Privacy Policy

Privacy Policy

The data controller is:
Alpurial GmbH
Sperberweg 4D
41468 Neuss
Germany

Email: kontakt@alpurial.de
Phone: 02131 5255902

We appreciate your interest in our online store. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data.

1. Access Data and Hosting

You can visit our website without providing any personal information. Each time you access a webpage, the web server automatically stores only a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the request, the amount of data transferred, and the requesting provider (access data), and documents the request. This access data is evaluated solely for the purpose of ensuring the smooth operation of the website and improving our services. This serves to protect our legitimate interests—which prevail following a balancing of interests—in the proper presentation of our services in accordance with Article 6(1)(f) of the GDPR. All access data is deleted no later than seven days after the end of your visit to the website.

2. Data processing for contract fulfillment, establishing contact, and opening a customer account

We collect personal data when you voluntarily provide it to us as part of your order or when you contact us (e.g., via the contact form or email). Required fields are marked as such, as we need this data to fulfill the contract or to process your inquiry, and you cannot submit your order or inquiry without providing it. The specific data collected is indicated on the respective input forms. We use the data you provide to process your order and handle your inquiries in accordance with Article 6(1)(b) of the GDPR.
If you have given your consent for this purpose in accordance with Article 6(1)(a) of the GDPR by choosing to open a customer account, we use your data for the purpose of opening that customer account. Further information regarding the processing of your data, in particular regarding its transfer to our service providers for the purposes of order, payment, and shipping processing, can be found in the following sections of this Privacy Policy. Once the contract has been fully fulfilled or your customer account has been deleted, your data will be restricted for further processing and deleted after the expiration of the retention periods required by tax and commercial law in accordance with Article 6(1)(c) of the GDPR, unless you have expressly consented to the further use of your data in accordance with Article 6(1)(a) of the GDPR or we reserve the right to use your data beyond this scope, provided such use is permitted by law and we inform you of it in this policy. You may delete your customer account at any time, either by sending a message using the contact information provided in this Privacy Policy or by using the function provided for this purpose in your customer account.

We use inventory management systems provided by external service providers to process orders and contracts. Our service providers act on our behalf under a data processing agreement. If you have any questions about our service providers or the basis of our collaboration with them, please contact us using the contact information provided in this Privacy Policy.

3. Data Processing for the Purpose of Shipping

To fulfill the contract in accordance with Article 6(1), first sentence, subparagraph (b) of the GDPR, we share your data with the shipping provider responsible for delivery, to the extent necessary to deliver the ordered goods.

To improve shipment tracking and delivery transparency, we will—provided you have given your consent—share your email address with our shipping provider, DHL. DHL uses this information to provide you with additional details about your shipment, such as its exact storage location or information about which kiosk or branch your package is located at. This processing is based solely on your consent pursuant to Article 6(1)(a) of the GDPR, which you may revoke at any time with future effect.

4. Data Processing for Payment Processing

We process your data for the purpose of processing payments. This is necessary for the performance of the contract in accordance with Article 6(1), first sentence, subparagraph (b) of the GDPR.

4.1 Data Processing for the Purpose of Fraud Prevention and Optimizing Our Payment Processes

Where applicable, we provide our service providers (see the previous paragraph) with additional data, which they use—along with the data necessary for processing the payment—in their capacity as our data processors for the purposes of fraud prevention and optimizing our payment processes (e.g., invoicing, handling disputed payments, and supporting accounting). This serves, in accordance with Article 6(1)(f) of the GDPR, to safeguard our legitimate interests—which prevail following a balancing of interests—in protecting ourselves against fraud and in ensuring efficient payment management.

4.2 Identity and Credit Checks When Selecting Klarna Payment Services

Klarna Pay Now (direct debit), Klarna Pay Later (purchase on account), Klarna Slice It (installment plan)
If you choose to use the payment services provided by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”), we ask for your consent pursuant to Article 6(1)(a) of the GDPR to allow us to transfer to Klarna the data necessary for processing the payment and conducting an identity and credit check. In Germany, the credit bureaus listed in Klarna’s privacy policy may be used for identity and creditworthiness checks. Klarna uses the information received regarding the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You may withdraw your consent at any time by contacting us via the contact information provided in this Privacy Policy. This may result in us no longer being able to offer you certain payment options. You may also withdraw your consent to this use of personal data from Klarna at any time.

