirmation email will be sent to the email address you initially provided for the newsletter subscription for legal reasons, using the double opt-in procedure. This confirmation email serves to verify whether you, as the owner of the email address, have authorized the receipt of the newsletter.

When registering for the newsletter, we also store the IP address assigned to you by your Internet Service Provider (ISP) of the IT system you used at the time of registration, as well as the date and time of registration. The collection of this data is necessary to be able to trace any possible misuse of your email address at a later date and therefore serves our legal protection.

The personal data collected during the registration for the newsletter will be used exclusively for sending our newsletter. Furthermore, subscribers to the newsletter may be informed via email if this is necessary for the operation of the newsletter service or for a related registration, as may be the case with changes to the newsletter offering or changes in technical conditions. There will be no transfer of personal data collected in the context of the newsletter service to third parties. The subscription to our newsletter can be canceled by you at any time. The consent to the storage of personal data that you have granted us for the newsletter dispatch can be revoked at any time. For the purpose of revoking consent, there is a corresponding link in each newsletter. Furthermore, there is also the option to unsubscribe from the newsletter directly on our website at any time or to inform us in another way.

The legal basis for data processing for the purpose of sending the newsletter is Art. 6 para. 1 lit. a GDPR.

8.3 Dialog Marketing Deutsche Post Dialog Solutions

As part of our services, we use Deutsche Post Dialog Solutions GmbH (hereinafter "Deutsche Post") for dialog marketing measures to communicate information, offers, promotional materials, and other content related to our products and services. When using this service, personal data may be processed on our behalf.

Deutsche Post may process personal data on our behalf. Deutsche Post acts as a processor in accordance with applicable data protection laws and the provisions of the General Data Protection Regulation (GDPR). The processing of your data by Deutsche Post is carried out exclusively for the purposes defined in our dialog marketing measures.

The legal basis for data processing is derived from Art. 6 para. 1 lit. f) (legitimate interest) of the GDPR.

For more information on data processing by Deutsche Post and their data protection measures, we refer you to the privacy policy of Deutsche Post, which can be viewed at the following website Data Protection | Deutsche Post | Deutsche Post Dialog Solutions.

8.4 Personalized Email Marketing

Our website provides you with the opportunity to subscribe to personalized email marketing from our company. The personal data transmitted to us when ordering the newsletter can be seen from the input mask used for this purpose.

We regularly inform our customers and business partners via email about our offers, specials, personal recommendations, surveys, and invitations to reviews. Our company's personalized email marketing can generally only be received if

you have a valid email address and
you have registered for the dispatch of personalized email marketing.

A confirmation email will be sent to the email address you initially provided for the dispatch of personalized email marketing for legal reasons, using the double opt-in procedure. This confirmation email serves to verify whether you, as the owner of the email address, have authorized the receipt of personalized email marketing.

When registering for personalized email marketing, we also store the IP address assigned to you by your Internet Service Provider (ISP) of the IT system you used at the time of registration, as well as the date and time of registration. The collection of this data is necessary to be able to trace any possible misuse of your email address at a later date and therefore serves our legal protection.

To generate and deliver personalized content and to target behavior-based audiences within personalized email marketing, information about your user behavior on our website is transmitted to the technical service provider Klaviyo using cookie technology. You have the option to revoke your individual cookie settings at any time.

The personal data collected during the registration for personalized email marketing will be used exclusively for sending our personalized email marketing (specials, personal recommendations, surveys, and invitations to reviews). Furthermore, subscribers to personalized email marketing may be informed via email if this is necessary for the operation of the email marketing service or for a related registration, as may be the case with changes to the email marketing offering or changes in technical conditions. There will be no transfer of personal data collected in the context of the email marketing service to third parties. The subscription to our personalized email marketing can be canceled by you at any time. The consent to the storage of personal data that you have granted us for the dispatch of personalized email marketing can be revoked at any time. For the purpose of revoking consent, there is a corresponding link in each email marketing mailing. Furthermore, there is also the option to unsubscribe from personalized email marketing directly on our website at any time or to inform us in another way.

The legal basis for data processing for the purpose of personalized email marketing is Art. 6 para. 1 lit. a GDPR.

8.5 Newsletter & Email Marketing Dispatch via Klaviyo

The dispatch of our email newsletters and our personalized email marketing is carried out by the technical service provider Klaviyo, Inc., 125 Summer St, Floor 6 Boston, MA 02111 United States (https://www.klaviyo.com/), to whom we pass on the data you provided during the newsletter or email marketing registration. This transfer takes place within the framework of a processing agreement with Klaviyo. Please note that your data is typically transferred to a Klaviyo server in the USA and stored there.

Klaviyo uses this information for the dispatch and statistical evaluation of the newsletters and email marketing mailings with an integrated customer data platform (CDP). For the evaluation, the sent emails include so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter or email marketing message has been opened and which links may have been clicked. In addition, technical information is collected (e.g., time of retrieval, IP address, browser type, and operating system). The data is collected exclusively in a pseudonymized form and is not linked to your other personal data, thus excluding direct personal reference. This data is used exclusively for the statistical analysis of newsletter and email marketing campaigns. The results of these analyses can be used to better tailor future newsletters and email marketing mailings to the interests of the recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter or email marketing.

