Data protection

Data protection

1) Information about the collection of personal data and contact data of the responsible person

1.1 We are pleased that you visit our website and thank you for your interest. In the following we inform you about how to deal with your personal data when using our website. Personal data are all data with which you can be identified personally.

1.2 Responsible for data processing on this website within the meaning of the Data Protection Basic Ordinance (DSGVO) is Kafa Safari C / O BWU Rechtsanwaltts GmbH, Leipziger Platz 11, 10117 Berlin, Germany, E-mail: shop@babesfashion.de. The person responsible for the processing of personal data is the natural or legal entity, which decides alone or together with others about the purposes and means of processing personal data.

1.3 For security reasons and to protect the transfer of personal data and other confidential content (e.g., orders or requests to the responsible), this website uses a SSL resp. TLS encryption. You can detect an encrypted connection to the string "HTTPS: //" and the lock icon in your browser line.

2) Data collection when visiting our website

With the merely informative use of our website, so if you do not register or transmit us otherwise information, we only charge such data that your browser transmits to our server (so-called "server-logfiles"). When you call our website, we collect the following data that is technically required for us to view the website:

- Our visited website - date and time at the time of access - quantity of the transmitted data in byte source / reference, from which you used - used browser - used operating system - used IP address (possibly: in anonymized form)

Processing takes place in accordance with Article 6 (1) lit. F DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or otherwise use of the data does not take place. However, we reserve the right to review the server log files later, concrete indications should indicate unlawful usage.

3) Hosting

Hosting by Shopify We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and presenting the online shop Based on processing on our behalf. All data collected on our website will be processed on the servers of Shopify. As part of the aforementioned services of shopify, data can also be used as part of another processing on behalf of the Shopify Inc., 150 Elgin St, Ottawa, On K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc . or shopify (USA) Inc. are transmitted. In the case of transmission of data to the Shopify Inc. in Canada, the appropriateness of the European Commission ensures the appropriate level of data protection. The Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. and the shopify (USA) Inc. in the USA is certified for the US European Privacy Convention "Privacy Shield", which comply with the data protection levels applicable in the EU guaranteed. Further information on the Data Protection of Shopify is available under the following website: https://www.shopify.de/legal/datenschutz Another processing on other servers than the aforementioned by shopify takes place only in the framework provided below.

4) cookies

To make the visit of our website attractive and to enable the use of certain functions, we use so-called cookies on different pages. These are small text files that are stored on your terminal. Some of the cookies we used will be deleted after the end of the browser session, so after closing your browser, again (so-called session cookies). Other cookies remain on their terminal and enable to recognize their browser on the next visit (so-called persistent cookies). Cookies are set, collect and process them in individual scope, such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a predetermined duration, which can differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

Partly the cookies serve to simplify the ordering process by storing settings (e.g., note the contents of a virtual cart for a later visit to the website). If personal data is processed by individuals used by us, the processing in accordance with Article 6 (1) lit. b DSGVO is either implementing the contract, in accordance with Article 6 (1) lit. a DSGVO in the case of a granted consent or According to Art. 6 para. 1 lit. F DSGVO in respect of our legitimate interests on the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.Copyright © 2020, IT law firm · Old trade fair location 2 · 80339 Munich

Tel: +49 (0) 89/130 1433 - 0 · Fax: +49 (0) 89/130 1433 - 60

Please note that you can hire your browser so that you can be informed about setting cookies and individually deciding on their acceptance or the acceptance of cookies for certain cases or generally can exclude. Each browser differs in the way he manages the cookie settings. This is described in the Help menu of each browser, which explains how to change your cookie settings. These can be found for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/en-de/help/17442/windows-internet-explorer-delete-mana GE-Cookies Firefox: https://support.mozilla.org/en/kb/cookies -Bola and reject chrome: https://support.google.com/chrome/answer/95647?hl=en&hlrm=en Safari: https://support.apple.com/en-de/guide/safari/sfri11471 / Mac Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Please note that in case of non-receipt of cookies, the functionality of our website can be restricted.

5) Contact

5.1 In the context of contacting us (e.g., via contact form or e-mail), personal data are collected. Which data is collected in the case of a contact form, can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for contacting and associated technical administration. Legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) lit. F DSGVO. If your contact aims to conclude a contract, additional legal basis for processing Art. 6 para. 1 lit. b DSGVO. Your data will be deleted after completing your request. This is the case if it can be seen from the circumstances that the affected facts is concluded and if no statutory storage requirements are precluded.

5.2 WhatsApp business

We offer visitors to our website the opportunity to contact us via the news service Whatsapp the WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland. For this we use the so-called "business version" of WhatsApp.

Unless you contact us on the occasion of a concrete business (for example, an order made) via WhatsApp, and use the mobile phone number you use at WhatsApp and - if provided - your first and surname according to Art. 6 para. 1 lit. b. DSGVO for editing and answering your request. Based on the same legal basis, we will be available via WhatsApp by providing further data (order number, customer number,

Address or e-mail address) to assign your request to a specific task.

Take advantage of our WhatsApp contact for general requests (such as the range of services, availabilities or on our website) store and use the mobile phone number you use at WhatsApp and - if provided - your first and surname according to Art. 6 para. 1 lit , F DSGVO based on our legitimate interest in the efficient and timely provision of the desired information.

Your data is always used only to answer your request via WhatsApp. A disclosure to third parties does not occur.

Please note that WhatsApp Business gets access to the address book of the mobile terminals we used and automatically transmits phone numbers stored in the address book to a server of the parent company Facebook Inc. in the USA. For operating our WhatsApp business account, we use a mobile device, whose address book only stores the WhatsApp contact data of such users who have come into contact with us via WhatsApp.

This ensures that each person whose WhatsApp contact data is stored in our address book is already used for the first time using the app on its device by accepting the WhatsApp Terms of Use in the transmission of its WhatsApp phone number from the address books of its chat contacts according to Art. 6 para. 1 lit. a dsgvo has agreed. A transfer of data such users who do not use WhatsApp and / or do not have contacted us about WhatsApp will be excluded insofar.

Facebook Inc. based in the United States is certified for the US European Privacy Policy Convention "Privacy Shield", which ensures compliance with the data protection levels applicable in the EU.

Purpose and scope of data collection and further processing and use of the data by WhatsApp as well as your rights and adjustment options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1# Privacy Policy

6) Data processing at the opening of a customer account and for the contract processing

According to Art. 6 (1) Lit. B DSGVO, personal data will continue to be collected and processed if you communicate us to this to carry out a contract or at the opening of a customer account. Which data is collected is apparent from the respective input forms. A deletion of your customer account is possible at any time and can be done by a message to the above mentioned address of the responsible person. We save and use the data you communicate

Treaty. Following full handling of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and will be deleted after the expiry of these deadlines, unless you have expressly conserved in any further use of your data or reserved for a statutory further data use of our site became.

