Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This applies only insofar as no other information is given in respect of the processing operations described below.
“Personal data” means any information relating to an identified or identifiable natural person.
Controller
Please contact us if you wish. The controller responsible for data processing is: Pirscher Shop GmbH, represented by its managing director Manuel Schramm, Lange Gwand 1, 86682 Genderkingen Germany, Tel. 082714246750, Email: service@pirschershop.de, Register court: Augsburg Local Court (Amtsgericht Augsburg), HRB 32849
Customer-initiated contact by email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request.
If the contact serves the implementation of pre-contractual measures (e.g. advice in the event of interest in a purchase, preparation of a quotation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data will subsequently be erased in compliance with statutory retention periods, unless you have consented to further processing and use.
Use of Zendesk
To handle customer enquiries by email, contact form, chat or telephone, we use the customer service system Zendesk of Zendesk, Inc. (989 Market Street, San Francisco, CA 94103, USA; “Zendesk”), which acts as our processor (on our behalf).
In this context, the data transmitted by you (e.g. name, email address, telephone number, order number, content of your enquiry and attached files) are stored and processed in Zendesk. The purpose of the data processing is to handle your enquiries in a structured, fast and traceable manner.
The processing is carried out on the basis of Art. 6(1)(b) GDPR insofar as your enquiry concerns a contract or pre-contractual measures, and otherwise on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling customer enquiries efficiently. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Zendesk has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Further information on data protection at Zendesk can be found at https://www.zendesk.de/company/agreements-and-terms/privacy-notice/.
Customer account Orders
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of the data processing is to improve your shopping experience and to simplify order processing. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.
Data collection when writing a comment or review
When you comment on or review a product or a post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The purpose of the processing is to enable comments/reviews to be posted and to display comments/reviews.
By submitting the comment/review, you consent to the processing of the data transmitted. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your personal data will then be erased.
When your comment/review is published, only the name you have provided is published.
We use your personal data (name, postal address), which we have received in connection with the sale of goods or services, to send you advertising by post, unless you have objected to this use. The provision of these data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded.
The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in direct marketing. You can object to this use of your address data at any time by notifying us. The contact details for exercising your right to object can be found in our legal notice (Impressum).
Use of your email address for sending newsletters
We use your email address to send you information and offers by newsletter, provided that you have expressly consented to this. The data processing serves exclusively the purpose of promotional communication. For this purpose, we process your email address and, where applicable, other data that you have voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To do so, you can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in future. This storage is carried out on the basis of Art. 6(1)(f) GDPR, based on our and your legitimate interest in preventing your email address from being used again to send our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
Use of your email address for sending direct marketing
We use your email address, which we have received in connection with the sale of goods or services, for sending electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in direct marketing. You can object to this use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in our legal notice (Impressum). You can also use the link provided for this purpose in the advertising email. This does not incur any costs other than the transmission costs according to the basic rates.
Use of CleverReach
For sending newsletters, we use the service of CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede; “CleverReach”), which acts as our processor (on our behalf).
We pass on the information you provide when subscribing to the newsletter (email address and, where applicable, first and last name) to CleverReach. The purpose of the data processing is to send the newsletter and to evaluate it statistically.
In order to evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked on any links it contains. Conversion tracking enables us to analyse, for example, whether a purchase was made after clicking on a link in the newsletter or whether you registered on our website. In this context, we collect your personal data such as IP address, browser type and device, and the time. Usage profiles may be created from these data under a pseudonym. The data collected are not used to identify you personally. The data collected are used solely for statistical evaluation in order to improve newsletter campaigns.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to these processing operations involving personal data concerning you.
Further information and the privacy policy of Cleverreach can be found at: https://www.cleverreach.com/de-de/datenschutz/ and https://www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/.
Use of Klaviyo
For sending newsletters, we use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”), which acts as our processor (on our behalf).
We pass on the information you provide when subscribing to the newsletter (email address and, where applicable, first and last name) to Klaviyo. The purpose of the data processing is to send the newsletter and to evaluate it statistically.
In order to evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked on any links it contains. In this context, we collect your personal data such as IP address, browser type and device, and the time. Usage profiles may be created from these data under a pseudonym. The data collected are not used to identify you personally. The data collected are used solely for statistical evaluation in order to improve newsletter campaigns.
If you have subscribed to our newsletter, we additionally transmit information about your orders (e.g. items purchased, time of order and order value) to Klaviyo in order to send you content and offers tailored to your interests (personalised newsletter). Your data are generally transferred to Klaviyo servers in the USA and stored there. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to these processing operations involving personal data concerning you.
Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.
Disclosure of your email address to shipping companies for information about the shipping status
As part of the performance of the contract, we pass on your email address to the transport company, provided that you have expressly consented to this during the ordering process. The purpose of the disclosure is to inform you of the shipping status by email. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing based on consent before its withdrawal.
Use of an external merchandise management system
For the performance of contracts, we use a merchandise management system (ERP) provided by a processor acting on our behalf. For this purpose, the personal data collected in connection with your order are transmitted to
SoftENGINE GmbH, Alte Bundesstraße 16, 76846 Hauenstein
.
The processing of your personal data serves the purpose of performing the contract concluded with you and is carried out on the basis of Art. 6(1)(b) GDPR.
Processing of returns via Returnless
For registering and processing returns, we use the returns portal of Senddirect B.V. (Stadhuisplein 10, 5611 EM Eindhoven, the Netherlands; trading as “Returnless”), which acts as our processor (on our behalf).
When you register a return, we process your order number, your name, your email address and postal address, the items returned, the reason for the return and, where applicable, any photos and comments uploaded by you. The purpose of the data processing is to process your return, to create the shipping label and to carry out the refund or exchange. The processing is carried out on the basis of Art. 6(1)(b) GDPR.
In addition, we evaluate reasons for returns in aggregated form in order to improve our product range and our product information. This is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in improving our services. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
Further information on data protection at Returnless can be found at https://docs.returnless.com/docs/legal-privacy-security/hf9jbsyksvg1b-privacy-statement.