You can revoke the consent you have given at any time. You can also prevent the processing at any time by unsubscribing from the newsletter or personalized email marketing. You can also prevent the storage of cookies by adjusting the settings of your web browser. You can also prevent the storage and transmission of personal data by disabling JavaScript in your web browser or by installing a JavaScript blocker (e.g., https://noscript.net or https://www.ghostery.com). We would like to point out that these measures may result in not all functions of our internet offering being available.

Furthermore, Klaviyo may use this data in accordance with Art. 6 para. 1 lit. f GDPR based on its own legitimate interest in the demand-oriented design and optimization of the service as well as for market research purposes, for example, to determine from which countries the recipients come. Klaviyo does not use the data of our newsletter and email marketing recipients to contact them directly or to pass them on to third parties.

To protect your data in the USA, we have concluded a data processing agreement ("Data Processing Agreement") with Klaviyo based on the standard contractual clauses of the European Commission to enable the transfer of your personal data to Klaviyo. This data processing agreement can be viewed at the following internet address: https://www.klaviyo.com/legal/dpa.

You can view Klaviyo's privacy policy here: https://www.klaviyo.com/legal/privacy-notice

8.6 Google Customer Reviews Privacy Policy

We also use the review platform Google Customer Reviews for our website. The operating company of the Google Customer Reviews service is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Customer Reviews provides users with the opportunity to rate our services. Users who have used our service are asked for consent to send the review request. If users have given their consent (for example, by clicking a checkbox or a link in the newsletter registration), they will receive a review request with a link to a review page. To ensure that users have actually used our services, we transmit the necessary data regarding the user and the service used to Google (this includes the name, email address, and a reference number). This data is used solely for the verification of authenticity and addressing the user.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. The consent can be revoked at any time.

Google processes data from you, among other things, in the USA. We would like to point out that the European Court of Justice (ECJ) has determined in the Schrems II ruling that there is no adequate level of protection for data transfer to the USA. This may pose various risks to the legality and security of data processing.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://business.safety.google/intl/de/adsprocessorterms/

More about the data processed by Google can be found in the privacy policy at https://policies.google.com/privacy? hl=de.

8.7 Trustpilot Reviews

We use the review process of the provider Trustpilot for our website. The operating company of the service is A/S, Pilestræde 58, 5, 1112 Copenhagen, Denmark.

Trustpilot provides users with the opportunity to rate our services. Users who have used our service are asked for consent to send the review request. If users have given their consent (for example, by clicking a checkbox or a link in the newsletter registration), they will receive a review request with a link to a review page. To ensure that users have actually used our services, we transmit the necessary data regarding the user and the service used to Trustpilot (this includes the name, email address, and a reference number). This data is used solely for the verification of authenticity and addressing the user.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. The consent can be revoked at any time.

To submit a review, the creation of a customer account with Trustpilot is required. In this case, the terms and conditions and privacy notices of Trustpilot apply. To maintain the neutrality and objectivity of the reviews, we have no direct influence on the reviews and cannot delete them ourselves. For this, we ask users to contact Trustpilot.

More about the data processed by the use of Trustpilot can be found in the privacy policy at https://de.legal.trustpilot.com/end-user-privacy-terms.

9. Our activities in social networks

So that we can also communicate with you in social networks and inform you about our services, we are represented there with our own pages. If you visit one of our social media pages, we are jointly responsible with the provider of the respective social media platform for the processing operations triggered thereby that involve personal data, in accordance with Art. 26 GDPR.

We are not the original provider of these pages, but merely use them within the framework of the options provided to us by the respective providers.

Therefore, we would like to point out that your data may also be processed outside the European Union or the European Economic Area. Such use may pose data protection risks for you, as the enforcement of your rights, e.g., to access, deletion, objection, etc., may be more difficult, and processing in social networks often occurs directly for advertising purposes or for analyzing user behavior by the providers, without us being able to influence this. If the provider creates usage profiles, cookies are often used, or the usage behavior is directly assigned to your own member profile in the social networks (if you are logged in there).

The described processing operations of personal data are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest and the legitimate interest of the respective provider to communicate with you in a contemporary manner or to inform you about our services. If you need to give consent to the respective providers for data processing as a user, the legal basis refers to Art. 6 para. 1 lit. a GDPR in conjunction with Art. 7 GDPR.

Since we do not have access to the data of the providers, we would like to point out that you can best assert your rights (e.g., to access, correction, deletion, etc.) directly with the respective provider. Further information on the processing of your data in social networks and the possibility of exercising your right to object or revoke (so-called opt-out) is provided below for each of the social network providers we use:

9.1 Facebook

(Co-) Responsible for data processing in Europe:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy Policy (Data Policy): https://www.facebook.com/about/privacy

Opt-Out and Advertising Settings: https://www.facebook.com/ads/preferences/? entry_product=ad_settings_screen

https://de-de.facebook.com/about/privacy/

9.2 Instagram

(Co-) Responsible for data processing in Germany:
Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
Privacy Policy (Data Policy): http://instagram.com/legal/privacy/

Opt-Out and Advertising Settings: https://www.instagram.com/accounts/privacy_and_security/

9.3 Twitter

(Co-) Responsible for data processing in Europe:
Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland
Privacy Policy: https://twitter.com/de/privacy

Information about your data: https://twitter.com/settings/your_twitter_data[nt=1]

Opt-Out and Advertising Settings: https://twitter.com/personalization

9.4 YouTube

(Co-) Responsible for data processing in Europe:
Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland
Privacy Policy: https://policies.google.com/privacy

