Privacy Policy

Last updated: 10 November 2026

This Privacy Policy describes how Petromax GmbH (“we,” “us,” or “our”) collects, uses, and discloses personal data when you visit petromax.de (the “Website”), use our Services, make a purchase there, or otherwise communicate with us in connection with the Website (collectively, the “Services”). “You” and “your” refer to you as a user of the Services, whether you are a customer, Website visitor, or another person whose data we process under this Privacy Policy.

Please read this Privacy Policy carefully.

Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Website, update the “Last updated” date, and take any other steps required by law.

Information we collect directly from you

Information you submit to us directly through our Services may include:

Contact details, including your name, address, phone number, and email address.
Order information, including your name, billing address, shipping address, payment confirmation, email address, and phone number.
Account information, including your username, password, security questions, and other information used to protect your account.
Shopping information, including items you view, add to your shopping cart, save to your account (e.g., loyalty points, reviews, recommendations, or gift cards), or purchase.
- Saved loyalty points/product reviews/recommendations/gift cards
Customer support information, including information you include in your communications with us, such as when you send us a message through the Services.

For certain features of the Services, you may need to provide us directly with certain information about yourself. You can choose not to provide this information. However, this may mean that you are unable to use or access these features.

Information we collect about your use

We may also automatically collect certain information about your interactions with the Services (“Usage Data”). To do this, we may use cookies, pixels and similar technologies (“Cookies”). Usage Data may include information about how you access and use our website and your account, including device information, browser information, information about your network connection, your IP address and other information about your interactions with the Services.

Information received from third parties

Finally, we may receive information about you from third parties, including vendors and service providers that collect information on our behalf, for example:

Companies that support our website and services, such as Shopify.
Our payment processors, which collect payment information (e.g. bank account, credit or debit card details, billing address) to process your payment, fulfill your orders and provide you with the products or services you have requested in order to fulfill our contract with you.
When you visit our website, open or click on emails we send you, or interact with our services or advertisements, we or third parties with whom we work may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries and cookies.

1. Privacy at a glance

General information

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally. For detailed information on data protection, please refer to our Privacy Policy listed below this text.

Data collection on this website

Who is responsible for collecting data on this website?

Data processing on this website is carried out by the website operator. You can find their contact details in the section “Notice regarding the responsible party” in this Privacy Policy.

How do we collect your data?

Your data is collected, on the one hand, when you provide it to us. This may, for example, be data that you enter in a contact form.

Other data is collected automatically or with your consent when you visit the website by our IT systems. This is primarily technical data (e.g. internet browser, operating system or time of page access). This data is collected automatically as soon as you access this website.

What do we use your data for?

Some data is collected to ensure that the website is provided without errors. Other data may be used to analyze your user behavior.

What rights do you have with regard to your data?

You have the right at any time to obtain, free of charge, information about the origin, recipients, and purpose of your stored personal data. You also have the right to request the rectification or erasure of this data. If you have given consent to data processing, you may withdraw this consent at any time with effect for the future. You also have the right to request the restriction of the processing of your personal data under certain circumstances. Furthermore, you have the right to lodge a complaint with the competent supervisory authority.

You can contact us at any time with any questions about this or other data protection matters.

Analytics tools and tools from third-party providers

When you visit this website, your browsing behavior may be statistically analyzed. This is done primarily using so-called analytics programs.

Detailed information about these analytics programs can be found in the following Privacy Policy.

2. Hosting

We host the content of our website with the following provider:

Shopify

The provider is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter “Shopify”).

Shopify is a tool for creating and hosting websites. When you visit our website, Shopify collects your IP address and information about the device you are using and your browser. Shopify also analyzes visitor numbers, visitor sources, and customer behavior, and creates user statistics. If you make a purchase on our website, Shopify also collects your name, email address, delivery and billing addresses, payment details, and other data related to the purchase (e.g. telephone number, value of purchases made, etc.). Shopify stores cookies in your browser for the analyses.

For details, please refer to Shopify's Privacy Policy: https://www.shopify.de/legal/datenschutz.

Shopify is used on the basis of Art. 6(1)(f) GDPR. We have a legitimate interest in ensuring that our website is presented as reliably as possible. Where the relevant consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's end device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Data processing

We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract required under data protection law that ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

3. General information and mandatory disclosures

Data protection

The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations and this privacy policy.

When you use this website, various personal data are collected. Personal data means data that can be used to identify you personally. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

Please note that data transmission over the Internet (e.g. when communicating by email) may have security vulnerabilities. It is not possible to provide complete protection of data against access by third parties.

Notice concerning the controller

The controller responsible for data processing on this website is:

Petromax GmbH
Sudenburger Wuhne 61
39116 Magdeburg
Germany
Fax: +49 (0) 391 / 5568 46 01
Email: info@petromax.de

If you have questions about this privacy policy or the processing of your data, please contact our data protection officer first, if possible (contact details below in the section “Data Protection Officer”).

The supervisory authority responsible for us is:

State Commissioner for Data Protection of Saxony-Anhalt
P.O. Box 19 47
39009 Magdeburg
or
Otto-von-Guericke-Straße 34a
39104 Magdeburg
Email: poststelle@lfd.sachsen-anhalt.de

The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Retention period

Unless a more specific retention period is stated in this privacy policy, your personal data will remain with us until the purpose for processing the data no longer applies. If you submit a legitimate request for erasure or withdraw your consent to data processing, your data will be erased unless we have other legally permissible grounds for storing your personal data (e.g. retention periods under tax or commercial law); in the latter case, erasure will take place once those grounds no longer apply.

General information on the legal basis for data processing on this website

If you have consented to data processing, we process your personal data on the basis of Art. 6(1)(a) GDPR or Art. 9(2)(a) GDPR, where special categories of personal data under Art. 9(1) GDPR are processed. If you have expressly consented to the transfer of personal data to third countries, data processing is also carried out on the basis of Art. 49(1)(a) GDPR. If you have consented to the storage of cookies or to access to information on your device (e.g. via device fingerprinting), data processing is additionally carried out on the basis of § 25(1) TDDDG. Consent may be withdrawn at any time. If your data is required for the performance of a contract or to take steps prior to entering into a contract, we process your data on the basis of Art. 6(1)(b) GDPR. We also process your data where this is necessary to comply with a legal obligation, on the basis of Art. 6(1)(c) GDPR. Data processing may also be carried out on the basis of our legitimate interest under Art. 6(1)(f) GDPR. The legal bases applicable in each individual case are set out in the following sections of this Privacy Notice.

