Privacy Policy

Privacy Policy

The data controller is:

Primex GmbH

12 Senefelder Street

Hanau

Email: info@primex-world.com

We appreciate your interest in our website. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time you access a webpage, the web server automatically saves a so-called server log file that contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data), and documents the request. This access data is analyzed exclusively for the purpose of ensuring the smooth operation of the website and improving our offerings. This serves to safeguard our legitimate interests—which prevail following a balancing of interests—in the proper presentation of our offerings in accordance with Article 6(1)(f) of the GDPR. All access data is deleted no later than seven days after the end of your visit to the site. All access data is processed only for as long as is necessary to achieve the aforementioned processing purposes.

 Hosting

The services for hosting and displaying the website are provided in part by our service providers as part of processing carried out on our behalf. Unless otherwise specified in this Privacy Policy, all access data and all data collected via the forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

Our service providers are located in and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined, by resolution, that an adequate level of data protection exists: Canada, New Zealand, Japan, the United Kingdom, and the United States.

The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified. Until our service providers are certified, data transfers will continue to be based on the European Commission’s Standard Data Protection Clauses.

Our service providers are located in and/or use servers in the following countries: Australia, India, and Singapore.
There is no adequacy decision by the European Commission or the Swiss Federal Council for these countries. Our collaboration with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses

2. Data Processing for Contract Fulfilment and to Establish Contact

2.1 Data Processing for Contract Fulfilment

For the purpose of contract fulfillment (including inquiries regarding and the resolution of any existing claims arising from warranty rights, rights arising from breach of contract, and the right of withdrawal, as well as any statutory obligations to provide updates) in accordance with Article 6(1)(b) of the GDPR, we collect personal data when you voluntarily provide it to us as part of your order. Required fields are marked as such because, in these cases, we absolutely need the data to fulfill the contract, and we cannot ship the order without this information. The data collected is specified in the respective input forms.

Further information regarding the processing of your data—in particular, its disclosure to our service providers for the purposes of order processing, payment processing, and shipping—can be found in the following sections of this Privacy Policy. Once the contract has been fully fulfilled, your data will be restricted for further processing and deleted after the expiration of the retention periods required by tax and commercial law in accordance with Article 6(1)(c) of the GDPR, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data beyond that scope, provided such use is permitted by law and we inform you of it in this policy.

Merchandise Management System

We use inventory management systems provided by external service providers to process orders and contracts. Our service providers act on our behalf under a data processing agreement. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

2.2 Customer Account

To the extent that you have given your consent pursuant to Article 6(1)(a) of the GDPR by choosing to open a customer account, we will use your data for the purpose of opening the customer account and for storing your data for future orders on our website. You may delete your customer account at any time, either by sending a message using the contact information provided in this Privacy Policy or by using the function provided for this purpose within your customer account. After your customer account is deleted, your data will be deleted unless you have expressly consented to the continued use of your data in accordance with Article 6(1), sentence 1, letter a of the GDPR, or unless we reserve the right to use your data beyond that, which is permitted by law and about which we inform you in this policy.

 Contact Us

As part of our customer communications, we collect personal data to process your inquiries in accordance with Article 6(1)(b) of the GDPR if you voluntarily provide it to us when contacting us (e.g., via the contact form, live chat tool, or email). Required fields are marked as such, as we absolutely need this data in these cases to process your inquiry. The specific data collected is indicated on the respective input forms. Once your inquiry has been fully processed, your data will be deleted, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

2.3 Data Processing for Appointment Scheduling/Reservations

We collect personal data when you voluntarily provide it to us as part of an appointment booking or reservation. Required fields are marked as such because, in these cases, we absolutely need the data to complete the appointment booking or reservation, and you cannot submit the booking or reservation without providing this information. The specific data collected is indicated in the respective input forms. Information entered in free-text fields is voluntary and does not have to be provided in order to submit the appointment booking or reservation. We ask that you refrain from entering sensitive data (e.g., health-related information such as medical conditions) in these free-text fields.

We use the data you provide to book appointments/make reservations in accordance with Article 6(1)(b) of the GDPR. Once the booked appointment or reservation has been fully processed, your data will be restricted for further processing and deleted after the expiration of any retention periods required by tax and commercial law in accordance with Article 6(1)(c) of the GDPR, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

 Calendy's Appointment Scheduling Solution

To schedule appointments, we use a booking solution provided by Calendly LLC, 115 E Main St., Ste A1B, Buford, GA 30518, USA. The service provider acts on our behalf.

Our service providers are located in and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists: the United States.

The adequacy decision for the United States serves as the basis for cross-border data transfers, provided that the relevant service provider is certified. Certification has been granted.

3. Data Processing for the Purpose of Shipping

To fulfill the contract in accordance with Article 6(1), first sentence, letter b of the GDPR, we share your data with the shipping provider responsible for delivery, to the extent necessary to deliver the ordered goods. If you have any questions about our service providers or the basis of our collaboration with them, please contact us using the contact information provided in this Privacy Policy.

 Sharing Data with Shipping Providers for the Purpose of Shipping Notifications

Provided that you have given us your explicit consent to do so during or after placing your order, we will, on this basis and in accordance with Art. 6(1)(a) of the GDPR, share your email address and phone number with the selected shipping provider so that it can contact you prior to delivery to notify you of the shipment or coordinate delivery details.
You may revoke your consent at any time by sending a message to the contact information provided in this Privacy Policy. Upon revocation, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this Privacy Policy. If you have any questions about our service providers and the basis of our collaboration with them, please contact us using the contact information provided in this Privacy Policy.

4. Data Processing for Payment Processing

We work with the following partners to process payments in our online store: technical service providers, financial institutions, and payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the selected payment method, we will disclose the data necessary for processing the payment transaction to our technical service providers, the designated financial institutions, or the selected payment service provider, to the extent necessary to process the payment. This serves to fulfill the contract in accordance with Article 6(1)(b) of the GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g., on their own website or through technical integration into the ordering process. In such cases, the privacy policy of the respective payment service provider applies.

Depending on the selected payment method, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined, by means of a decision, that an adequate level of data protection exists. To the extent that data is transferred to third countries outside the EU/EEA for which the European Commission has not issued a decision on an adequate level of data protection, the cooperation is based on the European Commission’s Standard Data Protection Clauses.

If you have any questions about our payment processing partners or the basis of our collaboration with them, please contact us using the contact information provided in this Privacy Policy.

4.2 Data Processing for the Purpose of Fraud Prevention and Optimizing Our Payment Processes

Where applicable, we provide the aforementioned service providers with additional data, which they use—along with the data necessary for processing the payment—for the purposes of fraud prevention and optimizing our payment processes (e.g., invoicing, handling disputed payments, and supporting accounting). This is done in accordance with Article 6(1)(f) of the GDPR to safeguard our legitimate interests—which, following a balancing of interests, are deemed to prevail—in protecting ourselves against fraud and in ensuring efficient payment management.

4.3 Identity and Credit Check When Selecting Klarna Payment Services

Purchase on account via Klarna
If you choose to use the payment services provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”), we ask for your consent pursuant to Article 6(1)(a) of the GDPR to allow us to transfer to Klarna the data necessary for processing the payment and conducting an identity and credit check. In Germany, the credit bureaus listed inKlarna’sprivacy policy may be used for identity and creditworthiness checks. Klarna uses the information received regarding the statistical probability of payment default to make a balanced decision regarding the establishment, performance, or termination of the contractual relationship. You may revoke your consent at any time by contacting us via the contact information provided in this Privacy Policy. This may result in us no longer being able to offer you certain payment options. You may also revoke your consent to this use of personal data at any time by contacting Klarna directly.

