Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This applies only insofar as no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Controller/Data Protection Officer
You may contact us if you wish. The controller responsible for data processing is: mediparts GmbH, Hünenbergstr. 157, 46147 Oberhausen Germany, +49(0)208/384912-0, datenschutz@meddax24.de
You can contact our Data Protection Officer directly at: Email: datenschutz@meddax24.de or phone: 0208/38491210
Customer-initiated contact by email
If you contact us proactively by email for business purposes, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of handling and responding to your contact request.
If the contact is made for the purpose of carrying out pre-contractual measures (e.g. advice in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address only to process your request. Your data will then be deleted, taking statutory retention periods into account, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact.
If the contact is made for the purpose of carrying out pre-contractual measures (e.g. advice in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address only to process your request. Your data will then be deleted, taking statutory retention periods into account, unless you have consented to further processing and use.
For the technical provision and administration of the withdrawal function on our online presence, we use a third-party software solution as part of processing on our behalf
Customer account Orders
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.
Data collection when writing a comment or review
When you comment on or review an item or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. Processing serves the purpose of enabling comments/reviews and displaying comments/reviews.
By submitting the comment/review, you consent to the processing of the transmitted data. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your personal data will then be deleted.
When your comment/review is published, only the name provided by you will be published.
Use of the email address for sending newsletters
We use your email address to send information and offers by newsletter, provided that you have expressly consented to this. Data processing serves exclusively the purpose of promotional communication. For this purpose, we process your email address and, where applicable, further data that you have voluntarily provided when registering for our newsletter.
Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You may unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6(1)(f) GDPR due to our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
Use of the email address for sending direct advertising
We use your email address, which we received in connection with the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You may object to this use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in the legal notice. You may also use the link provided for this purpose in the advertising email. No costs other than transmission costs according to the basic rates will be incurred.
Use of rapidmail
For sending newsletters, we use the service of rapidmail GmbH (Wentzingerstraße 21
79106 Freiburg im Breisgau; “rapidmail”) as part of processing on our behalf.
We pass on the information you provide during newsletter registration (email address, and, where applicable, first and last name) to rapidmail. Data processing serves the purpose of sending the newsletter and statistically evaluating it.
To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you opened the newsletter and whether you clicked any integrated links. In this context, we collect your personal data, such as IP address, browser type and device, as well as the time. Usage profiles may be created from this data under a pseudonym. The collected data is not used to identify you personally. The collected data is used solely for statistical evaluation to improve newsletter campaigns.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, advertising-effective and user-friendly newsletter system. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
Further information and rapidMail’s privacy policy can be found at: https://www.rapidmail.de/datenschutz and https://www.rapidmail.de/hilfe/kategorie/statistiken.
Shipping service providers
Disclosure of the email address to shipping companies for information about the shipping status
We disclose your email address to the transport company as part of contract processing, provided that you have expressly consented to this during the order process. The disclosure serves the purpose of informing you by email about the shipping status. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing based on consent before its withdrawal.
Payment service providers
Use of PayPal
We use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of offering you payment via the payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
All PayPal transactions are subject to PayPal’s privacy policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
We use the PayPal Express payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of offering you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyze data when the website is accessed (e.g. IP address, device type, operating system, browser type, location of your device). Cookies may also be used for this purpose. The cookies enable your browser to be recognized.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering various customer-oriented payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.
Analytics Advertising tracking
Use of Google Analytics 4
We use the Google Analytics web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
Data processing serves the purpose of analyzing this website and its visitors, as well as marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet use.
The following information, among other data, may be collected: IP address, date and time of page access, click path, information about the browser you use and the device you use, pages visited, referrer URL (the website from which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google has about you.
The IP address is truncated by Google beforehand within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area.
The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
The information generated in this way about your use of this website is usually transmitted to and stored on a Google server in the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles. Both Google and U.S. government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Plug-ins and other matters
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website as part of commissioned data processing. The query serves the purpose of distinguishing whether input is made by a human or by automated machine processing. For this purpose, your input is transmitted to Google and used there further. In addition, the IP address and, where applicable, further data required by Google for the reCAPTCHA service are transmitted to Google. These data are processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This serves the purpose of distinguishing whether input is made by a human or by automated machine processing. In the background, Google collects and analyzes usage data that is used by Invisible reCAPTCHA to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used there further. In addition, the IP address and, where applicable, further data required by Google for the Invisible reCAPTCHA service are transmitted to Google.
These data are processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on Google reCAPTCHA and the corresponding privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy
Use of Google Maps
We use the function for embedding Google Maps maps of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The function enables the visual display of geographical information and interactive maps. When pages into which Google Maps maps are embedded are accessed, Google also collects, processes and uses data of visitors to the websites.