Data Protection Officer

We have appointed a data protection officer.

If you have any questions about this Privacy Notice, the data we process about you, or the processing activities described below, please contact our designated data protection officer by email first, if possible:

Mr. Matthias Kunert
cubeoffice GmbH & Co. KG
Fichtestr. 29a
39112 Magdeburg
Phone: +49 391 61128-69
Email: datenschutz@cubeoffice.de

Information on the transfer of data to third countries that do not ensure an adequate level of data protection and on the transfer of data to US companies that are not DPF-certified

We use, among other things, tools provided by companies based in third countries that do not ensure an adequate level of data protection, as well as US tools whose providers are not certified under the EU-US Data Privacy Framework (DPF). When these tools are active, your personal data may be transferred to and processed in these countries. Please note that a level of data protection comparable to that in the EU cannot be guaranteed in third countries that do not ensure an adequate level of data protection.

For the USA, the European Commission has issued an adequacy decision (EU-US Data Privacy Framework, DPF). Transfers to the USA are therefore permitted if the recipient is certified under the DPF. If not, we rely on appropriate safeguards for the transfer, in particular the European Commission’s standard contractual clauses. Information about which recipients are based in third countries and the legal basis for each transfer can be found under the individual services in this Privacy Policy.

Recipients of personal data

In the course of our business activities, we work with various external parties. This sometimes requires the transfer of personal data to these external parties. We only disclose personal data to external parties if this is necessary for the performance of a contract, if we are legally required to do so (e.g. disclosure of data to tax authorities), if we have a legitimate interest in the disclosure pursuant to Art. 6(1)(f) GDPR, or if another legal basis permits the disclosure of data. When using processors, we disclose our customers’ personal data only on the basis of a valid data processing agreement. In the case of joint processing, a joint processing agreement is concluded.

Withdrawal of your consent to data processing

Many data processing operations are possible only with your express consent. You may withdraw consent already given at any time. The lawfulness of data processing carried out before withdrawal remains unaffected by the withdrawal.

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY NOTICE. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED, UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA ARE PROCESSED FOR THE PURPOSES OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to lodge a complaint with the competent supervisory authority

In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, their place of work, or the place of the alleged violation. The right to lodge a complaint is without prejudice to any other administrative or judicial remedy.

Right to data portability

You have the right to have data that we process automatically on the basis of your consent or in performance of a contract provided to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of the data to another controller, this will only be done where technically feasible.

Access, correction and deletion

Within the scope of applicable legal provisions, you have the right at any time to obtain, free of charge, information about your stored personal data, its origin and recipients, and the purpose of data processing, and, where applicable, the right to have this data corrected or deleted. You may contact us at any time with regard to this and any other questions concerning personal data.

Right to restriction of processing

You have the right to request the restriction of the processing of your personal data. You may contact us at any time to do so. The right to restrict processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us, we generally need time to verify this. For the duration of the review, you have the right to request the restriction of the processing of your personal data.
If the processing of your personal data was/is unlawful, you may request the restriction of data processing instead of deletion.
If we no longer need your personal data, but you need it to exercise, defend or establish legal claims, you have the right to request the restriction of the processing of your personal data instead of its deletion.
If you have lodged an objection under Art. 21(1) GDPR, your interests and ours must be weighed against each other. Until it has been determined whose interests prevail, you have the right to request the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, such data may, apart from being stored, be processed only with your consent or for the establishment, exercise or defense of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a Member State.

SSL or TLS encryption

For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this page uses SSL or TLS encryption. You can recognize an encrypted connection by the browser address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

If SSL or TLS encryption is enabled, the data you transmit to us cannot be read by third parties.

Encrypted Payment Transactions on This Website

If, after concluding a paid contract, you are required to provide us with your payment data (e.g. account number for direct debit authorization), this data is required to process the payment.

Payment transactions using the usual means of payment (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection. You can recognize an encrypted connection by the browser address bar changing from “http://” to “https://” and by the lock symbol in your browser bar.

With encrypted communication, your payment data that you transmit to us cannot be read by third parties.

Objection to Advertising Emails

We hereby object to the use of contact details published in accordance with the legal notice requirements for sending advertising and informational materials that have not been expressly requested. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited advertising information being sent, for example by spam emails.

4. Data Collection on This Website

Cookies

Our websites use so-called “cookies”. Cookies are small data files and do not cause any damage to your device. They are stored on your device either temporarily for the duration of a session (session cookies) or permanently (permanent cookies). Session cookies are automatically deleted at the end of your visit. Permanent cookies remain stored on your device until you delete them yourself or your web browser automatically deletes them.

Cookies may originate from us (first-party cookies) or from third-party companies (so-called third-party cookies). Third-party cookies enable certain services provided by third-party companies to be integrated into websites (e.g. cookies used to process payment services).

Cookies serve various functions. Many cookies are technically necessary, as certain website features would not work without them (e.g. the shopping cart function or video playback). Other cookies may be used to analyze user behavior or for advertising purposes.

Cookies required to carry out electronic communications, provide certain functions you request (e.g. the shopping cart function) or optimise the website (e.g. cookies for measuring website traffic) (necessary cookies) are stored on the basis of Art. 6(1)(f) GDPR, unless another legal basis is specified. The website operator has a legitimate interest in storing necessary cookies to provide its services in a technically faultless and optimised manner. If consent to the storage of cookies and similar recognition technologies has been requested, processing takes place exclusively on the basis of this consent (Art. 6(1)(a) GDPR and § 25(1) TDDDG); consent may be withdrawn at any time.

You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases, exclude the acceptance of cookies in certain cases or altogether, and activate the automatic deletion of cookies when you close your browser. Disabling cookies may limit the functionality of this website.

This privacy policy explains which cookies and services are used on this website.

Specific information about the cookies we use in connection with providing our shop through Shopify can be found at https://www.shopify.com/legal/cookies. Specific information about the cookies we use in connection with providing our shop through Petromax or third parties can be found at https://petromax.de/pages/cookies.

Consent management with Pandectes

Our website uses the Pandectes GDPR consent management solution to obtain, manage and document your consent to the storage of certain cookies on your device or the use of certain technologies in compliance with data protection laws. The provider is Pandectes, Greece.