4.4 Identity and Credit Check When Selecting "Purchase on Account" via PayPal and Ratepay

If you choose to pay by invoice (offered by Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (hereinafter “Ratepay”) and PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (hereinafter “PayPal”)), we ask for your consent pursuant to Article 6(1)(a) of the GDPR to allow us to transfer the data necessary for processing the payment and conducting an identity and credit check to Ratepay. In Germany, the credit reporting agencieslistedinRatepay’s privacy policy may be used for identity and creditworthiness checks. Ratepay uses the information received regarding the statistical probability of default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You may revoke your consent at any time by sending a message to the contact information provided in this Privacy Policy. This may result in us no longer being able to offer you certain payment options. Additional information on data protection at PayPal can be foundhere.

5. Advertising via Email

5.1 Email Newsletters with Subscription and Newsletter Tracking

When you subscribe to our newsletter, we use the data required for this purpose or the data you have separately provided to send you our email newsletter on a regular basis based on your consent in accordance with Art. 6(1)(a) of the GDPR. You may unsubscribe from the newsletter at any time by either sending a message to the contact information provided below or by clicking the link provided for this purpose in the newsletter. After you unsubscribe, we will delete your email address from the recipient list, unless you have expressly consented to the continued use of your data in accordance with Article 6(1)(a) of the GDPR, or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

Please note that when we send out the newsletter, we evaluate your user behavior. To this end, we also analyze your interaction with our newsletter by measuring, storing, and evaluating open rates and click-through rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).

For this analysis, the emails sent contain single-pixel technologies (e.g., so-called web beacons, tracking pixels) that are stored on our website. For the analyses, we link the following “newsletter data” in particular:

• the page from which the page was requested (the so-called referrer URL),
• the date and time of the request,
• a description of the type of web browser used,
• the IP address of the requesting computer,
• the email address,
• the date and time of registration and confirmation

and the one-pixel technologies with your email address or your IP address and, if applicable, a unique ID. Links included in the newsletter may also contain this ID.

If you do not wish to have your newsletter tracking, you can unsubscribe from the newsletter at any time, as described above.

The information will be stored for as long as you remain subscribed to the newsletter.

5.2 Newsletter Distribution

The newsletter and the newsletter tracking described above may also be sent by our service providers as part of processing carried out on our behalf. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

Our service providers are located in and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists: the United States.

The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified. Certification has been obtained.

5.3 Sending Review Requests via Email

If you have given us your explicit consent for this purpose during or after placing your order in accordance with Art. 6(1)(a) of the GDPR, we will use your email address to request that you submit a review of your order via the review system we use. You may revoke this consent at any time by sending a message to the contact information provided in this Privacy Policy or by clicking the link provided for this purpose in the review request. Once you have revoked your consent, we will delete your email address from the recipient list, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) of the GDPR or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

Review requests may also be sent by our service provider, Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops").

As part of the process of sending review requests, we receive information from Trusted Shops regarding the respective status (e.g., whether the review request was sent and whether it was received). This is done in accordance with Article 6(1)(f) of the GDPR to fulfill our legitimate interest in receiving information about the review invitations so that we can make optimizations based on that information, if necessary, as well as to fulfill Trusted Shops’ legitimate interest in being able to offer this service.

We are jointly responsible with Trusted Shops for sending requests for reviews and for collecting and displaying review and status information.

As part of the joint responsibility arrangement between us and Trusted Shops, please contact Trusted Shops directly for any questions regarding data protection or to exercise your rights; youcan findtheir contact informationhere. You canfindfurther information on data protection byclickingthe following linkhere. Regardless of this, you can always contact us using the contact information provided in this Privacy Policy. If necessary, your inquiry will then be forwarded to the other data controller for a response.

6. Cookies and Other Technologies

6.1 General Information

To make your visit to our website more enjoyable and to enable the use of certain features, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session—that is, when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies). You can find the storage duration in the overview in your web browser’s cookie settings.