Your data may also be transmitted to the USA in this context. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on the collection and use of data by Google can be found in Google’s privacy notices at https://www.google.com/privacypolicy.html. In the Privacy Center, you also have the option to change your settings so that you can manage and protect the data processed by Google.
Use of YouTube
We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos stored on YouTube in an iFrame on the website. The “Enhanced privacy mode” option is activated. As a result, YouTube does not store any information about visitors to the website. Information is transmitted to YouTube and stored there only when you watch a video. Your data may be transmitted to the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on the collection and use of data by YouTube and Google, and on your rights in this regard and options for protecting your privacy, can be found in YouTube’s privacy notices at https://www.youtube.com/t/privacy.
Integration of the idealo logo
The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is integrated on our website. When our website is accessed, the browser used on your device automatically sends information to idealo’s server. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until automated deletion:
Use of Google Fonts
We use Google Fonts of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of the uniform display of fonts on our website. In order to load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used for this purpose. Among other data, your IP address and information about the browser you use are processed and transmitted to Google. These data are not linked to your Google account.
Your data may be transmitted to the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Storage period
After complete performance of the contract, the data will initially be stored for the duration of the warranty period and thereafter taking into account statutory retention periods, in particular under tax and commercial law, and will then be deleted after expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
Subject to the statutory requirements being met, you have the following rights under Articles 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, and right to data portability.
In addition, pursuant to Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for direct advertising purposes.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.
You may lodge a complaint, among others, with the supervisory authority responsible for us, which can be reached using the following contact details:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Phone: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de
Right to object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to this processing at any time with effect for the future.
After an objection has been lodged, processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defense of legal claims.
If personal data processing is carried out for direct advertising purposes, you may object to this processing at any time by notifying us. After an objection has been lodged, we will cease processing the data concerned for direct advertising purposes.
Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide the data will have no consequences. This applies only insofar as no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You may visit our websites without providing any personal information.
Each time our website is accessed, usage data is transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (so-called server log files). These stored data include, for example, the name of the page accessed, date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.
ContactProcessing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.
Controller/Data Protection Officer
You may contact us if you wish. The controller responsible for data processing is: mediparts GmbH, Hünenbergstr. 157, 46147 Oberhausen Germany, +49(0)208/384912-0, datenschutz@meddax24.de
You can contact our Data Protection Officer directly at: Email: datenschutz@meddax24.de or phone: 0208/38491210
Customer-initiated contact by email
If you contact us proactively by email for business purposes, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of handling and responding to your contact request.
If the contact is made for the purpose of carrying out pre-contractual measures (e.g. advice in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address only to process your request. Your data will then be deleted, taking statutory retention periods into account, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact.
If the contact is made for the purpose of carrying out pre-contractual measures (e.g. advice in the event of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your email address only to process your request. Your data will then be deleted, taking statutory retention periods into account, unless you have consented to further processing and use.
Collection and processing when using the withdrawal button
If you have concluded a contract via our online presence, we provide you with a withdrawal function (withdrawal button) through which you can submit your declaration of withdrawal directly.
When you use the withdrawal function, we collect your personal data (name, email address, information identifying the contract or part of the contract you wish to withdraw from, as well as the time (date and time) of sending the declaration of withdrawal) only to the extent provided by you. The data processing serves the purpose of providing you with the legally required option to withdraw from your contract and of properly processing your withdrawal.
If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. Otherwise, the data processing is carried out on the basis of Art. 6(1)(c) GDPR in order to comply with a legal obligation to provide you with a withdrawal function on our online presence.
We use your email address only to process your declaration of withdrawal. Your data will then be deleted, taking statutory retention periods into account, unless you have consented to further processing and use.
Disclosure to third-party providers (plugin use)For the technical provision and administration of the withdrawal function on our online presence, we use a third-party software solution as part of processing on our behalf
The processing of your personal data serves the purpose of fulfilling the legal requirements for the design of the withdrawal function in a legally compliant manner and is carried out on the basis of Art. 6(1)(c) GDPR. This data processing is also carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in being able to provide you with a user-friendly withdrawal option. In this case, you have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.
Collection, processing and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the statutory requirements. The scope of data transmission is limited to the minimum necessary.
Reviews Advertising Data collection when writing a comment or review
When you comment on or review an item or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. Processing serves the purpose of enabling comments/reviews and displaying comments/reviews.
By submitting the comment/review, you consent to the processing of the transmitted data. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your personal data will then be deleted.