7) Comment function

As part of the comment function on this website, it is also stored in addition to your commentary information at the time of creating the comment and the commentator name you have chosen and published on this website. Furthermore, your IP address is logged and saved. This storage of the IP address is for security reasons and in the event that the person concerned by a given commentary the rights of third parties violates or illegal content posts. We need your e-mail address to get in touch with you if a third party should be obvious to its published content as unlawful. Legal basis for storing their data are the Art. 6 para. 1 lit. b and f dsgvo. We reserve the right to delete comments when it is unlawful by third parties.

8) Use of customer data for direct advertising

8.1 Registration for our e-mail newsletter

If you sign up for our e-mail newsletter, we will send you regular information about our offers. Compulsory request for the transmission of the newsletter alone is your e-mail address. The specification of further data is voluntary and is used to address them personally. For sending the newsletter we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have explicitly confirmed us that you will be in the reception of newsletters. We will send you a confirmation e-mail that you are asked by clicking on a corresponding link to confirm that you will want to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to the use of your personal data according to Art. 6 para. 1 lit. a dsgvo. When registering for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of login to understand a possible misuse of your e-mail address at a later date. The data obtained from us when registering for the newsletter are used exclusively for the purposes of the advertising approach in the way of the newsletter. You can unsubscribe from the newsletter about the link provided for this link in the newsletter or by appropriate message to the above-mentioned responsible person. After deregregation, your e-mail address will be deleted immediately in our newsletter distributor, as far as you have not explicitly agreed in a further use of your data or we reserve the right to provide information that is permitted by law and that we explain it in this statement

to inform.

8.2 Shipping of the e-mail newsletter to existing customers

If you have provided us with your e-mail address when buying goods or services, we reserve the right to send you similar offers to similar goods or services, such as the already purchased from our assortment by e-mail. For this purpose, we do not have to obtain separate consent from you according to § 7 Abs. 3 UWG. Data processing takes place in this way based on our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. F DSGVO. If you initially contradicted the use of your e-mail address for this purpose, a mail delivery will not take place on our part. They are entitled to object to the use of their e-mail address on the pre-designated advertising purpose at any time with effect for the future by a notification to the responsible responsible persons. For this purpose, only transmit costs after the base rates. Upon receipt of your opposition, the use of your e-mail address will be discontinued immediately for advertising purposes.

8.3 Newsletter shipping via ActiveCampaign

The shipping of our e-mail newsletters takes place via the technical service provider ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, US, USA ("ActiveCampaign"), to which we pass on your data provided during the newsletter application. This transfer takes place in accordance with Article 6 (1) lit. F DSGVO and serves our legitimate interest in using a promotional, secure and user-friendly newsletter system. The data you have entered into the newsletters (e.g., e-mail address) is stored on the servers of ActiveCampaign in the USA.

ActiveCampaign uses this information about shipping and statistical evaluation of the newsletter on our behalf. For the evaluation, the e-mails sent so-called web beacons or tracking pixels that are one-pixel image files stored on our website. So it can be determined whether a newsletter message opened and which links have been clicked if necessary. With the help of the so-called conversion tracking can also be analyzed whether after clicking the link in the newsletter a pre-defined action (e.g. buy a product on our website) is done. In addition, technical information is recorded (e.g., date of the call, IP address, browser type and operating system). The data is raised only pseudonymised and will not be linked to me to your other personal data, a direct personal liability is excluded. These data are for the statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletter to the interests of the recipients.

If you want to contradict the data analysis on statistical evaluation purposes, you must unsubscribe from the newsletter reference.

We have a contract processing contract with ActiveCampaign ("Data Processing

Agreement ") completed, with which we commit ActiveCampaign to protect the data of our customers and do not pass them on to third parties.

ActiveCampaign is certified for the US European Privacy Convention "Privacy Shield", which ensures compliance with the data protection levels applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list

The Privacy Policy of ActiveCampaign can be viewed here: https://www.activecampaign.com/privacy-policy

8.4 Newsletter shipping via shopify email

The shipping of our e-mail newsletter takes place via Shopify Email, a service of the Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), to which we Display data provided in the newsletter declaration. This transfer takes place in accordance with Article 6 (1) lit. F DSGVO and serves our legitimate interest in using a promotional, secure and user-friendly newsletter system. The data you have entered into the newsletters (e.g., e-mail address) is generally stored on the servers of Shopify in the EU. As part of the aforementioned services of Shopify, data can also be used as part of a further processing on behalf of the Shopify Inc., 150 Elgin St, Ottawa, On K2P 1L4, Canada, the Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. are transmitted. In the case of transmission of data to the Shopify Inc. in Canada, the appropriateness of the European Commission ensures the appropriate level of data protection. The Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. and the shopify (USA) Inc. in the USA is certified for the US European Privacy Convention "Privacy Shield", which comply with the data protection levels applicable in the EU guaranteed.

Shopify uses this information about shipping and statistical evaluation of the newsletter on our behalf. For the evaluation, the emails sent may contain web beacons or tracking pixels that are one-pixel image files stored on our website. So it can be determined whether a newsletter message opened and which links have been clicked if necessary. In addition, technical information is recorded (e.g., date of the call, IP address, browser type and operating system). The data is collected exclusively pseudonymised and will not be linked to your other personal data, a direct personal liability is excluded. These data are for the statistical analysis of newsletter campaigns. The results of these analyzes can be used to better adapt future newsletter to the interests of the recipients. If you want to contradict the data analysis on statistical evaluation purposes, you must unsubscribe from the newsletter reference.

Furthermore, shopify can use this data according to Art. 6 para. 1 lit. F DSGVO itself because of its own legitimate interest in the needs-based design and the

Optimizing the service as well as for market research purposes, to determine, for which countries the recipients come. However, shopify does not use the data of our newsletter receivers to write those themselves or pass the data to third parties.

We have completed a job processing agreement with Shopify, with which we commit Shopify to protect the data of our customers and do not pass them on to third parties.

The Privacy Policy of Shopify can see you here: https://www.shopify.de/legal/datenschutz

8.5 WhatsApp newsletter

If you sign up for our WhatsApp newsletter, we will send you regularly information about our offers via WhatsApp. Hauptlichtung for the transmission of the newsletter alone is your mobile phone number.