When you visit our website, Pandectes processes technical data such as your IP address (truncated), browser information, the time and content of your consent decision. A cookie stores which consents you have granted or withdrawn. The data is stored until you ask us to delete it, delete the cookie yourself or the purpose for storing it no longer applies. Mandatory statutory retention obligations remain unaffected.

The legal basis is Art. 6(1)(c) GDPR, as we are required to obtain and document consent for the use of non-essential technologies. You can change your settings at any time using the cookie icon on the website. An overview of all cookies used can be found at https://petromax.de/pages/cookies.

Data processing

Server log files

The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. This includes:

Browser type and browser version
Operating system used
Referrer URL
Hostname of the accessing computer
Time of server request
IP address

This data is not combined with data from other sources.

This data is collected on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring the technically error-free presentation and optimization of its website – this requires the collection of server log files.

Contact form

If you submit inquiries to us using the contact form, the information you provide in the inquiry form, including the contact details you provide there, will be stored by us for the purpose of processing your inquiry and in case of follow-up questions. We will not disclose this data without your consent.

This data is processed on the basis of Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for carrying out pre-contractual measures. In all other cases, processing is based on our legitimate interest in effectively handling inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR), if this was requested; consent may be withdrawn at any time.

The data you enter in the contact form will remain with us until you request its deletion, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your inquiry has been fully processed). Mandatory statutory provisions – in particular retention periods – remain unaffected.

Inquiries by email, telephone or fax

If you contact us by email, telephone or fax, your inquiry, including all personal data resulting from it (name, inquiry), will be stored and processed by us for the purpose of handling your matter. We will not disclose this data without your consent.

The data you send us in contact requests will remain with us until you ask us to delete it, withdraw your consent to its storage, or the purpose for storing the data no longer applies (e.g. after your request has been fully processed). Mandatory statutory provisions - in particular statutory retention periods - remain unaffected.

Yotpo (product reviews)

We use Yotpo for product reviews. The provider is Yotpo Ltd., 400 Lafayette Street, New York, NY 10003, USA.

We use Yotpo to collect customer reviews and display them in our online shop. Yotpo processes your IP address, device and browser data, your name, email address, order information and review.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest is to provide customers with authentic experiences from other buyers and improve our products.

Yotpo is certified under the EU-US Data Privacy Framework. For more information, please see Yotpo's privacy policy.

Data processing

Loyalty program (Yotpo Loyalty & Rewards)

If you participate in our loyalty program, we process personal data for this purpose. We also use Yotpo for the technical implementation (provider details above).

Registration and points account: A customer account and your email address are required to participate. If you already have a customer account, your data will be combined with your registration for the loyalty program. To credit and redeem points and deduct them again in the event of returns, we process information about your orders and returns (e.g. items, order and refund amounts, order number, order date). The legal basis is Art. 6(1)(b) GDPR, as this processing is necessary to operate the loyalty program. We process information you provide voluntarily on the basis of Art. 6(1)(f) GDPR; you may remove it from your customer account at any time.

Evaluation and advertising: We evaluate the data generated through the loyalty program to improve our offering and show you advertising and promotions that match your purchases. The legal basis is our legitimate interest in interest-based advertising to existing customers (Art. 6(1)(f) GDPR). We will only send you marketing emails if you have consented to our newsletter or the legal requirements for advertising to existing customers are met. You may object to this processing at any time, e.g. by email to info@petromax.de.

You can find the terms and conditions of participation in our Terms and Conditions.

Customer Service, Help Center and Live Chat (Gorgias)

We use Gorgias for our customer service, Help Center and live chat. The provider is Gorgias Inc., USA.

If you contact us via the contact form, by email to our customer service team or via chat, Gorgias processes the contents of your inquiry, your name, your email address and, where necessary to handle your inquiry, order data. Technically necessary cookies and local storage entries are set to operate the chat, allowing a conversation to continue across multiple page views. The chat may provide automated responses; you can request to speak to a member of staff at any time.

The legal basis is Art. 6(1)(b) GDPR insofar as your inquiry relates to a contract or its initiation; otherwise, it is our legitimate interest in handling inquiries efficiently (Art. 6(1)(f) GDPR). The storage of technically necessary information on the end device is carried out pursuant to § 25(2)(2) TDDDG. We rely on the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses for transfers to the USA.

Data processing

Communication via WhatsApp

For communicating with our customers and other third parties, we use, among other things, the WhatsApp instant messaging service. The provider is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Communication is carried out using end-to-end encryption (peer-to-peer), which prevents WhatsApp or other third parties from accessing the content of communications. However, WhatsApp can access metadata generated in the course of the communication process (e.g. sender, recipient and time). We also point out that, according to WhatsApp, it shares its users’ personal data with its US-based parent company, Meta. Further details about data processing can be found in WhatsApp’s Privacy Policy at: https://www.whatsapp.com/legal/#privacy-policy.

WhatsApp is used on the basis of our legitimate interest in communicating as quickly and effectively as possible with customers, prospective customers and other business and contractual partners (Art. 6(1)(f) GDPR). Where corresponding consent has been requested, data is processed exclusively on the basis of that consent; it may be withdrawn at any time with effect for the future.

Communications exchanged between you and us on WhatsApp remain with us until you ask us to delete them, withdraw your consent to their storage, or the purpose for storing the data no longer applies (e.g. after we have finished handling your request). Mandatory statutory provisions – in particular, retention periods – remain unaffected.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can obtain further information from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt00000011sfnAAA&status=Active.

We use WhatsApp in the “WhatsApp Business” version.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. You can find details here: https://www.whatsapp.com/legal/business-data-transfer-addendum.

We have configured our WhatsApp accounts so that they do not automatically synchronize data with the address books on the smartphones in use.

We have concluded a data processing agreement (DPA) with the provider named above.

Typeform

We have embedded Typeform on this website. The provider is TYPEFORM S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain (hereinafter Typeform).

Typeform enables us to create online forms and embed them on our website. The data you enter in our Typeform forms is stored on Typeform’s servers until you ask us to delete it, withdraw any consent you have given to its storage, or the purpose for storing the data no longer applies (e.g. after we have finished handling your request). Mandatory statutory provisions – in particular, retention periods – remain unaffected.

Typeform is used on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in functioning online forms. If corresponding consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

Data processing

Online withdrawal function (Widerruf Button EU Withdrawal)

To enable you to withdraw from your contract online, we use the Shopify app “Widerruf Button EU Withdrawal.” The provider is Eshop Guide, Husemannplatz 5a, 44787 Bochum, Germany.