When your comment/review is published, only the name provided by you will be published.
Use of the email address for sending newsletters
We use your email address to send information and offers by newsletter, provided that you have expressly consented to this. Data processing serves exclusively the purpose of promotional communication. For this purpose, we process your email address and, where applicable, further data that you have voluntarily provided when registering for our newsletter.
Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
You may unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6(1)(f) GDPR due to our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
Use of the email address for sending direct advertising
We use your email address, which we received in connection with the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You may object to this use of your email address at any time by notifying us. The contact details for exercising your right to object can be found in the legal notice. You may also use the link provided for this purpose in the advertising email. No costs other than transmission costs according to the basic rates will be incurred.
Use of rapidmail
For sending newsletters, we use the service of rapidmail GmbH (Wentzingerstraße 21
79106 Freiburg im Breisgau; “rapidmail”) as part of processing on our behalf.
We pass on the information you provide during newsletter registration (email address, and, where applicable, first and last name) to rapidmail. Data processing serves the purpose of sending the newsletter and statistically evaluating it.
To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you opened the newsletter and whether you clicked any integrated links. In this context, we collect your personal data, such as IP address, browser type and device, as well as the time. Usage profiles may be created from this data under a pseudonym. The collected data is not used to identify you personally. The collected data is used solely for statistical evaluation to improve newsletter campaigns.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, advertising-effective and user-friendly newsletter system. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
Further information and rapidMail’s privacy policy can be found at: https://www.rapidmail.de/datenschutz and https://www.rapidmail.de/hilfe/kategorie/statistiken.
Shipping service providers
Disclosure of the email address to shipping companies for information about the shipping status
We disclose your email address to the transport company as part of contract processing, provided that you have expressly consented to this during the order process. The disclosure serves the purpose of informing you by email about the shipping status. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing based on consent before its withdrawal.
Payment service providers
Use of PayPal
We use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of offering you payment via the payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
All PayPal transactions are subject to PayPal’s privacy policy. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Plus
We use the PayPal Plus payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of offering you payment via the payment service. When you select and use payment via PayPal, credit card via PayPal or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
For individual payment methods such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right, where applicable, to obtain credit information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical-statistical procedures, which may include address data in their calculation. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of the credit check for contract initiation. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default when PayPal makes advance payment.
You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying PayPal. Provision of the data is necessary for concluding the contract with the payment method requested by you. Failure to provide the data means that the contract cannot be concluded with the payment method selected by you.
We use the PayPal Express payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of offering you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyze data when the website is accessed (e.g. IP address, device type, operating system, browser type, location of your device). Cookies may also be used for this purpose. The cookies enable your browser to be recognized.
The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering various customer-oriented payment methods. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the corresponding privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide on their acceptance individually, as well as prevent the storage of cookies and transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, please note that in this case you may not be able to use all functions of this website in full.
The links below provide information on how to manage cookies in the most important browsers (including how to disable them):
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically necessary cookies
Unless otherwise stated below in this Privacy Policy, we use only these technically necessary cookies for the purpose of making our services more user-friendly, effective and secure. Cookies also enable our systems to recognize your browser even after you change pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary for the browser to be recognized again even after a page change.
The use of cookies or comparable technologies is carried out on the basis of Section 25(2) TDDDG. The processing of your personal data is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and the user-friendly and effective design of our services.
You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.
Analytics Advertising tracking
Use of Google Analytics 4
We use the Google Analytics web analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
Data processing serves the purpose of analyzing this website and its visitors, as well as marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet use.
The following information, among other data, may be collected: IP address, date and time of page access, click path, information about the browser you use and the device you use, pages visited, referrer URL (the website from which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google has about you.
The IP address is truncated by Google beforehand within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area.
The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
The information generated in this way about your use of this website is usually transmitted to and stored on a Google server in the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles. Both Google and U.S. government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of Google Ads conversion tracking
We use the “Google Ads” online advertising program on our website and, in this context, conversion tracking (visit action analysis). Google conversion tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an advertisement placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period, do not contain personal data and therefore do not serve to personally identify you. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the advertisement and were redirected to that page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked across the websites of Ads customers.
The information obtained using the conversion cookie serves the purpose of creating conversion statistics. In this context, we learn the total number of users who clicked on one of our advertisements and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that enables users to be personally identified.
Your data may be transferred to servers of Google LLC in the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
We use the “Google Ads” online advertising program on our website and, in this context, conversion tracking (visit action analysis). Google conversion tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an advertisement placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period, do not contain personal data and therefore do not serve to personally identify you. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognize that you clicked on the advertisement and were redirected to that page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked across the websites of Ads customers.
