Privacy Notice

1. General information and principles of data processing

We are pleased that you are visiting our website. Protecting your privacy and safeguarding your personal information, so-called personal data, when you use our website is an important concern for us.

Under Art. 4(1) GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.

Data from which no reference to your person can be established, for example through anonymisation, is not personal data. Processing (e.g. the collection, storage, reading, querying, use, transmission, deletion or destruction) within the meaning of Art. 4(2) GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any statutory retention obligations to observe.

Here you will find information about how we handle your personal data when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.

We also explain to you the nature and scope of the respective data processing, the purpose and the corresponding legal basis, and the respective storage period.

Below you will find the contact details of the controller.

2. Controller

The controller responsible for the processing of personal data on this website is:

3. Provision and use of the website / server log files

a) Nature and scope of the data processing

If you use this website without otherwise transmitting data to us (e.g. by registering or using a contact form), we collect, via server log files, technically necessary data that is automatically transmitted to our server, including:

• IP address
• Date and time of the request
• Name and URL of the file retrieved
• Website from which access is made (referrer URL)
• Access status / HTTP status code
• Browser type
• Language and version of the browser software
• Operating system

b) Purpose and legal basis

This processing is technically necessary in order to be able to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6(1)(f) GDPR. The processing of the data mentioned is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

c) Storage period

As soon as the personal data mentioned is no longer required for displaying the website, it will be deleted. The collection of the data for the provision of the website and the storage of the data in log files is strictly necessary for the operation of the website. Consequently, there is no possibility for the user to object in this respect. Further storage may take place in individual cases if this is required by law.

4. Use of cookies

a) Nature, scope and purpose of the data processing

We use cookies. Cookies are small files that are sent by us to the browser of your device during your visit to our website and stored there.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, by contrast, enable us to carry out various analyses. For example, some cookies can recognise the browser you use when you visit our website again and transmit various information to us. We use cookies to make the use of our website easier and to improve it. Among other things, cookies allow us to make our online offering more user-friendly and effective for you, for instance by tracking your use of our website and identifying your preferred settings (e.g. country and language settings). Where third parties process information via cookies, they collect the information directly through your browser. However, cookies do not cause any damage to your device. They cannot run programs and cannot contain viruses. Various types of cookies are used on our website, the nature and function of which are explained below.

Temporary cookies / session cookies

So-called temporary cookies or session cookies are used on our website; these are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows different requests from your browser to be assigned to a common session and makes it possible to recognise your device on later website visits.

Permanent cookies

So-called permanent cookies are used on our website. Permanent cookies are cookies that are stored in your browser over a longer period and can transmit information. The respective storage period differs depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Third-party cookies

We use analytical cookies to observe anonymised user behaviour on our website.

In addition, we use advertising cookies. These cookies allow user behaviour to be tracked for advertising and targeted marketing purposes.

Social media cookies make it possible to establish a connection to your social networks and to share content from our website within your networks.

Configuring your browser settings

Most web browsers are preset to accept cookies automatically. However, you can configure your respective browser so that it only accepts certain cookies or no cookies at all. We would point out, however, that you may then no longer be able to use all functions of our website.

Via your browser settings you can also delete cookies already stored in your browser. It is also possible to set your browser so that it notifies you before cookies are stored. Since the various browsers may differ in the way they work, we ask you to use the respective help menu of your browser for the corresponding configuration options.

Disabling the use of cookies may require a permanent cookie to be stored on your computer. If you subsequently delete this cookie, you will have to disable it again.

b) Legal basis

On the basis of the purposes of use described, the legal basis for the processing of personal data using cookies is Art. 6(1)(f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice provided by us on the website ("cookie banner"), the legal basis is additionally Art. 6(1)(a) GDPR.

c) Storage period

As soon as the data transmitted to us via the cookies is no longer required for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is required by law.

5. Data collection for carrying out pre-contractual measures and for the performance of a contract

a) Nature and scope of the data processing

In the pre-contractual context and upon conclusion of a contract, we collect personal data about you. This concerns, for example, form of address, first and last name, address, email address, telephone number or bank details.

b) Purpose and legal basis of the data processing

We collect and process this data exclusively for the purpose of performing the contract or fulfilling pre-contractual obligations.

The legal basis for this is Art. 6(1)(b) GDPR. If, in addition, you have given your consent, the additional legal basis is Art. 6(1)(a) GDPR.

c) Storage period

The data will be deleted as soon as it is no longer required for the purpose of its processing.