Privacy Protection on End Devices

When you use our online services, we employ technologies that are strictly necessary to provide the digital service you have expressly requested. In this regard, the storage of information on your device or access to information already stored on your device does not require your consent.

For features that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent. Please note that if you do not provide your consent, you may not be able to use certain parts of the website to their full extent. Any consent you have provided remains in effect until you adjust or reset the relevant settings on your device.

Any subsequent data processing via cookies and other technologies

We use technologies that are strictly necessary for the use of certain features of our website. These technologies collect and process your IP address, the time of your visit, device and browser information, and information about your use of our website. This is based on a balancing of interests, with our overriding legitimate interest in optimizing the presentation of our website pursuant to Article 6(1), first sentence, letter f of the GDPR.

In addition, we use technologies to comply with the legal obligations to which we are subject (e.g., to be able to demonstrate consent to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

Cookie Settings

You can find the cookie settings for your browser at the following links:Microsoft Edge™/Safari™/Chrome™/Firefox™/Opera™

If you have consented to the use of these technologies in accordance with Article 6(1)(a) of the GDPR, you may withdraw your consent at any time by contacting us using the contact information provided in the Privacy Policy. Alternatively, you can click the privacy button. If you do not accept cookies, the functionality of our website may be limited.

6.2 Consent Manager Platform (CMP)

On our website, we use a consent management service (“Consent Manager Platform (CMP)” ) to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document your consent—where required—to the processing of your personal data by these technologies. This is necessary pursuant to Article 6(1)(c) of the GDPR to fulfill our legal obligation under Article 7(1) of the GDPR to be able to demonstrate your consent to the processing of your personal data, to which we are subject. The Consent Manager Platform (CMP) used is a service provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, D04 XN32 Dublin 4, Ireland, which processes your data on our behalf.

After you submit your cookie consent on our website, the web server stores the following data: IP address, device information, browser information, language setting, the webpage you visited or its URL, the date and time of your consent, and information regarding your consent behavior.

In addition, the following technologies are used, which contain information about your consent preferences: Cookies

Your data will be deleted after one year, unless you have expressly consented to the continued use of your data in accordance with Article 6(1), sentence 1, subparagraph (a) of the GDPR, or we reserve the right to use your data beyond this period in a manner that is permitted by law and about which we inform you in this statement.

7. Use of Cookies and Other Technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise specified for individual technologies, this is based on your consent pursuant to Article 6(1)(a) of the GDPR. Once the purpose has been fulfilled and we no longer use the respective technology, the data collected in this context will be deleted. You may withdraw your consent at any time with effect for the future. For more information on how to withdraw your consent, please see the section “Cookies and Other Technologies.” Further information, including the legal basis for our collaboration with the individual providers, can be found in the descriptions of the individual technologies. If you have any questions about the providers or the legal basis for our collaboration with them, please contact us using the contact information provided in this Privacy Policy.

7.1 Use of Google Services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google’s technologies regarding your use of our website is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Unless otherwise specified for each individual technology, data processing is based on an agreement concluded between joint controllers for the respective technology in accordance with Article 26 of the GDPR. For further information on data processing by Google, please refer toGoogle’s Privacy Policy.

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA for which the European Commission and the Swiss Federal Council have, by decision, determined that an adequate level of data protection exists. 

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA. There is no adequacy decision by the European Commission or the Swiss Federal Council for these countries. Our collaboration with them is based on the European Commission’s Standard Data Protection Clauses. 

 Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), which is used to create usage profiles using pseudonyms. Cookies may be used for this purpose. If you visit our website from within the EU, your IP address is stored on a server located in the EU to derive location data and is then immediately deleted before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of a data processing agreement with Google.

To optimize the marketing of our website, we haveenabledthedata sharing settingsfor "Google Products and Services."This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google’s services. Data sharing with Google under these data sharing settings is based on a separate agreement between the data controllers. We have no influence over the subsequent data processing by Google.

For web analytics and advertising purposes, the Google Analytics extension enables the so-calledDoubleClick cookieto recognizeyour browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services related to website usage.