Use of AI service providers for internal data processing
To support internal workflows, we use AI-supported software of Anthropic Ireland, Limited (6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland; “Anthropic”), which acts as our processor (on our behalf). We use the software in particular to assist with handling customer enquiries and returns, to create texts and to evaluate order and returns data.
The following data may be processed in this context: order and contract data (e.g. order number, items, order value), customer number, postcode and country, content of customer enquiries and reasons for returns. For evaluations, we use the data in pseudonymised form wherever possible, i.e. without name, email address and postal address. Payment data and special categories of personal data are not processed. Under the terms agreed with us, Anthropic does not use your data to train AI models. No automated decision-making within the meaning of Art. 22 GDPR takes place; decisions are always made by an employee.
The processing is carried out on the basis of Art. 6(1)(b) GDPR insofar as it serves the performance of your contract or the handling of your enquiry, and otherwise on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in efficient workflows and in improving our services. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
In the course of the processing, your data may be transferred to Anthropic, PBC and to sub-processors in the USA. The transfer is carried out on the basis of standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR), which form part of our data processing agreement with Anthropic.
Further information on data protection at Anthropic can be found at https://www.anthropic.com/legal/privacy and at https://trust.anthropic.com.
Payment service providers Credit report
Use of PayPal
On our website, we use the payment service PayPal of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of the data processing is to enable us to offer you payment via this payment service. If you select and use payment via PayPal, the data required for processing the payment are transmitted to PayPal in order to be able to perform the contract with you using the payment method selected. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
On our website, we use the payment service PayPal Express of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of the data processing is to enable us to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
If you select and use PayPal Express, the data required for processing the payment are transmitted to PayPal in order to be able to perform the contract with you using the payment method selected. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Data collection and processing for credit checks
If we make advance performance, e.g. in the case of payment on account or by direct debit, we reserve the right, where applicable, to use telego! GmbH creditPass, Mehlbeerenstr. 4, 82024 Taufkirchen, to obtain a credit report on the basis of mathematical-statistical procedures. For this purpose, we transmit the personal data required for a credit check to that company and use the information obtained on the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes, among other things, address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The purpose of the data processing is to carry out a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in protection against payment default where we make advance performance. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR, by notifying us. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.
Cookies
Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
On our website, we use the consent management tool Consentmanager of Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; “Consentmanager”).
The tool enables you to give consent to data processing via the website, in particular to the setting of cookies, and to exercise your right to withdraw consent already given.
The purpose of the data processing is to obtain and document the necessary consent to data processing and thereby to comply with legal obligations.
Cookies may be used for this purpose. In this context, the following information, among other things, may be collected and transmitted to Consentmanager: date and time of the page view, information about the browser you use and the device you use, anonymised IP address, opt-in and opt-out data. These data are not disclosed to any other third parties.
The data processing is carried out to comply with a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on data protection at Consentmanager can be found at: https://www.consentmanager.net/de/datenschutz/
Analytics Ad tracking Affiliate AI tools
Use of Google Analytics 4
On our website, we use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The purpose of the data processing is the analysis of this website and its visitors, as well as marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website use and internet use.
In this context, the following information, among other things, may be collected: IP address, date and time of the page view, click path, information about the browser you use and the device you use, pages visited, referrer URL (website via which you accessed our website), location data, purchasing activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google holds about you.
The IP address is truncated beforehand by Google within Member States of the European Union or in other States party to the Agreement on the European Economic Area.
Google uses technologies such as cookies, browser web storage and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.
The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
We use the advanced implementation of consent mode (Advanced Consent Mode). In this case, user data are transmitted to Google in the form of “pings” even if consent has not been given. These pings may contain, among other things, the following information: IP address for deriving the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website via which our website was accessed) or information about the triggering of website events such as a conversion. On the basis of this information, Google models usage data in order to be able to carry out a comprehensive usage analysis despite consent having been refused.
The information generated in this way about your use of this website is generally transferred to a Google server in the USA and stored there. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles. Both Google and US government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites, at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of Hotjar
On our website, we use the analytics tool of Hotjar Ltd. (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”).
The purpose of the data processing is the needs-based design, optimisation and analysis of our website.
The tool records the movements of visitors on the website on a random-sample basis. This produces a log of mouse movements, scrolling behaviour, time spent and clicks on the website (known as a heatmap).
For this purpose, Hotjar uses cookies, among other things. In this context, the following information, among other things, may be collected: IP address (in anonymised form), information about the device you use (screen size, devices, unique device identifier), information about the browser you use, location data (country only), preferred language for displaying the website, operating system used. Detailed information on the cookies used, their function and their storage period can be found here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies.
User profiles are created from these data under a pseudonym. The data are not used to identify the visitor to the website personally and are not merged with personal data about the bearer of the pseudonym. Hotjar is contractually prohibited from selling the data collected to any other third parties.
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Hotjar is not certified under the TADPF. The data transfer is carried out, among other things, on the basis of appropriate safeguards. Hotjar will provide you with further information on the measures taken upon request.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data protection when using Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy#enduserenglish.
Use of shopware Analytics
On our website, we use the analytics tool “shopware Analytics” of shopware AG (Ebbinghoff 10, 48624 Schöppingen; “shopware”).
Shopware and we are joint controllers for the collection of your data that takes place when the service is used and for the transmission of these data to shopware. This is based on an agreement between us and shopware on the joint processing of personal data, in which the respective responsibilities are defined. According to this agreement, shopware is responsible for all obligations, with the exception of obtaining your consent to the use of cookies or similar technologies and fulfilling these information obligations. This applies in particular to granting the data subject rights pursuant to Art. 15–21 GDPR. You can also assert your data subject rights against us; we will then forward your request to shopware accordingly.
The purpose of the data processing is the analysis of this website and its visitors. For this purpose, data are stored for marketing and optimisation purposes and made available in reports, analyses and statistics. In this context, the following information, among other things, may be collected and processed: the customer group, pages visited, click paths, date and time of the visit, information about the end device used (resolution, resolution density, operating system), referrer URL, information about the browser used, locale, search queries and the time zone.
