Privacy policy
PRIVACY POLICY
1) INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE DATA CONTROLLER
1.1
We are pleased about your visit to our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our site.
Personal data refers to all information that can be used to personally identify you.
1.2
The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Esther Winter Copenhagen.
The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.
1.3
This website uses SSL or TLS encryption to enhance security and protect the transmission of personal data and other confidential information (for example, orders or requests sent to the controller).
An encrypted connection can be recognized by the “https://” address and the padlock symbol in your browser bar.
2) DATA COLLECTION WHEN VISITING THE WEBSITE
When you use our website for informational purposes only, without registering or providing information, we collect only the data that your browser transmits to our server (so-called server log files).
The following data is collected as technically necessary to display the website:
Visited page
Date and time of access
Amount of data transferred (in bytes)
Referring website
Browser used
Operating system
IP address (possibly anonymized)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR (legitimate interest in improving website stability and functionality).
The data is not shared with third parties or used for other purposes unless there is suspicion of unlawful use.
3) COOKIES
We use cookies to improve your browsing experience and enable certain website functions.
Cookies are small text files stored on your device.
Some are deleted after closing the browser (session cookies), while others remain stored (persistent cookies).
If personal data is collected through cookies, processing is carried out on the basis of:
Art. 6 para. 1 lit. b GDPR (performance of a contract), or
Art. 6 para. 1 lit. f GDPR (legitimate interest in improving website functionality).
You can configure your browser to:
Accept cookies individually
Reject cookies completely
Disabling cookies may limit certain website functionalities.
4) CONTACT
When you contact us (for example via contact form or email), we collect the personal data necessary to process your request.
This data is used exclusively to respond to your inquiry.
Legal basis: Art. 6 para. 1 lit. f GDPR.
If the contact relates to a contract, Art. 6 para. 1 lit. b GDPR also applies.
The data will be deleted once your request has been fully processed, unless legal retention obligations apply.
5) CUSTOMER ACCOUNT AND CONTRACT EXECUTION
In accordance with Art. 6 para. 1 lit. b GDPR, we collect and process the data you provide for:
Contract execution
Opening a customer account
The account can be deleted at any time by contacting the data controller.
After completion of the contract, the data will be restricted and deleted after the expiration of statutory retention periods, unless further processing is permitted by law or based on your consent.
6) USE OF DATA FOR DIRECT MARKETING
6.1 Email Newsletter
If you subscribe to our newsletter, we will use your email address to send you information about our products.
The only required data is your email address.
We use the double opt-in procedure.
Legal basis: Art. 6 para. 1 lit. a GDPR (consent).
You can unsubscribe at any time.
6.2 Newsletter for Existing Customers
If you provided your email address during a purchase, we may use it to send offers related to similar products without additional consent.
Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest).
You may object at any time.
7) DATA PROCESSING FOR ORDER EXECUTION
7.1 Data Transfer
Data is transferred to shipping providers and payment providers to enable delivery and payment processing.
Legal basis: Art. 6 para. 1 lit. b GDPR.
7.2 Payment Service Providers
PayPal
Data is transferred to PayPal to process payments.
Any credit checks are carried out by PayPal.
Privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full
SOFORT (Klarna Group)
Data is transferred to SOFORT GmbH for payment processing.
Privacy policy:
https://www.klarna.com/sofort/datenschutz
8) REVIEW REMINDERS
If you have provided consent, we will use your email address to send you a one-time reminder to leave a review.
Legal basis: Art. 6 para. 1 lit. a GDPR.
9) SOCIAL MEDIA PLUGINS
We use plugins from:
Facebook
Google+
Instagram
via the Shariff solution, which initially functions only as an HTML link.
Data is transmitted to the social network only when you click the button.
Privacy policies:
Facebook
https://www.facebook.com/policy.php
Google
https://www.google.com/intl/de/policies/privacy/
Instagram
https://help.instagram.com/155833707900388/
10) ONLINE MARKETING
10.1 Google DoubleClick
We use cookies for targeted advertising and campaign reporting.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Privacy policy:
https://www.google.de/policies/privacy/
10.2 Google AdWords Conversion Tracking
Used to measure the success of advertising campaigns.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Privacy policy:
https://www.google.de/policies/privacy/
11) WEB ANALYTICS
We use Google Analytics (Universal Analytics) with IP anonymization.
Data is used for statistical analysis and marketing.
Opt-out add-on:
https://tools.google.com/dlpage/gaoptout?hl=de
12) RETARGETING / REMARKETING / PERSONALIZED ADVERTISING
Facebook Pixel
Used only with explicit consent (Art. 6 para. 1 lit. a GDPR).
Privacy policy:
https://www.facebook.com/about/privacy/
Google AdWords Remarketing
Uses cookies to display interest-based advertising.
Legal basis: Art. 6 para. 1 lit. f GDPR.
Privacy policy:
https://www.google.com/policies/technologies/ads/
13) DATA SUBJECT RIGHTS
Under the GDPR you have the following rights:
Right of access (Art. 15)
Right to rectification (Art. 16)
Right to erasure (Art. 17)
Right to restriction of processing (Art. 18)
Right to notification (Art. 19)
Right to data portability (Art. 20)
Right to withdraw consent (Art. 7 para. 3)
Right to lodge a complaint with a supervisory authority (Art. 77)
Right to object (Art. 21)
You may object at any time to processing based on legitimate interest or direct marketing.
14) PERSONAL DATA RETENTION PERIOD
The retention period for personal data depends on statutory retention periods under tax and commercial law.
After these periods expire, the data will be deleted unless it is still required for:
Contract execution
Legitimate interests of the data controller.