If youdo not provide uswith your consent to the use of Google Analyticsin accordance withArt. 6(1)(a) of the GDPR, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. To fill gaps in web analytics through behavioral and conversion modeling, pings containing data (user agent, information about your consent behavior, screen resolution, IP address) are sent to Google. 

 Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Googleremarketingcookieis set when you visit our website. This cookie automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website), using a pseudonymous cookie ID, and based on the pages you have visited. Any further data processing takes place only if you have enabled the “personalized ads” setting in your Google Account. If you are logged into Google while visiting our website, Google uses your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analytics and event tracking, we use Google AdsConversion Tracking to measureyoursubsequent usage behavior if you arrived at our website via a Google Ads ad. To this end, cookies may be used and data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events we have defined—such as visiting a webpage or subscribing to a newsletter) may be collected, from which usage profiles are created using pseudonyms.

If youdo not provide uswith consentpursuant toArt. 6(1), sentence 1, subparagraph (a) of the GDPR regarding the use of Google Ads, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. To fill gaps in web analytics through behavioral and conversion modeling, pings containing data (user agent, information about your consent behavior, screen resolution, IP address, page URL, information about ad clicks in URL parameters) are sent to Google. Your IP address is used to determine the country of origin.

 Google Maps

To visually display geographic information, Google Maps collects data about your use of the Maps features—in particular, your IP address and location data—which is transmitted to Google and subsequently processed by Google. We have no control over this subsequent data processing.

 Google reCAPTCHA

To protect against misuse of our web forms and spam generated by automated software (so-called “bots”), Google reCAPTCHA collects data (IP address, time of visit, browser information, and information about your use of our website) and analyzes your use of our website using JavaScript and cookies. In addition, other cookies stored in your browser by Google services are evaluated. Data processing is carried out on the basis of a data processing agreement with Google. A customer’s users who access websites protected by reCAPTCHA are no longer subject to Google’s Privacy Policy and Terms of Service.

 Google Fonts

To ensure consistent display of content on our website, the “Google Fonts” script collects data (IP address, time of visit, device and browser information), transmits it to Google, and Google then processes it. We have no control over this subsequent data processing.

 Google Tag Manager

Google Tag Manager allows us to manage various codes and services on our website. When implementing individual tags, Google may also process personal data (e.g., IP addresses, online identifiers, including cookies). Data processing is carried out based on a data processing agreement with Google.

Google Tag Manager allows you to integrate various services and technologies.
If you do not wish to use certain tracking services and have therefore disabled them, this disabling will remain in effect for all affected tracking tags that are integrated via Google Tag Manager.

 YouTube Video Plugin

When embedding third-party content using the YouTube video plugin in the enhanced privacy mode we use, data (IP address, time of visit, device and browser information) is collected, transmitted to Google, and subsequently processed by Google only if you play a video.

7.2 Use of Meta-Services

 Use of Meta Pixel

We use the Meta Pixel in connection with the technologies described below fromMeta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Facebook (by Meta)” or “Meta Platforms Ireland”). The Meta Pixel automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events we specify, such as visiting a webpage or subscribing to a newsletter), which is used to create usage profiles using pseudonyms. To this end, when you visit our website, the Meta Pixel automatically sets a cookie that enables your browser to be recognized when you visit other websites via a pseudonymous cookie ID. Meta Platforms Ireland will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalized and audience-based advertising.
The information automatically collected by Meta Platforms Ireland’s technologies regarding your use of our website is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Further information regarding data processing by Meta Platforms Ireland can be found inMeta Platforms Ireland’s Privacy Policy.
Our service providers are located in and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists: the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.
The adequacy decision for the United States serves as the basis for transfers to third countries, provided that the respective service provider is certified.  Certification is in place.

Our service providers are located in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico. No adequacy decision has been issued by the European Commission or the Swiss Federal Council for these countries. Our collaboration with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses. Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil.
There is no adequacy decision by the Swiss Federal Council for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.

