1) Information about the collection of personal data and contact details of the data controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data refers to any data that can personally identify you.
1.2 The data controller for data processing on this website, as defined by the General Data Protection Regulation (GDPR), is Marlen Kleinfelder, SaMaCla, Dürerstr. 49, 12203 Berlin, Germany, Tel.: -, Email: firstname.lastname@example.org. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the „https://“ and the padlock symbol in your browser’s address bar.
2) Data Collection When Visiting Our Website
When you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect the data that your browser sends to our server (so-called ’server log files‘). When you visit our website, we collect the following data that is technically necessary for us to display the website:
Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Used operating system
Used IP address (if applicable, in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. There is no further disclosure or use of the data. However, we reserve the right to retrospectively check the server log files if concrete evidence points to unlawful use.
Some of the cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If certain cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of a contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent granted, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
Please note that you can set your browser to be informed about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for the respective browsers at the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Please note that if you do not accept cookies, the functionality of our website may be restricted.
As part of contacting us (e.g., via contact form or email), personal data is collected. The specific data collected when using a contact form can be found in the respective contact form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after the final processing of your request. This is the case when it can be inferred from the circumstances that the matter in question has been conclusively clarified and there are no legal retention obligations.
5) Data Processing for Opening a Customer Account and Contract Execution
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of contract execution or when opening a customer account. The data that is collected can be seen from the respective input forms. You can delete your customer account at any time, and this can be done by sending a message to the above-mentioned address of the data controller. We store and use the data provided by you for contract execution. After complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after the expiration of these periods, unless you have expressly consented to further use of your data or we reserve the right to further use of data permitted by law.
6) Data Processing for Order Processing
6.1To the extent necessary for the processing of orders for delivery and payment purposes, the personal data collected by us will be transferred to the commissioned transport company and the commissioned bank in accordance with Art. 6 para. 1 lit. b GDPR.
If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we will process the contact data (name, address, email address) provided by you when ordering to inform you personally within the legally prescribed period in accordance with Art. 6 para. 1 lit. c GDPR via a suitable communication channel (e.g., postal or email) about upcoming updates as part of our legal information obligations. Your contact data will be strictly used for the purpose of notifying you of updates owed by us and will be processed by us only to the extent necessary for the respective notification.
To process your order, we also work with the following service provider(s) who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
6.2 Use of Payment Service Providers (Payment Services)
If you choose a payment method offered by the payment service provider Stripe, the payment processing will be carried out by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process, along with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency, and transaction number) in accordance with Art. 6 para. 1 lit. b GDPR. For more information on Stripe’s data protection, please visit the URL https://stripe.com/de/privacy#translation. Stripe reserves the right to conduct a credit check based on mathematical-statistical methods to safeguard its legitimate interest in determining the user’s creditworthiness. Stripe may transmit the personal data necessary for a credit check and obtained as part of payment processing to selected credit reporting agencies, which Stripe discloses to users upon request. The credit check may include probability values (so-called score values). If score values are included in the results of the credit check, they are based on a scientifically recognized mathematical-statistical method. The calculation of score values includes, among other things, but is not limited to, address data. Stripe uses the result of the credit check regarding the statistical probability of default for the purpose of deciding on the eligibility for using the selected payment method. You can object to this processing of your data at any time by sending a message to Stripe or the credit reporting agencies involved. However, Stripe may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
7) Contact for Review Reminder
Review Reminder by ShopVote
If you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR during or after your order, we will forward your email address to the review platform ShopVote operated by Blickreif GmbH, Schulstraße 46, 80634 Munich (www.shopvote.de), so that they can send you a review reminder by email. You can revoke your consent at any time by sending a message to the data controller or to the review platform.
8) Use of Review and Quality Seal Graphics
To display our ShopVote seal and, if applicable, the collected and/or aggregated reviews, we have integrated ShopVote graphics on this website.
This serves to protect our predominant legitimate interests in the optimal marketing of our offering as part of a balancing of interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The ShopVote graphics and the services advertised with them are an offer of Blickreif GmbH, Schulstraße 46, 80634 Munich.
When the ShopVote graphics are accessed, the web server automatically stores a so-called server log file, which contains, for example, your IP address, date and time of access, amount of data transferred, and the source of the access (access data) and documents the access. These access data are not evaluated and are automatically overwritten no later than seven days after the end of your page visit. The ShopVote graphics do not collect or store any further personal data.
9) Use of Social Media: Videos
Use of YouTube Videos
This website uses the YouTube embedding feature to display and play videos from the provider ‚YouTube,‘ which is owned by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (‚Google‘).
Insofar as required by law, we have obtained your consent in accordance with Art. 6 para. 1 lit. a GDPR for the data processing described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, disable this service in the „Cookie Consent Tool“ provided on the website.
10) Tools and Other
This website uses the Borlabs Cookie Consent Tool provided by Mr. Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg („Borlabs“). The tool sets two technically necessary cookies („borlabsCookie“ and „borlabsCookieUnblockContent“) to store your cookie preferences. The processing described above is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in providing a cookie preference management tool for website visitors.
The „Borlabs Cookie“ does not process any personal data. Your chosen preference, which you selected upon entering the website, is stored in the „borlabsCookie“ cookie. The „borlabsCookieUnblockContent“ cookie stores which (external) media/content you want to unblock automatically. If you wish to revoke these settings, simply delete the cookies in your browser. When you revisit/reload the website, you will be asked about your cookie preference again.
11) Rights of the Data Subject
11.1 Under the applicable data protection law, you have the following data subject rights in relation to the processing of your personal data by the data controller, with reference to the specified legal basis for the conditions of exercise:
Right to information pursuant to Art. 15 GDPR;
Right to rectification in accordance with Art. 16 GDPR;
Right to erasure in accordance with Art. 17 GDPR;
Right to restriction of processing in accordance with Art. 18 GDPR;
Right to notification in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to withdraw consent granted in accordance with Art. 7(3) GDPR;
Right to lodge a complaint in accordance with Art. 77 GDPR.
11.2 Right to Object
If we process your personal data based on our legitimate overriding interests in a balancing of interests, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
If you exercise your right to object, we will cease processing the affected data. However, further processing may be reserved if we can demonstrate compelling legitimate grounds for processing that override your interests, fundamental rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of personal data concerning you for such marketing. You can exercise your objection as described above.
If you exercise your right to object, we will cease processing the affected data for direct marketing purposes.
12) Duration of Personal Data Storage
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and, if applicable, the respective statutory retention period (e.g., commercial and tax retention periods).
If personal data is processed based on explicit consent pursuant to Art. 6(1)(a) GDPR, this data is stored until the data subject revokes their consent.
If there are legal retention periods for data processed as part of legal or similar obligations based on Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods have expired, provided it is no longer necessary for contract performance or initiation, and there is no longer a legitimate interest on our part in continuing storage.
If personal data is processed based on Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21(1) GDPR unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing is necessary for the establishment, exercise, or defense of legal claims.
If personal data is processed for the purposes of direct marketing based on Art. 6(1)(f) GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21(2) GDPR.
Unless otherwise indicated in the other information in this statement about specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.