If you use the withdrawal function, we process the information you provide there (e.g., name, email address, order number, the items being returned), as well as the date and time of receipt. We use this data to process your withdrawal and send you an acknowledgment of receipt by email. Technical data such as IP address and browser information may also be processed.

The legal basis is Art. 6(1)(c) GDPR, as we are legally required to provide a withdrawal function and confirm receipt (§ 356a BGB), as well as Art. 6(1)(b) GDPR for unwinding the contract. We store the data for as long as necessary to process the withdrawal and comply with statutory retention obligations.

Further information can be found in the provider’s privacy policy: https://apps.eshop-guide.de/article/485-widerruf-button-eu-withdrawal-app-datenschutzrichtlinie

Data processing

Registration on this website

You can register on this website to use additional features on the site. We use the data entered for this purpose only to enable you to use the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise, we will reject the registration.

For important changes, such as changes to the scope of the services offered or technically necessary changes, we use the email address provided during registration to inform you.

The data entered during registration is processed for the purpose of carrying out the user relationship established by the registration and, where applicable, initiating further contracts (Art. 6(1)(b) GDPR).

We store the data collected during registration for as long as you are registered on this website and delete it thereafter. Statutory retention periods remain unaffected.

5. Social media

Facebook

This website incorporates elements of the Facebook social network. This service is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. According to Facebook, however, the data collected is also transferred to the USA and other third countries.

An overview of Facebook social media elements can be found here: https://developers.facebook.com/docs/plugins/?locale=de_DE.

When the social media element is active, a direct connection is established between your device and the Facebook server. Facebook thereby receives information that you have visited this website using your IP address. If you click the Facebook “Like” button while logged in to your Facebook account, you can link the content of this website to your Facebook profile. This allows Facebook to associate your visit to this website with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how Facebook uses it. For more information, please see Facebook’s privacy policy at: https://de-de.facebook.com/privacy/explanation.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

Where personal data is collected on our website using the tool described here and forwarded to Facebook, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Article 26 GDPR). This joint responsibility is limited exclusively to the collection of the data and its transfer to Facebook. The processing by Facebook that takes place after the transfer is not part of the joint responsibility. The obligations incumbent on us jointly have been set out in an agreement on joint processing. You can find the text of the agreement at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing data protection information when using the Facebook tool and for implementing the tool securely in accordance with data protection law on our website. Facebook is responsible for the data security of Facebook products. You can exercise data subject rights (e.g. requests for access) relating to data processed by Facebook directly with Facebook. If you exercise your data subject rights with us, we are required to forward them to Facebook.

The transfer of data to the USA is based on the EU Commission’s Standard Contractual Clauses. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can obtain further information from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000GnywAAC&status=Active.

Instagram

This website incorporates features of the Instagram service. These features are provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland.

When the social media element is active, a direct connection is established between your device and the Instagram server. Instagram thereby receives information about your visit to this website.

If you are logged in to your Instagram account, you can link the content of this website to your Instagram profile by clicking the Instagram button. This allows Instagram to associate your visit to this website with your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how Instagram uses it.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

Where personal data is collected on our website and forwarded to Facebook or Instagram using the tool described here, we and Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, are jointly responsible for this data processing (Art. 26 GDPR). This joint responsibility is limited exclusively to collecting the data and forwarding it to Facebook or Instagram. The processing subsequently carried out by Facebook or Instagram after the data has been forwarded is not part of the joint responsibility. The obligations we share have been set out in an agreement on joint processing. The text of the agreement can be found at: https://www.facebook.com/legal/controller_addendum. According to this agreement, we are responsible for providing privacy information when using the Facebook or Instagram tool and for implementing the tool securely on our website in accordance with data protection law. Facebook is responsible for the data security of Facebook and Instagram products. You can exercise your data subject rights (e.g. the right to access) regarding data processed by Facebook or Instagram directly with Facebook. If you exercise your data subject rights with us, we are obliged to forward them to Facebook.

The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

For more information, please see Instagram's Privacy Policy: https://privacycenter.instagram.com/policy/.

This website uses elements of the LinkedIn network. The provider is LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland.

Each time a page on this website containing LinkedIn elements is accessed, a connection is established to LinkedIn’s servers. LinkedIn is informed that you have visited this website using your IP address. If you click the LinkedIn “Recommend” button while logged into your LinkedIn account, LinkedIn can associate your visit to this website with you and your user account. Please note that, as the provider of these pages, we have no knowledge of the content of the data transmitted or how LinkedIn uses it.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to the USA is based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.linkedin.com/help/linkedin/answer/a1343190/datenubertragung-aus-der-eu-dem-ewr-und-der-schweiz?lang=de

Further information can be found in LinkedIn’s Privacy Policy at: https://www.linkedin.com/legal/privacy-policy.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when processing data in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5448.

On this website, we use elements of the social network Pinterest, which is operated by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.

When you visit a page that contains such an element, your browser establishes a direct connection to Pinterest’s servers. This social media element transmits log data to Pinterest’s server in the USA. This log data may include your IP address, the addresses of websites you visit that also contain Pinterest features, browser type and settings, the date and time of the request, how you use Pinterest, and cookies.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

Further information on the purpose, scope, and further processing and use of data by Pinterest, as well as your related rights and options for protecting your privacy, can be found in Pinterest’s Privacy Policy: https://policy.pinterest.com/de/privacy-policy.

6. Analytics Tools and Advertising

Google Tag Manager

We use Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Tag Manager is a tool that enables us to integrate tracking or statistical tools and other technologies into our website. Google Tag Manager itself does not create user profiles, store cookies, or perform any independent analyses. It is used solely to manage and deploy the tools integrated through it. However, Google Tag Manager collects your IP address, which may also be transferred to Google’s parent company in the United States.

The use of Google Tag Manager is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in quickly and easily integrating and managing various tools on its website. If consent has been obtained, processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR and Section 25 para. 1 TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States intended to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This website uses features of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics enables the website operator to analyze the behavior of website visitors. In this context, the website operator receives various usage data, such as page views, time spent on the website, operating systems used, and the user’s origin. This data is combined into a user ID and assigned to the website visitor’s respective device.

We can also use Google Analytics to record your mouse and scrolling movements and clicks, among other things. Google Analytics also uses various modeling approaches to supplement the collected datasets and uses machine learning technologies to analyze the data.