 Meta Ads Manager

We use Meta Ads Manager to advertise this website on Facebook (by Meta) and other platforms. We determine the parameters of each advertising campaign. Meta Platforms Ireland is responsible for the actual implementation, in particular for deciding where to place the ads for individual users. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Joint controllership is limited to the collection of data and its transfer to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this provision.

Based on the pseudonymous cookie ID set by Meta Pixel and the data collected about your usage behavior on our website, we use Custom Audiences to deliver personalized advertising.

We useconversions(via Meta Pixel or the Conversations API) to track your subsequent usage behavior for web analytics and event tracking purposes if you arrived at our website via an ad from Meta Ads Manager. Data processing is carried out based on a data processing agreement with Meta Platforms Ireland.

7.3 Other Providers of Web Analytics and Online Marketing Services

 Use of the Pinterest Tag for Web Analytics and Advertising Purposes

For web analytics and advertising purposes on Pinterest and on third-party websites, when you visit our website, data is automatically collected and processed using technologies provided byPinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland (“Pinterest”). This enables interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website based on events we specify—such as visiting a webpage or subscribing to a newsletter)—using a pseudonymous cookie ID and based on the pages you visit. Usage profiles are created from the collected data using pseudonyms. Pinterest will combine this information with other data from your Pinterest account and use it to compile reports on website activity and to provide other services related to website usage. We have no influence over the data processing carried out by Pinterest and receive only statistics generated based on the Pinterest tag. This allows us to track your subsequent usage behavior for website analysis and event tracking if you arrived at our website via a Pinterest advertisement. The information automatically collected by Pinterest is generally transmitted to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR.

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA for which the European Commission and the Swiss Federal Council have, by decision, determined that an adequate level of data protection exists. 

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA. There is no adequacy decision by the European Commission or the Swiss Federal Council for these countries. Our collaboration with them is based on the European Commission’s Standard Data Protection Clauses. 

8. Integration of the Trusted Shops Trustbadge and other widgets

Provided that you have given your consent in accordance with Article 6(1), first sentence, (a) of the GDPR, Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g., the Trusted Shops seal of approval, collected reviews) and to offer Trusted Shops products to buyers after they place an order.

The Trustbadge and the services advertised through it are provided by Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”), with whom we jointly act as data controllers under Article 26 of the GDPR. In this Privacy Policy, we provide you with the following information regarding the essential terms of the agreement pursuant to Article 26(2) of the GDPR.

When interacting with the Trustbadge AI+, session cookies are set to save the login status and display the so-called "Welcome Layer," which shows details about the respective online store (company information, reviews, information about the existence of buyer protection) as well as the #trstd secret. A cookie is set to recognize logged-in users and is stored for a maximum of 400 days after login. In addition, session cookies are set to send push notifications when using the app, provided the user has enabled them. This is necessary so that Trusted Shops can provide the digital service you have requested. Trusted Shops is responsible for data processing when interacting with the Trustbadge AI+.

As part of the joint responsibility arrangement between us and Trusted Shops SE, if you have any questions regarding data protection or wish to exercise your rights, please contact Trusted Shops directly using the contact informationprovidedin theprivacy policy. Regardless of this, you may always contact the data controller of your choice. If necessary, your inquiry will then be forwarded to the other data controller for a response.

8.1 Data Processing When Integrating the Trust Badge or Other Widgets

The Trustbadge is provided by a U.S.-based CDN (Content Delivery Network) provider. An adequate level of data protection is ensured by an adequacy decision issued by the European Commission, which can beaccessedhere for the United States. Service providers from the U.S. are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is availablehere. If service providers are not certified under the DPF, standard contractual clauses have been entered into as an appropriate safeguard.

When the Trustbadge is accessed, the web server automatically saves a so-called server log file that contains your IP address, the date and time of the access, the amount of data transferred, and the requesting provider (access data), and documents the access. The IP address is anonymized immediately after collection, so that the stored data cannot be linked to you personally. The anonymized data is used primarily for statistical purposes and for error analysis.