For sending the newsletter, take our communicated mobile phone number into the address contacts of your mobile device and send us the message "Start" via WhatsApp. With the transmission of this WhatsApp message, you give us your consent to the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO for the purpose of newslette sending. We will then take you in our newsletter distributor.

The data collected by us when registering for the newsletter are processed exclusively for the purposes of the advertising approach by means of the newsletter. You can unsubscribe at any time the newsletter by sending us the message "Stop" via WhatsApp. After logging out, your mobile phone number will be deleted immediately in our newsletter distributor, insofar as it has not expressly been incorporated into a further use of your data, or we reserved a further use of data that is permitted by law and informed you about that in this statement.

Please note that WhatsApp gets access to the address book of the mobile devices used by us for the newsletter delivery and automatically transmits phone numbers stored in the address book to a server from Facebook in the USA.

For shipping our WhatsApp newsletters, we therefore use a mobile device, whose address book is only stored by the WhatsApp contact data of our newsletter recipients. This ensures that each person whose WhatsApp contact data is stored in our address book is already used for the first time using the app on its device by accepting the WhatsApp Terms of Use in the transmission of its WhatsApp phone number from the address books of its chat contacts according to Art. 6 para. 1 lit. a dsgvo has agreed. A transfer of data such users who do not use WhatsApp and / or not contact us about WhatsApp will insofar

locked out.

Facebook Inc. As the owner of WhatsApp based in the United States is certified for the US European Privacy Convention "Privacy Shield", which ensures compliance with the data protection levels applicable in the EU.

8.6 Investment notification by e-mail

If we offer in our online store for selected, temporarily unavailable items, to inform you by e-mail about the time of availability, you can log in to our email notification service for goods availability. If you sign up for our website availability e-mail notification service, we will send you a message once a message via the availability of the item you selected. Hauptlichtung for the transmission of this notification alone is your e-mail address. The specification of further data is voluntary and will possibly be used to address them personally. For shipping this notification we use the so-called double opt-in procedure. This means that we will not send you a corresponding notification only if you have expressly confirmed us that you will be in reception of such a message. We will then send you a confirmation email with which you will be asked by clicking on a corresponding link to confirm that you want to receive such a notification.

By activating the confirmation link, you give us your consent to the use of your personal data according to Art. 6 para. 1 lit. a dsgvo. When you log in to our product availability e-mail notification service, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of login to a possible misuse of your e-mail address at a later date to be able to understand. The data obtained from us when registering for our email notification service for goods availability are used exclusively for the purpose of informing you about the availability of a particular article in our online shop. You can unsubscribe from the e-mail notification service for goods availability at any time by appropriate message to the above-mentioned responsible person. After deregregation, your e-mail address will be deleted immediately from our distributor set up, insofar as it does not explicitly consent to further use of your data or we reserve the right to use additional use that is permitted by law and informed you about it in this statement .

9) Data processing for order processing

9.1 In order to process your order, we work with the following service providers, which support us in whole or in part in the implementation of closed contracts. These service providers will provide certain personal data in accordance with the following information.

The personal data we collected will be passed on to the transport company commissioned with the delivery company, as far as this is required for the delivery of the goods. In the context of payment processing, we continue to give your payment data to the commissioned credit institution, if required for payment processing. If payment service providers are used, we explicitly inform you about this. Legal basis for the transfer of the data is Art. 6 para. 1 lit. b DSGVO.

9.2 Disclosure of personal data to shipping service providers

- Deutsche Post takes the delivery of the goods by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), so we give your e-mail address according to Art. 6 para. 1 lit. a DSGVO Before the delivery of the goods for the purpose of coordination of a delivery date or for delivery announcement to Deutsche Post, if they have given their explicit consent to this in the order process. Otherwise, for the purpose of delivery in accordance with Article 6 (1) lit. B DSGVO, we only give the name of the recipient and the delivery address to Deutsche Post. The transfer takes place only as far as this is required for goods delivery. In this case, a prior tuning of the delivery date with Deutsche Post or delivery announcement is not possible. The consent can be revoked at any time with effect for the future compared to the responsible person or against Deutsche Post referred to above. - DHL is the delivery of the goods by the transport service provider DHL (DHL Paket GmbH, Straßensweg 10, 53113 Bonn), we give your e-mail address according to Art. 6 para. 1 lit. a DSGVO before the delivery of the goods for the purpose the coordination of a delivery date or for delivery notice to DHL, provided that they have given their explicit consent to the order process. Otherwise, for the purpose of delivery in accordance with Article 6 (1), we provide only the name of the recipient and the delivery address to DHL. The transfer takes place only as far as this is required for goods delivery. In this case, a prior tuning of the delivery date with DHL or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future compared to the responsible responsible or compared to the transport service provider DHL.

9.3 Use of payment service providers (payment services)

- Amazon Pay when selecting the payment method "Amazon Pay" is the payment processing via the

Payment service provider Amazon Payments Europe S.C.A., 38 Avenue J.F. Kennedy, L-1855 Luxembourg ('Amazon Payments'), to which we share your information communicated as part of the ordering process, along with the information about your order according to Art. 6 para. 1 lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only in this respect, as it is required for this. Under the following Internet address, see the Amazon Payments Privacy Policy: https://pay.amazon.com/en/help/201751600 - Apple Pay If you are for the payment method "Apple Pay" of Apple Distribution International (Apple) , Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, decide, the payment processing takes place via the "Apple Pay" function of your terminal operated with iOS, Watchos or MacOS by loading a payment card stored on "Apple Pay". Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. For the release of a payment thus the input of a code previously specified codes as well as the verification by means of the "Face ID" or "Touch ID" function of your terminal required. For the purposes of payment processing, your information communicated as part of the ordering process will be shared with the information about your order in encrypted form to Apple. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment to the payment service provider of the payment card stored in Apple PAY. Encryption ensures that only the site, which has been purchased, can access the payment data. After the payment has been made, Apple sends its device account number as well as a transaction-specific, dynamic security code to the starting site for confirming the payment procedure. If personal data is processed for the described transmissions, processing takes place exclusively for the purpose of payment processing according to Art. 6 para. 1 lit. b DSGVO. Apple preserves anonymised transaction data, including the approximate purchase amount, the approximate date and the approximate time as well as the indication of whether the transaction has been successfully completed. Anonymization completely excludes a personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services. If you use Apple Pay on the iPhone or Apple Watch to complete a purchase that you have made via Safari on the Mac, the Mac and the authorization device communicate with an encrypted channel on the Apple servers. Apple does not process or stores any of this information in a format with which your person can be identified. You can deactivate the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac". Further information on data protection at Apple Pay can be found under the following

Internet address: https://support.apple.com/en-de/ht203027 - Google Pay If you are for the payment method "Google Pay" of the Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("" Google ") decide, the payment processing takes place via the" Google Pay "application of your mobile terminals operated with at least Android 4.4 (" KITKAT ") and via an NFC function by the load of a payment card stored on Google Pay or a payment system verified there (eg PayPal). For the release of a payment via Google Pay in the amount of more than 25, - €, the prior unlocking of your mobile device is required by the respectively established verification measure (such as facial recognition, password, fingerprint or pattern). For the purposes of payment processing, your information communicated as part of the ordering process will be shared with Google's information. Google then transmits their payment information stored in Google Pay in the form of a uniquely assigned transaction number to the starting site, with which a payment is verified. This transaction number does not contain any information about the real payment data of its payment funds stored on Google Pay, but is created and transmitted as a one-time valid numeric token. For all transactions via Google Pay, Google only occurs as a mediator for handling the payment process. The transaction is carried out exclusively in relation between the user and the starting point by loading of the cash stored on Google Pay. If personal data is processed for the described transmissions, processing takes place exclusively for the purpose of payment processing according to Art. 6 para. 1 lit. b DSGVO. Google reserves the right to collect, store and evaluate certain process-specific information for each transaction made via Google Pay. This includes the date, time and amount of transaction, dealer location and description, a distributor description of the purchased goods or services, photos that you have attached to the transaction, the name and e-mail address of the seller and buyer or of the sender and recipient, the method of payment used, their description for the reason of the transaction and, if applicable, the offer affiliated with the transaction. According to Google, this processing takes place exclusively according to Art. 6 Abs.1 Lit. F DSGVO on the basis of the legitimate interest in the proper accounting, the verification of process data and the optimization and functionality of the Google Pay Service. Google also reserves the right to merge the processed process data with further information that will be collected and stored by Google when using further Google services. The Terms of Use of Google Pay can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt = GooglePaytos & LDL = DE Further information on data protection on Google Pay can be found under the following

Internet address: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ld=pri Vacynotice & LDL = de - giropay If you pay via "Giropay", the payment processing via Giropay GmbH, at the shaft 4, 60322 Frankfurt / Main, to which we share your information communicated as part of the ordering process together with the information about your order. The disclosure of your data is carried out in accordance with Article 6 (1) lit. b dsgvo exclusively for the purpose of payment processing and only insofar as it is required for this. Under the following Internet address, you will receive further information about the privacy policy of Giropay GmbH: https://www.giropay.de/rechtliches/datenschlackerklaueung - Klarna If a Klarna payment service is selected, the payment processing takes place via the Klarna Bank (Publ) [HTTPS: //www.klarna.com/en], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the settlement of payment, your personal data (first and last name, street, house number, postal code, location, gender, e-mail address, telephone number and IP address) as well as data that are related to the order (eg invoice amount, article, delivery type) forwarded to Klarna for the purpose of identity and credit check, provided that they have expressly consented herein according to Article 6 (1) lit. a DSGVO as part of the ordering process. To which credit funds can be forwarded here, you can see here: https://cdn.clarna.com/1.0/shared/content/legal/terms/0/en_en/credit_rating_agencies The credit status can contain probability values (so-called score Values). As far as score values flow into the result of credit reports, they have their basis in a scientifically recognized mathematical statistical procedure. In the calculation of the score values, among other things, but not exclusively, address data. The information obtained on the statistical probability of a default uses Klarna for a weighed decision on the grounds, implementation or termination of the contractual relationship. You can revoke your consent at any time by a message to the responsible for data processing or to Klarna. However, Klarna may remain entitled to process its personal data if this is required for the contractual payment processing. Your listings will be in accordance with the applicable data protection regulations and according to the information in KLARNA's privacy policy for those affected in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_en/privacy or for Affected person based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_at/privacy treated. - Masterpayment when selecting payment methods "Direct debit (direct debit)" and / or "Delivery

Invoice "and / or" installment "Via masterpayment you are prompted to specify your personal data (first and last name, road, house number, postal code, location, date of birth, e-mail address, telephone number and direct debit the specified account connection) , In order to maintain our legitimate interest in determining the solvency of our customers, these data will be made by us in accordance with Art. 6 para. 1 lit. F DSGVO for the purpose of a credit check to the Masterpayment Ltd, 483 Green Lanes, London, N13 4BS, United Kingdom ("Masterpayment"). Masterpayment is based on the personal data you specified as well as further data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted with regard to payment and / or receivables default risks . In addition to masterpayment internal criteria in accordance with Article 6 (1). T. F DSGVO also include identity and credit information from the following credit bureaus: - Creditreform boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0) 2131-109-501, Fax: -557 - CRIF Bürgel GmbH , Friesenweg 4, House 12, 22763 Hamburg, Tel.: +49 (0) 40-89803-0, Fax: -419 - Schufa Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Tel.: +49 (0) 611 -9278-0, Fax: -109 Credit information can contain probability values (so-called. Score values). As far as score values flow into the result of credit reports, they have their basis in a scientifically recognized mathematical statistical procedure. In the calculation of the score values, among other things, but not exclusively, address data. You can contradict this processing of your data at any time by a message to those responsible for data processing or over masterpayment. However, Masterpayment remains entitled to process its personal data if this is required for the contract settlement. - Paydirekt If you decide for the payment method Paydirekt, the payment is made via the payment service provider Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main. Here, your payment details (eg payment amount, information on the payee) as well as your confirmation are that the payment data is true from PayDirekt GmbH to carry out the paydirect payment according to Art. 6 para. 1 lit. b DSGVO, processed, and to yours Bank transmitted. This processing takes place only as far as they are actually required to carry out the payment. Then Paydirekt GmbH authenticates the payment via the authentication procedure stored for you in your bank. For more information about passing and processing your data, you can remove the PayDirekt privacy policy that you can view at the following link: https://www.paydirekt.de/agb/index.html. - PayPal on payment via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment" via PayPal we give yours

Payment data as part of the payment processing to PayPal (Europe) S.A.R.L. et cie, s.c.a., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), continue. The transfer takes place in accordance with Article 6 (1) lit. b DSGVO and only insofar as this is required for payment processing. PayPal reserves the rights for the payment methods Credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment" via PayPal the implementation of a credit status. For this purpose, their payment data may be disclosed in accordance with Art. 6 para. 1 lit. F DSGVO on the basis of the legitimate interest of PayPal at the determination of their solvency to credit funds. The result of the credit check in relation to the statistical default probability probability uses PayPal for the purpose of deciding on the provision of the respective payment method. The credit status can contain probability values (so-called score values). As far as score values flow into the result of credit reports, they have their basis in a scientifically recognized mathematical statistical procedure. In the calculation of the score values, among other things, but not exclusively, address data. Further data protection information, among other things to the credit bureaus, please refer to the privacy policy of PayPal: https://www.paypal.com/en/webapps/mpp/ua/privacy-full You can use this processing of your data at any time by a message contradict at PayPal. However, PayPal may remain entitled to process their personal data if this is required for the contractual payment processing. - Shopify Payments We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you decide for a payment method offered via the payment service provider shopify payments, the payment processing takes place via the technical service provider Stripe Payments EUROPE LTD., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we informed your information communicated as part of the ordering process, along with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) according to Art. 6 para. 1 lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the Stripe Payments Europe Ltd. And only insofar as it is required for this. For more information about the data protection of Shopify Payments, see the Internet address below: https://www.shopify.com/legal/privacy. Data protection information about the Stripe Payments Europe Ltd. can be found here: https://stripe.com/privacy - immediately when selecting the payment method "immediately", the payment processing takes place via the payment service provider immediately gmbh, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "immediately"), to the We share your information communicated as part of the ordering process, together with the information about your order according to Art. 6 para. 1 lit. b DSGVO. The instant GmbH is part of the Klarna Group (Klarna Bank (PUBL),

Sveavägen 46, 11134 Stockholm, Sweden). The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider immediately and only insofar as it is required for this. Under the following Internet address, you will receive more information about the privacy policy of immediately: https://www.klarna.com/sofort/datenschutz. - Stripe If you choose a payment method of the payment service provider Stripe, the payment processing is made via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to which we offer your information communicated as part of the ordering process The information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) according to Art. 6 para. 1 lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider STRIPE Payments Europe Ltd. And only insofar as it is required for this. For more information about the privacy of Stripe, see the URL https://stripe.com/en/privacy#Translation.

10) Contacting evaluation reminder

Own assessment reminder (no shipping by a customer assessment system) We use your e-mail address for a unique reminder to the submission of an assessment of your order for the valuation system we used, unless you have expressly consent to us during or after your order, according to Art. 6 Abs. 1 lit. a dsgvo have given. You can revoke your consent at any time by a message to the responsible for data processing.

11) Use of social media: social plugins

11.1 Facebook as a standard plugin

On our website, so-called social plugins ("plugins") of the Social Network Facebook is used, which is operated by the Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland ("Facebook"). The plugins are marked with a Facebook logo or the addition "Social Plug-in by Facebook" or "Facebook Social Plugin". An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/Plugins

When you call a page of our website that contains such a plugin, your browser will connect to the Facebook servers. The content of the plugin is transmitted directly to your browser from Facebook and integrated into the page. This integration provides Facebook the information that your browser has called the appropriate page of our website, even if you do not have a Facebook profile or just not logged in to Facebook. This information (including your IP address) is transmitted from your browser directly to a server from Facebook Inc. and stored there in the USA.

If you are logged in to Facebook, Facebook can directly assign the visit to our website to your Facebook profile. If you interact with the plugins, for example, press the "Like" button or leave a comment, this information is also sent directly to a server from Facebook and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

The described data processing operations are carried out in accordance with Art. 6 para. 1 lit. F DSGVO based on the legitimate interests of Facebook at the insertion of personalized advertising to inform other users of the social network via their activities on our website and for the needs-based design of the Facebook service .

If you do not want Facebook to assign the data collected through our website directly to your Facebook profile, you must log out on Facebook before you visit our website. You can also load the Facebook plugins and thus the data processing operations described above with add-ons for your browser for the future, e.g. with the script blocker "NOScript" (http://noscript.net/).

Facebook Inc. based in the United States is certified for the US European Privacy Policy Convention "Privacy Shield", which ensures compliance with the data protection levels applicable in the EU.

Purpose and scope of data collection and further processing and use of the data through Facebook as well as your relevant rights and setting options to protect your privacy, please refer to the privacy policy from Facebook: https://www.facebook.com/policy.php

11.2 Facebook plugins with 2-click solution

In order to increase the protection of your data when visiting our website, the plugins are initially deactivated by means of a so-called "2-click" solution in the page. Disabled plugins Recognize that these are stored gray. This integration ensures that when calling a page of our website that contains such plugins, no connection with the servers from Facebook will be established. Only when you enable the plugins and thus issue your consent to data transmission in accordance with Art. 6 para. 1 lit. a DSGVO, your browser makes a direct connection to the servers of Facebook. The content of the respective plug-ins is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) on Facebook. We have no influence on the scope of the data that will raise Facebook with the help of plugins. According to our knowledge, Facebook receives information about which of our websites you are currently

and have called up before. By integrating the plugins, Facebook also gives the information that your browser has called the appropriate page of our website if you do not have a profile on Facebook or just not logged in. The information collected (including your IP address) will be transmitted from your browser directly to a server from Facebook Inc. and stored there in the USA. If you interact with the plugins, the corresponding information is also transmitted directly to a server from Facebook and stored there. The information will also be published on Facebook and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plug-in by clicking again. However, the revocation has no influence on the data already transferred to Facebook.

Facebook Inc. based in the United States is certified for the US European Privacy Policy Convention "Privacy Shield", which ensures compliance with the data protection levels applicable in the EU.

11.3 Facebook plug-ins with Shariff solution

In order to increase the protection of your data when visiting our website, these buttons are not fully integrated as plugins, but merely integrated using an HTML link to the page. This type of integration ensures that when you call a page of our website containing such buttons, no connection with the Facebook servers will be established. If you click the button, a new browser window opens and calls the Facebook page on which you (if necessary after entering your login data) can interact with the local plugins.

11.4 Instagram as a standard plugin

On our website, so-called social plugins ("plugins") of the online service Instagram used by the Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram"). The plugins are marked with an Instagram logo, for example, in the form of an "Instagram camera". An overview of

The Instagram Plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-Badges.

When you call a page of our website that contains such a plugin, your browser creates a direct connection to the Instagram servers. The content of the plug-ins is transmitted directly to your browser from Instagram and integrated into the page. This integration receives Instagram the information that your browser has called the appropriate page of our website, even if you do not have Instagram profile or just not logged in to Instagram. This information (including your IP address) is transmitted from your browser directly to a server from Instagram to the US and stored there.

If you are logged in to Instagram, Instagram can directly assign the visit to our website to your Instagram account. If you interact with the plugins, for example, press the Instagram Camera button button, this information is also directly transmitted to a server from Instagram and stored there. The information will also be published on your Instagram account and displayed there your contacts.