The information obtained using the conversion cookie serves the purpose of creating conversion statistics. In this context, we learn the total number of users who clicked on one of our advertisements and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that enables users to be personally identified.
Your data may be transferred to servers of Google LLC in the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Plug-ins and other matters
Use of Google Tag Manager
We use Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This application is used to manage JavaScript tags and HTML tags that are used in particular to implement tracking and analytics tools. The data processing serves the purpose of designing and optimizing our website according to demand.
Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables other tags to be triggered that may collect and process personal data.
Further information on terms of use and data protection can be found here.
Use of Google reCAPTCHAWe use Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This application is used to manage JavaScript tags and HTML tags that are used in particular to implement tracking and analytics tools. The data processing serves the purpose of designing and optimizing our website according to demand.
Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables other tags to be triggered that may collect and process personal data.
Further information on terms of use and data protection can be found here.
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website as part of commissioned data processing. The query serves the purpose of distinguishing whether input is made by a human or by automated machine processing. For this purpose, your input is transmitted to Google and used there further. In addition, the IP address and, where applicable, further data required by Google for the reCAPTCHA service are transmitted to Google. These data are processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This serves the purpose of distinguishing whether input is made by a human or by automated machine processing. In the background, Google collects and analyzes usage data that is used by Invisible reCAPTCHA to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used there further. In addition, the IP address and, where applicable, further data required by Google for the Invisible reCAPTCHA service are transmitted to Google.
These data are processed by Google within the European Union and may also be transmitted to servers of Google LLC in the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on Google reCAPTCHA and the corresponding privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy
Use of Google Maps
We use the function for embedding Google Maps maps of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The function enables the visual display of geographical information and interactive maps. When pages into which Google Maps maps are embedded are accessed, Google also collects, processes and uses data of visitors to the websites.
Your data may also be transmitted to the USA in this context. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on the collection and use of data by Google can be found in Google’s privacy notices at https://www.google.com/privacypolicy.html. In the Privacy Center, you also have the option to change your settings so that you can manage and protect the data processed by Google.
Use of YouTube
We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos stored on YouTube in an iFrame on the website. The “Enhanced privacy mode” option is activated. As a result, YouTube does not store any information about visitors to the website. Information is transmitted to YouTube and stored there only when you watch a video. Your data may be transmitted to the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on the collection and use of data by YouTube and Google, and on your rights in this regard and options for protecting your privacy, can be found in YouTube’s privacy notices at https://www.youtube.com/t/privacy.
Integration of the idealo logo
The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is integrated on our website. When our website is accessed, the browser used on your device automatically sends information to idealo’s server. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until automated deletion:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the file accessed,
- website from which access is made (referrer URL),
- browser used and, where applicable, the operating system of your computer and the name of your access provider.
Use of Google Fonts
We use Google Fonts of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of the uniform display of fonts on our website. In order to load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used for this purpose. Among other data, your IP address and information about the browser you use are processed and transmitted to Google. These data are not linked to your Google account.
Your data may be transmitted to the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Use of Font Awesome
We use Font Awesome of Fonticons Inc. (307 S Main St., Suite 202, Bentonville, AR, 72712-9214 USA; “Font Awesome”) on our website. The data processing serves the purpose of the uniform display of fonts and icons on our website. In order to load the fonts, a connection to FontAwesome servers is established when the page is accessed.
Cookies may be used for this purpose. Among other data, your IP address and information about the browser you use are processed and transmitted to Font Awesome. Your data may be transmitted to third countries, such as the USA. An adequacy decision of the EU Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Font Awesome is not certified under the TADPF.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
Further information on data processing and data protection can be found at https://fontawesome.com/privacy and at https://fontawesome.com/support.
Rights of data subjects and storage periodStorage period
After complete performance of the contract, the data will initially be stored for the duration of the warranty period and thereafter taking into account statutory retention periods, in particular under tax and commercial law, and will then be deleted after expiry of the period, unless you have consented to further processing and use.
Rights of the data subject
Subject to the statutory requirements being met, you have the following rights under Articles 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, and right to data portability.
In addition, pursuant to Art. 21(1) GDPR, you have the right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for direct advertising purposes.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful.
You may lodge a complaint, among others, with the supervisory authority responsible for us, which can be reached using the following contact details:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Phone: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de
Right to object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to this processing at any time with effect for the future.
After an objection has been lodged, processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defense of legal claims.
If personal data processing is carried out for direct advertising purposes, you may object to this processing at any time by notifying us. After an objection has been lodged, we will cease processing the data concerned for direct advertising purposes.