Cookies or similar technologies are used for this purpose.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on shopware Analytics can be found at https://docs.shopware.com/de/shopware-6-de/erweiterungen/shopware-analytics.
On our website, we use Microsoft Advertising of Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”).
The data processing serves marketing and advertising purposes and the purpose of measuring the success of advertising measures (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page bearing a conversion tracking tag. However, this does not make it possible to identify these users personally. Microsoft Advertising uses technologies such as cookies and tracking pixels that enable an analysis of your use of the website. When you click on an ad placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validity and does not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognise that you clicked on the ad and were redirected to this page. In this context, the following information, among other things, may be collected: IP address, identifiers assigned by Microsoft, information about the browser you use and the device you use, referrer URL (website via which you accessed our website), URL of our website.
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data protection and the cookies used at Microsoft can be found here.
Use of Criteo
On our website, we use the technology of the provider Criteo SA (32 Rue Blanche, 75009 Paris, France; “Criteo”).
The purpose of the application is to address visitors to the website in a targeted manner with interest-based advertising in the form of personalised advertising banners on other websites (known as publishers). For this purpose, Criteo uses technologies such as cookies that enable your browser to be recognised.
In this context, the following information, among other things, may be collected and transmitted to Criteo: referrer URL, pages of our website visited, date and time of the visit, advertising ID of your smartphone, information about the browser and device you use, shopping basket contents. Usage profiles may be created from the data collected in this way using pseudonyms. However, this does not make it possible to identify users personally.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data processing and data protection can be found at https://www.criteo.com/de/privacy and https://www.criteo.com/de/privacy/how-we-use-your-data/.
Use of the ADCELL affiliate programme
We use the affiliate programme “ADCELL” of Firstlead GmbH (Rosenfelder Str. 15-16, 10315 Berlin; “ADCELL”).
ADCELL and we are joint controllers for the collection of your data that takes place when the service is integrated and for the transmission of these data to ADCELL. This is based on an agreement between us and ADCELL on the joint processing of personal data. The agreement can be accessed at https://www.adcell.de/datenverarbeitung. According to this agreement, we and ADCELL are equally responsible for fulfilling the obligations under the GDPR, in particular for fulfilling the information obligations pursuant to Art. 13 and 14 GDPR and for granting the data subject rights pursuant to Art. 15–21 GDPR.
When you click on an ad bearing an affiliate link, ADCELL stores a cookie for conversion tracking on your computer. The cookies serve the purpose of correct billing within the affiliate programme by recording the success of an advertising medium. The cookies make it possible to recognise that you clicked on the ad, and the origin of the order can be traced by the advertiser. In addition, ADCELL uses so-called tracking pixels. These make it possible to evaluate information such as visitor traffic on the pages.
The information generated by cookies and tracking pixels about the use of this website (including the IP address) and the delivery of advertising formats is transferred to an ADCELL server and stored there. Among other things, ADCELL can recognise that the affiliate link on this website was clicked. ADCELL may, under certain circumstances, pass this (anonymised) information on to contractual partners; however, data such as the IP address are not merged with other stored data.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Plug-ins and miscellaneous
We use Stape.io for server-side tagging. The provider is Stape Europe OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia. Through Stape.io, we operate a server-side tag manager that allows us to manage analytics, marketing and conversion tags from a technical perspective.
For this purpose, certain usage and event data are first transmitted to a server container used by us and then forwarded from there to connected analytics and marketing services in accordance with our settings. This enables us to exercise greater control over which data are transmitted to which services.
The data processed may include, in particular, IP addresses, user agents, referrer URLs, pages visited, timestamps, cookie and device identifiers, browser and device information, and event data such as page views, product views, shopping cart actions or purchases. Depending on the service integrated, order information, product data or hashed contact details may also be processed.
Depending on your consent and our technical configuration, recipients of data processed through the server container may include, in particular, Google Analytics 4, Google Ads, Meta Pixel, Meta Conversions API, Microsoft Advertising, Klaviyo and other analytics and marketing services mentioned in this Privacy Policy.
Where server-side tagging is used for analytics, marketing or conversion purposes, processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw or change your consent at any time using our consent management tool.
Where Stape.io processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. Where personal data are transferred to third countries, such transfers are based on appropriate safeguards, in particular adequacy decisions of the European Commission or standard contractual clauses.
Use of Cloudflare
On our website, we use the content delivery network Cloudflare CDN of Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”). This is a supra-regional network of servers in various data centres to which our web server connects and via which certain content of our website is delivered.
The purpose of the data processing is to optimise the loading times of our website and thereby make our services more user-friendly.
In this context, the following information, among other things, may be collected: IP address, system configuration information, information about traffic to and from customer websites (known as server log files).
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object at any time, on grounds relating to your particular situation, to these processing operations involving personal data concerning you which are based on Art. 6(1)(f) GDPR.
Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/.
Use of YouTube
On our website, we use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”).YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos stored on YouTube in an iFrame on the website. The “privacy-enhanced mode” option is enabled. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about this transmitted to YouTube and stored there. Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on the collection and use of data by YouTube and Google, on your rights in this regard and on options for protecting your privacy can be found in YouTube's privacy notice at https://www.youtube.com/t/privacy.
Data subject rights and storage period
Storage period
After complete performance of the contract, the data are initially stored for the duration of the warranty period, then in compliance with statutory retention periods, in particular those under tax and commercial law, and are erased once these periods have expired, unless you have consented to further processing and use.
Rights of the data subject
Where the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, to rectification, to erasure, to restriction of processing and to data portability.
In addition, under Art. 21(1) GDPR you have a right to object to processing based on Art. 6(1)(f) GDPR and to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.
You can lodge a complaint with, among others, the supervisory authority responsible for us, which can be contacted using the following details:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de
Right to object
Where the processing of personal data described here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time, on grounds relating to your particular situation, with effect for the future.
Once you have objected, the processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If personal data are processed for direct marketing purposes, you can object to this processing at any time by notifying us. Once you have objected, we will stop processing the data concerned for direct marketing purposes.