4.3 Identity and Credit Checks When Selecting Billpay Payment Services

If you choose to use the payment services provided by BillPay GmbH, Zinnowitzer Str. 1, 10115 Berlin (hereinafter: BillPay), we ask for your consent pursuant to Art. 6(1)(a) of the GDPR to allow us to transfer to BillPay the data necessary for processing the payment and conducting an identity and creditworthiness check. In Germany, the credit bureaus listed in BillPay’s privacy policy may be used for identity and creditworthiness checks. BillPay uses the information received regarding the statistical probability of default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You may withdraw your consent at any time by contacting us via the contact information provided in this Privacy Policy. This may result in us no longer being able to offer you certain payment options. You may also withdraw your consent to this use of personal data from BillPay at any time.

4.4 Identity and Credit Check When Selecting "Purchase on Account" via PayOne

If you choose the “Purchase on Account” payment method offered by PayOne GmbH, Lyoner Str. 9, 60528 Frankfurt am Main, Germany (hereinafter “PayOne”), we ask for your consent pursuant to Article 6(1)(a) of the GDPR to allow us to transfer to PayOne the data necessary for processing the payment and conducting an identity and credit check. In Germany, the credit bureaus listed in PayOne’s privacy policy may be used for identity and creditworthiness checks. PayOne uses the information received regarding the statistical probability of payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. You may revoke your consent at any time by contacting us via the contact information provided in this Privacy Policy. This may result in us no longer being able to offer you certain payment options.

5. Advertising via email, mail, and telephone

You can revoke your consent to receive the newsletter at any time and unsubscribe from it. You can revoke your consent by clicking the link provided in every newsletter email or by sending an email to (kontakt@alpurial.de), or by sending a message to the contact information listed in the legal notice.
We use the Klaviyo service provided by Klaviyo Inc., Boston, USA, to send our newsletters. The data you provided when you subscribed to the newsletter (email address, name if applicable, IP address, and the date and time of your subscription) is transferred to a server operated by Klaviyo Inc. in the United States and stored there in compliance with the “U.S. Privacy Shield.” For more information on Klaviyo’s privacy policy, please visit: http://klaviyo.com/privacy/.

5.1 Email Newsletter with Subscription

When you subscribe to our newsletter, we use the data required for this purpose or the data you have provided separately to send you our email newsletter on a regular basis based on your consent in accordance with Art. 6(1), Sent. 1, lit. a of the GDPR.
You can unsubscribe from the newsletter at any time by either sending a message to the contact address provided in this Privacy Policy or by clicking the link provided for this purpose in the newsletter. After you unsubscribe, we will remove your email address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this policy.

5.2 Newsletter Distribution

The newsletter may also be sent by our service providers as part of data processing on our behalf. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

5.3 Sending Review Requests via Email

Provided that you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR during or after placing your order, we will use your email address to request that you submit a review of your order via the review system we use. You may revoke this consent at any time by sending a message to the contact information provided in this Privacy Policy or by clicking the link provided for this purpose in the review request.

Review requests may also be sent by our service providers as part of processing carried out on our behalf. If you have any questions about our service providers or the basis of our collaboration with them, please use the contact information provided in this Privacy Policy.

5.4 Direct Mail Advertising and Your Right to Object

In addition, we reserve the right to use your first and last name as well as your mailing address for our own promotional purposes, e.g., to send you interesting offers and information about our products by mail. This serves to safeguard our legitimate interests—which prevail following a balancing of interests—in sending promotional communications to our customers in accordance with Article 6(1), first sentence, letter f of the GDPR. You may object to the storage and use of your data for these purposes at any time by contacting us using the contact information provided in this Privacy Policy.

The promotional mailings are carried out as part of data processing on our behalf by a service provider to whom we disclose your data for this purpose.

5.5 Telemarketing

To the extent that you have given your consent pursuant to Article 6(1), first sentence, letter a of the GDPR, we will use the data required for this purpose or separately provided by you for our own advertising purposes, e.g., to inform you about interesting offers and our products. You may revoke your consent at any time either by sending a message to the contact information provided in this Privacy Policy or by verbally notifying us during any phone call. Upon revocation, we will delete your phone number, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this Privacy Policy.