Google Analytics uses technologies that enable users to be recognized for the purpose of analyzing user behavior (e.g. cookies or device fingerprinting). The information collected by Google about the use of this website is generally transferred to and stored on a Google server in the USA.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

Data transfers to the USA are based on the European Commission’s standard contractual clauses. You can find details here: https://privacy.google.com/businesses/controllerterms/mccs/.

IP addresses

In Google Analytics 4, IP addresses are not logged or stored. Google uses them only temporarily to derive approximate location data.

Browser plugin

You can prevent Google from collecting and processing your data by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

For more information about how Google Analytics handles user data, please see Google's Privacy Policy: https://support.google.com/analytics/answer/6004245?hl=de.

Google Signals

We use Google Signals. When you visit our website, Google Analytics collects, among other things, your location, search history and YouTube history, as well as demographic data (visitor data). This data may be used for personalized advertising with the help of Google Signals. If you have a Google account, visitor data collected by Google Signals is linked to your Google account and used for personalized advertising messages. The data is also used to compile anonymized statistics on our users' behavior.

Data processing

We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities when using Google Analytics.

Google Analytics E-Commerce Measurement

This website uses Google Analytics' "E-Commerce Measurement" feature. E-Commerce Measurement enables the website operator to analyze the purchasing behavior of website visitors to improve its online marketing campaigns. Information such as orders placed, average order values, shipping costs and the time from viewing a product to purchasing it is collected. Google may combine this data under a transaction ID associated with the relevant user or their device.

Microsoft Clarity

We use Microsoft Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland.

Clarity records how you use our website (e.g. mouse movements, clicks, scrolling behavior) and uses this to create heatmaps, session recordings and usage statistics. Entries in form fields are masked. We use this information to improve our website. Clarity uses cookies and similar technologies for this purpose.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.

Data may be transferred to Microsoft in the USA. Microsoft is certified under the EU-US Data Privacy Framework. For more information, please see Microsoft's Privacy Statement.

ABlyft (A/B tests)

We use ABlyft to test different versions of our website (A/B tests). The provider is Conversion Expert GmbH, Zeppelinring 52c, 24146 Kiel. You are randomly shown one version, and we measure how you interact with it. Cookies or local storage entries are set for this purpose, and pseudonymous usage data is processed.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.

Data processing

Server-side tracking (Analyzify)

We use the Shopify app Analyzify (provider: Solverhood, Turkey) to transmit events to Google Analytics, Google Ads and Meta. Some events, such as page views, cart actions and purchases, are sent to the services mentioned via a server rather than directly from your browser. Only data for services you have consented to using is transmitted.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.

We rely on the European Commission’s Standard Contractual Clauses for transfers to Turkey.

Data processing

Klar (marketing analytics)

We use Klar, software for analyzing our marketing and attributing orders to marketing channels (attribution). The provider is Klar Insights GmbH, Germany. Klar processes pseudonymous usage data (e.g., visit source, campaign parameters, pages visited) and order data for this purpose and uses cookies.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.

Data processing

Affiliate marketing (Awin)

We participate in the Awin affiliate program. The provider is Awin AG, Germany. If you visit our website via a link on an affiliate website, Awin stores a cookie identifying which affiliate website you came from. If you place an order, the order details, including the order number and order value but not your name, are transmitted to Awin so that the commission can be settled.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.

Further information can be found in Awin’s Privacy Policy.

Google Ads

The website operator uses Google Ads. Google Ads is an online advertising program provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ads enables us to display advertisements in the Google search engine or on third-party websites when users enter certain search terms on Google (keyword targeting). In addition, targeted advertisements can be displayed based on the user data available to Google (e.g., location data and interests) (audience targeting). As the website operator, we can analyze this data quantitatively, for example by analyzing which search terms led to our advertisements being displayed and how many advertisements resulted in corresponding clicks.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to the USA is based on the European Commission's Standard Contractual Clauses. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

Google Ads Remarketing

This website uses the features of Google Ads Remarketing. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

With Google Ads Remarketing, we can assign people who interact with our online offering to specific target groups, so that they can subsequently be shown interest-based advertising in the Google advertising network (remarketing or retargeting).

In addition, the advertising audiences created with Google Ads Remarketing can be linked to Google's cross-device features. This makes it possible to show you interest-based, personalized advertising messages tailored to you based on your previous usage and browsing behavior on one device (e.g. mobile phone) on another of your devices (e.g. tablet or PC).

If you have a Google account, you can opt out of personalized advertising at the following link: https://adssettings.google.com/anonymous?hl=de.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

Further information and the privacy policy can be found in Google's Privacy Policy at: https://policies.google.com/technologies/ads?hl=de.

Creating target groups with customer match

To create target groups, we use, among other things, Google Ads Remarketing's customer match feature. In this process, we transfer certain customer data (e.g. email addresses) from our customer lists to Google. If the customers concerned are Google users and are signed in to their Google accounts, they will be shown relevant advertising messages within the Google network (e.g. on YouTube, Gmail or in the search engine).

Google Conversion Tracking

This website uses Google Conversion Tracking. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google conversion tracking enables Google and us to determine whether the user has performed certain actions. For example, we can evaluate which buttons on our website are clicked and how often, and which products are viewed or purchased particularly frequently. This information is used to compile conversion statistics. We learn the total number of users who clicked on our ads and what actions they performed. We do not receive any information that would enable us to personally identify the user. Google itself uses cookies or comparable recognition technologies for identification.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

For more information about Google conversion tracking, see Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Programmatic Advertising (hurra)

To display advertising on third-party websites and in apps, we work with hurra. The provider is hurra communications GmbH, Germany. For this purpose, cookies or comparable technologies from hurra and from advertising networks and marketplaces for online advertising that hurra works with (e.g. Adform, Taboola, Teads) are used on our website. These collect pseudonymous information about your visit (e.g. pages viewed, device and browser data, IP address) to show you relevant advertising and measure the success of our campaigns. The advertising networks involved may also process this data for their own purposes and transfer it to third countries, particularly the USA.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw your consent at any time via the cookie settings.

An overview of the cookies and providers used can be found in our cookie settings.

Klaviyo

We have integrated Klaviyo on this website. The provider is Klaviyo Inc., 125 Summer Street, Floor 6, Boston, MA, 02110, USA (hereinafter “Klaviyo”).

Klaviyo is a marketing automation tool for sending emails, SMS messages and push notifications, and collecting customer reviews for e-commerce retailers.

