Privacy Policy

Privacy Policy

1) Introduction and Contact Details of the Controller
1.1 We are pleased that you visit our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Larissa Chupakhina, Atelier Culari Art, Mühlsteige 26, 75387 Neubulach, Germany, Tel.: +4970539685620, Email: info@atelier-culari-art.de. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website
2.1 When using our website for purely informational purposes, i.e., when you do not register or otherwise provide information to us, we only collect data that your browser transmits to the server of the website (so-called "server log files"). When you visit our website, we collect the following data that are technically necessary for us to display the website to you:

The visited website
Date and time at the time of access
Amount of data sent in bytes
Source/referrer from which you came to the page
Browser used
Operating system used
IP address used (possibly anonymized)

The processing is carried out according to Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No forwarding or other use of the data takes place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the “https://” in the browser line and the lock symbol.

3) Hosting & Content Delivery Network
3.1 For hosting our website and displaying the page contents, we use a provider who provides its services exclusively on servers within the European Union, either by itself or through selected subcontractors. All data collected on our website are processed on these servers. We have concluded a data processing agreement with the provider to ensure the protection of the data of our site visitors and to prohibit unauthorized forwarding to third parties.

3.2 AWS CloudFront

We use a content delivery network from the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA.

This service allows us to deliver large media files such as graphics, page contents, or scripts faster through a network of regionally distributed servers. The processing takes place to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 Para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider to ensure the protection of the data of our site visitors and to prohibit unauthorized forwarding to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

4) Cookies
To make the visit to our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files stored on your device. Some cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow the storage of page settings (so-called "persistent cookies"). You can find the storage duration of the cookies in the settings overview of your web browser.

If personal data are processed by cookies used by us, the processing takes place according to Art. 6 Para. 1 lit. b GDPR for the performance of the contract, according to Art. 6 Para. 1 lit. a GDPR in case of consent given, or according to Art. 6 Para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website and customer-friendly and effective design of the site visit.

You can set your browser to be informed about the setting of cookies and to decide individually whether to accept them or exclude acceptance of cookies in certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact
5.1 WhatsApp Business

You have the option to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this, we use the so-called "Business version" of WhatsApp.

If you contact us via WhatsApp regarding a specific business (e.g., an order placed), we store and use the mobile phone number you use on WhatsApp as well as—if provided—your first and last name according to Art. 6 Para. 1 lit. b GDPR to process and respond to your request. On the basis of the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address, or email address) to assign your request to a specific case.

If you use our WhatsApp contact for general inquiries (e.g., about the service spectrum, availability, or our internet presence), we store and use the mobile phone number you use on WhatsApp as well as—if provided—your first and last name according to Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.

Your data will always only be used to answer your request via WhatsApp. There is no transfer to third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and that phone numbers stored in the address book are automatically transferred to a server of the parent company Meta Platforms Inc. in the USA. For operating our WhatsApp Business account, we use a mobile device in which only the WhatsApp contact data of those users are stored who have contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact data are stored in our address book has already consented by accepting the WhatsApp terms of use when first using the app on their device to the transmission of their WhatsApp phone number from the address books of their chat contacts according to Art. 6 Para. 1 lit. a GDPR. Data transmission of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and setting options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider that protects the data of our site visitors and prohibits the transfer to third parties.

Within the framework of the above-mentioned processing, data transmissions to servers of Meta Platforms Inc. in the USA may occur.

For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

5.2 When contacting us (e.g., via contact form or email), personal data are collected. Which data are collected in the case of using a contact form is evident from the respective contact form. These data are only stored and used to answer your request or for contact and the associated technical administration.

The legal basis for processing these data is our legitimate interest in answering your request according to Art. 6 Para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after final processing of your inquiry. This is the case when it can be inferred from the circumstances that the affected matter has been conclusively clarified and as long as no legal retention obligations conflict with this.

6) Data Processing When Opening a Customer Account
According to Art. 6 Para. 1 lit. b GDPR, personal data are further collected and processed to the extent necessary if you provide us with this information when opening a customer account. Which data are required for the account opening can be seen from the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted as long as all contracts concluded through it have been fully processed, no legal retention periods conflict, and we do not have a legitimate interest in further storage.