6. Cookies and Other Technologies

6.1 General Information

To make your visit to our website more enjoyable and to enable the use of certain features, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser the next time you visit (persistent cookies).
We use technologies that are strictly necessary for the use of certain features of our website (e.g., the shopping cart feature). These technologies collect and process your IP address, the time of your visit, device and browser information, as well as information regarding your use of our website (e.g., information about the contents of your shopping cart). This is based on a balancing of interests, where our overriding legitimate interests in optimizing the presentation of our offerings prevail, in accordance with Article 6(1)(f) of the GDPR.

In addition, we use technologies to comply with the legal obligations to which we are subject (e.g., to be able to demonstrate consent to the processing of your personal data) as well as for web analytics and online marketing. Further information on this, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of these technologies in accordance with Article 6(1), first sentence, letter a of the GDPR, you may withdraw your consent at any time by sending a message via the contact method described in the Privacy Policy or by clicking the following link: (Link to Privacy Settings). If you do not accept cookies, the functionality of our website may be limited.

6.2 Cookiebot Consent Management Platform

We use Cookiebot on our website to inform you about the cookies and other technologies we use on our website, as well as to obtain, manage, and document your consent—where required—to the processing of your personal data by these technologies. This is necessary pursuant to Article 6(1)(c) of the GDPR to fulfill our legal obligation under Article 7(1) of the GDPR to be able to demonstrate your consent to the processing of your personal data, to which we are subject. Cookiebot is a service provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, which processes your data on our behalf.
After you submit your cookie consent on our website, the Cookiebot web server stores your anonymized IP address, the date and time of your consent, browser information, the URL from which the consent was submitted, information regarding your consent behavior, and an anonymous random key. In addition, a cookie is set that contains the information regarding your consent behavior and the key. Your data will be deleted after twelve months, unless you have expressly consented to further use of your data in accordance with Art. 6(1)(a) of the GDPR, or we reserve the right to use your data beyond this period in a manner that is permitted by law and about which we inform you in this statement.

7. Use of Cookies and Other Technologies for Web Analytics and Advertising Purposes

To the extent that you have provided your consent pursuant to Article 6(1)(a) of the GDPR, we use the following cookies and other third-party technologies on our website. Once the purpose has been fulfilled and we have ceased using the respective technology, the data collected in this context will be deleted. You may withdraw your consent at any time with future effect. For more information on your options for revoking consent, please see the section “Cookies and Other Technologies.” Further information, including the legal basis for our collaboration with the individual providers, can be found under the respective technologies. If you have any questions about the providers or the legal basis for our collaboration with them, please contact us using the contact information provided in this Privacy Policy.

7.1 Use of Google Services

We use the technologies described below from Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google’s technologies regarding your use of our website is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses. If your IP address is collected via Google technologies, it is truncated before being stored on Google’s servers by activating IP anonymization. Only in exceptional cases is the full IP address transmitted to a Google server and truncated there. Unless otherwise specified for individual technologies, data processing is based on an agreement concluded between joint controllers for the respective technology in accordance with Article 26 of the GDPR. Further information about data processing by Google can be found in Google’s Privacy Policy.

Google’s Privacy & Terms site

 Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), which is used to create usage profiles using pseudonyms. Cookies may be used for this purpose. Your IP address is generally not combined with other data held by Google. Data processing is carried out on the basis of a data processing agreement with Google.

To optimize the marketing of our website, we have enabled the data sharing settings for “Google Products and Services.” This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google’s services. Data sharing with Google under these settings is based on a separate agreement between the data controllers. We have no influence over the subsequent data processing by Google.

We also use Google Optimize, an extension of Google Analytics, to create and run tests.

For web analytics and advertising purposes, the Google Analytics extension enables the so-called DoubleClick cookie to recognize your browser when you visit other websites. Google will use this information to compile reports on website activity and to provide other services related to website usage.

 Google AdSense

Our website uses Google AdSense to sell ad space to third-party advertisers. These ads are displayed in various locations on this website. The so-called DoubleClick cookie enables the display of interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and by automatically assigning a pseudonymous user ID, which is used to determine your interests based on visits to this and other websites.

 Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google remarketing cookie is set when you visit our website. This cookie enables interest-based advertising by automatically collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and using a pseudonymous cookie ID based on the pages you have visited. Any further data processing takes place only if you have enabled the “personalized ads” setting in your Google Account. If you are logged into Google while visiting our website, Google uses your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing.

For website analytics and event tracking, we use Google Ads Conversion Tracking to measure your subsequent usage behavior if you arrived at our website via a Google Ads ad. To this end, cookies may be used and data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events we have defined—such as visiting a webpage or subscribing to a newsletter) may be collected, from which usage profiles are created using pseudonyms.

