Privacy policy

PRIVACY POLICY

1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER

1.1
We are pleased about your visit to our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our site.
Personal data refers to all information that can be used to personally identify you.

1.2
The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Esther Winter Copenhagen.
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3
This website uses SSL or TLS encryption to enhance security and protect the transmission of personal data and other confidential information (for example, orders or requests sent to the controller).
An encrypted connection can be recognized by the “https://” address and the padlock symbol in your browser bar.


2) DATA COLLECTION WHEN VISITING THE WEBSITE

When you use our website for informational purposes only, without registering or providing information, we collect only the data that your browser transmits to our server (so-called server log files).

The following data is collected as technically necessary to display the website:

Visited page
Date and time of access
Amount of data transferred (in bytes)
Referring website
Browser used
Operating system
IP address (possibly anonymized)

Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR (legitimate interest in improving website stability and functionality).
The data is not shared with third parties or used for other purposes unless there is suspicion of unlawful use.


3) COOKIES

We use cookies to improve your browsing experience and enable certain website functions.

Cookies are small text files stored on your device.
Some are deleted after closing the browser (session cookies), while others remain stored (persistent cookies).

If personal data is collected through cookies, processing is carried out on the basis of:

Art. 6 para. 1 lit. b GDPR (performance of a contract), or
Art. 6 para. 1 lit. f GDPR (legitimate interest in improving website functionality).

You can configure your browser to:

Accept cookies individually
Reject cookies completely

Disabling cookies may limit certain website functionalities.


4) CONTACT

When you contact us (for example via contact form or email), we collect the personal data necessary to process your request.
This data is used exclusively to respond to your inquiry.

Legal basis: Art. 6 para. 1 lit. f GDPR.

If the contact relates to a contract, Art. 6 para. 1 lit. b GDPR also applies.

The data will be deleted once your request has been fully processed, unless legal retention obligations apply.


5) CUSTOMER ACCOUNT AND CONTRACT EXECUTION

In accordance with Art. 6 para. 1 lit. b GDPR, we collect and process the data you provide for:

Contract execution
Opening a customer account

The account can be deleted at any time by contacting the data controller.

After completion of the contract, the data will be restricted and deleted after the expiration of statutory retention periods, unless further processing is permitted by law or based on your consent.


6) USE OF DATA FOR DIRECT MARKETING

6.1 Email Newsletter

If you subscribe to our newsletter, we will use your email address to send you information about our products.

The only required data is your email address.
We use the double opt-in procedure.

Legal basis: Art. 6 para. 1 lit. a GDPR (consent).

You can unsubscribe at any time.

6.2 Newsletter for Existing Customers

If you provided your email address during a purchase, we may use it to send offers related to similar products without additional consent.

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).

You may object at any time.


7) DATA PROCESSING FOR ORDER EXECUTION

7.1 Data Transfer

Data is transferred to shipping providers and payment providers to enable delivery and payment processing.

Legal basis: Art. 6 para. 1 lit. b GDPR.

7.2 Payment Service Providers

PayPal
Data is transferred to PayPal to process payments.
Any credit checks are carried out by PayPal.

Privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

SOFORT (Klarna Group)
Data is transferred to SOFORT GmbH for payment processing.

Privacy policy:
https://www.klarna.com/sofort/datenschutz


8) REVIEW REMINDERS

If you have provided consent, we will use your email address to send you a one-time reminder to leave a review.

Legal basis: Art. 6 para. 1 lit. a GDPR.


9) SOCIAL MEDIA PLUGINS

We use plugins from:

Facebook
Google+
Instagram

via the Shariff solution, which initially functions only as an HTML link.
Data is transmitted to the social network only when you click the button.

Privacy policies:

Facebook
https://www.facebook.com/policy.php

Google
https://www.google.com/intl/de/policies/privacy/

Instagram
https://help.instagram.com/155833707900388/


10) ONLINE MARKETING

10.1 Google DoubleClick

We use cookies for targeted advertising and campaign reporting.

Legal basis: Art. 6 para. 1 lit. f GDPR.

Privacy policy:
https://www.google.de/policies/privacy/

10.2 Google AdWords Conversion Tracking

Used to measure the success of advertising campaigns.

Legal basis: Art. 6 para. 1 lit. f GDPR.

Privacy policy:
https://www.google.de/policies/privacy/


11) WEB ANALYTICS

We use Google Analytics (Universal Analytics) with IP anonymization.

Data is used for statistical analysis and marketing.

Opt-out add-on:
https://tools.google.com/dlpage/gaoptout?hl=de


12) RETARGETING / REMARKETING / PERSONALIZED ADVERTISING

Facebook Pixel
Used only with explicit consent (Art. 6 para. 1 lit. a GDPR).

Privacy policy:
https://www.facebook.com/about/privacy/

Google AdWords Remarketing
Uses cookies to display interest-based advertising.

Legal basis: Art. 6 para. 1 lit. f GDPR.

Privacy policy:
https://www.google.com/policies/technologies/ads/


13) DATA SUBJECT RIGHTS

Under the GDPR you have the following rights:

Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure (Art. 17)
Right to restriction of processing (Art. 18)
Right to notification (Art. 19)
Right to data portability (Art. 20)
Right to withdraw consent (Art. 7 para. 3)
Right to lodge a complaint with a supervisory authority (Art. 77)
Right to object (Art. 21)

You may object at any time to processing based on legitimate interest or direct marketing.


14) PERSONAL DATA RETENTION PERIOD

The retention period for personal data depends on statutory retention periods under tax and commercial law.

After these periods expire, the data will be deleted unless it is still required for:

Contract execution
Legitimate interests of the data controller.