Last updated: 14 October 2026
Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data has no consequences. This applies only insofar as no other information is given in respect of the processing operations described below.
“Personal data” means any information relating to an identified or identifiable natural person.
Server log files
You can visit our website without providing any information about yourself.
Each time our website is accessed, usage data are transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (known as server log files). These stored data include, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.
ContactThe processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.
Controller
Please contact us if you wish. The controller responsible for data processing is: Pirscher Shop GmbH, represented by its managing director Manuel Schramm, Lange Gwand 1, 86682 Genderkingen Germany, Tel. 082714246750, Email: service@pirschershop.de, Register court: Augsburg Local Court (Amtsgericht Augsburg), HRB 32849
Customer-initiated contact by email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request.
If the contact serves the implementation of pre-contractual measures (e.g. advice in the event of interest in a purchase, preparation of a quotation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data will subsequently be erased in compliance with statutory retention periods, unless you have consented to further processing and use.
Use of Zendesk
To handle customer enquiries by email, contact form, chat or telephone, we use the customer service system Zendesk of Zendesk, Inc. (989 Market Street, San Francisco, CA 94103, USA; “Zendesk”), which acts as our processor (on our behalf).
In this context, the data transmitted by you (e.g. name, email address, telephone number, order number, content of your enquiry and attached files) are stored and processed in Zendesk. The purpose of the data processing is to handle your enquiries in a structured, fast and traceable manner.
The processing is carried out on the basis of Art. 6(1)(b) GDPR insofar as your enquiry concerns a contract or pre-contractual measures, and otherwise on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling customer enquiries efficiently. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Zendesk has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Further information on data protection at Zendesk can be found at https://www.zendesk.de/company/agreements-and-terms/privacy-notice/.
Customer account Orders
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The purpose of the data processing is to improve your shopping experience and to simplify order processing. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.
Collection, processing and disclosure of personal data in connection with orders
When you place an order, we collect and process your personal data only insofar as this is necessary for the performance and handling of your order and for processing your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
In this context, your data are disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of the data transfer is limited to a minimum.
Reviews Advertising Data collection when writing a comment or review
When you comment on or review a product or a post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The purpose of the processing is to enable comments/reviews to be posted and to display comments/reviews.
By submitting the comment/review, you consent to the processing of the data transmitted. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your personal data will then be erased.
When your comment/review is published, only the name you have provided is published.
Review reminder
After your order, we would like to ask you to review your purchase from us.
For this purpose, we use your personal data (name, email address, order information) independently of the performance of the contract in order to send you a review reminder by email after you have placed an order, provided that you have expressly consented to this.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal.
Use of your personal data for sending advertising by postAfter your order, we would like to ask you to review your purchase from us.
For this purpose, we use your personal data (name, email address, order information) independently of the performance of the contract in order to send you a review reminder by email after you have placed an order, provided that you have expressly consented to this.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal.
We use your personal data (name, postal address), which we have received in connection with the sale of goods or services, to send you advertising by post, unless you have objected to this use. The provision of these data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded.
The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in direct marketing. You can object to this use of your address data at any time by notifying us. The contact details for exercising your right to object can be found in our legal notice (Impressum).
Use of your email address for sending newsletters
We use your email address to send you information and offers by newsletter, provided that you have expressly consented to this. The data processing serves exclusively the purpose of promotional communication. For this purpose, we process your email address and, where applicable, other data that you have voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
To do so, you can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in future. This storage is carried out on the basis of Art. 6(1)(f) GDPR, based on our and your legitimate interest in preventing your email address from being used again to send our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
Use of your email address for sending direct marketing
We use your email address, which we have received in connection with the sale of goods or services, for sending electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in direct marketing. You can object to this use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in our legal notice (Impressum). You can also use the link provided for this purpose in the advertising email. This does not incur any costs other than the transmission costs according to the basic rates.
Use of CleverReach
For sending newsletters, we use the service of CleverReach GmbH & Co. KG (Schafjückenweg 2, 26180 Rastede; “CleverReach”), which acts as our processor (on our behalf).
We pass on the information you provide when subscribing to the newsletter (email address and, where applicable, first and last name) to CleverReach. The purpose of the data processing is to send the newsletter and to evaluate it statistically.
In order to evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked on any links it contains. Conversion tracking enables us to analyse, for example, whether a purchase was made after clicking on a link in the newsletter or whether you registered on our website. In this context, we collect your personal data such as IP address, browser type and device, and the time. Usage profiles may be created from these data under a pseudonym. The data collected are not used to identify you personally. The data collected are used solely for statistical evaluation in order to improve newsletter campaigns.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to these processing operations involving personal data concerning you.
Further information and the privacy policy of Cleverreach can be found at: https://www.cleverreach.com/de-de/datenschutz/ and https://www.cleverreach.com/de-de/newsletter-tool/newsletter-reporting/.
Use of Klaviyo
For sending newsletters, we use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”), which acts as our processor (on our behalf).
We pass on the information you provide when subscribing to the newsletter (email address and, where applicable, first and last name) to Klaviyo. The purpose of the data processing is to send the newsletter and to evaluate it statistically.
In order to evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked on any links it contains. In this context, we collect your personal data such as IP address, browser type and device, and the time. Usage profiles may be created from these data under a pseudonym. The data collected are not used to identify you personally. The data collected are used solely for statistical evaluation in order to improve newsletter campaigns.
If you have subscribed to our newsletter, we additionally transmit information about your orders (e.g. items purchased, time of order and order value) to Klaviyo in order to send you content and offers tailored to your interests (personalised newsletter). Your data are generally transferred to Klaviyo servers in the USA and stored there. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right to object at any time, on grounds relating to your particular situation, to these processing operations involving personal data concerning you.
Further information on data protection at Klaviyo can be found at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement.
Use of your email address for availability notifications
We offer a stock availability notification service on our website. If an item is temporarily unavailable, you have the option of entering your email address on the relevant item and being informed by us by email when it becomes available, provided that you have consented to this. When the item becomes available, you will receive a one-time email notification of the availability of the relevant item. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.
Shipping service providers Merchandise management We offer a stock availability notification service on our website. If an item is temporarily unavailable, you have the option of entering your email address on the relevant item and being informed by us by email when it becomes available, provided that you have consented to this. When the item becomes available, you will receive a one-time email notification of the availability of the relevant item. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.
Disclosure of your email address to shipping companies for information about the shipping status
As part of the performance of the contract, we pass on your email address to the transport company, provided that you have expressly consented to this during the ordering process. The purpose of the disclosure is to inform you of the shipping status by email. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing based on consent before its withdrawal.
Use of an external merchandise management system
For the performance of contracts, we use a merchandise management system (ERP) provided by a processor acting on our behalf. For this purpose, the personal data collected in connection with your order are transmitted to
SoftENGINE GmbH, Alte Bundesstraße 16, 76846 Hauenstein
.
The processing of your personal data serves the purpose of performing the contract concluded with you and is carried out on the basis of Art. 6(1)(b) GDPR.
Processing of returns via Returnless
For registering and processing returns, we use the returns portal of Senddirect B.V. (Stadhuisplein 10, 5611 EM Eindhoven, the Netherlands; trading as “Returnless”), which acts as our processor (on our behalf).
When you register a return, we process your order number, your name, your email address and postal address, the items returned, the reason for the return and, where applicable, any photos and comments uploaded by you. The purpose of the data processing is to process your return, to create the shipping label and to carry out the refund or exchange. The processing is carried out on the basis of Art. 6(1)(b) GDPR.
In addition, we evaluate reasons for returns in aggregated form in order to improve our product range and our product information. This is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in improving our services. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
Further information on data protection at Returnless can be found at https://docs.returnless.com/docs/legal-privacy-security/hf9jbsyksvg1b-privacy-statement.
Use of AI service providers for internal data processing
To support internal workflows, we use AI-supported software of Anthropic Ireland, Limited (6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland; “Anthropic”), which acts as our processor (on our behalf). We use the software in particular to assist with handling customer enquiries and returns, to create texts and to evaluate order and returns data.
The following data may be processed in this context: order and contract data (e.g. order number, items, order value), customer number, postcode and country, content of customer enquiries and reasons for returns. For evaluations, we use the data in pseudonymised form wherever possible, i.e. without name, email address and postal address. Payment data and special categories of personal data are not processed. Under the terms agreed with us, Anthropic does not use your data to train AI models. No automated decision-making within the meaning of Art. 22 GDPR takes place; decisions are always made by an employee.
The processing is carried out on the basis of Art. 6(1)(b) GDPR insofar as it serves the performance of your contract or the handling of your enquiry, and otherwise on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in efficient workflows and in improving our services. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR.
In the course of the processing, your data may be transferred to Anthropic, PBC and to sub-processors in the USA. The transfer is carried out on the basis of standard contractual clauses of the European Commission (Art. 46(2)(c) GDPR), which form part of our data processing agreement with Anthropic.
Further information on data protection at Anthropic can be found at https://www.anthropic.com/legal/privacy and at https://trust.anthropic.com.
Payment service providers Credit report
Use of PayPal
On our website, we use the payment service PayPal of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of the data processing is to enable us to offer you payment via this payment service. If you select and use payment via PayPal, the data required for processing the payment are transmitted to PayPal in order to be able to perform the contract with you using the payment method selected. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
On our website, we use the payment service PayPal Express of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). The purpose of the data processing is to enable us to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in offering a customer-oriented range of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
If you select and use PayPal Express, the data required for processing the payment are transmitted to PayPal in order to be able to perform the contract with you using the payment method selected. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Data collection and processing for credit checks
If we make advance performance, e.g. in the case of payment on account or by direct debit, we reserve the right, where applicable, to use telego! GmbH creditPass, Mehlbeerenstr. 4, 82024 Taufkirchen, to obtain a credit report on the basis of mathematical-statistical procedures. For this purpose, we transmit the personal data required for a credit check to that company and use the information obtained on the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes, among other things, address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The purpose of the data processing is to carry out a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in protection against payment default where we make advance performance. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR, by notifying us. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.
Data collection and processing for the payment methods instalment purchase, SEPA direct debit and invoice via Ratepay
When paying via the payment methods “Ratepay Invoice” and/or “Ratepay Direct Debit” and/or “Ratepay Instalments”, the personal data you provide during the ordering process (first and last name, postal address, date of birth, email address, telephone number and, in the case of SEPA direct debit, the bank details provided) are collected and passed on to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”). The purpose of the data transfer is to enable Ratepay to carry out a risk analysis in order to process your purchase with the payment method you have requested.
The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on the overriding legitimate interest in determining whether you will be able to meet your payment obligations and in ruling out any fraudulent intent, through the use of your data, to commit criminal offences.
As part of the risk analysis, Ratepay reserves the right, where applicable, to obtain a credit report on the basis of mathematical-statistical procedures using credit agencies. For this purpose, Ratepay transmits the personal data required for a credit check to a credit agency and uses the information obtained on the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. An overview of the credit agencies used by Ratepay can be found at: https://www.ratepay.com/legal-payment-creditagencies/. The credit report may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical procedures and whose calculation includes, among other things, address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The purpose of the data processing is to carry out a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in protection against payment default where Ratepay makes advance performance.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you which is based on Art. 6(1)(f) GDPR, by notifying us or Ratepay. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.
Further information on the payment methods and on data processing when using the payment service can be found in the associated privacy policy at https://www.ratepay.com/legal-payment-terms/ and https://www.ratepay.com/legal-payment-dataprivacy/.
Cookies
Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, and you can prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website to their full extent.
The links below provide information on how to manage cookies (including how to disable them) in the most common browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically necessary cookies
Unless otherwise stated below in this Privacy Policy, we use only these technically necessary cookies for the purpose of making our services more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a change of page and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a change of page.
The use of cookies or similar technologies is carried out on the basis of Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
Use of ConsentmanagerOn our website, we use the consent management tool Consentmanager of Consentmanager AB (Håltegelvägen 1b, 72348 Västerås, Sweden; “Consentmanager”).
The tool enables you to give consent to data processing via the website, in particular to the setting of cookies, and to exercise your right to withdraw consent already given.
The purpose of the data processing is to obtain and document the necessary consent to data processing and thereby to comply with legal obligations.
Cookies may be used for this purpose. In this context, the following information, among other things, may be collected and transmitted to Consentmanager: date and time of the page view, information about the browser you use and the device you use, anonymised IP address, opt-in and opt-out data. These data are not disclosed to any other third parties.
The data processing is carried out to comply with a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on data protection at Consentmanager can be found at: https://www.consentmanager.net/de/datenschutz/
Analytics Ad tracking Affiliate AI tools
Use of Google Analytics 4
On our website, we use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The purpose of the data processing is the analysis of this website and its visitors, as well as marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website use and internet use.
In this context, the following information, among other things, may be collected: IP address, date and time of the page view, click path, information about the browser you use and the device you use, pages visited, referrer URL (website via which you accessed our website), location data, purchasing activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google holds about you.
The IP address is truncated beforehand by Google within Member States of the European Union or in other States party to the Agreement on the European Economic Area.
Google uses technologies such as cookies, browser web storage and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.
The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
We use the advanced implementation of consent mode (Advanced Consent Mode). In this case, user data are transmitted to Google in the form of “pings” even if consent has not been given. These pings may contain, among other things, the following information: IP address for deriving the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website via which our website was accessed) or information about the triggering of website events such as a conversion. On the basis of this information, Google models usage data in order to be able to carry out a comprehensive usage analysis despite consent having been refused.
The information generated in this way about your use of this website is generally transferred to a Google server in the USA and stored there. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles. Both Google and US government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites, at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of Hotjar
On our website, we use the analytics tool of Hotjar Ltd. (Level 2, St Julian’s Business Centre, 3, Elia Zammit Street, St Julians STJ1000, Malta; “Hotjar”).
The purpose of the data processing is the needs-based design, optimisation and analysis of our website.
The tool records the movements of visitors on the website on a random-sample basis. This produces a log of mouse movements, scrolling behaviour, time spent and clicks on the website (known as a heatmap).
For this purpose, Hotjar uses cookies, among other things. In this context, the following information, among other things, may be collected: IP address (in anonymised form), information about the device you use (screen size, devices, unique device identifier), information about the browser you use, location data (country only), preferred language for displaying the website, operating system used. Detailed information on the cookies used, their function and their storage period can be found here: https://help.hotjar.com/hc/en-us/articles/115011789248-Hotjar-Cookies.
User profiles are created from these data under a pseudonym. The data are not used to identify the visitor to the website personally and are not merged with personal data about the bearer of the pseudonym. Hotjar is contractually prohibited from selling the data collected to any other third parties.
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Hotjar is not certified under the TADPF. The data transfer is carried out, among other things, on the basis of appropriate safeguards. Hotjar will provide you with further information on the measures taken upon request.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data protection when using Hotjar can be found here: https://www.hotjar.com/legal/policies/privacy#enduserenglish.
Use of shopware Analytics
On our website, we use the analytics tool “shopware Analytics” of shopware AG (Ebbinghoff 10, 48624 Schöppingen; “shopware”).
Shopware and we are joint controllers for the collection of your data that takes place when the service is used and for the transmission of these data to shopware. This is based on an agreement between us and shopware on the joint processing of personal data, in which the respective responsibilities are defined. According to this agreement, shopware is responsible for all obligations, with the exception of obtaining your consent to the use of cookies or similar technologies and fulfilling these information obligations. This applies in particular to granting the data subject rights pursuant to Art. 15–21 GDPR. You can also assert your data subject rights against us; we will then forward your request to shopware accordingly.
The purpose of the data processing is the analysis of this website and its visitors. For this purpose, data are stored for marketing and optimisation purposes and made available in reports, analyses and statistics. In this context, the following information, among other things, may be collected and processed: the customer group, pages visited, click paths, date and time of the visit, information about the end device used (resolution, resolution density, operating system), referrer URL, information about the browser used, locale, search queries and the time zone.
Cookies or similar technologies are used for this purpose.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on shopware Analytics can be found at https://docs.shopware.com/de/shopware-6-de/erweiterungen/shopware-analytics.
Use of the Meta Pixel
On our website, we use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”).
Meta and we are joint controllers for the collection of your data that takes place when the service is integrated and for the transmission of these data to Meta. This is based on an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are defined. The agreement can be accessed at https://de-de.facebook.com/legal/terms/businesstools. According to this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Art. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling the data subject rights pursuant to Art. 15–20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for complying with the obligations under Art. 33 and 34 GDPR insofar as a personal data breach concerns Meta's obligations under the joint processing agreement.
The purpose of the application is to address visitors to the website in a targeted manner with interest-based advertising on the social networks Facebook and Instagram. For this purpose, the Meta remarketing tag has been implemented on the website. Via this tag, a direct connection to the Meta servers is established when the website is visited. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalised, interest-based ads.
The application also serves the purpose of compiling conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page bearing a conversion tracking tag, as well as which actions are taken on this website after the redirection. However, we do not receive any information that can be used to identify users personally.
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You can deactivate the remarketing function “Custom Audiences” here. Further information on the collection and use of data by Meta, on your rights in this regard and on options for protecting your privacy can be found in Meta's privacy notice at https://www.facebook.com/about/privacy/.
You can deactivate the remarketing function “Custom Audiences” here. Further information on the collection and use of data by Meta, on your rights in this regard and on options for protecting your privacy can be found in Meta's privacy notice at https://www.facebook.com/about/privacy/.
Use of Google Ads conversion tracking
On our website, we use the online advertising programme “Google Ads” and, in this context, conversion tracking (visit action evaluation). Google conversion tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked across the websites of Ads customers.
The information obtained using the conversion cookie serves the purpose of compiling conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page bearing a conversion tracking tag. However, we do not receive any information that can be used to identify users personally. We use the advanced implementation of consent mode (Advanced Consent Mode). In this case, user data are transmitted to Google in the form of “pings” even if consent has not been given. These pings may contain, among other things, the following information: IP address for deriving the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website via which our website was accessed) or information about the triggering of website events such as a conversion. On the basis of this information, Google models usage data in order to be able to carry out a comprehensive usage analysis despite consent having been refused.
Your data may be transferred to servers of Google LLC in the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
On our website, we use the online advertising programme “Google Ads” and, in this context, conversion tracking (visit action evaluation). Google conversion tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked across the websites of Ads customers.
The information obtained using the conversion cookie serves the purpose of compiling conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page bearing a conversion tracking tag. However, we do not receive any information that can be used to identify users personally. We use the advanced implementation of consent mode (Advanced Consent Mode). In this case, user data are transmitted to Google in the form of “pings” even if consent has not been given. These pings may contain, among other things, the following information: IP address for deriving the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website via which our website was accessed) or information about the triggering of website events such as a conversion. On the basis of this information, Google models usage data in order to be able to carry out a comprehensive usage analysis despite consent having been refused.
Your data may be transferred to servers of Google LLC in the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Use of the remarketing or “Similar Audiences” function of Google Inc.
On our website, we use the remarketing or “Similar Audiences” function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The purpose of the application is to analyse visitor behaviour and visitor interests. To carry out the analysis of website use, which forms the basis for creating interest-based advertisements, Google uses cookies. The cookies record visits to the website and anonymised data on the use of the website. No personal data of visitors to the website are stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account product and information areas previously viewed.
Your data may be transferred to servers of Google LLC in the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
Use of Microsoft AdvertisingOn our website, we use the remarketing or “Similar Audiences” function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
The purpose of the application is to analyse visitor behaviour and visitor interests. To carry out the analysis of website use, which forms the basis for creating interest-based advertisements, Google uses cookies. The cookies record visits to the website and anonymised data on the use of the website. No personal data of visitors to the website are stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account product and information areas previously viewed.
Your data may be transferred to servers of Google LLC in the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
On our website, we use Microsoft Advertising of Microsoft Corporation (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”).
The data processing serves marketing and advertising purposes and the purpose of measuring the success of advertising measures (conversion tracking). We learn the total number of users who clicked on one of our ads and were redirected to a page bearing a conversion tracking tag. However, this does not make it possible to identify these users personally. Microsoft Advertising uses technologies such as cookies and tracking pixels that enable an analysis of your use of the website. When you click on an ad placed by Microsoft Advertising, a cookie for conversion tracking is stored on your computer. This cookie has a limited validity and does not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognise that you clicked on the ad and were redirected to this page. In this context, the following information, among other things, may be collected: IP address, identifiers assigned by Microsoft, information about the browser you use and the device you use, referrer URL (website via which you accessed our website), URL of our website.
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data protection and the cookies used at Microsoft can be found here.
Use of Criteo
On our website, we use the technology of the provider Criteo SA (32 Rue Blanche, 75009 Paris, France; “Criteo”).
The purpose of the application is to address visitors to the website in a targeted manner with interest-based advertising in the form of personalised advertising banners on other websites (known as publishers). For this purpose, Criteo uses technologies such as cookies that enable your browser to be recognised.
In this context, the following information, among other things, may be collected and transmitted to Criteo: referrer URL, pages of our website visited, date and time of the visit, advertising ID of your smartphone, information about the browser and device you use, shopping basket contents. Usage profiles may be created from the data collected in this way using pseudonyms. However, this does not make it possible to identify users personally.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data processing and data protection can be found at https://www.criteo.com/de/privacy and https://www.criteo.com/de/privacy/how-we-use-your-data/.
Use of the ADCELL affiliate programme
We use the affiliate programme “ADCELL” of Firstlead GmbH (Rosenfelder Str. 15-16, 10315 Berlin; “ADCELL”).
ADCELL and we are joint controllers for the collection of your data that takes place when the service is integrated and for the transmission of these data to ADCELL. This is based on an agreement between us and ADCELL on the joint processing of personal data. The agreement can be accessed at https://www.adcell.de/datenverarbeitung. According to this agreement, we and ADCELL are equally responsible for fulfilling the obligations under the GDPR, in particular for fulfilling the information obligations pursuant to Art. 13 and 14 GDPR and for granting the data subject rights pursuant to Art. 15–21 GDPR.
When you click on an ad bearing an affiliate link, ADCELL stores a cookie for conversion tracking on your computer. The cookies serve the purpose of correct billing within the affiliate programme by recording the success of an advertising medium. The cookies make it possible to recognise that you clicked on the ad, and the origin of the order can be traced by the advertiser. In addition, ADCELL uses so-called tracking pixels. These make it possible to evaluate information such as visitor traffic on the pages.
The information generated by cookies and tracking pixels about the use of this website (including the IP address) and the delivery of advertising formats is transferred to an ADCELL server and stored there. Among other things, ADCELL can recognise that the affiliate link on this website was clicked. ADCELL may, under certain circumstances, pass this (anonymised) information on to contractual partners; however, data such as the IP address are not merged with other stored data.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Use of the AI-supported sales assistant “homie”
The AI-supported sales assistant homie is integrated into our website. The provider is baoo Technologies GmbH, c/o Projekton, Salierring 32, 50677 Köln, hi@yourhomie.ai (“homie”). homie answers your questions about products, sizes and equipment and is labelled as AI in the chat. The answers are generated automatically and may contain errors. We do not request any contact details in the chat, and homie has no access to customer accounts or order data. Please do not enter any personal data in the chat.
When you access our website, homie is loaded. In this process, your IP address and the page accessed are transmitted to homie. The time at which you closed the welcome message is stored in your browser's local storage so that the message does not reappear each time a page is accessed.
The legal basis is Art. 6(1)(b) GDPR (advice prior to purchase) and Art. 6(1)(f) GDPR (efficient customer advice). You have the right to object at any time, on grounds relating to your particular situation, to this processing which is based on Art. 6(1)(f) GDPR. Storage in local storage is carried out on the basis of Section 25(2) no. 2 TDDDG.