In addition, statutory retention obligations may exist, for example commercial or tax-law retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). Where such retention obligations exist, we will block or delete your data at the end of these retention obligations.

6. Order form

An order form is available on our website that can be used for electronic pre-orders.

a) Nature and scope of the data processing

Our data collection is limited to the following data:

• First and last name
• Telephone number
• Email address
• Account details
• Name of the product
• Where applicable, the content of the personal message

In addition, we collect the personal data you provide when using the order form (e.g. address).

b) Purpose and legal basis

The purpose of the data processing is to be able to process your "pre"-order properly.

The legal basis for this is Art. 6(1)(b) GDPR. The processing of the data serves the performance of a contract or is necessary for carrying out a pre-contractual measure taken at the request of the data subject.

c) Storage period

The data will be deleted as soon as it is no longer needed to achieve the purpose of the processing.

In addition, statutory retention obligations may exist, for example commercial or tax-law retention obligations under the German Commercial Code (HGB) or the German Fiscal Code (AO). Where such retention obligations exist, we will block or delete your data at the end of these retention obligations.

7. Data transmission

We only disclose your personal data to third parties if:

• you have given your express consent to this in accordance with Art. 6(1)(a) GDPR.
• this is legally permissible and necessary under Art. 6(1)(b) GDPR for the performance of a contractual relationship with you or for carrying out pre-contractual measures.
• there is a legal obligation for the disclosure under Art. 6(1)(c) GDPR.
• we are legally obliged to transmit data to state authorities, e.g. tax authorities, supervisory authorities and law enforcement authorities.
• the disclosure is necessary under Art. 6(1)(f) GDPR to safeguard legitimate business interests as well as to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in your data not being disclosed.
• in accordance with Art. 28 GDPR we make use of external service providers, so-called processors, for the processing, who have been obliged to handle your data with care.

We use such service providers in the following areas:

• Logistics

When transmitting data to external bodies in third countries, i.e. outside the EU or the EEA, we ensure that these bodies handle your personal data with the same care as those within the EU or the EEA. We only transmit personal data to third countries for which the EU Commission has confirmed an adequate level of protection, or where we ensure the careful handling of the personal data through contractual arrangements or other appropriate safeguards.

8. Use of web fonts (Adobe Fonts)

a) Nature and scope of the data processing

To ensure a consistent and appealing presentation of fonts, we use so-called web fonts on this website that are provided by Adobe Systems Software Ireland Limited (the “Adobe Fonts” service, formerly “Typekit”). When you access a page, your browser loads the required fonts from an Adobe server (use.typekit.net) in order to display text correctly. For this purpose, your browser establishes a connection to Adobe’s servers. In doing so, Adobe becomes aware that our website has been accessed via your IP address.

b) Purpose and legal basis

Web fonts are used in the interest of a consistent and appealing presentation of our online offering. The legal basis for this is our legitimate interest pursuant to Art. 6(1)(f) GDPR.

c) Recipients and transfer to a third country

The provider is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland. This may involve a transfer of data to the parent company Adobe Inc. in the USA. Further information on how Adobe handles personal data can be found in Adobe’s privacy policy at https://www.adobe.com/privacy/policies/adobe-fonts.html.

9. Rights of the data subject

The General Data Protection Regulation (GDPR) guarantees every data subject certain rights in relation to their personal data. These include:

The right of access:

Every data subject has the right to obtain confirmation from us as to whether personal data is being processed, and to obtain access to this data as well as further information and copies of this data.

The right to rectification:

Every data subject has the right to demand the immediate rectification of inaccurate personal data.

The right to erasure ("right to be forgotten"):

Every data subject has the right to demand the immediate erasure of their personal data.

The right to restriction of processing:

Every data subject has the right to demand the restriction of the processing of their personal data.

The right to data portability:

Every data subject has the right to receive the personal data concerning them that they have provided to us in a structured, commonly used and machine-readable format.

The right to object:

Every data subject has the right to object at any time, on grounds relating to their particular situation, to the processing of personal data concerning them which is carried out on the basis of Art. 6(1)(e) or (f) GDPR. Where we process personal data about the data subject for the purpose of direct marketing, the data subject may object to this processing pursuant to Art. 21(2) and (3) GDPR.

The right to withdraw consent under data protection law:

Every data subject has the right to withdraw consent to the processing of personal data at any time.

The data subject also has the right to lodge a complaint with a supervisory authority if they consider that the processing of their personal data infringes the GDPR.

The supervisory authority responsible for us is: