privacy policy

1. Information about the collection of personal data and contact details of the controller
2. Data collection when visiting our website
3. Contact
4. Cookies
5. Data processing for order processing
6. Data processing when opening a customer account and for contract processing
7. Comment function
8. Use of your data for direct marketing purposes
9. Contact for review reminder
10. Online Marketing
11. Web analysis services
12. Retargeting / Remarketing / Recommendation Advertising
13. Use of a live chat system
14. Tools and Others
15. Rights of the data subject
16. Duration of storage of personal data


1. Information about the collection of personal data and contact details of the controller
1.1 Thank you for visiting our website. Below we would like to inform you about how we handle your personal data when you use our website. Personal data is basically all data with which you can be personally identified.
1.2 The person responsible for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is:

BARBOZA GmbH
Lothringer Allee 2a
44805 Bochum
Germany
Tel.:+49 0 234-4799 2380
E-mail: support@barboza.store
1.3 To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TSL) over HTTPS.

2. Data collection when visiting our website
Every time you visit our website, our system automatically records data and information that your browser transmits to our server (so-called "server log files"). The following data that is technically necessary for us is collected:

*Our visited website
*Date and time of access
*Amount of data sent in bytes
*Source/reference from which you came to the page
*Operating system used
*Browser used
*IP address used (if applicable: in anonymized form, the legal basis for processing is Art. 6 Para. 1 lit. f GDPR due to our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be passed on or used for any other purpose. The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.
We reserve the right to subsequently check the server log files if there are concrete indications of illegal use. The data is deleted as soon as it is no longer required to achieve the purpose for which it was collected. If the data is collected to provide the website, this is the case when the respective session has ended.
If the data is stored in log files, this is the case after seven days at the latest. Storage beyond this is possible. In this case, the IP addresses of the users are deleted or altered so that it is no longer possible to assign the calling client. The collection of data to provide the website and the storage of data in log files is essential for the operation of the website. The user therefore has no option to object.

3. Contact
If you contact us via the contact form, the data entered in the input mask will be transmitted to us and stored.The data collected can be found in the respective input mask. When you contact us by email, only the data you enter there will be transferred to us.
The data will be used exclusively to process the conversation and your request. The legal basis for processing the data if the user has given their consent is Art. 6 (1) (a) GDPR. The legal basis for processing data transmitted when an e-mail is sent is Art. 6 (1) (f) GDPR. If the e-mail contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 (1) (b) GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was collected and provided that there are no statutory retention periods to the contrary. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it can be inferred from the circumstances that the matter in question has been conclusively clarified. The user has the option to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time. In such a case, the conversation cannot be continued.

4. Cookies
Our website uses cookies.
Cookies are text files that are stored on the user's device. When a user visits a website, a cookie can be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. This requires that the browser is recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in processing personal data in accordance with Art. 6 (1) (f) GDPR also lies in the above-mentioned purposes.
In addition, our website may use cookies that enable analysis of users' surfing behavior (so-called third-party cookies). Further information on the scope, purpose, legal basis and options for objection can be found in the respective sections of the respective chapter of this data protection declaration.
As a user, you have full control over the use of cookies. You can deactivate, restrict or delete the transmission of cookies by changing the settings in your Internet browser. If you deactivate cookies for our website, you may no longer be able to fully use all of the website's functions. You can prevent the transmission of Flash cookies by changing the Flash Player settings.
You can find help with the settings in the respective help menu of your browser or under the following links:

Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies

Some of the cookies used here are deleted when you close your browser (so-called session cookies). Other cookies remain on your device and enable us or our partner companies (third party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values ​​to an individual extent.Persistent cookies are automatically deleted after a specified period of time, which may vary depending on the cookie.

5. Data processing for order processing
5.1 If you would like to order from our webshop, it is necessary for the conclusion of the contract that you provide your personal data, which we need to process your order. We process the data you provide to process your order.

In some cases, we work with external service providers to process your order. To do this, we must pass on the personal data required for this purpose.

If we commission transport companies to deliver your goods, we will pass on your data required for the delivery of the goods to the respective transport company. To process payments, we will pass on your data to the commissioned credit institution as necessary. If we use payment service providers, you will also be informed of this below.
The legal basis for the transfer of your data is Art. 6 Para. 1 lit. b GDPR.

5.2 External service providers for order processing and order fulfillment
- Fulfillment
Order processing is carried out by our fulfillment service provider. We pass on your personal data to our fulfillment service provider exclusively for the purpose of processing your order and only to the extent necessary in accordance with Art. 6 (1) (b) GDPR.

5.3 Transfer of your personal data to shipping service providers
- DHL
If the goods are delivered to you by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery and to the extent necessary in accordance with Art. 6 Paragraph 1 Letter b GDPR. Only if you have given your express consent during the ordering process will we pass on your email address to DHL in accordance with Art. 6 Paragraph 1 Letter a GDPR before the goods are delivered for the purpose of coordinating a delivery date or to notify you of the delivery. Your consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider DHL.

- DPD
If the goods are delivered to you by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will only pass on the name of the recipient and the delivery address to DPD for the purpose of delivery and to the extent necessary in accordance with Art. 6 Paragraph 1 Letter b GDPR. Only if you have given your express consent during the ordering process will we pass on your email address to DPD in accordance with Art. 6 Paragraph 1 Letter a GDPR before the goods are delivered for the purpose of coordinating a delivery date or to notify you of the delivery. Your consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider DPD.

- GLS
If the goods are delivered to you by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 - 7, 36286 Neuenstein), we will only pass on the name of the recipient and the delivery address to GLS for the purpose of delivery and to the extent necessary in accordance with Art. 6 Para. 1 lit. b GDPR. Only if you have given your express consent during the ordering process will we pass on your email address to GLS in accordance with Art. 6 Para. 1 lit. a GDPR before the goods are delivered for the purpose of coordinating a delivery date or to notify you of the delivery.Your consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider GLS.

- UPS
If the goods are delivered to you by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will only pass on the name of the recipient and the delivery address to UPS for the purpose of delivery and to the extent necessary in accordance with Art. 6 Paragraph 1 Letter b GDPR. Only if you have given your express consent during the ordering process will we pass on your email address to UPS in accordance with Art. 6 Paragraph 1 Letter a GDPR before the goods are delivered for the purpose of coordinating a delivery date or to notify you of the delivery. Your consent can be revoked at any time with future effect to the person responsible named above or to the transport service provider UPS.

5.4 Use of payment service providers

5.5 Apple Pay
If you select the payment method "Apple Pay" (a service provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), the payment will be processed via the "Apple Pay" function of your iOS, watchOS or macOS device by charging a payment card stored by you with "Apple Pay".

Your transaction is protected by the security functions of your device's hardware and software. If a payment is to be approved, it must be approved by entering a code and verifying it using the "Face ID" or "Touch ID" function on your device.

The information you provide during the ordering process, along with information about your order, will be passed on to Apple in encrypted form for the purpose of processing the payment. This data is then encrypted again by Apple and then transmitted to the payment service provider of the payment card stored in Apple Pay to process the payment. Encryption ensures that only the website on which the order was placed can access the payment data.

After payment, Apple will send the device account number and a transaction-specific, dynamic security code to the store website to confirm payment.
Personal data may be processed for the curtains mentioned. In this case, this is done for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.

When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, your Mac and your authorization device communicate over an encrypted channel on Apple servers. Apple may process or store data, but it does so in a format that does not identify you.

Information on Apple Pay’s privacy policy is available here: https://support.apple.com/de-de/HT203027

5.6 Google Pay
When selecting the payment method "Google Pay" (a service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google")), the payment processing is carried out via the "GooglePay" application on your Android (at least 4.4 "KitKat") mobile device with an NFC function. Payment is made using one of your payment cards stored with Google Pay or a payment system verified there (e.g. PayPal). In order to authorize a payment via Google Pay of more than EUR 25, you must first unlock your mobile device. The information you provide when ordering will be passed on to Google for the purpose of payment processing.Google generates a unique transaction number that is sent to the ordering website to verify the payment. This transaction number is simply a numerical token that does not contain any information about your data. The actual transaction is carried out between the user and the ordering website by charging the payment method stored with Google Pay. Personal data may be processed during the processes described. In this case, the processing is carried out for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.

The Google Pay terms of use can be found here:https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=deWeitere Information on data protection at Google Pay can be found at the following internet address:https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

- Klarna
When paying using the following payment methods (if offered): - "Klarna purchase on account" - "Klarna installment purchase" - "Klarna direct debit" (a Klarna instant payment method) - "Klarna credit card payment" (a Klarna instant payment method), payment processing is carried out via Klarna AB (publ)[https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as "Klarna"). We pass on your personal data (first and last name, street, house number, postcode, city, gender, email address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery method) to Klarna for the purpose of identity and credit checks if you have expressly consented to the transfer in accordance with Art. 6 Para. 1 lit. a GDPR. Klarna can pass on your data to one of the following credit agencies: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the result of the credit report, these are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, among other things, but not exclusively, address data. You can revoke your consent at any time by sending a message to the person responsible for processing your data or to Klarna. However, Klarna may still reserve the right to process your personal data if this is necessary for the contractual payment processing. The following Klarna data protection provisions apply to those affected based in Germany: https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf The following Klarna data protection provisions apply to data subjects based in Austria: https://cdn.klarna.com/1.0/shared/content/policy/data/de_at/data_protection.pdf

- Paypal
If you select the payment method PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, payment will be processed via PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as "PayPal").
We will pass on your personal data to PayPal as necessary in accordance with Art. 6 Paragraph 1 Letter b of GDPR. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal.
For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR due to PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding on the provision of the respective payment method.
The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the result of the credit report, these are based on a scientifically recognized mathematical-statistical procedure.The calculation of the score values ​​includes, among other things but not exclusively, address data.
What other data PayPal collects can be found in the respective PayPal privacy policy. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.

5.7 Shop Pay 
On our website we use payment via Shop Pay (Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter referred to as "Shop Pay"). When paying with Shop Pay, personal data is collected from you. Your data is transmitted to Shop Pay on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill the contract) and only to the extent necessary.
You have the option to revoke your consent to data processing at any time; however, a revocation will not affect the effectiveness of data processing operations that have taken place in the past.

Further information on Shop Pay’s data protection: https://www.shopify.com/paysowie in the privacy policy of Shop Pay at https://www.shopify.de/legal/datenschutz

- Stripe
If you select a payment method from the payment service provider Stripe, payment processing will be carried out via Stripe Payments Europe Ltd, Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland (hereinafter referred to as "stripe").
We pass on your personal data together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) to Stripe in accordance with Art. 6 Para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary.

- IMMEDIATELY
If you select the payment method "SOFORT", payment processing will be carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT").
We pass on your personal data together with the information about your order to SOFORT in accordance with Art. 6 Paragraph 1 Letter b of GDPR exclusively for the purpose of payment processing and only to the extent necessary.
Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).
SOFORT’s privacy policy can be viewed here: https://www.klarna.com/sofort/datenschutz

- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process along with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 Para. 1 lit. b GDPR. Your data will be passed on exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. Further information on Shopify Payments' data protection can be found at the following internet address: https://www.shopify.com/legal/privacyDatenschutzrechtliche Information about Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

5th8 Returns Management 
For returns management we use the service provider 8returns UG, Lohmühlenstr. 65, 12435 Berlin. 8returns enables, among other things, the automated processing of returns including the creation of return labels for the respective (sub-)carriers.

For the technical processing of returns management, personal data such as the customer's name and email address are transmitted in accordance with Art. 6 Paragraph 1 Letter b of GDPR. This data is used exclusively for the purpose of processing returns. Your data is only passed on to the extent that is actually necessary for the technical processing of returns. We have concluded a data processing agreement with 8returns UG: https://assets-global.website-files.com/5e43dac18b33c0c8ffcc0d76/5fac43ccae961e54027a5e40_Bestimmungen%20zur%20Auftragsdatenverarbeitung-2.pdf


6. Data processing when opening a customer account and for contract processing
If you open a customer account with us, personal data will be collected and processed in accordance with Art. 6 Paragraph 1 Letter b of GDPR. The scope of the data can be seen from the input form. The data you enter will be stored and used by us to process the contract.
You can delete your customer account at any time. This can be done by sending a message to the address of the person responsible or, if offered, directly in the customer account. In this case, we will also block your data with regard to tax and commercial retention periods and delete it after these periods have expired. This can only be contradicted by your consent to permanent storage or by a legally permitted further use of data on our part.

7. Comment function
If you use the comment function on our website, in addition to the content of your comment, information about the time the comment was created and the commentator name you chose will be saved and published on the website. Your IP address will also be logged and saved.
The legal basis for storing your data is Art. 6 (1) (b) and (f) GDPR. The IP address is stored for security reasons and in the event that the person concerned violates the rights of third parties or publishes illegal content through a comment. Your email address is required in order to contact you if a third party objects to the content you have published as being illegal. We reserve the right to delete comments if they are objected to as being illegal by third parties.

8. Use of your data for direct marketing purposes
8.1 Newsletter
On our website you have the option of subscribing to a free newsletter. When you register for the newsletter, the data from the input mask is sent to us. The only mandatory information is your email address. If you make further voluntary entries, these will only be used for personal communication.

The legal basis for processing your data after registering for the newsletter is Art. 6 Paragraph 1 Letter a of GDPR if the user has given their consent. We obtain this by sending you a confirmation email containing a confirmation link after registering for the newsletter. If you click on this link, you also consent to receive the newsletter.
When you submit your newsletter registration, we save your IP address as well as the date and time of registration. This storage serves to track any possible misuse of your email address.

We use the data we collect when you register for the newsletter exclusively for the purpose of sending the newsletter.

You can cancel your newsletter subscription at any time.For this purpose, there is a corresponding link in every newsletter. This also makes it possible to revoke consent to the storage of the personal data collected during the registration process.

8.2 Newsletter for existing customers
If you purchase goods or services on our website and provide your email address, we may subsequently use this to send you a newsletter. In such a case, the newsletter will only be used to send direct advertising for our own similar goods or services.

The legal basis for sending the newsletter as a result of the sale of goods or services is Section 7 Paragraph 3 of the German Act Against Unfair Competition (UWG) and Article 6 Paragraph 1 Letter f of GDPR. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising.

If you have already objected to the use of your email address for direct advertising purposes, you will not receive this newsletter. However, you also have the option of objecting to the use of your email address for the advertising purposes mentioned here at any time with effect for the future by notifying us. After receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

8.3 Advertising by post
If you have left your first and last name, your postal address and possibly other personal data as a result of an order with us, we reserve the right to save this data and to send you our offers by post in order to protect our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) (f) GDPR.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the person responsible.

8.4 Newsletter delivery via Klaviyo
We send our email newsletter via the technical service provider "Klaviyo" (Klaviyo Inc.; 225 Franklin St, Boston, MA02110, USA). We pass on the data you provide when registering for the newsletter to Klaviyo. Klaviyo uses this information to send the newsletter on our behalf. Klaviyo does not use the data itself or pass it on to third parties. This processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR with your consent.
We have a data processing agreement with Klaviyo in which Klaviyo undertakes to protect our users' data, to process it on our behalf in accordance with its data protection regulations and, in particular, not to pass it on to third parties. Klaviyo is also certified for the US-European data protection agreement "EU-USData Privacy Framework", which ensures compliance with the data protection level applicable in the EU. You can view Klaviyo's data protection regulations here: https://www.klaviyo.com/privacy

9. Contact for review reminder
Rating reminder by Loox
Based on your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR, we will transmit your email address to the Loox rating platform (Loox Online LTD, 7 Jabotinsky St; Ramat Gan 52520; Israel, EU representative Prighter GDPR-Rep von Maetzler Rechtsanwalts GmbH & Co KG, Schellinggasse 3/10 1010 Vienna Austria Website: https://prighter.com ID-19769498 (www.loox.app)). You will receive a review reminder from Loox via email.
You can revoke your consent at any time by sending a message to the person responsible for processing your data or to Loox.
For Israel, there is an adequacy decision by the EU Commission, which designates it as a safe third country within the meaning of the GDPR.

10thonline marketing
Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Our offers are advertised on external websites using advertising materials (so-called Google Adwords). Our legitimate interest lies in displaying advertising that is of interest to you and in achieving a fair calculation of advertising costs. The legal basis is Art. 6 Para. 1 lit.a GDPR, namely your express consent.

Google Ads uses cookies for conversion tracking, which are set when you click on an AdWords ad placed by Google.

These cookies typically expire after 30 days and are not used for personal identification. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across Ads customers' websites.

The information obtained in this way is used to create conversion statistics for Ads customers on the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag.

This does not allow you to be personally identified.

If you want to prevent tracking, you can deactivate the Google Conversion Tracking cookie via your Internet browser under user settings.

Google LLC, based in the USA, is certified for the US-European data protection agreement "EU-US Data Privacy Framework", which ensures compliance with the data protection level applicable in the EU. You can find further information about Google's data protection provisions at the following Internet address: http://www.google.de/policies/privacy/ You can permanently deactivate the conversion cookies by setting your browser accordingly or by downloading and installing the browser plug-in available under the following link: http://www.google.com/settings/ads/plugin?hl=de
In this case, certain functions of this website may not be available or may only be available to a limited extent.

11. Web analysis services
11.1 Google Analytics 4
We use Google Analytics 4 on our website, a web analysis service provided by Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) (hereinafter referred to as "GA4").

Google Analytics uses "cookies". These are small text files that are stored on your device and that enable an analysis of your use of the website. The information generated in this way about your use of the website (including the shortened IP address) is transmitted to a Google server and stored there and processed further. Transmission to the USA is possible. IP addresses are anonymized by default. For IPv4 addresses, the last octet and for IPv6 addresses the last 80 bits in the memory are set to zero and thus "anonymized". Personal reference is excluded. Transmission to servers of Google LLC based in the USA is not excluded.

During your visit to the website, GA4 records your user behavior in the form of "events", such as: page views, first visit to the website, start of the session, your "click path", interaction with the website, scrolls, clicks on external links, internal searches, interaction with videos, file downloads, ads viewed / clicked, language settings. In addition, GA4 records your approximate location (region), your IP address (in anonymized form), technical information about your browser and the devices you use (e.g.language setting, screen resolution), your Internet provider, the referrer URL (via which website/advertising medium you came to this website).

Google uses this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage. Your IP address (anonymized in this context) will not be merged with other data held by Google.

The data collected in this context will be stored for fourteen months.

The legal basis for the data processing described here and the setting of cookies is your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. This consent can be revoked at any time with effect for the future, for example by deactivating this Google service via the Cookie Consent Tool in which you have already given your consent.

Without your consent, Google Analytics 4 will not be used during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website.

Google LLC, based in the USA, is certified for the US-European data protection agreement "EU-US Data Privacy Framework", which guarantees compliance with the data protection level applicable in the EU.
We have also concluded a data processing agreement with Google.
Further information on data protection through Google Analytics 4 can be found on the following websites: https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy?hl=de&gl=de

demographic characteristics
GA4's "demographic characteristics" function can create statistics that can be used to make statements about the age, gender and interests of site visitors. For this purpose, advertising and information from third parties are analyzed and target groups for certain marketing activities are identified. However, no personal assignment of data takes place. The data is deleted after fourteen months.

UserIDs
If we use the extended function "UserIDs", your activities (including conversions) can be analyzed across devices. In this case, the analysis is not carried out pseudonymously.
This is possible provided that you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR, you have set up an account on this website and you log in with this account on various devices.

Google Signals
If we use the "Google Signals" extension, we can have cross-device reports on your usage behavior prepared. However, we only receive statistics and no personal data. This analysis is only possible if you have activated personalized ads in your Google account and linked your devices to a Google account. You must also have given your consent to use Google Analytics in accordance with Art. 6 (1) (a) GDPR. Cross-device analysis can be prevented by deactivating the "personalized advertising" function in your Google account. Further information on Google Signals can be found here: https://support.google.com/analytics/answer/7532985?hl=de

11.2 Hotjar (hotjar Ltd.)
We use the web analysis service Hotjar from Hotjar Ltd (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788) on this website.
This tool allows you to track movements on our websites (so-called heatmaps). It is, for example,how far you scroll and which buttons you click and how often. This gives us the information we need to make our websites faster and more customer-friendly. Our legitimate interest lies in designing our website in line with your interests and for marketing purposes. The legal basis is Art. 6 Para. 1 lit. a GDPR, namely your express consent.

Areas of the website in which personal data from you or third parties is displayed are automatically hidden by Hotjar and not analyzed. You can prevent the use of the Hotjar tool using a "Do Not Track header". This is a setting that all common browsers in their current versions support. If you use our website with different browsers, you must set up the "Do Not Track header" separately for each of these browsers/computers. You can find detailed instructions with information about your browser here: https://www.hotjar.com/opt-outWeitere Information about Hotjar Ltd. and the Hotjar tool can be found here: https://www.hotjar.com
The data transfer is based on the standard contractual clauses of the EU Commission. Details can be found here: https://help.hotjar.com/hc/de/articles/4424713971607-EU-Standardvertragsklauseln-SCCs-Rahmen
The privacy policy of Hotjar Ltd. can be found here: https://www.hotjar.com/privacy

11.3 Shopify Analytics
We use the web analysis service of Shopify (Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland).

To protect our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes, Shopify collects, evaluates and stores pseudonymized visitor data from which pseudonymized user profiles can be created and evaluated. Shopify uses cookies to recognize the browser and thus enable more precise determination of the statistical data. Your IP address is also collected, but pseudonymized immediately after collection and before storage, so that personal reference is excluded.

The legal basis is Art. 6 Para. 1 lit. a GDPR, namely your express consent.

Shopify does not associate your IP address with any other Shopify data.

In order to object to the collection of data and the creation of pseudonymized user profiles and the setting of cookies in the future, you can generally deactivate the use of cookies on your computer by setting your Internet browser so that no more cookies can be stored on your computer in the future or cookies that have already been stored are deleted. However, deactivating all cookies may mean that some functions on our website can no longer be fully used.

Shopify’s privacy policy can also be found at:
https://www.shopify.de/legal/datenschutz

12. Retargeting / Remarketing / Recommendation Advertising
12.1 Facebook Custom Audience via the pixel process

On this website we use the "Facebook Pixel" of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook"). If explicit consent is given, the behavior of users can be tracked after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help to optimize future advertising measures. The data collected is anonymous to us, so we cannot draw any conclusions about the identity of the users.However, data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/) can be used.

You can allow Facebook and its partners to place advertisements on and outside of Facebook. A cookie may be stored on your device for these purposes. These processing operations only take place if you give your express consent in accordance with Art. 6 Paragraph 1 Letter a of GDPR. Consent to the use of the Facebook pixel may only be given by users who are older than 13 years. If you are younger, we ask you to ask your legal guardians for permission. You can deactivate the use of cookies on your computer by setting your browser accordingly. However, this may mean that some functions on our website can no longer be fully used. You can also deactivate the use of cookies by third parties such as Facebook on the following Digital Advertising Alliance website: http://www.aboutads.info/choices/

Meta Platforms Inc. is certified for the US-European data protection agreement "EU-US Data Privacy Framework", which ensures compliance with the data protection level applicable in the EU. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum

12.2 Google AdWords Remarketing
Our website uses the functions of Google Ads (formerly "Google AdWords) Remarketing, with which we advertise this website in the Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter referred to as "Google"). For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit and usually expires after 30 days. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website and the exploitation of the financial potential of our website. The legal basis is Art. 6 Para. 1 lit. a GDPR, namely your express consent.

Any further data processing will only take place if you have agreed to Google allowing your Internet  and app browsing history is linked to your Google Account by Google and information from your Google Account is used to personalize ads that you view on the web. In this case, if you are logged in to Google when you visit our website, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google will temporarily link your personal data with Google Analytics data to create audiences.

You can permanently deactivate the setting of cookies for advertising preferences by downloading and installing the browser plug-in available under the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can register with the Digital Advertising Alliance at www.aboutads.info about the setting of cookies and make settings for this. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general. If you do not accept cookies, the functionality of our website may be restricted.

Google LLC, based in the USA, is subject to the US-European data protection agreement "EU-USData Privacy Framework", which ensures compliance with the data protection level applicable in the EU. You can find more information about Google's data protection policy at the following Internet address: http://www.google.de/policies/privacy/

12.3 Pinterest tag conversion tracking
On our website we use the conversion tracking technology “Pinterest Tag” from Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (hereinafter referred to as “Pinterest”).

If you come to our website via a pin on Pinterest, a cookie is placed on your computer that interacts with a built-in "tag" (JavaScript code) from Pinterest. These cookies are valid for 180 days. They are not used to identify you personally.

If a user is redirected from a pin on Pinterest to pages on this website and the cookie has not yet expired, the tag records certain user movements and can track them (e.g. search queries on the website, visits to product pages). This allows Pinterest to compile statistics about user behavior on our website after redirection from a Pinterest pin. We can use these to improve our offerings.
If personal user data is processed, this is done in accordance with Art. 6 Paragraph 1 Letter a of GDPR on the basis of your consent. You can revoke this consent at any time with effect for the future. To exercise your revocation, please follow the option to object described above. However, we ourselves do not receive any information that can be used to personally identify users. If you do not want to be tracked, you can also object to this by deactivating the Pinterest tag conversion tracking cookie in your internet browser under user settings. You will then not be included in the conversion tracking statistics. Pinterest's privacy policy: https://policy.pinterest.com/de/privacy-policy

12.4 Facebook Custom Audience via the pixel process
On this website we use “Facebook Conversion API” of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Facebook”).
If you give your explicit consent, your data on user behavior can be transmitted to Facebook for evaluation. This allows users to be shown advertisements based on their user behavior.

Data used are:
Email address, telephone number, gender, date of birth, first and last name, city, state and country, zip code, user IDs, IP addresses, client user agent (the browser you use and your operating system), click IDs, browser ID, product IDs, advertising ID, Facebook login ID

The data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Usage Policy (https://www.facebook.com/about/privacy/) can be used.

You can disable the use of cookies on your computer by selecting the appropriate browser settings. However, this may mean that some functions on our website can no longer be fully used. You can also disable the use of cookies by third parties such as Facebook on the following Digital Advertising Alliance website: http://www.aboutads.info/choices/

Meta Platforms Inc., based in the USA, is certified for the US-European data protection agreement "EU-US Data Privacy Framework", which guarantees compliance with the data protection level applicable in the EU.

13. Use of a live chat system
13th1 Zendesk (formerly Zopim)
On this website we use the live chat system of Zendesc Inc., 1019 Market St, San Francisco, USA (www.zendesk.com).
Anonymized data is collected and stored for the purposes of web analysis and to operate the live chat system to answer live support requests. User profiles can be created from this anonymized data under a pseudonym. Cookies can also be used for this purpose. These cookies enable the Internet browser to be recognized. If the information collected in this way is personal, the legal basis for processing is Art. 6 Para. 1 lit. f GDPR.

Our legitimate interest lies in effective customer service and the statistical analysis of user behavior for optimization purposes. The data will not be used to personally identify the visitor to this website without the consent of the person concerned. No data will be merged with personal data about the bearer of the pseudonym.

You can prevent cookies from being saved by setting your internet browser so that no more cookies can be saved on your computer in the future or by deleting cookies that have already been saved. However, this may mean that some functions on our website can no longer be carried out. You have the option of objecting to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future. Send us your objection informally by email to the email address stated at the beginning of the data protection declaration.

Zendesk Inc., based in the USA, is certified for the US-European data protection agreement "EU-US Data Privacy Framework", which ensures compliance with the data protection level applicable in the EU.
You can find more information about data protection at Zendesk here:
https://support.zendesk.com/hc/en-us/articles/4408881921306-Privacy-and-Data-Protection-How-Zendesk-Protects-Personal-Data-

13.2 Shopify Chat
On this website we use the live chat system of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Anonymized data is collected and stored for the purposes of web analysis and to operate the live chat system to answer live support requests. User profiles can be created from this anonymized data under a pseudonym. Cookies can also be used for this purpose. These cookies enable the Internet browser to be recognized. If the information collected in this way is personal, the legal basis for processing is Art. 6 Para. 1 lit. f GDPR.

Our legitimate interest lies in effective customer service and the statistical analysis of user behavior for optimization purposes. The data will not be used to personally identify the visitor to this website without the consent of the person concerned. No data will be merged with personal data about the bearer of the pseudonym.

You can prevent cookies from being saved by configuring your Internet browser so that no more cookies can be saved on your computer in the future or by deleting cookies that have already been saved. However, this may mean that some functions on our website can no longer be carried out.

You have the option of objecting to the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with effect for the future. Send us your objection informally by email to the email address stated at the beginning of the data protection declaration.
For more information about data processing at Shopify, please see the Shopify Privacy Policy: https://www.shopify.com/legal/privacy

14. Tools and Others
Google Tag Manager
We use Google Tag Manager (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website.
With the help of the Google Tag Manager, we can integrate tracking or statistics tools and other technologies on our website using tags. Tags are not sections of code that record certain activities on the website. The tags usually come from other Google programs, but can also be integrated by other companies. The tags can, for example, collect browser data, integrate buttons or set cookies.
However, the Google Tag Manager itself does not create user profiles, stores cookies or perform independent analyses, but only serves to manage and display the tools integrated through it.
Your IP address is recorded via the Google Tag Manager and may also be transferred to Google's parent company in the United States.

The legal basis for the use of Google Tag Manager is Art. 6 (1) lit. a GDPR, namely your consent.
Google LLC, based in the USA, is certified for the US-European data protection agreement "EU-US Data Privacy Framework", which ensures compliance with the data protection level applicable in the EU. You can find further information about Google's data protection provisions at the following Internet address: http://www.google.de/policies/privacy/


15. Rights of the data subject
15.1 The applicable data protection law grants you comprehensive rights as a data subject (rights to information and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we will inform you below:

- Right to information according to Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller. In addition, you have the right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of other rights such as rectification of the data or the existence of a right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees in accordance with Art. 46 GDPR when your data is transferred to third countries;

- Right to rectification according to Art. 16 GDPR:
You have the right to have any incorrect data concerning you rectified immediately and/or any incomplete data stored by us completed; the rectification or completion must be carried out immediately.

- Right to restriction of processing in accordance with Art.18 GDPR:
You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you contest, is being verified, if you refuse to delete your data due to unlawful data processing and instead request the restriction of the processing of your data, if you need your data to assert, exercise or defend legal claims after we no longer need this data after the purpose has been achieved, or if you have lodged an objection for reasons related to your particular situation, as long as it has not yet been determined whether our legitimate reasons outweigh yours;
If the processing of personal data concerning you has been restricted, these data may - with the exception of storage - only be processed with your consent or for the establishment, exercise or defence of legal claims or to protect the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State. If the processing has been restricted, you will be informed by the controller before the restriction is lifted.

- Right to erasure according to Art. 17 GDPR:
You have the right to have your personal data deleted immediately if the requirements of Art. 17 Para. 1 GDPR are met. However, this right to deletion does not exist in particular - but not exclusively - if the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims.

- Right to information according to Art. 19 GDPR:
If you have exercised your right to rectification, erasure or restriction of processing, the controller is obliged to inform all recipients to whom your personal data was disclosed of said rectification, erasure or restriction of processing, unless doing so is impossible or involves disproportionate expenditure. You also have the right to be informed about these recipients.

- Right to data portability according to Art. 20 GDPR:
You have the right to receive your personal data communicated to us in a structured, common and machine-readable format or to request that it be transmitted to another controller, where technically possible;

- Right of revocation according to Art. 7 Para. 3 GDPR:
You have the right to object at any time to the processing of personal data concerning you which is carried out on the basis of Art. 6 (1) (e) or (f) GDPR; this also applies to profiling based on these provisions.
You also have the right to revoke your declaration of consent under data protection law at any time with effect for the future. The revocation of the consent does not affect the legality of the processing carried out on the basis of the consent until the revocation.

- Right to complain according to Art. 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or place of the alleged infringement if you consider that the processing of personal data concerning you infringes the GDPR.

15th2 Right of objection
You have the right to object to the processing of your data at any time with effect for the future if we process your data based on our overriding legitimate interest after weighing up the interests.
If you exercise this right of objection, we will stop processing your data unless there are demonstrably compelling legitimate reasons that prevent termination or if further processing serves to exercise or defend legal claims.

16. Duration of storage of personal data
The length of time personal data is stored depends on statutory retention periods. After these periods have expired, we routinely delete the data if it is no longer required to fulfil or initiate a contract and/or if we no longer have a legitimate interest in continuing to store it.