Opt-Out and Advertising Settings: https://adssettings.google.com/authenticated

9.5 Pinterest

This website uses the Pinterest Tag for conversion tracking. The Pinterest Tag is a tracking tool of the social network Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland). Through the Pinterest Tag, we have the ability to understand and track the activities of visitors. To understand this activity, device and browser information, referrer information, page views, interactions, and events are collected. With the help of this collection, it is possible to show users personalized ads on Pinterest based on their interests and activities on the website. The collection of this data on our website and the subsequent transmission to Pinterest is carried out solely with your consent. The legal basis for the collection and transmission of personal data by us to Pinterest is consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time via our consent management tool or the cookie banner. Pinterest processes data from you, among other things, in the USA. We would like to point out that the European Court of Justice (ECJ) has determined in the Schrems II ruling that there is no adequate level of protection for data transfer to the USA. This may pose various risks to the security of data processing.
For more information on how Pinterest processes personal data and the corresponding legal bases, please refer to
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

Privacy Policy: https://policy.pinterest.com/de/privacy-policy

Opt-Out and Advertising Settings: https://www.pinterest.com/settings/privacy

9.6 TikTok

(Co-) Responsible for data processing in Europe:
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
Privacy Policy: https://www.tiktok.com/legal/privacy-policy

Opt-Out and Advertising Settings: https://www.tiktok.com/legal/tiktok-website-cookies-policy

10. Web Analytics

10.1 Facebook Pixel (Custom Audience)

This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). In the case of granting explicit consent, this allows for tracking user behavior after they have seen or clicked on a Facebook advertisement. This procedure serves to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help optimize future advertising measures.

The data collected is anonymous to us, thus providing no conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile, and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to display advertisements on and off Facebook. A cookie may also be stored on your computer for these purposes. These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

To disable the use of cookies on your IT system, you can configure your internet browser to prevent cookies from being stored on your IT system in the future or to delete cookies that have already been stored. However, disabling all cookies may result in some functions on our websites no longer being executable. You can also disable the use of cookies by third parties such as Facebook on the following website of the Digital Advertising Alliance: https://www.aboutads.info/choices/

In addition, you can disable cookies for reach measurement and advertising purposes on the following websites:

We would like to point out that this setting will also be deleted if you delete your cookies.

10.2 Meta API

We have integrated the Meta Conversion API on this website. The Meta Conversion API is a server-side event tracking service.

The operating company of the Meta Conversion API is Meta Platforms Inc. Responsible for data processing in Europe is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

The Meta Conversion API allows us to capture the interactions of website visitors with our website and pass them on to Meta to improve advertising performance on Meta services.

To this end, the time of the call, the accessed webpage, your IP address, and your user agent, as well as possibly other specific data (e.g., purchased products, cart value, and currency) are collected. A complete overview of the data that can be collected can be found here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. The consent can be revoked at any time.

To the extent that personal data is collected on our website using the tool described here and forwarded to Meta, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland are jointly responsible for this data processing (Art. 26 GDPR). The joint responsibility is limited exclusively to the collection of the data and its transfer to Meta. The processing that occurs after the transfer by Meta is not part of the joint responsibility. The obligations that we share have been recorded in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum_Preview. According to this agreement, we are responsible for providing data protection information when using the Meta tool and for the data protection-compliant implementation of the tool on our website. Meta is responsible for the data security of the Meta products. Data subject rights (e.g., requests for information) regarding the data processed by Meta can be asserted directly with Meta. If you assert your rights as a data subject with us, we are obliged to forward these to Meta.

The data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

In Meta's privacy notices, you will find further information on protecting your privacy: https://de-de.facebook.com/about/privacy/.

10.3 Google Analytics

On our websites, we use Google Analytics, a web analytics service from Google Ireland Limited (https://www.google.de/intl/de/about/) (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter "Google"). In this context, pseudonymized usage profiles are created and cookies (see section "Cookies") are used. The information generated by the cookie about your use of this website includes

Browser type/version,
operating system used,
Referrer URL (the previously visited page),
Hostname of the accessing computer (IP address),
Time of the server request,

are transmitted to a server of Google in the USA and stored there. The information is used to evaluate the use of the website, to compile reports on website activities, and to provide further services related to website usage and internet usage for market research and the demand-oriented design of these websites. These information may also be transferred to third parties if required by law or if third parties process these data on our behalf. In no case will your IP address be merged with other data from Google. The IP addresses are anonymized, so that an assignment is not possible (IP masking).

We also use the technical extension "Google Signals," which enables cross-device tracking. This allows for the association of a single website visitor with different devices. This only happens if the visitor has logged into a Google service during their website visits and has also activated the option for "personalized advertising" in their Google account settings. Even then, we do not have access to any personal data or user profiles; they remain anonymous to us.

If you do not wish to use "Google Signals," you can disable the option for "personalized advertising" in your Google account settings.

You can prevent the installation of cookies by adjusting the settings of your browser software; however, we would like to point out that in this case, not all functions of this website may be fully utilized. These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on (https://tools.google.com/dlpage/gaoptout? hl=de).