7) Use of Customer Data for Direct Advertising
7.1 Registration to Our Email Newsletter

If you register for our email newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter if you have expressly confirmed that you wish to receive the newsletter. We then send you a confirmation email asking you to confirm by clicking a link that you want to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data according to Art. 6 Para. 1 lit. a GDPR. When registering for the newsletter, we store your IP address assigned by your Internet Service Provider (ISP) as well as the date and time of registration to be able to track possible misuse of your email address at a later date. The data collected during newsletter registration are used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by contacting the controller mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve data use permitted by law and inform you about it in this declaration.

7.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regularly offers for similar goods or services from our range by email. For this purpose, according to § 7 Para. 3 UWG, we do not have to obtain separate consent from you. The data processing is solely based on our legitimate interest in personalized direct advertising according to Art. 6 Para. 1 lit. f GDPR. If you have initially objected to the use of your email address for this purpose, no emails will be sent by us.

You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. You will only incur transmission costs according to the basic tariffs. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

8) Data Processing for Order Fulfillment

8.1 As far as necessary for the contractual processing for delivery and payment purposes, the personal data collected by us will be passed on to the contracted shipping company and the contracted financial institution in accordance with Art. 6 para. 1 lit. b GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided during the order to inform you personally within the scope of our legal information obligations according to Art. 6 para. 1 lit. c GDPR. Your contact data is used strictly for the purpose of communicating about updates owed by us and is processed only to the extent necessary for this information.

To process your order, we also cooperate with the following service provider(s), who assist us wholly or partly in executing concluded contracts. Certain personal data are transmitted to these service providers according to the following information.

8.2 Transfer of Personal Data to Shipping Providers

We use the following provider as the shipping service: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

We forward your email address and/or phone number to the provider according to Art. 6 para. 1 lit. a GDPR prior to delivery for the purpose of coordinating a delivery date or for delivery notification, provided you have given your explicit consent for this in the ordering process. Otherwise, for delivery purposes according to Art. 6 para. 1 lit. b GDPR, only the recipient's name and delivery address are passed on to the provider. The transfer occurs only as far as necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or delivery notification is not possible.

You can revoke your consent at any time with effect for the future, either to the responsible party named above or directly to the provider.

8.3 Use of Payment Service Providers

PayPal

On this website, one or more online payment methods from the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method from the provider where you pay in advance, your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order content are passed on in accordance with Art. 6 para. 1 lit. b GDPR. This data is transmitted exclusively for payment processing with the provider and only to the extent necessary.

If you choose a payment method where we pay in advance, you will also be asked during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, possibly data for an alternative payment method).

To protect our legitimate interest in verifying your creditworthiness, these data are forwarded by us to the provider according to Art. 6 para. 1 lit. f GDPR for the purpose of a credit check. The provider checks, based on the personal data you provided as well as additional data (such as shopping cart, invoice amount, order history, payment experience), whether the payment method you selected can be granted with regard to payment and/or default risks.

The credit check may contain probability values (so-called score values). If score values are part of the credit check result, they are based on a scientifically recognized mathematical-statistical method. The calculation of score values includes, among other things, but not exclusively, address data.

You can object to this data processing at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractually compliant payment processing.

Stripe

On this website, one or more online payment methods from the following provider are available: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you select a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order content are passed on in accordance with Art. 6 para. 1 lit. b GDPR. This data is transmitted exclusively for payment processing with the provider and only to the extent necessary.

If you choose a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will be asked during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, possibly data for an alternative payment method).

To protect our legitimate interest in verifying the creditworthiness of our customers, these data are forwarded by us to the provider according to Art. 6 para. 1 lit. f GDPR for credit checking purposes. The provider evaluates, based on the personal data you provide as well as additional data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so-called score values). If score values are part of the credit report result, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things but not exclusively, address data.

9) Web Analytics Services
9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies on your device when visiting the website, which collect certain information. This information includes your IP address, which is shortened by Google to exclude direct personal identification.

The information is transmitted to Google servers and processed there. This may include transfers to Google LLC servers in the USA.

Google uses the collected information on our behalf to evaluate your website usage, compile reports on website activity for us, and provide other services related to website and internet usage. The shortened IP address transmitted by your browser is not merged with other Google data. The data collected by Google Analytics 4 is stored for two months and then deleted.

All processing described above, including setting cookies on your device, only occurs if you have given your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. Without your consent, Google Analytics 4 is not used during your visit. You can revoke your consent at any time with effect for the future by deactivating this service via the website's "Cookie Consent Tool."

We have concluded a data processing agreement with Google to ensure the protection of our visitors' data and to prohibit unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites.

Demographic Features
Google Analytics 4 uses a special feature called "demographic features" to generate statistics about the age, gender, and interests of site visitors. This is done by analyzing advertising and third-party information. This allows identification of target groups for marketing. The collected data cannot be assigned to any specific person and is deleted after two months.

Google Signals
As an extension of Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may analyze your behavior across devices, subject to your consent according to Art. 6 para. 1 lit. a GDPR, and create data models including cross-device conversions. We do not receive personal data from Google, only statistics. To stop cross-device analysis, you can disable "Personalized Ads" in your Google account settings. More information at https://support.google.com/ads/answer/2662922?hl=de and https://support.google.com/analytics/answer/7532985?hl=de.

UserIDs
As an extension of Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to Google Analytics 4 under Art. 6 para. 1 lit. a GDPR, created an account on this website, and log in on multiple devices, your activities including conversions can be analyzed across devices.

For data transfers to the USA, the provider complies with the EU-US Data Privacy Framework based on an adequacy decision by the European Commission, ensuring European data protection standards.

9.2 Crazy Egg

This website uses the web analytics service from Crazy Egg, Inc., 16220 Ridgeview Ln, La Mirada, CA, USA.

Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data including device information such as IP address and browser details to analyze user behavior on our website for statistical purposes and to create pseudonymized usage profiles. This allows analysis of movement patterns (heatmaps), visit duration, and interactions with page content (text entries, scrolling, clicks, mouseovers). The pseudonymization generally excludes direct personal identification. No merging with other personal data occurs.

All processing, especially reading or storing information on the device, only takes place if you have explicitly consented according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time by disabling this service in the website's "Cookie Consent Tool."

We have a data processing agreement with the provider to ensure protection of visitor data and prevent unauthorized third-party disclosure.

For data transfer to the USA, the provider relies on Standard Contractual Clauses of the European Commission to ensure European data protection standards.

9.3 Google Tag Manager

This website uses the "Google Tag Manager" service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google").

Google Tag Manager provides a technical framework to bundle various web applications including tracking and analytics services, calibrate and control them via a single interface. Google Tag Manager itself does not store or read information on user devices and does not perform independent data analysis. However, when a page is loaded, your IP address is transmitted to Google and may be stored there. Transmission to Google LLC servers in the USA is also possible.

This processing only occurs if you have given explicit consent according to Art. 6 para. 1 lit. a GDPR. Without consent, Google Tag Manager is not used during your visit. You can revoke your consent at any time by disabling this service in the website's "Cookie Consent Tool."

We have concluded a data processing agreement with Google to ensure protection of our visitors' data and prevent unauthorized disclosure.

For data transfers to the USA, the provider complies with the EU-US Data Privacy Framework based on an adequacy decision by the European Commission.

Further legal information on Google Tag Manager is available at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de.

10) Retargeting / Remarketing and Conversion Tracking

10.1 Meta Pixel

Within our online offering, we use the service "Meta Pixel" from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quay, Dublin 2, Ireland ("Meta").

If a user clicks on an advertisement we place on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel." This URL parameter is then recorded in the user's browser by a cookie set by our linked page itself after the redirect.

This allows Meta, on the one hand, to identify visitors to our online offering as a target audience for displaying advertisements (so-called "ads"). Accordingly, we use this service to show Facebook and/or Instagram ads only to users who have shown interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products determined by the websites they visited) which we transmit to Meta (so-called "Custom Audiences").

On the other hand, "Meta Pixel" allows tracking whether users were redirected to our website after clicking an advertisement and which actions they perform there (so-called "conversion tracking").

The data collected is anonymous for us, so we cannot draw conclusions about the identity of the users. However, the data is stored and processed by Meta, so a connection to the respective user profile is possible, and Meta may use the data for its own advertising purposes.

All the processing described above, especially the setting of cookies to read information on the device used, is only carried out if you have given us your explicit consent according to Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized transfer to third parties.

The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, data may also be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has committed to the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

10.2 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you visited. Further data processing only occurs if you have agreed to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google during your visit to our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this, your personal data is temporarily linked with Google Analytics data to form audiences. Use of Google Ads remarketing may also involve transfer of personal data to servers of Google LLC in the USA.

All processing described above, especially the setting of cookies to read information on the device used, only takes place if you have given your explicit consent to us according to Art. 6 (1) lit. a GDPR. Without this consent, retargeting technology will not be used during your visit.