8.2 Data Processing After the Order Is Completed

If you have given your consent, the Trustbadge will access the order information stored on your device (order total, order number, and, if applicable, the product purchased) after the order is completed, as well as your email address, and your email address will be hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops along with the order information in accordance with Art. 6(1)(a) of the GDPR.
This is used to verify whether you are already registered for Trusted Shops’ services. If this is the case, further processing is carried out in accordance with the contractual agreement between you and Trusted Shops. You can find these termshere for Germany;here for Austria; andhere for Switzerland. If you are not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will then have the option to manually register for the services or to finalize the agreement under your existing user agreement, if applicable.

For this purpose, after you complete your order, the Trustbadge accesses the following information stored on the device you are using: order total, order number, and email address. This is necessary so that we can offer you buyer protection. The data is not transmitted to Trusted Shops until you actively choose to activate buyer protection by clicking the button labeled as such on the so-called Trustcard. If you decide to use the services, further processing is governed by the contractual agreement with Trusted Shops in accordance with Article 6(1)(b) of the GDPR, in order to complete your registration for buyer protection, secure your order, and, if applicable, subsequently send you review invitations via email.

Trusted Shops uses service providers in the areas of hosting, monitoring, and logging. The legal basis for this is Article 6(1)(f) of the GDPR, for the purpose of ensuring trouble-free operation. In this context, processing may take place in third countries (the U.S., the U.K., and Israel). An adequate level of data protection is ensured in each case by an adequacy decision from the European Commission, which isavailablehere for the U.S.,here for the United Kingdom, andhere for Israel. Service providers from the U.S. are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is availablehere. If service providers are not certified under the DPF, standard contractual clauses have been agreed upon as an appropriate safeguard.

9. Social Media

9.1 Social media buttons for Facebook (by Meta), Instagram (by Meta), and Pinterest

Our website uses social media buttons from various social networks. These are embedded in the page solely as HTML links, so no connection to the respective provider’s servers is established when you visit our website. If you click on one of the buttons, the website of the respective social network will open in a new browser window. There, you can, for example, click the “Like” or “Share” button.

9.2 Our online presence on Facebook (by Meta), X (formerly Twitter), Instagram (by Meta), YouTube, Pinterest, and LinkedIn

To the extent that you have provided your consent to the respective social media operator in accordance with Article 6(1)(a) of the GDPR, when you visit our online presence on the social media platforms listed above, your data will be automatically collected and stored for market research and advertising purposes, and usage profiles will be created using pseudonyms. These profiles may be used, for example, to display advertisements—both on and off the platforms—that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media provider, as well as contact information, your rights in this regard, and settings to protect your privacy, please refer to the providers’ privacy policies linked below. If you still need assistance with this, please contact us.

Facebook(by Meta)isa service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Facebook (by Meta) is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with a visit to a Facebook (by Meta) fan page is based on an agreement between joint controllers pursuant to Article 26 of the GDPR. Further information (including information on Insights data) can be foundhere.

Our service providers are located in and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists: the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.

The adequacy decision for the United States serves as the basis for cross-border data transfers, provided that the relevant service provider is certified. Certification has been granted.

Our service providers are located in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico. There is no adequacy decision by the European Commission or the Swiss Federal Council for these countries. Our collaboration with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by decision, that an adequate level of data protection exists: Brazil.
There is no adequacy decision by the Swiss Federal Council for these countries. Our collaboration with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.

X is a service provided by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“X”). The information automatically collected by X regarding your use of our online presence on X is generally transmitted to and stored on a server operated by X Corp., FM 1209, Building 2, Bastrop, TX 78602, USA.

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA for which the European Commission and the Swiss Federal Council have, by decision, determined that an adequate level of data protection exists. 

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA. There is no adequacy decision by the European Commission or the Swiss Federal Council for these countries. Our collaboration with them is based on the European Commission’s Standard Data Protection Clauses. 

Instagram(by Meta)isa service provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). The information automatically collected by Meta Platforms Ireland regarding your use of our online presence on Instagram is generally transmitted to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA, Menlo Park, California 94025, USA, and stored there. Data processing in connection with a visit to an Instagram (by Meta) fan page is based on an agreement between joint controllers pursuant to Article 26 of the GDPR. Further information (including information on Insights data) can be foundhere.

Our service providers are located in and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists: the United States, Canada, Japan, South Korea, New Zealand, the United Kingdom, and Argentina.

The adequacy decision for the United States serves as the basis for cross-border data transfers, provided that the relevant service provider is certified. Certification has been granted.

Our service providers are located in and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan, and Mexico. There is no adequacy decision by the European Commission and the Swiss Federal Council for these countries. Our collaboration with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.

Our service providers are located in and/or use servers in the following countries, for which the European Commission has determined, by way of a decision, that an adequate level of data protection exists: Brazil.
There is no adequacy decision by the Swiss Federal Council for these countries. Our collaboration with them is based on the following safeguards: the European Commission’s Standard Data Protection Clauses.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google regarding your use of our online presence on YouTube is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA for which the European Commission and the Swiss Federal Council have, by decision, determined that an adequate level of data protection exists. 

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA. There is no adequacy decision by the European Commission or the Swiss Federal Council for these countries. Our collaboration with them is based on the European Commission’s Standard Data Protection Clauses. 

Pinterest is a service provided by Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland (“Pinterest”). The information automatically collected by Pinterest regarding your use of our online presence on Pinterest is generally transmitted to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA.

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA for which the European Commission and the Swiss Federal Council have, by decision, determined that an adequate level of data protection exists. 

Our service providers are located in and/or use servers in countries outside Switzerland, the EU, and the EEA. There is no adequacy decision by the European Commission or the Swiss Federal Council for these countries. Our collaboration with them is based on the European Commission’s Standard Data Protection Clauses. 

LinkedIn is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). The information automatically collected by LinkedIn regarding your use of our online presence on LinkedIn is generally transmitted to and stored on a server operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Our service providers are located in and/or use servers in the following countries, for which the European Commission and the Swiss Federal Council have determined, by decision, that an adequate level of data protection exists: the United States.

The adequacy decision for the United States serves as the basis for cross-border data transfers, provided that the relevant service provider is certified. Certification has been granted.

10. How to Contact Us and Your Rights

10.1 Your Rights

As a data subject, you have the following rights:

• pursuant to Article 15 of the GDPR, the right to request information, to the extent specified therein, regarding your personal data that we process;
• pursuant to Article 16 of the GDPR, the right to request, without undue delay, the correction of inaccurate personal data or the completion of your personal data stored by us;
• Pursuant to Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless further processing
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest, or
  • is necessary to assert, exercise, or defend legal claims;
• Pursuant to Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data, provided that
  • you dispute the accuracy of the data;
  • the processing is unlawful, but you object to its erasure;
  • we no longer need the data, but you need it to assert, exercise, or defend legal claims, or
  • You have objected to the processing pursuant to Article 21 of the GDPR;
• pursuant to Article 20 of the GDPR, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller;
• Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority in your usual place of residence, your place of work, or where our company is headquartered.

Right to Object To the extent that we process personal data as described above to safeguard our legitimate interests, which prevail following a balancing of interests, you may object to such processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. If the processing is carried out for other purposes, you have the right to object only if there are grounds arising from your particular situation. Once you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims. This does not apply if the processing is carried out for direct marketing purposes. In that case, we will not continue to process your personal data for that purpose.

10.2 Contact Information

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request access to, correction, restriction, or deletion of your data, or to revoke your consent or object to a specific use of your data, please contact us directly using the contact information provided in our Legal Notice.

Download Privacy Policy