To generate its answers, homie uses language models of OpenAI Ireland Limited (Dublin, Ireland). According to homie, the processing takes place on servers in the EU. Hosting is provided by Vercel Inc. (USA). The transfer to the USA is carried out on the basis of the EU-US Data Privacy Framework, under which Vercel is certified. Further information: https://yourhomie.ai/en-gb/privacy/ki-assistent
The AI-supported sales assistant homie is integrated into our website. The provider is baoo Technologies GmbH, c/o Projekton, Salierring 32, 50677 Köln, hi@yourhomie.ai (“homie”). homie answers your questions about products, sizes and equipment and is labelled as AI in the chat. The answers are generated automatically and may contain errors. We do not request any contact details in the chat, and homie has no access to customer accounts or order data. Please do not enter any personal data in the chat.
When you access our website, homie is loaded. In this process, your IP address and the page accessed are transmitted to homie. The time at which you closed the welcome message is stored in your browser's local storage so that the message does not reappear each time a page is accessed.
The legal basis is Art. 6(1)(b) GDPR (advice prior to purchase) and Art. 6(1)(f) GDPR (efficient customer advice). You have the right to object at any time, on grounds relating to your particular situation, to this processing which is based on Art. 6(1)(f) GDPR. Storage in local storage is carried out on the basis of Section 25(2) no. 2 TDDDG.
To generate its answers, homie uses language models of OpenAI Ireland Limited (Dublin, Ireland). According to homie, the processing takes place on servers in the EU. Hosting is provided by Vercel Inc. (USA). The transfer to the USA is carried out on the basis of the EU-US Data Privacy Framework, under which Vercel is certified. Further information: https://yourhomie.ai/en-gb/privacy/ki-assistent
Plug-ins and miscellaneous
Use of Google Tag Manager
On our website, we use Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
This application is used to manage JavaScript tags and HTML tags that are used in particular to implement tracking and analytics tools. The purpose of the data processing is the needs-based design and optimisation of our website.
Google Tag Manager itself neither stores cookies nor processes any personal data. However, it enables the triggering of further tags that may collect and process personal data.
Further information on terms of use and data protection can be found here.
Server-side tagging with Stape.ioOn our website, we use Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).
This application is used to manage JavaScript tags and HTML tags that are used in particular to implement tracking and analytics tools. The purpose of the data processing is the needs-based design and optimisation of our website.
Google Tag Manager itself neither stores cookies nor processes any personal data. However, it enables the triggering of further tags that may collect and process personal data.
Further information on terms of use and data protection can be found here.
We use Stape.io for server-side tagging. The provider is Stape Europe OÜ, Sepapaja tn 6, 15551 Tallinn, Estonia. Through Stape.io, we operate a server-side tag manager that allows us to manage analytics, marketing and conversion tags from a technical perspective.
For this purpose, certain usage and event data are first transmitted to a server container used by us and then forwarded from there to connected analytics and marketing services in accordance with our settings. This enables us to exercise greater control over which data are transmitted to which services.
The data processed may include, in particular, IP addresses, user agents, referrer URLs, pages visited, timestamps, cookie and device identifiers, browser and device information, and event data such as page views, product views, shopping cart actions or purchases. Depending on the service integrated, order information, product data or hashed contact details may also be processed.
Depending on your consent and our technical configuration, recipients of data processed through the server container may include, in particular, Google Analytics 4, Google Ads, Meta Pixel, Meta Conversions API, Microsoft Advertising, Klaviyo and other analytics and marketing services mentioned in this Privacy Policy.
Where server-side tagging is used for analytics, marketing or conversion purposes, processing is carried out on the basis of your consent pursuant to Art. 6(1)(a) GDPR and Section 25(1) TDDDG. You may withdraw or change your consent at any time using our consent management tool.
Where Stape.io processes personal data on our behalf, this is done on the basis of a data processing agreement pursuant to Art. 28 GDPR. Where personal data are transferred to third countries, such transfers are based on appropriate safeguards, in particular adequacy decisions of the European Commission or standard contractual clauses.
Use of Cloudflare
On our website, we use the content delivery network Cloudflare CDN of Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”). This is a supra-regional network of servers in various data centres to which our web server connects and via which certain content of our website is delivered.
The purpose of the data processing is to optimise the loading times of our website and thereby make our services more user-friendly.
In this context, the following information, among other things, may be collected: IP address, system configuration information, information about traffic to and from customer websites (known as server log files).
Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object at any time, on grounds relating to your particular situation, to these processing operations involving personal data concerning you which are based on Art. 6(1)(f) GDPR.
Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/de-de/privacypolicy/.
Use of YouTube
On our website, we use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”).YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos stored on YouTube in an iFrame on the website. The “privacy-enhanced mode” option is enabled. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about this transmitted to YouTube and stored there. Your data may be transferred to the USA. An adequacy decision of the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
The use of cookies or similar technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on the collection and use of data by YouTube and Google, on your rights in this regard and on options for protecting your privacy can be found in YouTube's privacy notice at https://www.youtube.com/t/privacy.
Data subject rights and storage period
Storage period
After complete performance of the contract, the data are initially stored for the duration of the warranty period, then in compliance with statutory retention periods, in particular those under tax and commercial law, and are erased once these periods have expired, unless you have consented to further processing and use.
Rights of the data subject
Where the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, to rectification, to erasure, to restriction of processing and to data portability.
In addition, under Art. 21(1) GDPR you have a right to object to processing based on Art. 6(1)(f) GDPR and to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is not lawful.
You can lodge a complaint with, among others, the supervisory authority responsible for us, which can be contacted using the following details:
Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de
Right to object
Where the processing of personal data described here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time, on grounds relating to your particular situation, with effect for the future.
Once you have objected, the processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
If personal data are processed for direct marketing purposes, you can object to this processing at any time by notifying us. Once you have objected, we will stop processing the data concerned for direct marketing purposes.
Last updated: 14 October 2026