For this purpose, Klaviyo stores consent to email marketing. In particular, the following data may be processed: name, telephone number, email address, address data, IP address, device identifiers, usage data (such as interactions between a user and Klaviyo’s online system, website or email, browser used, operating system used, referrer URL).

Klaviyo is used on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Consent may be withdrawn at any time.

For further details, please refer to the provider’s privacy policy at https://www.klaviyo.com/legal/privacy.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. Further information is available from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt00000012uf9AAA&status=Active.

The provider uses standard contractual clauses for the transfer of personal data to third countries. Details can be found here: https://www.klaviyo.com/legal/data-processing-agreement.

Data processing

Meta Pixel (formerly Facebook Pixel)

This website uses the Facebook/Meta visitor action pixel to measure conversions. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

This makes it possible to track the behavior of website visitors after they have been redirected to the provider’s website by clicking on a Facebook advertisement. This allows the effectiveness of Facebook advertisements to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of users. However, the data is stored and processed by Facebook, making it possible to associate it with the respective user profile, and Facebook may use the data for its own advertising purposes in accordance with Facebook’s Data Policy (https://de-de.facebook.com/about/privacy/). This enables Facebook to display advertisements on Facebook pages and outside Facebook. We, as the operator of this website, cannot influence this use of the data.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

We use the advanced matching feature within Meta Pixel.

Advanced matching enables us to transmit various types of data (e.g. city, state, ZIP code, hashed email addresses, names, gender, date of birth or phone number) belonging to our customers and prospective customers, which we collect through our website, to Meta (Facebook). Enabling this feature allows us to target our advertising campaigns on Facebook more precisely to people who are interested in our offers. Advanced matching also improves the attribution of website conversions and expands Custom Audiences.

Data transfers to the USA are based on the European Commission’s Standard Contractual Clauses. You can find details here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can find further information on protecting your privacy in Facebook’s privacy notices: https://de-de.facebook.com/about/privacy/.

You can also disable the “Custom Audiences” remarketing feature in Ad Settings at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. You must be logged in to Facebook to do so.

If you do not have a Facebook account, you can opt out of interest-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

Facebook Conversion API

We have integrated Facebook Conversion API into this website. This service is provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

Facebook Conversion API enables us to collect website visitors’ interactions with our website and share them with Facebook in order to improve advertising performance on Facebook.

In particular, the time of the request, the website accessed, your IP address and user agent, and, where applicable, other specific data (e.g. products purchased, shopping cart value and currency) are collected. You can find a complete overview of the data that may be collected here: https://developers.facebook.com/docs/marketing-api/conversions-api/parameters.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

You can find further information on protecting your privacy in Facebook’s privacy notices: https://de-de.facebook.com/about/privacy/.

TikTok Pixel

We have integrated the TikTok Pixel on this website. The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (hereinafter TikTok).

With the help of the TikTok Pixel, we can show interest-based advertising on TikTok (TikTok Ads) to website visitors who have viewed our offers. At the same time, the TikTok Pixel allows us to determine how effective our advertising on TikTok is. This enables the effectiveness of TikTok ads to be evaluated for statistical and market research purposes and optimized for future advertising campaigns. Various usage data are processed for this purpose, such as IP address, page views, time spent on the site, operating systems used, and the user’s origin, information about the ad a person clicked on TikTok, or an event that was triggered (timestamp). This data is combined in a user ID and assigned to the relevant device of the website visitor.

This service is used on the basis of your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. Consent may be withdrawn at any time.

The transfer of data to third countries is based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

If TikTok also processes the data collected through the Pixel for its own purposes, TikTok is solely responsible for this processing.

7. Newsletter

Newsletter data

If you would like to receive the newsletter offered on the website, we require your email address and information that allows us to verify that you are the owner of the email address provided and that you agree to receive the newsletter. No other data is collected, or it is collected only on a voluntary basis. We use this data exclusively to send the requested information and do not share it with third parties.

The processing of the data entered in the newsletter signup form is carried out solely on the basis of your consent (Art. 6(1)(a) GDPR). You may withdraw your consent to the storage of your data and email address, and their use to send the newsletter, at any time, for example via the “Unsubscribe” link in the newsletter. Withdrawal does not affect the lawfulness of any data processing carried out before the withdrawal.

The data you provide to us for the purpose of receiving the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter and will be deleted from the newsletter mailing list after you unsubscribe or once the purpose no longer applies. We reserve the right to delete or block email addresses from our newsletter mailing list at our discretion in accordance with our legitimate interest under Art. 6(1)(f) GDPR.

Data stored by us for other purposes remains unaffected.

After you unsubscribe from the newsletter mailing list, your email address may be stored on a blacklist by us or the newsletter service provider, if necessary to prevent future mailings. The data in the blacklist is used only for this purpose and is not combined with other data. This serves both your interests and our interest in complying with the legal requirements for sending newsletters (legitimate interest within the meaning of Art. 6(1)(f) GDPR). Storage on the blacklist is not subject to a time limit. You may object to storage if your interests outweigh our legitimate interest.

8. Plugins and tools

YouTube with enhanced privacy mode

This website embeds videos from the YouTube website. The website is operated by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

When you visit one of these websites that embed YouTube, a connection to YouTube's servers is established. This informs the YouTube server which of our pages you have visited. If you are logged in to your YouTube account, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

We use YouTube in enhanced privacy mode. According to YouTube, videos played in enhanced privacy mode are not used to personalize browsing on YouTube. Ads served in enhanced privacy mode are also not personalized. No cookies are set in enhanced privacy mode. Instead, so-called local storage elements are stored in the user's browser, which, like cookies, contain personal data and can be used to recognize users. You can find details about enhanced privacy mode here: https://support.google.com/youtube/answer/171780.

Activating a YouTube video may trigger further data processing operations over which we have no control.

YouTube is used in the interest of ensuring that our online offerings are presented attractively. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

More information about data protection at YouTube can be found in its privacy policy at: https://policies.google.com/privacy?hl=de.

Adobe Fonts

This website uses Adobe Web Fonts to ensure that certain fonts are displayed consistently. The provider is Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland (Adobe).

When you visit this website, your browser loads the required fonts directly from Adobe so that they can be displayed correctly on your device. In doing so, your browser connects to Adobe’s servers in the USA. This allows Adobe to learn that this website was accessed via your IP address. According to Adobe, no cookies are stored when the fonts are provided.