You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

Details about the processing initiated by Google and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

Further information on Google's privacy policies can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.3 Microsoft Advertising

This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

This allows visitors to our website to be specifically addressed with personalized, interest-based advertising, targeting those who have already shown interest in our shop and products. The display of advertisements is based on cookie-based analysis of past and current user behavior, but no personal data is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor advertising individually to the stored information. These cookies are small text files stored on your computer or mobile device. This way, advertising is displayed that most likely matches your product and information interests.

You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

10.4 Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and within Google Ads the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads service to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are with regard to the data of the advertising campaigns. Our goal is to show you advertising that is of interest to you, make our website more interesting for you, and achieve fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an ad placed by Google Ads. Cookies are small text files stored on your device. These cookies usually expire after 30 days and do not serve personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can see that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across websites of Google Ads customers. The information obtained with the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked their ad and were redirected to a page tagged with conversion tracking, but they do not receive any information that would allow personal identification of users. Use of Google Ads may also involve transfer of personal data to servers of Google LLC in the USA.

Details about the processing triggered by Google Ads conversion tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites

All processing described above, especially the setting of cookies to read information on the device used, only takes place if you have given your explicit consent to us according to Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plugin available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not or only be limitedly available if you have disabled the use of cookies.
Google's privacy policies are accessible here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10.5 Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

For the use of Universal Event Tracking, a tag is placed on each page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behavior on our website traceable and sends the collected information to Microsoft. The purpose is to statistically record and evaluate certain predefined goals such as purchases or leads to better tailor the orientation and content of our offers. The tags never serve to personally identify users.

You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

10.6 TikTok Pixel

This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

If you have reached our website from an advertisement on the provider's domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings, or HTTP requests).

For this purpose, certain device and browser information, including possibly your IP address, is read out by the tracking technology to record and evaluate predefined user actions (e.g., completed transactions, leads, search queries on the website, product page views). This enables the creation of statistics about the usage behavior on our website after redirection from an advertisement, which helps us optimize our offer.

All processing described above, especially the setting of cookies to read information on the device used, only takes place if you have given your explicit consent to us according to Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of the data of our site visitors and prohibits unauthorized transfer to third parties.

11) Website Functionalities
11.1 Facebook Plugins

On our website, plugins from the social network of the following provider are used: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially deactivated by integrating them into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that when a page of our website containing such plugins is accessed, no connection to the provider’s servers is made initially.

Only when you activate the plugins and thereby give your consent to the data transfer pursuant to Art. 6 para. 1 lit. a GDPR does your browser establish a direct connection to the provider’s servers. In doing so, information about your device used (including your IP address), your browser, and your browsing history is transmitted to the provider and may be processed there, regardless of whether you are logged into a user profile.

If you are logged into an existing user profile on the provider's social network, information about interactions performed via the plugins will also be published there and shown to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking it again. However, the revocation does not affect data already transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.

11.2 Instagram Plugins

On our website, plugins from the social network of the following provider are used: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially deactivated by integrating them into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that when a page of our website containing such plugins is accessed, no connection to the provider’s servers is made initially.

Data may also be transferred to: Meta Platforms Inc., USA.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.

11.3 Pinterest Plugins

On our website, plugins from the social network of the following provider are used: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially deactivated by integrating them into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that when a page of our website containing such plugins is accessed, no connection to the provider’s servers is made initially.

Data may also be transferred to: Pinterest Inc., USA.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.

For data transfers to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which aim to ensure compliance with the European data protection level.

11.4 X Plugins (formerly Twitter)

On our website, plugins from the social network of the following provider are used: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland.

These plugins enable direct interactions with content on the social network.

To enhance the protection of your data when visiting our website, the plugins are initially deactivated by integrating them into the page using a so-called "2-click" or "Shariff" solution.

This integration ensures that when a page of our website containing such plugins is accessed, no connection to the provider’s servers is made initially.

Data may also be transferred to: X Corp., USA.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.

For data transfers to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which aim to ensure compliance with the European data protection level.

11.5 YouTube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to: Google LLC., USA.

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers at the latest when the video is played, to load the content. Certain information, including your IP address, is transmitted to the provider.

When embedded videos are played via the plugin, the provider also sets cookies to collect information about user behavior, create playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your visit, your data will be directly assigned to your account when you click on a video. If you do not want the data to be assigned to your account, you must log out before clicking the play button.