 Google Maps

To visually display geographic information, Google Maps collects data about your use of the Maps features—in particular, your IP address and location data—which is transmitted to Google and subsequently processed by Google. We have no control over this subsequent data processing.

 Google Fonts

To ensure consistent display of content on our website, the “Google Fonts” script collects data (IP address, time of visit, device and browser information), transmits it to Google, and Google then processes it. We have no control over this subsequent data processing.

 YouTube Video Plugin

When embedding third-party content using the YouTube video plugin in the enhanced privacy mode we use, data (IP address, time of visit, device and browser information) is collected, transmitted to Google, and subsequently processed by Google only if you play a video.

7.2 Use of Microsoft Services for Web Analytics and Advertising Purposes

We use the technologies described below from Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”). Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. The information automatically collected by Microsoft technologies regarding your use of our website is generally transferred to and stored on a server operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses. Further information about data processing by Microsoft can be found in Microsoft’s privacy policy.

 Microsoft Advertising

For advertising purposes in Bing, Yahoo, and MSN search results, as well as on third-party websites, the so-called Microsoft Advertising Remarketing Cookie is set when you visit our website. This cookie enables interest-based advertising by automatically collecting and processing data (IP address, time of visit, device and browser information, and information about your use of our website) and using a pseudonymous cookie ID based on the pages you have visited.

For website analytics and event tracking, we use Microsoft Advertising Universal Event Tracking (UET) to measure your subsequent usage behavior if you arrived at our website via a Microsoft Advertising ad. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events we define—such as visiting a webpage or subscribing to a newsletter) may be collected, from which usage profiles are created using pseudonyms. If your internet-enabled devices are linked to your Microsoft account and you have not disabled the “Interest-Based Advertising” setting in your Microsoft account, Microsoft may generate reports on usage behavior (in particular, cross-device user numbers), even if you switch devices—a process known as “cross-device tracking.” We do not process personal data in this regard; we merely receive statistics generated based on Microsoft UET.

7.3 Use of Facebook Services

 Use of Facebook Pixel

We use the Facebook Pixel as part of the technologies described below provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”). The Facebook Pixel automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a webpage or subscribing to a newsletter), from which usage profiles are created using pseudonyms. To this end, when you visit our website, the Facebook Pixel automatically sets a cookie that enables your browser to be recognized when you visit other websites via a pseudonymous cookie ID. Facebook will combine this information with other data from your Facebook account and use it to compile reports on website activity and to provide other services related to website usage, in particular personalized and audience-based advertising. We have no influence over Facebook’s data processing and receive only statistics generated based on the Facebook Pixel.
The information automatically collected by Facebook technologies regarding your use of our website is generally transmitted to and stored on a server operated by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses. Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information about data processing by Facebook can be found in Facebook’s Privacy Policy.

 Facebook Analytics

As part of Facebook Analytics, the statistics generated via Facebook Pixel allow us to analyze visitor activity on our website. This helps us optimize the presentation and marketing of our website.

 Facebook Ads

We use Facebook Ads to promote this website on Facebook and other platforms. We determine the parameters of each advertising campaign; Facebook is responsible for the actual implementation, particularly for deciding where to place the ads for individual users.

Based on the statistics generated by Facebook Pixel regarding visitor activity on our website, we use Facebook Custom Audience to run group-based advertising on Facebook by identifying the characteristics of the respective target audience.

Based on the pseudonymous cookie ID set by the Facebook Pixel and the data collected about your usage behavior on our website, we use Facebook Pixel Remarketing to deliver personalized ads.

We use Facebook Pixel Conversions to track your subsequent user behavior for web analytics and event tracking when you arrive at our website via a Facebook Ads ad.

7.4 Other Providers of Web Analytics and Online Marketing Services

 Use of etracker for Web Analytics

For the purpose of website analysis, data (IP address, time of visit, device and browser information, and information regarding your use of our website) is automatically collected and stored using technologies provided by etracker GmbH, Erste Brunnenstraße 1, 20459 Hamburg, Germany (“etracker”), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymized usage profiles will not be merged with personal data about the holder of the pseudonym without separate, explicit consent. etracker acts on our behalf.

 Use of the Pinterest Tag for Web Analytics and Advertising Purposes

For web analytics and advertising purposes on Pinterest and on third-party websites, when you visit our website, data is automatically collected and processed using technologies provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”) is automatically used for web analytics and advertising purposes on Pinterest and third-party websites. This is achieved by collecting and processing data (IP address, time of visit, device and browser information, as well as information about your use of our website based on events specified by us, such as visiting a webpage or subscribing to a newsletter) and by using a pseudonymous cookie ID to enable interest-based advertising based on the pages you visit. Usage profiles are created from the collected data using pseudonyms. Pinterest will combine this information with other data from your Pinterest account and use it to compile reports on website activity and to provide other services related to website usage. We have no influence over Pinterest’s data processing and receive only statistics generated based on the Pinterest tag. This allows us to track your subsequent usage behavior for website analysis and event tracking if you arrived at our website via a Pinterest ad. The information automatically collected by Pinterest is generally transmitted to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses. Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR.

 Using AdRoll Retargeting for Online Marketing

Through our advertising partner, AdRoll Advertising Ltd., Level 6, 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland (“AdRoll”), we advertise this website in search results and on third-party websites. When you visit our website, a retargeting cookie is automatically set by AdRoll or its partners, which enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Data processing is carried out on the basis of an agreement between joint controllers in accordance with Article 26 of the GDPR. We determine the parameters of the respective advertising campaign; AdRoll is responsible for the exact implementation (e.g., deciding on the placement of individual ads). The data automatically collected by AdRoll (IP address, time of visit, device and browser information, and information about your use of our website) may be combined by AdRoll with information from other sources and transmitted to AdRoll’s advertising partners. In addition, this data is generally transferred to and stored on a server operated by NextRoll, Inc., 2300 Harrison St, Fl 2, San Francisco, CA 94110, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses.

 Using Amazon Services for Online Marketing

Through our advertising partner Amazon Europe Core S.à.r.l., 5 Rue Plaetis, L-2338 Luxembourg (“Amazon”), we sell ad space to third-party advertisers on Amazon. These ads are displayed to you in various locations on this website. Amazon uses cookies to track the progress of each order and, in particular, to determine that you clicked on the respective ad and subsequently ordered the product. For this purpose, data (IP address, time of visit, device and browser information, and information regarding your use of our website) is collected, transmitted to Amazon, and processed by Amazon. We have no influence over this data processing. Data processing is based on an agreement between joint controllers in accordance with Article 26 of the GDPR. The information automatically collected by Amazon regarding your use of our website is generally transmitted to and stored on a server operated by Amazon, Inc., 410 Terry Ave. North, Seattle, WA 98109-5210, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses.

 Use of the Vimeo Video Plugin to Embed Third-Party Content

To embed third-party content, data (IP address, time of visit, device and browser information) is collected via the video plugin provided by Vimeo LLC , 555 West 18th Street, New York 10011, USA (“Vimeo”), transmitted to Vimeo, and subsequently processed by Vimeo. Data processing is based on an agreement between joint controllers in accordance with Article 26 of the GDPR. Google Analytics is automatically integrated into the Vimeo video plugin. For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information regarding your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Google Analytics is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google regarding your use of our website is generally transmitted to a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, and stored there. Your IP address is truncated before being stored on Google’s servers by enabling IP anonymization. Only in exceptional cases is the full IP address transmitted to a Google server in the United States and truncated there. We have no influence over or access to the data processing carried out by Google, including the settings and results of Google Analytics. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses.

 Use of Hyros

On our website, we use the “Hyros” service provided by Hyros, Inc., 13359 N Highway 183 Ste 406 #2008, Austin, TX 78750, USA. By using Hyros, we can determine whether our advertisements were successful. We also receive statistical data to optimize the effectiveness of our advertisements. This processing is based on Article 6(1)(a) of the GDPR (consent). Your consent is voluntary and may be withdrawn at any time. When using this service, data may also be transferred to the United States. In the event of a transfer to the United States, an adequate level of data protection cannot be guaranteed. In particular, access by U.S. government authorities cannot be ruled out. The transfer to the United States is based on Article 49(1)(a) of the GDPR (consent).

 Use of Taboola

On our website, we use the “Taboola” service provided by Taboola Germany GmbH, c/o Mindspace, Friedrichstraße 68, 10117 Berlin, Germany. Taboola enables us to personalize content and ads based on your usage behavior and to obtain statistical data for optimizing our advertisements. This service is used based on your consent in accordance with Art. 6(1)(a) of the GDPR. In doing so, data may also be transferred to third countries, such as the U.S., where the level of data protection may not be adequate. You may withdraw your consent at any time. For more information, please visit https://www.taboola.com/privacy-policy.