The data is stored and analyzed on the basis of Art. 6(1)(f) GDPR. The website operator has a legitimate interest in ensuring that the typeface is displayed consistently on its website. If consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

The transfer of data to the USA is based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.adobe.com/de/privacy/eudatatransfers.html.

More information about Adobe Fonts is available at: https://www.adobe.com/de/privacy/policies/adobe-fonts.html.

Adobe’s privacy policy can be found at: https://www.adobe.com/de/privacy/policy.html

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the USA intended to ensure compliance with European data protection standards when data is processed in the USA. Every company certified under the DPF undertakes to comply with these data protection standards. You can find further information from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000TNo9AAG&status=Active.

Product search (Doofinder)

We use Doofinder for the search function in our shop. The provider is Doofinder S.L., Spain.

When you use the search, Doofinder processes your search queries, the results you click, your IP address, and device and browser information to display relevant results and improve the search. Technically necessary cookies and local storage entries are set for this purpose.

The legal basis is our legitimate interest in providing a functioning product search (Art. 6(1)(f) GDPR) and Section 25(2)(2) TDDDG. If we use search data for further analysis, we do so only with your consent (Art. 6(1)(a) GDPR, Section 25(1) TDDDG).

Data processing

Competitions (ViralSweep)

We use ViralSweep (provider: ViralSweep, USA) for competitions. If you enter, we process the information you provide in the entry form (e.g. name, email address), your participation activities, and technical data such as your IP address to prevent multiple entries and misuse. The legal basis is Art. 6(1)(b) GDPR (running the competition). You will receive advertising by email only if you separately consent to it (Art. 6(1)(a) GDPR). The data will be deleted after the competition ends, unless statutory retention obligations apply. The applicable terms and conditions also apply. We rely on the European Commission's Standard Contractual Clauses for transfers to the USA.

Data processing

Retailer search (Stockist, Progus Store Locator)

To help you find retailers near you, we use the services of Stockist and Progus Store Locator (provider: PROGUS sp. z o.o., Poland). We process the location you enter or your location, if you allow us to access it, as well as technical data such as your IP address. Google Maps is integrated to display the map (see below). The legal basis is our legitimate interest in providing a functioning retailer search (Art. 6(1)(f) GDPR); access to your location is granted only with your consent (Art. 6(1)(a) GDPR).

Data processing

Instagram Feed (Instafeed)

Our website displays posts from our Instagram account via the Instafeed app (provider: Mintt Studio). The images are loaded from Instagram’s or Meta’s servers, which thereby receive your IP address and information about your browser. The legal basis is our legitimate interest in presenting our services attractively (Art. 6(1)(f) GDPR). If the relevant consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG. For information about data processing by Meta, see the section “Instagram”.

Google Maps

This website uses the Google Maps mapping service. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. This service enables us to embed maps on our website.

To use the features of Google Maps, your IP address must be stored. This information is generally transferred to a Google server in the USA and stored there. The provider of this website has no influence over this data transfer. When Google Maps is enabled, Google may use Google Fonts to ensure that fonts are displayed consistently. When you access Google Maps, your browser loads the required web fonts into its browser cache to display text and fonts correctly.

Google Maps is used in the interest of presenting our online services attractively and making it easy to find the locations we specify on the website. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. If the relevant consent has been requested, processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR and Section 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

The transfer of data to the USA is based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/.

For more information about how user data is handled, please see Google’s privacy policy: https://policies.google.com/privacy?hl=de.

Google reCAPTCHA

We use “Google reCAPTCHA” (hereinafter “reCAPTCHA”) on this website. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

reCAPTCHA is used to determine whether data is entered on this website (e.g. in a contact form) by a human or by an automated program. To this end, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor accesses the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not informed that an analysis is taking place.

Data is stored and analyzed on the basis of Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in protecting its online services from abusive automated data mining and SPAM. If consent has been requested, processing takes place exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TDDDG, insofar as the consent covers the storage of cookies or access to information on the user's device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent may be withdrawn at any time.

For more information about Google reCAPTCHA, please see Google's Privacy Policy and Google's Terms of Service at the following links: https://policies.google.com/privacy?hl=de and https://policies.google.com/terms?hl=de.

9. eCommerce and payment providers

Processing customer and contract data

We collect, process and use personal customer and contract data to establish, define the content of and amend our contractual relationships. We collect, process and use personal data relating to the use of this website (usage data) only to the extent necessary to enable the user to use the service or to charge for it. The legal basis for this is Art. 6 para. 1 lit. b GDPR.

The customer data collected will be deleted after completion of the order or termination of the business relationship and expiry of any applicable statutory retention periods. Statutory retention periods remain unaffected.

Data transfer upon conclusion of a contract for online shops, merchants, and shipping of goods

When you order goods from us, we share your personal data with the transport company commissioned to deliver your order and with the payment service provider commissioned to process the payment. Only data required by the respective service provider to perform its task is disclosed. The legal basis for this is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures. If you have given your consent pursuant to Art. 6(1)(a) GDPR, we will provide your email address to the transport company commissioned to deliver your order so that it can inform you by email about the shipping status of your order; you may withdraw your consent at any time.

Reviews and buyer protection (Trusted Shops)

We use Trusted Shops for customer reviews and the Trustbadge. The provider is Trusted Shops SE, Subbelrather Str. 15c, 50823 Cologne. When you visit the website, the Trustbadge is loaded; Trusted Shops processes technical data such as your IP address in this process. After an order, we may transmit your email address, order number, and order date to Trusted Shops so that you can submit a review.

The legal basis for the Trustbadge is our legitimate interest in displaying our reviews (Art. 6(1)(f) GDPR) insofar as information is stored on your device; where this is the case, your consent is required (Art. 6(1)(a) GDPR, § 25(1) TDDDG). Review requests are made as part of our communications with existing customers (Art. 6(1)(f) GDPR); you may object at any time.

Returns and exchanges (Loop Returns)

We use Loop Returns to process returns and exchanges. The provider is Loop Returns Inc., USA. The data processed includes order data, name, address, email address, the returned items, and the reason for the return. The legal basis is Art. 6(1)(b) GDPR. We rely on the EU-US Data Privacy Framework or the European Commission’s Standard Contractual Clauses for transfers to the USA.

Data processing

Order editing and additional offers after purchase (memberr)

After completing your order, you can change it yourself for a short time and add complementary products. For this, we use memberr Order Editing (provider: memberr GmbH, Germany). The order data for your order is processed. The legal basis is Art. 6(1)(b) GDPR.