Alternatively, instead of the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by clicking the following link: Disable Google Analytics. An opt-out cookie will be set, which prevents the future collection of your data when visiting this website. The opt-out cookie is valid only in this browser and only for our website and will be stored on your device. If you delete the cookies in this browser, you will need to set the opt-out cookie again. You can view the privacy policy of Google Analytics at: https://support.google.com/analytics/answer/6004245? hl=de.

11.4 Google Analytics Remarketing

We have integrated Google Remarketing services on this website. Google Remarketing is a feature of Google AdWords that allows a company to display ads to internet users who have previously visited the company's website. The integration of Google Remarketing allows a company to create user-specific advertising and consequently display interest-relevant advertisements to internet users.

The operating company of the Google Remarketing services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Remarketing is to display interest-relevant advertising. Google Remarketing enables us to display advertisements through the Google advertising network or to have them displayed on other websites that are tailored to the individual needs and interests of internet users.

Google Remarketing sets a cookie on the IT system of the affected person. By setting the cookie, Google is enabled to recognize the visitor to our website when they subsequently access websites that are also members of the Google advertising network. With each visit to a website on which the Google Remarketing service is integrated, your internet browser automatically identifies itself to Google. As part of this technical process, Google gains knowledge of personal data, such as your IP address or browsing behavior, which Google uses, among other things, to display interest-relevant advertising.

Through the cookie, personal information, such as the websites you have visited, is stored. Therefore, with each visit to our websites, personal data, including your IP address, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may transfer these personal data collected through the technical process to third parties under certain circumstances.

You can prevent the setting of cookies by our website, as previously described, at any time by making the appropriate settings in the internet browser you are using, thereby permanently objecting to the setting of cookies. Such a setting in the internet browser you are using would also prevent Google from setting a cookie on your IT system. In addition, a cookie already set by Google Analytics can be deleted at any time via the internet browser or other software programs.

Furthermore, you have the option to object to interest-based advertising by Google. To do this, you need to access the link www.google.de/settings/ads from your internet browser and make the desired settings there.

These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

Further information and the applicable data protection regulations of Google can be retrieved at https://www.google.de/intl/de/policies/privacy/[nt=1].

10.5 Google Optimize

This website uses features of the web analytics service Google Optimize. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Google Optimize analyzes the use of different variants of the website, allowing us to adjust the user-friendliness according to the behavior of website users. Google Optimize uses so-called "cookies."These are text files that are stored on your computer and allow for the analysis of your use of the website. The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there. The storage of Google Optimize cookies is based on Art. 6 para. 1 lit. a GDPR.

IP Anonymization

We have activated the IP anonymization feature on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, compile reports on website activities, and provide further services related to website usage and internet usage to the website operator. The IP address transmitted by your browser in the context of Google Optimize will not be merged with other data from Google.

Browser Plugin

You can prevent the storage of cookies by adjusting the settings of your browser software; however, we would like to point out that in this case, you may not be able to use all functions of this website to their full extent. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout? hl=de.

Objection to data collection

You can prevent the collection of your data by Google Optimize by clicking the following link. An opt-out cookie will be set, which prevents the collection of your data on future visits to this website: Disable Google Optimize. For more information on how user data is handled in Google Optimize, please visit: https://support.google.com/optimize/answer/6218117? hl=en and in the privacy policy of Google: http://www.google.com/policies/privacy.

11.6 Website Analysis with Hotjar

This website uses Hotjar, a web analytics service from Hotjar Ltd, (https://www.hotjar.com/) Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta, Europe.

Hotjar is a tool for analyzing your user behavior on this website. With Hotjar, we can record your mouse and scroll movements and clicks, among other things. Hotjar can also determine how long you have hovered your mouse pointer over a specific area. From this information, Hotjar creates so-called heatmaps, which allow us to see which areas of the website are preferred by visitors.

Furthermore, we can determine how long you stayed on a page and when you left it. We can also find out at which point you abandoned your entries in a contact form (so-called conversion funnels).

In addition, direct feedback from website visitors can be collected with Hotjar. This function serves to improve the web offerings of the website operator.

Hotjar uses technologies that allow for the recognition of users for the purpose of analyzing user behavior (e.g., cookies or the use of device fingerprinting).

The use of this analytics tool is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both their web offering and their advertising. If corresponding consent has been requested (e.g., consent to the storage of cookies), the processing is carried out solely on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Deactivating Hotjar

If you wish to deactivate data collection by Hotjar, please click on the following link and follow the instructions there: https://www.hotjar.com/opt-out

Please note that deactivating Hotjar must be done separately for each browser or device.

For more information about Hotjar and the data collected, please refer to Hotjar's privacy policy at the following link: https://www.hotjar.com/privacy

Contract for Data Processing

We have concluded a contract for data processing with Hotjar to implement the strict European data protection regulations.

11. Advertising

11.1 Google Ads (formerly Adwords)

Our website uses the features of Google Ads, through which we advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited.

These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

Any further data processing only takes place if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads that you view on the web. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, your personal data is temporarily linked by Google with Google Analytics data to form audiences.

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can inform yourself about the setting of cookies and make settings at the Digital Advertising Alliance at www.aboutads.info. Finally, you can configure your browser to be informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for specific cases or in general. If you do not accept cookies, the functionality of our website may be limited.

Further information and the privacy policy regarding advertising and Google can be found here: https://www.google.com/policies/technologies/ads/

11.2 Google AdSense

We have integrated Google AdSense on this website. Google AdSense is an online service that enables the placement of advertisements on third-party sites. Google AdSense is based on an algorithm that selects the advertisements displayed on third-party sites according to the content of the respective third-party site. Google AdSense allows for interest-based targeting of internet users, which is implemented by generating individual user profiles.

The operating company of the Google AdSense component is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of the Google AdSense component is to integrate advertisements on our website. Google AdSense sets a cookie on your IT system. By setting the cookie, Alphabet Inc.,1600 Amphitheatre Pkwy, Mountain View, CA 94043-1351, USA, is enabled to analyze the use of our website. With each call to one of the individual pages of this website, which is operated by us and on which a Google AdSense component is integrated, the internet browser on your IT system is automatically prompted by the respective Google AdSense component to transmit data for the purpose of online advertising and the billing of commissions to Alphabet Inc. As part of this technical process, Alphabet Inc. As part of this technical process, Alphabet Inc. receivesKnowledge of personal data, such as your IP address, which serves Alphabet Inc.,among other things, to trace the origin of visitors and clicks and subsequently enable commission billing.

You can prevent the setting of cookies by our website at any time by making the appropriate settings in the internet browser you are using, thereby permanently objecting to the setting of cookies. Such a setting in the internet browser you are using would also prevent Alphabet Inc. from setting a cookie on your IT system. In addition, a cookie already set by Alphabet Inc. can be deleted at any time via the internet browser or other software programs.

Google AdSense also uses so-called tracking pixels. A tracking pixel is a miniature graphic embedded in web pages to enable log file recording and log file analysis, allowing for statistical evaluation. Using the embedded tracking pixel, Alphabet Inc. to determine whether and when a website has been opened from your IT system and which links have been clicked by you. Tracking pixels are used, among other things, to evaluate the visitor flow of a website.

Through Google AdSense, personal data and information, which also includes the IP address and is necessary for the collection and billing of the displayed advertisements, are transmitted to Alphabet Inc. in the United States of America. These personal data are stored and processed in the United States of America. Alphabet Inc. may transfer these personal data collected through the technical process to third parties under certain circumstances.

Google AdSense is explained in more detail at this link https://www.google.de/intl/de/adsense/start/.

These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

11.3 Google Ads with Conversion Tracking

We have integrated Google Ads on this website. Google Ads is an internet advertising service that allows advertisers to display ads in both Google search results and the Google advertising network. Google Ads enables an advertiser to predefine certain keywords, so that an ad is displayed in Google search results only when the user retrieves a keyword-relevant search result from the search engine. In the Google advertising network, the ads are distributed on topic-relevant websites using an automatic algorithm and taking into account the previously defined keywords.

The operating company of the Google Ads services is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The purpose of Google Ads is to promote our website by displaying interest-relevant advertising on third-party websites and in the search results of the Google search engine, as well as displaying third-party advertising on our website.

If you reach our website through a Google ad, a so-called conversion cookie is placed on your IT system by Google. A conversion cookie expires after thirty days and is not used for your identification. Through the conversion cookie, it can be tracked whether certain subpages, such as the shopping cart of an online shop system, have been accessed on our website, provided the cookie has not yet expired. Through the conversion cookie, both we and Google can track whether a user who has reached our website via an AdWords ad has generated revenue, meaning whether a purchase was completed or abandoned.

The data and information collected through the use of the conversion cookie are used by Google to create visit statistics for our website. These visit statistics are then used by us to determine the total number of users who were referred to us through Ads ads, in order to assess the success or failure of the respective Ads ad and to optimize our Ads ads for the future. Neither our company nor other advertisers of Google Ads receive information from Google that could identify you.

Through the conversion cookie, personal information, such as the websites you have visited, is stored. Therefore, with each visit to our websites, personal data, including the IP address of the internet connection you used, is transmitted to Google in the United States of America. These personal data are stored by Google in the United States of America. Google may transfer these personal data collected through the technical process to third parties under certain circumstances.

You can prevent the setting of cookies by our website at any time by making the appropriate settings in the internet browser you are using, thereby permanently objecting to the setting of cookies. Such a setting in the internet browser you are using would also prevent Google from setting a conversion cookie on your IT system. Additionally, a cookie already set by Google Ads can be deleted at any time via the internet browser or other software programs.

These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

We use Google Enhanced Conversions. The provider is Google Ireland Limited ("Google"), Gordon House, Barrow Street, Dublin 4, Ireland.

We use the data collected by Google Enhanced Conversions only to improve the conversion rate on our website and to optimize our marketing activities and gather additional information about our users. We do not use the data for other purposes and do not share it with third parties, unless required by law or if we are legally obligated to do so.

Google Enhanced Conversions collects the following data:

Clicks on specific elements on our website, such as links, buttons, and images. Entries in forms on our website. Visits to specific pages on our website.

This data is used by Google in accordance with Google's privacy policy in anonymized or hashed form: For more information, please visit: Advanced Conversions - Google Ads Help

The use of this service is based on your consent according to Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG. The consent can be revoked at any time.

We store the data collected by Google Enhanced Conversions only as long as necessary for the specified purpose. The exact duration depends on various factors, such as the type of data and the requirements of applicable law.

Further information and the applicable data protection regulations of Google can be retrieved at https://www.google.de/intl/de/policies/privacy/.

11.4 Google Consent Mode Basic (V2)

On our websites, we use Google Consent Mode Basic (v2), a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

In this context, Google Consent Mode Basic (v2) serves as an interface between the Usercentrics Consent Management Platform and Google. This interface allows Google services to be executed based on the types of consent collected from users on websites, without Google needing direct access to personal data.

These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a) GDPR.

The anonymized data may be transmitted by Google to a server in the USA and stored there.

The parent company Google LLC is certified as a US company under the EU-US Data Privacy Framework. This constitutes an adequacy decision pursuant to Art. 45 GDPR, allowing the transfer of personal data without further guarantees or additional measures.

The data protection regulations and further information on Google Consent Mode Basic (v2) can be viewed at: https://www.google.de/intl/de/policies/privacy/.

12. Plugins and Other Services

12.1 Google Maps

On our website, we use Google Maps (API) from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. Using this service can, for example, show you our location and facilitate any directions.

When accessing the subpages where the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers in the USA and stored there. This occurs regardless of whether Google provides a user account that you are logged into or whether no user account exists. If you are logged into Google, your data is directly associated with your account. If you do not wish for the association with your Google profile, you must log out of your Google user account. Google stores your data (even for non-logged-in users) as usage profiles and evaluates them. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right.

If you do not agree with the future transmission of your data to Google in connection with the use of Google Maps, there is also the option to completely disable the Google Maps web service by turning off JavaScript in your browser. Google Maps and thus the map display on this website cannot be used then.

These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html.

Detailed information on data protection in connection with the use of Google Maps can be found on Google's website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/

12.2 Google reCAPTCHA

On this website, we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). This function primarily serves to distinguish whether an input is made by a natural person or abusively by machine and automated processing. The service also includes the transmission of the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google.

These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

Further information on Google reCAPTCHA as well as Google's privacy policy can be viewed at: https://www.google.com/intl/de/policies/privacy/

12.3 Google Tag Manager

This website uses Google Tag Manager, a cookie-free domain that does not collect personal data.

This tool allows for the implementation and management of "website tags" (i.e., keywords embedded in HTML elements) through an interface. By using Google Tag Manager, we can automatically track which button, link, or personalized image you have actively clicked on and can then record which content of our website is particularly interesting to you.

The tool also triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If you have made a deactivation at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.

These processing operations occur solely upon granting explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.

13. Shop System "Shopify"

We use the platform Shopify Inc. ("Shopify") of Shopify International Limited, Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland for hosting and displaying our online shop.

All data collected on our website is processed on Shopify's servers. As part of the aforementioned services from Shopify, data may also be transmitted for further processing on behalf of Shopify Inc.,150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc.,Shopify Payments (USA) Inc. or Shopify (USA) Inc. In the event of data transmission to Shopify Inc. in Canada, the adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found at the following website undefinedhttps://www.shopify.de/legal/datenschutzundefined and in the whitepaper undefinedhttps://help.shopify.com/pdf/gdpr-whitepaper.pdfundefined. You can find further information about Shopify's data protection at the following website https://www.shopify.de/legal/datenschutz and in the whitepaper https://help.shopify.com/pdf/gdpr-whitepaper.pdf.

Shopify retains customer data in the event of a chargeback procedure. Shopify retains customer data in case of a chargeback procedure. The deletion is noted in the system and occurs automatically on the specified date. In the meantime, the customer data is blocked and cannot be used further. During the deletion period, the account can be reactivated by the customer by resetting the password. The deletion request remains in effect, and the deletion will be carried out on the specified date.

14. Payment Providers

14.1 Klarna

We have integrated components from Klarna on our website. Klarna is an online payment service provider that enables purchase on account or flexible installment payments. Furthermore, Klarna offers additional services, such as buyer protection or identity and credit checks.

The operating company of Klarna is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select either "purchase on account" or "installment purchase" as the payment option during the ordering process in our online shop, your data will be transmitted automatically to Klarna. By selecting one of these payment options, you consent to the transmission of personal data necessary for processing the invoice or installment purchase or for identity and credit checks.

The personal data transmitted to Klarna typically includes first name, last name, address, date of birth, gender, email address, IP address, phone number, mobile phone number, as well as other data necessary for processing an invoice or installment purchase. Personal data related to the respective order is also necessary for the execution of the purchase contract. In particular, this may involve the mutual exchange of payment information, such as bank account details, card number, expiration date, and CVC code, quantity of items, item number, data on goods and services, prices, and tax charges, information on previous purchasing behavior, or other information regarding your financial situation.

The purpose of data transmission is particularly for identity verification, payment administration, and fraud prevention. We will transmit personal data to Klarna especially when there is a legitimate interest for the transmission. The personal data exchanged between Klarna and us will be transmitted by Klarna to credit agencies. This transmission aims at identity and credit checks.

Klarna also shares personal data with affiliated companies (Klarna Group) and service providers or subcontractors, as far as this is necessary to fulfill contractual obligations or if the data is to be processed on behalf.

To decide on the establishment, execution, or termination of a contractual relationship, Klarna collects and uses data and information about the past payment behavior of the affected person as well as probability values for their future behavior (so-called scoring). The calculation of the scoring is carried out based on scientifically recognized mathematical-statistical methods.

You have the option to revoke your consent to the handling of personal data at any time with respect to Klarna. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

The use of Klarna is in the interest of proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

The applicable data protection regulations of Klarna can be retrieved at https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf.