The described data processing operations are carried out in accordance with Article 6 (1) lit. F DSGVO based on the legitimate interests of Instagram at the insertion of personalized advertising to inform other users of the social network through their activities on our website and for the needs-based design of the Instagram service .

If you do not want Instagram to assign the data collected through our website directly to your Instagram account, you must log out of our website at Instagram. You can also load the Instagram plugins and thus the data processing operations described above with add-ons for your browser for the future, e.g. with the script blocker "Noscript" (http://noscript.net/). Instagram LLC. Headquartered in the US, Privacy Shield is certified for the US European Data Protection Convention, which ensures compliance with the data protection levels applicable in the EU.

Purpose and scope of data collection and further processing and use of data by Instagram and its relevant rights and settings for the protection of your privacy, please refer to the Privacy Policy of Instagram: https://help.instagram.com/155833707900388/

11.5 Instagram plugin as Shariff solution

On our website, so-called social plugins ("plugins") of the online service Instagram used by the Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

In order to increase the protection of your data when visiting our website, these buttons are not unrestricted as plugins, but merely using

An HTML link is integrated into the page. This type of integration ensures that when calling a page of our website containing such buttons, no connection is made with the INSTRAMAM servers. If you click the button, a new browser window opens and calls the Instagram page on which you (if necessary after entering your login data) can interact with the local plugins. Instagram LLC. Headquartered in the US, Privacy Shield is certified for the US European Data Protection Convention, which ensures compliance with the data protection levels applicable in the EU.

12) Use of social media: Videos

Use of YouTube videos

This website uses the YouTube embedding function to display and play videos of the supplier "YouTube", which belongs to the Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Here, the advanced privacy mode is used, which, according to provider information, sets a storage of user information only when playing the video. When playback is started embedded YouTube videos, the supplier "YouTube" uses cookies to collect information about user behavior. According to "YouTube", these are, among other things, serve to capture video statistics, to improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account if you click on a video. If you do not want the assignment with your profile at YouTube, you must log out before activating the button. Google saves your data (even for non-logged users) as usage profiles and evaluates them. Such evaluation is carried out in particular according to Art. 6 para. 1 lit. F DSGVO based on the legitimate interests of Google at the insertion of personalized advertising, market research and / or needs-based design of its website. You have a right of objection to the formation of these user profiles, where you need to be aimed at the exercise of Youtube. As part of the use of YouTube, it can also be used to transmit personal data to the Google LLC server. come in the USA. Regardless of a reproduction of the embedded videos, each call to the Google network is recorded every time of this website, which can trigger further data processing operations without our influence.

In the case of transmission of personal data to the Google LLC. Based in the US, Google LLC has. certified for the US European Privacy Convention "Privacy Shield", which compliance with the EU applicable

Privacy Levels guaranteed. A current certificate can be viewed here: https://www.privacyshield.gov/list

Further information on data protection at "YouTube" can be found in the privacy policy of the provider at: https://www.google.de/intl/en/policies/privacy

Insofar as legally required, we have obtained its consent under Article 6 (1) Lit. a DSGVO for their data presented above. You can revoke your granted consent at any time with effect for the future. To exercise your revocation, please follow the opportunity to make a contradiction above.

13) Online Marketing

13.1 Google Adsense

This website uses Google AdSense, a Web watch service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies are text files that are stored on your computer and enabling an analysis of the use of the site by you. In addition, Google AdSense uses the collection of information also so-called "web-beacons" (small invisible graphics), by using simple actions such as visitor traffic on the website can be recorded, collected and evaluated. The information generated by the cookie and / or web beacon (including your IP address) via your use of this website is usually transferred to a Google server and stored there. Here it can also be used to transmit to the Google LLC servers. come in the USA.

Google uses the information thus obtained to perform an evaluation of your usage behavior with regard to the AdSense Displays. The IP address transmitted in the context of Google AdSense from your browser is not merged with other data from Google. The information collected by Google may be transferred to third parties, provided that this is required by law and / or as far as third parties process this data on behalf of Google.

The described processing of data is carried out in accordance with Art. 6 para. 1 lit. F DSGVO for the purpose of the targeted user address of the user by advertising third parties whose ads are displayed on the basis of the evaluated user behavior on this website. This processing also serves our financial interest in the exploitation of the economic potential of our website by a refalation of personalized third-party training.

In the case of transmission of personal data to the Google LLC. Based in the US, Google LLC has. certified for the US European Privacy Convention "Privacy Shield", which ensures compliance with the data protection levels applicable in the EU. A current certificate can be viewed here:

https://www.privacyshield.gov/list

See the following Internet address for more information about Google's privacy policy: https://www.google.de/policies/privacy/

You can deactivate cookies for ad specifications permanently by preventing them with a corresponding setting of your browser software or you can download and install the browser plug-in available under the following link: https://www.google.com/settings/ads / Plugin? HL = DE

Please note that certain features of this website may not be used or only restricted if you have disabled the use of cookies.

13.2 Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and as part of Google Ads the conversion tracking of the Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the range of Google Ads to draw attention to our attractive offers with the help of advertising materials (so-called Google AdWords) on external websites. We can determine in relation to the data of the advertising campaigns, as successfully the individual advertising measures are. We pursue the concern to display advertising that is of interest to make our website more interesting for you and achieve a fair calculation of the incognizable advertising costs.

The Cookie for Conversion Tracking is set when a user clicks on a Google-switched ADS display. Cookies are small text files stored on your terminal. These cookies usually lose their validity after 30 days and do not serve personal identification. If the user visits certain pages of this website and the cookie has not expired yet, Google and we recognize that the user has clicked on the display and has been forwarded to this page. Every Google Ads customer receives another cookie. Cookies can not be tracked through the websites of Google Ads customers. The information obtained using the conversion cookies serve to create conversion statistics for Google Ads customers who have decided on conversion tracking. Customers will learn the total number of users who have clicked on their display and forwarded to a conversion-tracking tagged side. However, you will not receive any information with which users can personally identify. If you do not want to participate in tracking, you can block this usage by using your Google Conversion Tracking's cookie over your Internet browser under the

Disable keyword "User settings". You will not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in a targeted advertisement acc. Art. 6 para. 1 lit. F DSGVO. As part of the use of Google Ads, it can also be used to transmit personal data to the Google LLC server. come in the USA.

See the following Internet address for more information about Google's privacy policy: https://www.google.de/policies/privacy/

You can deactivate cookies for display specifications permanently by preventing them from downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin ? HL = DE

Please note that certain features of this website may not be used or only restricted if you have disabled the use of cookies.

13.3 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform of the Operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to switch to users relevant displays, improve the campaign performance reports or to avoid that a user sees the same ads several times. Using a cookie ID, Google captures which displays in which browser are switched and can prevent it from displaying multiple times. The processing takes place on the basis of our legitimate interest in the optimal marketing of our website according to Art. 6 para. 1 lit. F DSGVO.

In addition, GMP can capture Cookie IDs so-called Conversions, which have reference to ad requests. This is the case, if a user sees a GMP display and later using the same browser calls the advertiser's website and buys something about this website. According to Google, GMP cookies do not contain personal information.

Due to the marketing tools used, your browser automatically builds a direct connection to Google's server. We have no influence on the scope and the further use of the data collected by the use of this tool through Google and therefore inform you according to our knowledge as follows: By integrating GMP Google receives the information that you have the corresponding part of our Recalled internet response or clicked on a display of us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider brings and stores your IP address. As part of the use of GMP, it can also be used to transmit personal data to the Google LLC server. come in the USA.

If you want to contradict participation in this tracking procedure, you can deactivate cookies for conversion tracking by setting your browser so that cookies are blocked by the domain www.googleadservices.com (see https: // www. Google.com/Settings/ADs), this setting deletes when you disable your cookies. Alternatively, you can find out about the setting of cookies at the Digital Advertising Alliance under the Internet address www.aboutads.info and make your desired settings. Finally, you can set your browser so that you will be informed about setting cookies and individually deciding on their acceptance or exclude the acceptance of cookies for certain cases or generally. In the non-acceptance of cookies, the functionality of our website can be restricted.

Under the following Internet address, you will receive more information about the privacy policy from GMP by Google: https://www.google.de/policies/privacy/

14) Web analysis services

14.1 Google (Universal) Analytics

Google (Universal) Analytics This website uses Google (Universal) Analytics, a Web Analysis Service of the Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google

(Universal) Analytics uses so-called "cookies", these are text files stored on your computer and enabling an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) are usually transferred to a Google server and stored there, it can also be used to transmit to the Google LLC server. come in the USA. This website uses Google (Universal) Analytics exclusively with the enlargement "_anonymizeiP ()", which ensures an anonymization of the IP address by cutting and excludes direct personalization. The extension previously reduced your IP address of Google within Member States of the European Union or in other Contracting States of the Agreement on European Economic Area. Only in exceptional cases, the full IP address is transferred to a Google LLC.IN server and shortened there. In these exceptional cases, this processing takes place in accordance with Article 6 (1) lit. F DSGVO on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. In our order, Google will use this information to evaluate your use of the website to compile reports about website activities and to provide us with further services associated with website usage and internet usage. The IP address transmitted as part of Google (Universal) Analytics from your browser is not merged with other data from Google. You can prevent the storage of cookies with a corresponding setting of your browser software. However, we point out that in this case, you may not be able to fully utilize all functions of this website. You can also prevent the collection of the data generated by the cookie and to your use of the website (including your IP address) to Google as well as the processing of these data by Google by downloading the browser plugin available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=en As an alternative to the browser plugin or within browsers on mobile devices, please click on the following link to set an opt-out cookie, which prevents the capture by Google Analytics within this website (this opt-out cookie works only in this browser and only for this domain. If you delete your cookies in this browser, you must click this link again): Google Analytics Disable more information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=en for the case of Transmission of personal data to the Google LLC. Based in the US, Google LLC has. certified for the US European Privacy Convention "Privacy Shield", which ensures compliance with the data protection levels applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list as far as legally required, we have for the above-mentioned processing of its

Data Your consent according to Art. 6 para. 1 lit. a dsgvo obtained. You can revoke your granted consent at any time with effect for the future. To exercise your revocation, please follow the opportunity to make a contradiction above.

14.2 PayPal Marketing Solutions

This offer uses the web analysis service "PayPal Marketing Solutions", a web analysis service of the PAYPAL (Europe) S.à r.L. et cie, s.c.a., 22-24 Boulevard Royal, L-2449 Luxembourg. With the help of PayPal Marketing Solutions, on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes according to Art. 6 para. 1 lit. f dsgvo pseudonymised data from customers collected, evaluated and stored, which for the payment service " Paypal "used. From these data, pseudonymised use profiles can be created and evaluated for the same purpose. PayPal Marketing Solutions uses so-called cookies, which are small text files stored locally in the intermediate memory of the website's Internet browser. The information-based information such as Browser Type / Version, used by the cookies, used device, used previously visited page (so-called Referrer URL) and the time of the server request are transferred to a server of PayPal Marketing Solutions and stored there.

PayPal Marketing Solutions will not merge this information in any case with other PAYPAL data stored to your person.

If you do not agree with the storage and evaluation of these data from your visit to our website and deactivate it for the future, you can prevent the use of cookies and thus participation in tracking. If you want to object to the evaluation of user behavior via cookies, you can set your browser so that you can be informed about setting cookies and individually deciding on their acceptance or exclude the acceptance of cookies for specific cases or generally.

The PAYPAL privacy policy can be found in the Internet address below: https://www.paypal.com/en/webapps/mpp/ua/privacy-full

15) Tools and other

15.1 - Google Web Fonts This site uses the Single Presentation of Fonts so-called Web Fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). When calling a page, your browser invites you

Required web fonts in your browser cache to display texts and fonts correctly. For this purpose, the browser you use must connect to Google's servers. It can also be used to transmit personal data to the Google LLC server. come in the USA. In this way Google attains knowledge of the fact that our website was called up via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing representation of our online offers. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. F DSGVO. If your browser Web Fonts does not support, a default script is used by your computer. In the case of transmission of personal data to the Google LLC. Based in the US, Google LLC has. certified for the US European Privacy Convention "Privacy Shield", which ensures compliance with the data protection levels applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/list More Information About Google Web Fonts can be found at https://engevelopers.google.com/fonts/faq and in the privacy policy of Google: https: //www.google.com/policies/privacy/

15.2 Google Recaptcha

On this site we also use the Recaptcha feature of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is used primarily for distinguishing whether an input is carried out by a natural person or misuse by mechanical and automated processing. The service includes sending the IP address and, if necessary, more on Google's data required for the Recaptcha service and is carried out in accordance with Article 6 (1) lit. F DSGVO on the basis of our legitimate interest in the determination of individual ownership responsibility on the Internet and avoiding abuse and spam. As part of the use of Google Recaptcha, it can also be used to transmit personal data to the Google LLCS servers. come in the USA.

Further information about Google Recaptcha as well as the Google privacy policy can see: https://www.google.com/intl/en/policies/privacy/

Tel: +49 (0) 89/130 1433 - 0 · Fax: +49 (0) 89/130 1433 - 60

15.3 Shopsync for Shopify

This website uses the shopify app "ShopSync" of ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA. Using ShopSync, the newsletter service "Mailchimp" is synchronized with our shopify account so that on the one hand updates in e-mail lists from MailChimp (such as a Take Opt-Out of a Newsletter Receiver) can also be stored on Shopify and on the other hand New, via contract connections on shopify generated contact data can be transferred to the e-mail lists of mailchimp.

In the former case, data processing in accordance with Article 6 (1) lit. F DSGVO is based on our legitimate interest in the effective and cross-system maintenance of the advertising address data and the efficient observance of legally significant status changes.

In the second case, only on the basis of an explicit consent of the user in accordance with Article 6 (1) lit. a DSGVO after a conclusion of the contract on shopify for inclusion in the mail chimp list of the advance and cash on delivery, the address and the e-mail address together with transactional information (Purchase amount, time and date of purchase) transmitted by ShopSync to Mailchimp.

This data transmitted is not stored or stored by ShopSync after synchronization. All information synchronized between shopify and mailchimp will be transmitted via the SSL technology (Secure Socket Layer), and all transmitted information is encrypted during the synchronization process.

The synchronization process requires the transfer of information about a secure connection to servers hosted by Amazon Web Services in the USA. Amazon Web Services based in the US is certified for the US European Privacy Convention "Privacy Shield", which ensures compliance with the data protection levels applicable in the EU. A current certificate can be viewed here: https://www.privacyshield.gov/participant?id=a2zt0000000towqaa4

Further data protection notes on ShopSync can be found here: https://shopsync.io/privacy-policy

16) Rights of the person concerned

16.1 The applicable data protection law grants you comprehensive concerns with regard to the processing of your personal data comprehensive concerns (information and intervention rights), which we inform you below:

- Law according to Art. 15 DSGVO: In particular, you have a right to information about your personal data processed by us, the processing purposes,

The categories of the processed personal data, the recipients or categories of receivers relating to which their data has been disclosed or become, the planned storage period or the criteria for determining the storage period, the existence of a right to correction, deletion, restriction of processing, contradiction against the processing, complaint with a supervisory authority, the origin of their data, if they were not collected by us, the existence of automated decision-making, including profiling and, if necessary, meaningful information about the logic involved and the scope relating to them and the desired effects of a such workmanship, as well as their right to inform the guarantees in accordance with Art. 46 DSGVO in forwarding their data into third countries; - Law on correction according to Art. 16 DSGVO: You have a right to immediately correction of incorrect data and / or completion of your incomplete data stored in us; - Legal deletion according to Art. 17 DSGVO: You have the right to demand the deletion of your personal data in the presence of the requirements of Art. 17 para. 1 DSGVO. However, this right does not exist in particular if the processing is required to exercise the right to free expression and information, to fulfill a legal obligation, for reasons of public interest or assertion, exercise or defense of legal claims; - Right to restrict processing according to Art. 18 DSGVO: You have the right to demand the restriction of processing your personal data as long as the accuracy of your data disputed by you will be reviewed if you delete your data because of inadmissible data processing and instead The restriction of processing your data requires your data to assert, exercise, or defense of legal claims after we no longer need this data after harvesting or if you have filed a contradiction for your special situation, as long as it is not yet established, whether our predominance of legitimate reasons; - Law to information in accordance with Art. 19 DSGVO: If you have asserted the right to correction, deletion or restriction of processing to the responsible person, it is obliged to allow all recipients who have been disclosed to the personal data concerning the person related to them or limiting the processing, unless this proves to be impossible or is associated with a disproportionate effort. You are the right to be informed about these beneficiaries. - Law on data transferability according to Art. 20 DSGVO: You have the right to obtain your personal data you have provided in a structured, common and machine readbaring format or to require the transmission to another responsible person, as far as this is technically feasible ; - Right to revoke revoked consent in accordance with Article 7 (3) DSGVO: You have the right to revoke a once granted consent to the processing of data at any time with effect for the future. In the case of the revocation, we will delete the data concerned immediately, if further processing is not on one

Legal basis for consenting processing can be supported. The revocation of consent does not affect the legality of the processing of processing due to the consent until the revocation; - Law to complaint according to Art. 77 DSGVO: If you believe that the processing of personal data relating to you infringes the DSGVO, without prejudice to a different administrative or judicial remedies - the right to complain with a supervisory authority, especially in the Member State of your whereabouts, your workplace or the place of alleged violation.

16.2 RIGHT TO OBJECT

Unless in the context of a strand of interest, we process their personal data due to our predominant legitimate interest, they have the right to appeal for the future for the future for the future, for reasons that arise from their special situation. Take advantage of your right of objection, we end the processing of the data subject. However, further processing remains reserved if we can prove compelling relevant reasons for the processing that outweigh their interests, fundamental rights and fundamental freedoms, or if the processing of the assertion, exercise or defense of legal entitlements serves.

If your personal data is processed by us to operate direct advertising, you have the right to at any time contradict the processing of personal data for the purpose of such advertising. You can exert the opposition as described above.

If you make use of your right of objection, we will finish the processing of the data subjects for direct purposes.

17) Duration of storage of personal data

The duration of storage of personal data is calculated on the basis of the relevant legal basis, the purpose of the purpose and, if relevant, in addition to the relevant statutory retention period (e.g., commercial and tax retention periods).

When processing personal data based on an explicit consent in accordance with Article 6 (1) lit. a DSGVO, these data are stored until the person concerned reveals his consent.

Existing legal retention periods for data that is based on legal or legal obligations on the basis

From Art. 6 para. 1 lit. b DSGVO are processed, this data is routinely deleted after expiration of the retention periods, unless they are required to fulfill the contract or contract initiation and / or on our part there is no authorized interest in continued storage.

When processing personal data based on Art. 6 para. 1 lit. F DSGVO, this data is stored until the person concerned exercises his right of objection under Article 21 (1) DSGVO, unless we can force compelling reasons Processing for the processing, which predominate the interests, rights and freedoms of the person concerned, or processing serves the assertion, exercise or defense of legal claims.

In the processing of personal data for the purpose of direct presentation based on Art. 6 para. 1 lit. F DSGVO, these data are stored until the person concerned exercises his right of objection under Article 21 (2) DSGVO.

Unless otherwise informed of the other information of this statement on specific processing situations, stored personal data are then deleted if they are no longer necessary for the purposes for which they were collected or otherwise processed.