Data processing

Customer surveys (KnoCommerce, Decify)

After an order or on our website, we occasionally ask you to participate in short surveys, e.g. about how you heard about us. For this purpose, we use KnoCommerce (provider: KnoCommerce Inc., USA) and Decify (provider: Decify GmbH, Germany). Your responses, the associated order number and technical data are processed.

Participation is voluntary. The legal basis is our legitimate interest in improving our services and marketing (Art. 6(1)(f) GDPR). We rely on the EU Commission’s Standard Contractual Clauses for the transfer to KnoCommerce in the USA.

Data processing

Credit checks

When you purchase on account or use another payment method for which we make an advance payment, we may carry out a credit check (scoring). For this purpose, we transmit the data you have entered (e.g. name, address, age or bank details) to a credit agency. The likelihood of a payment default is determined on the basis of this data. If the risk of payment default is excessive, we may refuse the payment method concerned.

Credit checks are carried out on the basis of contract performance (Art. 6(1)(b) GDPR) and to prevent payment defaults (legitimate interest pursuant to Art. 6(1)(f) GDPR). If consent has been obtained, the credit check is carried out on the basis of that consent (Art. 6(1)(a) GDPR); consent may be withdrawn at any time.

Payment services

We integrate payment services provided by third-party companies on our website. When you make a purchase from us, your payment data (e.g. name, payment amount, account details, credit card number) are processed by the payment service provider for the purpose of processing the payment. The respective contractual and data protection provisions of the respective providers apply to these transactions. We use payment service providers on the basis of Art. 6(1)(b) GDPR (contract performance) and in the interest of ensuring a smooth, convenient and secure payment process (Art. 6(1)(f) GDPR). Where your consent is requested for specific actions, Art. 6(1)(a) GDPR is the legal basis for data processing; consent may be withdrawn at any time with effect for the future.

We use the following payment services / payment service providers on this website:

PayPal

The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

The transfer of data to the USA is based on the European Commission’s standard contractual clauses. You can find details here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

For details, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Apple Pay

The provider of the payment service is Apple Inc., Infinite Loop, Cupertino, CA 95014, USA. You can find Apple’s privacy policy at: https://www.apple.com/legal/privacy/de-ww/.

Google Pay

The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. You can find Google’s privacy policy here: https://policies.google.com/privacy.

Klarna

The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”). Klarna offers various payment options (e.g. payment in installments). If you choose to pay with Klarna (Klarna Checkout solution), Klarna will collect various personal data about you. Klarna uses cookies to optimize the use of the Klarna Checkout solution. For details about the use of Klarna cookies, please refer to the following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

You can find details about this in Klarna’s privacy policy at the following link: https://www.klarna.com/de/datenschutz/.

Shopify Payment

The provider of this payment service in the EU is Shopify International Limited, 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter “Shopify Payment”).

For details, please refer to Shopify Payment’s privacy policy: https://www.shopify.de/legal/datenschutz.

American Express

The provider of this payment service is American Express Europe S.A., Theodor-Heuss-Allee 112, 60486 Frankfurt am Main, Germany (hereinafter “American Express”).

American Express may transfer data to its parent company in the USA. The transfer of data to the USA is based on the Binding Corporate Rules. Details can be found here: https://www.americanexpress.com/en-cz/company/legal/privacy-centre/binding-corporate-rules/.

For more information, please refer to American Express’s privacy policy: https://www.americanexpress.com/de-de/firma/legal/datenschutz-center/online-datenschutzerklarung/.

Mastercard

The provider of this payment service is Mastercard Europe SA, Chaussée de Tervuren 198A, B-1410 Waterloo, Belgium (hereinafter “Mastercard”).

Mastercard may transfer data to its parent company in the USA. The transfer of data to the USA is based on Mastercard’s Binding Corporate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

The provider of this payment service is Visa Europe Services Inc., London Branch, 1 Sheldon Square, London W2 6TT, United Kingdom (hereinafter “VISA”).

The United Kingdom is considered a third country with an adequate level of data protection. This means that the United Kingdom provides a level of data protection equivalent to that in the European Union.

VISA may transfer data to its parent company in the USA. The transfer of data to the USA is based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.

For more information, please refer to VISA’s privacy policy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

NEW: Fire Center FC1000

Tyropit fire bowl + grill plate + cover

Cooler bag with ice pack

Atago gas grill + bag

NEW: Fire Center FC1000

Atago gas grill + bag

Privacy Policy

Privacy Policy

Changes to this Privacy Policy

Information we collect directly from you

Information we collect about your use

Information received from third parties

1. Privacy at a glance

General information

Data collection on this website

Who is responsible for collecting data on this website?

How do we collect your data?

What do we use your data for?

What rights do you have with regard to your data?

Analytics tools and tools from third-party providers

2. Hosting

Shopify

Data processing

3. General information and mandatory disclosures

Data protection

Notice concerning the controller

Retention period

General information on the legal basis for data processing on this website

Data Protection Officer

Information on the transfer of data to third countries that do not ensure an adequate level of data protection and on the transfer of data to US companies that are not DPF-certified

Recipients of personal data

Withdrawal of your consent to data processing

Right to object to data collection in specific cases and to direct marketing (Art. 21 GDPR)

Right to lodge a complaint with the competent supervisory authority

Right to data portability

Access, correction and deletion

Right to restriction of processing

SSL or TLS encryption

Encrypted Payment Transactions on This Website

Objection to Advertising Emails

4. Data Collection on This Website

Cookies

Consent management with Pandectes

Data processing

Server log files

Contact form

Inquiries by email, telephone or fax

Yotpo (product reviews)

Data processing

Loyalty program (Yotpo Loyalty & Rewards)

Customer Service, Help Center and Live Chat (Gorgias)

Data processing

Communication via WhatsApp

Typeform

Data processing

Online withdrawal function (Widerruf Button EU Withdrawal)

Data processing

Registration on this website

5. Social media

Facebook

Instagram

LinkedIn

Pinterest

6. Analytics Tools and Advertising

Google Tag Manager

Google Analytics

IP addresses

Browser plugin

Google Signals

Data processing

Google Analytics E-Commerce Measurement

Microsoft Clarity

ABlyft (A/B tests)

Data processing

Server-side tracking (Analyzify)

Data processing

Klar (marketing analytics)

Data processing

Affiliate marketing (Awin)

Google Ads