14.2 PayPal

We have integrated components from PayPal on this website. PayPal is an online payment service provider. Payments are processed through so-called PayPal accounts, which represent virtual personal or business accounts. Additionally, PayPal offers the option to process virtual payments via credit cards if a user does not have a PayPal account. A PayPal account is managed via an email address, which is why there is no traditional account number. PayPal allows for online payments to be initiated to third parties or to receive payments. PayPal also takes on trustee functions and offers buyer protection services.

The European operating company of PayPal is PayPal (Europe) S.à r.l. & Cie. S.C.A.,22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg.

If you select "PayPal" as the payment option during the ordering process in our online shop, your data will be transmitted automatically to PayPal. By selecting this payment option, you consent to the transmission of personal data necessary for payment processing.

The personal data transmitted to PayPal typically includes first name, last name, address, email address, IP address, phone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary for the execution of the purchase contract.

The purpose of data transmission is payment processing and fraud prevention. We will transmit personal data to PayPal especially when there is a legitimate interest for the transmission. The personal data exchanged between PayPal and us may be transmitted by PayPal to credit agencies. This transmission aims at identity and credit checks.

PayPal may also share personal data with affiliated companies and service providers or subcontractors, as far as this is necessary to fulfill contractual obligations or if the data is to be processed on behalf.

You have the option to revoke your consent to the handling of personal data at any time with respect to PayPal. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

The use of PayPal is in the interest of proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

The applicable data protection regulations of PayPal can be retrieved at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

14.3 Sofort

We have integrated components of Sofortüberweisung on this website. Sofortüberweisung is a payment service that enables cashless payment for products and services on the internet. Sofortüberweisung represents a technical procedure through which the online merchant receives an immediate payment confirmation. This enables a merchant to deliver goods, services, or downloads to the customer immediately after the order.

The operating company of Sofortüberweisung is SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany, part of Klarna Bank AB, (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

If you select "Sofortüberweisung" as the payment option during the ordering process in our online shop, your data will be transmitted automatically to Sofortüberweisung. By selecting this payment option, you consent to the transmission of personal data necessary for payment processing.

When processing the purchase through Sofortüberweisung, you transmit your PIN and TAN to Sofort GmbH. Sofortüberweisung performs a transfer to us after a technical check of the account balance and retrieval of further data to verify account coverage. The execution of this financial transaction is communicated to us automatically.

The personal data exchanged with Sofortüberweisung typically includes first name, last name, address, email address, IP address, phone number, mobile phone number, or other data necessary for payment processing. The purpose of data transmission is payment processing and fraud prevention. We will also transmit other personal data to Sofortüberweisung when there is a legitimate interest for the transmission. The personal data exchanged between Sofortüberweisung and us may be transmitted by Sofortüberweisung to credit agencies. This transmission aims at identity and credit checks.

Sofortüberweisung may also share personal data with affiliated companies and service providers or subcontractors, as far as this is necessary to fulfill contractual obligations or if the data is to be processed on behalf.

The data subject has the option to revoke consent to the handling of personal data at any time with respect to Sofortüberweisung. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

The use of Sofortüberweisung is in the interest of proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

The applicable data protection regulations of Sofortüberweisung can be retrieved at klarna.com/de/datenschutz/.

14.4 Apple Pay

We have integrated components of Apple Pay on this website. Apple Pay is a payment method from Apple Distribution International Limited, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland (Apple). It works on Mac, iPhone, and iPad. Both on mobile and desktop, you can pay securely and quickly with the cards stored in the Apple Pay Wallet. The transaction data is encrypted and not stored.

Apple Pay represents a technical procedure through which the online merchant receives an immediate payment confirmation. This enables a merchant to deliver goods, services, or downloads to the customer immediately after the order.

If you select "Apple Pay" as the payment option during the ordering process in our online shop, your data will be transmitted automatically to Apple. By selecting this payment option, you consent to the transmission of personal data necessary for payment processing.

The personal data transmitted to Apple typically includes first name, last name, address, email address, IP address, phone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary for the execution of the purchase contract.

The purpose of data transmission is payment processing and fraud prevention. We will transmit personal data to Apple Pay especially when there is a legitimate interest for the transmission. The personal data exchanged between Apple Pay and us may be transmitted by Apple to credit agencies under certain circumstances. This transmission aims at identity and credit checks.

Apple may also share personal data with affiliated companies and service providers or subcontractors, as far as this is necessary to fulfill contractual obligations or if the data is to be processed on behalf.

You have the option to revoke your consent to the handling of personal data at any time with respect to Apple. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

The use of Apple Pay is in the interest of proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

The applicable data protection regulations of Apple can be retrieved at https://www.apple.com/de/legal/privacy/de-ww/.

14.5 Google Pay

We have integrated components of Google Pay on this website. Google Pay is a payment method operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Pay is available on Android and in the Chrome browser. This allows you to pay securely and quickly at Woodberg using the payment methods stored with Google.

Google Pay represents a technical procedure through which the online merchant receives an immediate payment confirmation. This enables a merchant to deliver goods, services, or downloads to the customer immediately after the order.

If you select "Google Pay" as the payment option during the ordering process in our online shop, your data will be transmitted automatically to Google. By selecting this payment option, you consent to the transmission of personal data necessary for payment processing.

The personal data transmitted to Google typically includes first name, last name, address, email address, IP address, phone number, mobile phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary for the execution of the purchase contract.