8. Social Media

8.1 Social Plugins from Facebook, Instagram, Pinterest, and WhatsApp

Our website uses social media buttons from various social networks. These are embedded in the page solely as HTML links, so no connection to the respective provider’s servers is established when you visit our website. If you click on one of the buttons, the website of the respective social network will open in a new browser window. There, you can, for example, click the “Like” or “Share” button.

8.2 Our online presence on Facebook, Instagram, YouTube, and Pinterest

To the extent that you have given your consent to the respective social media operator in accordance with Article 6(1), first sentence, letter a of the GDPR, your data will be automatically collected and stored for market research and advertising purposes when you visit our online presence on the social media platforms listed above, and usage profiles will be created using pseudonyms. These profiles may be used, for example, to display advertisements—both within and outside the platforms—that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of your data by the respective social media provider, as well as contact information, your rights in this regard, and settings to protect your privacy, please refer to the providers’ privacy policies linked below. If you still need assistance with this, please contact us.

Facebook is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland regarding your use of our online presence on Facebook is generally transmitted to and stored on a server operated by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses. Data processing in connection with a visit to a Facebook fan page is based on an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information (including information on Insights data) can be found here.

Instagram is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). The information automatically collected by Facebook Ireland regarding your use of our online presence on Instagram is generally transmitted to and stored on a server operated by Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses. Data processing in connection with visits to an Instagram fan page is based on an agreement between joint controllers in accordance with Article 26 of the GDPR. Further information (including information on Insights data) can be found here.

YouTube is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google regarding your use of our online presence on YouTube is generally transmitted to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses.

Pinterest is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). The information automatically collected by Pinterest regarding your use of our online presence on Pinterest is generally transmitted to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. There is no adequacy decision by the European Commission for the United States. Our cooperation is based on the European Commission’s Standard Data Protection Clauses.

9. How to Contact Us and Your Rights

As a data subject, you have the following rights:

• pursuant to Article 15 of the GDPR, the right to request information, to the extent specified therein, regarding your personal data that we process;
• pursuant to Article 16 of the GDPR, the right to request, without delay, the rectification of inaccurate personal data or the completion of your personal data stored by us;
• Pursuant to Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless further processing
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest, or
  • is necessary to assert, exercise, or defend legal claims;
• Pursuant to Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data, provided that
  • you dispute the accuracy of the data;
  • the processing is unlawful, but you object to its erasure;
  • we no longer need the data, but you need it to assert, exercise, or defend legal claims, or
  • You have objected to the processing pursuant to Article 21 of the GDPR;
• pursuant to Article 20 of the GDPR, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller;
• Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority in your usual place of residence, your place of work, or where our company is headquartered.

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correct, restrict, or delete data, revoke consent you have given, or object to a specific use of your data, please contact us directly using the contact information provided in our legal notice.

Privacy Notice Regarding the Use of WhatsApp

You can contact us via WhatsApp and start a conversation. We are the controller within the meaning of Article 4(7) of the GDPR for any subsequent data processing in connection with WhatsApp. To provide and use WhatsApp, we utilize the software solution provided by chatarmin.com GmbH, Kaisterstraße 89, 1070 Vienna (Austria), under a data processing agreement.

Your use of WhatsApp is governed solely by the agreements you have entered into with WhatsApp. In accordance with WhatsApp’s Terms of Service, we have your phone number and username on file because you contacted us. We use this and other information you have provided to recognize you and your preferences and to respond to your WhatsApp messages. The legal basis for this is your consent to be contacted in accordance with Article 6(1)(a) of the GDPR. In addition, we send you newsletters via WhatsApp, provided you have given us your consent to do so. You also have the option to use WhatsApp to compile your shopping cart. In this case, data processing is based on Article 6(1)(b) of the GDPR.

You may revoke any consent you have already given at any time, effective for the future. Under the GDPR, you also have the right to access, rectify, transfer, and erase your personal data, as well as the right to restrict or object to certain processing activities. You also have the option to file a complaint with the supervisory authority responsible for you.

For more information, please refer to our data processors:

chatarmin.com GmbH: https://chatarmin.com/privacy-policy 

WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.whatsapp.com/legal/privacy-policy-eea

Privacy Policy created using rechtstexter.de.