All aforementioned processing, especially the setting of cookies to read information on the used device, only occurs if you have given your explicit consent according to Art. 6 para. 1 lit. a GDPR. You may revoke this consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.

11.6 Google Maps

This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive maps to visually present geographic information. This service shows our location and facilitates route planning.

When accessing subpages with embedded Google Maps, information about your use of our website (e.g., your IP address) is transmitted to Google's servers and stored there. This may also involve transmission to Google LLC servers in the USA. This occurs regardless of whether Google provides a user account you are logged into or whether a user account exists. If you are logged into Google, your data will be assigned directly to your account. To avoid this, log out of Google before activating the map.

Google stores data (even for users not logged in) as user profiles and analyzes it.

Collection, storage, and analysis are based on Art. 6 para. 1 lit. f GDPR on Google's legitimate interest in personalized advertising, market research, and/or needs-based design of Google websites. You have the right to object to the creation of such user profiles, which must be exercised directly with Google.

If you do not agree to the future transmission of your data to Google during Google Maps usage, you can deactivate the Google Maps web service completely by disabling JavaScript in your browser. Then, Google Maps and the map display on this website cannot be used.

Where legally required, we have obtained your consent according to Art. 6 para. 1 lit. a GDPR for the use of Google Maps.

For data transfers to the USA, Google relies on the European Commission’s Standard Contractual Clauses, which ensure compliance with the European data protection level.

Contact and Data Protection Officer

If you have any questions regarding data protection, please contact: https://business.safety.google/intl/de/privacy/

11.7 Endereco

To enable real-time validation of certain entries in the address form during the checkout process of our webshop for input errors, we use the services of the following provider:
Endereco UG, Balthasar-Neumann-Straße 4b, 97236 Randersacker, Germany.

The provider validates the entered address, verifies the spelling, and, if necessary, supplements missing data. If addresses are ambiguous, correct alternative suggestions are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there, and evaluated.

This processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the proper recording of the correct customer address data to fulfill our contractual delivery obligations diligently and to prevent problems in contract execution.

The provider processes the affected data separately and does not merge it with other data sets and deletes it as soon as its status or correctness is confirmed, but no later than after 30 days.

12) Tools and Miscellaneous
Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consents for cookies requiring consent and cookie-based applications. The "Cookie Consent Tool" is displayed to users upon page access as an interactive user interface where consents for specific cookies and/or cookie-based applications can be granted by ticking checkboxes.

By using this tool, all cookies/services requiring consent are only loaded if the respective user has granted consent by ticking the boxes. This ensures that such cookies are only set on the user’s device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed during this.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.

A further legal basis for the processing is Art. 6 para. 1 lit. c GDPR. As controllers, we are legally obliged to make the use of technically non-essential cookies dependent on the respective user consent.

If necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized transfer to third parties.

Further information about the operator and the settings of the Cookie Consent Tool can be found directly in the respective user interface on our website.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you the following rights vis-à-vis the controller regarding the processing of your personal data (rights to information and intervention), whereby the legal basis for exercising each right is referred to:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to notification pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 Right to Object

If we process your personal data based on a balancing of interests under our overriding legitimate interest, you have the right to object at any time, for reasons arising from your particular situation, to this processing with effect for the future.

If you exercise your right to object, we will stop processing the affected data. Further processing remains permissible, however, if we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.

If your personal data are processed by us for direct marketing purposes, you have the right to object at any time to the processing of your personal data concerning you for such advertising purposes. You may exercise your objection as described above.

If you exercise your right to object, we will cease processing the affected data for direct marketing purposes.

14) Duration of Storage of Personal Data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and — if applicable — the respective statutory retention periods (e.g., commercial and tax retention periods).

If personal data are processed based on an explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the affected data are stored until you revoke your consent.

If statutory retention periods apply to data processed in the context of legal or contract-like obligations under Art. 6 para. 1 lit. b GDPR, these data will be routinely deleted after the expiry of the retention periods, provided they are no longer required for contract fulfillment or initiation and/or we have no overriding legitimate interest in further storage.

If personal data are processed based on Art. 6 para. 1 lit. f GDPR, these data are stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

If personal data are processed for direct marketing purposes pursuant to Art. 6 para. 1 lit. f GDPR, these data are stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information of this declaration about specific processing situations, stored personal data are deleted as soon as they are no longer necessary for the purposes for which they were collected or otherwise processed.