The purpose of data transmission is payment processing and fraud prevention. We will transmit personal data to Google Pay especially when there is a legitimate interest for the transmission. The personal data exchanged between Google Pay and us may be transmitted by Google to credit agencies. This transmission aims at identity and credit checks.

Google may also share personal data with affiliated companies and service providers or subcontractors, as far as this is necessary to fulfill contractual obligations or if the data is to be processed on behalf.

You have the option to revoke your consent to the handling of personal data at any time with respect to Google. A revocation does not affect personal data that must be processed, used, or transmitted for (contractual) payment processing.

The use of Google Pay is in the interest of proper and smooth payment processing. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

The applicable data protection and usage conditions of Google Pay can be retrieved at https://support.google.com/pay/answer/7020860? hl=de-DE.

14.6 Bancontact

In the case of payment via "Bancontact," a payment service from Bancontact Payconiq Company SA/NV 82, rue d’Arlon, 1040-Brussels, Belgium, your data will be transmitted to Bancontact for processing and payment.

Further information on the purpose and scope of data processing by Bancontact can be found at https://www.bancontact.com/files/privacy.pdf.

14.7 Credit Card, EPS Transfer, and iDEAL

In the case of payment methods credit card, EPS, and iDeal, the required data will be transmitted to BS PAYONE GmbH (Lyoner Straße 9, 60528 Frankfurt/Main) for processing your payment (Art. 6 para. 1 lit. b) GDPR). More information can be found here: PAYONE Privacy

15. Your rights as a data subject

15.1 Right to Confirmation

You have the right to request confirmation from us as to whether personal data concerning you is being processed.

15.2 Right to Access Art. 15 GDPR

You have the right to receive free information from us at any time about the personal data stored about you and a copy of this data in accordance with the statutory provisions.

15.3 Right to Rectification Art. 16 GDPR

You have the right to request the rectification of inaccurate personal data concerning you. Furthermore, you have the right to request the completion of incomplete personal data, taking into account the purposes of processing.

15.4 Right to Deletion Art. 17 GDPR

You have the right to request that we delete personal data concerning you without delay, provided that one of the legally provided reasons applies and as far as the processing or storage is not necessary.

15.5 Restriction of Processing Art. 18 GDPR

You have the right to request the restriction of processing from us if one of the legal requirements is met.

15.6 Data Portability Art. 20 GDPR

You have the right to receive personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format. You also have the right to transmit this data to another controller without hindrance from us, to whom the personal data has been provided, provided that the processing is based on consent in accordance with Art. 6 para. 1 lit. a GDPR or Art. 9 para. 2 lit. a GDPR or on a contract in accordance with Art. 6 para. 1 lit. b GDPR and the processing is carried out by automated means, unless the processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in us.

Furthermore, when exercising your right to data portability in accordance with Art. 20 para. 1 GDPR, you have the right to obtain that the personal data be transmitted directly from one controller to another, where technically feasible and provided that this does not adversely affect the rights and freedoms of others.

15.7 Objection Art. 21 GDPR

You have the right to object at any time to the processing of personal data concerning you, which is carried out on the basis of Art. 6 para. 1 lit. e (data processing in the public interest) or f (data processing based on a balancing of interests) GDPR, for reasons relating to your particular situation.

This also applies to profiling based on these provisions as defined in Art. 4 No. 4 GDPR.

If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

In individual cases, we process personal data for the purpose of direct marketing. You can object at any time to the processing of personal data for the purposes of such advertising. This also applies to profiling to the extent that it is related to such direct advertising. If you object to us processing for the purposes of direct advertising, we will no longer process the personal data for these purposes.

Furthermore, you have the right to object for reasons relating to your particular situation to the processing of personal data concerning you that is carried out for scientific or historical research purposes or for statistical purposes in accordance with Art. 89 para. 1 GDPR, unless such processing is necessary for the performance of a task carried out in the public interest.

You are free to exercise your right to object in connection with the use of information society services, notwithstanding Directive 2002/58/EC, by automated means using technical specifications.

15.8 Revocation of Data Protection Consent

You have the right to revoke consent to the processing of personal data at any time with effect for the future.

15.9 Complaint to a Supervisory Authority

You have the right to complain to a supervisory authority responsible for data protection about our processing of personal data.

16. Routine Storage, Deletion, and Blocking of Personal Data

We process and store your personal data only for the period necessary to achieve the storage purpose or as required by the legal provisions to which our company is subject.

If the storage purpose ceases to apply or a prescribed storage period expires, the personal data will be routinely blocked or deleted in accordance with the legal provisions.

17. Duration of Storage of Personal Data

The criterion for the duration of storage of personal data is the respective statutory retention period. After the retention period has expired, the corresponding data will be routinely deleted, provided that they are no longer necessary for the fulfillment of the contract or for the initiation of a contract.

18. Current Status and Changes to the Privacy Policy

This privacy policy is currently valid and is dated: July 2024.

Due to the further development of our websites and offerings or due to changed legal or regulatory requirements, it may become necessary to amend this privacy policy. The current privacy policy can be accessed and printed at any time on this website.

Fragrance samples

Hand-filled and available from every perfume

Free shipping

Within Germany
from a purchase value of €50

"Less Waste" shipping

Eco-friendly
packaging material

Tailored free samples

Tailored and free with every order