Privacy Policy

 

We process personal data (hereinafter mostly referred to as "data") only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as "GDPR"), "processing" means any operation or set of operations which is performed on personal data or on sets of personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following data protection declaration, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide either alone or jointly with others on the purposes and means of processing. In addition, we inform you below about the third-party components we use for optimization purposes and to increase the quality of use, insofar as third parties process data on their own responsibility.

Our privacy policy is structured as follows:

  1. Information about us as the controller
  2. Rights of users and data subjects

III. Information on data processing

I. Information about us as the controller

The controller provider of this website in the sense of data protection law is:

MAYAN

Torweg 40

74626 Bretzfeld

Email: info[at]mayan-fashion.de

II. Rights of users and data subjects

With regard to the data processing described in more detail below, users and data subjects have the right

  • to confirmation as to whether data concerning them are being processed, to information about the processed data, to further information about the data processing, and to copies of the data (cf. also Art. 15 GDPR);
  • to rectification or completion of inaccurate or incomplete data (cf. also Art. 16 GDPR);
  • to immediate erasure of the data concerning them (cf. also Art. 17 GDPR), or, alternatively, if further processing is required pursuant to Art. 17 para. 3 GDPR, to restriction of processing in accordance with Art. 18 GDPR;
  • to receive the data concerning them and provided by them and to transmit these data to other providers/controllers (cf. also Art. 20 GDPR);
  • to lodge a complaint with the supervisory authority if they consider that the data concerning them are being processed by the provider in breach of data protection provisions (cf. also Art. 77 GDPR).

Furthermore, the provider is obliged to inform all recipients to whom data has been disclosed by the provider about any rectification or erasure of data or restriction of processing that takes place pursuant to Articles 16, 17 para. 1, 18 GDPR. This obligation does not apply if such notification is impossible or involves a disproportionate effort. Notwithstanding this, the user has a right to information about these recipients.

Users and data subjects also have the right, pursuant to Art. 21 GDPR, to object to the future processing of data concerning them, provided that the data are processed by the provider in accordance with Art. 6 para. 1 lit. f) GDPR. In particular, an objection to data processing for direct marketing purposes is permissible.

III. Information on data processing

Your data processed when using our website will be deleted or blocked as soon as the purpose of storage ceases to apply, provided that no legal retention obligations prevent the deletion of the data and no other information is provided below for individual processing procedures.

Cookie Manager

To obtain consent for the use of technically non-essential cookies on the website, the provider uses a cookie manager.

When accessing the website, a cookie with the setting information is stored on the user's device, so that when visiting again, the query regarding consent does not have to be made.

The cookie is necessary to obtain legally compliant user consent.

The user can prevent or terminate the installation of cookies by adjusting their browser settings.

Cookies

a) Session Cookies

We use so-called cookies on our website. Cookies are small text files or other storage technologies that are stored on your device by the internet browser you use. These cookies process certain information about you individually, such as your browser or location data or your IP address.

Through this processing, our website becomes more user-friendly, effective, and secure, as the processing, for example, enables the display of our website in different languages or the offer of a shopping cart function.

The legal basis for this processing is Art. 6 para. 1 lit b.) GDPR, if these cookies process data for contract initiation or contract execution.

If the processing is not for contract initiation or contract execution, our legitimate interest lies in improving the functionality of our website. The legal basis is then Art. 6 para. 1 lit. f) GDPR.

These session cookies are deleted when you close your internet browser.

b) Third-party cookies

Our website may also use cookies from partner companies with whom we cooperate for advertising, analysis or functionality purposes of our website.

Please refer to the following information for details, in particular on the purposes and legal bases for the processing of such third-party cookies.

c) Removal option

You can prevent or restrict the installation of cookies by adjusting your internet browser settings. You can also delete already stored cookies at any time. The necessary steps and measures for this depend, however, on your specific internet browser. If you have questions, please use the help function or documentation of your internet browser or contact its manufacturer or support. In the case of so-called Flash cookies, however, processing cannot be prevented via the browser settings. Instead, you must change the settings of your Flash Player in this regard. The necessary steps and measures for this also depend on the Flash Player you are using. If you have questions, please use the help function or documentation of your Flash Player or contact the manufacturer or user support.

If you prevent or restrict the installation of cookies, this may, however, result in not all functions of our website being fully usable.

Contact inquiries / contact possibility

If you contact us via contact form or e-mail, the data you provide will be used to process your inquiry. The provision of data is necessary to process and answer your inquiry – without providing it, we cannot answer your inquiry or can only answer it to a limited extent.

The legal basis for this processing is Art. 6 para. 1 lit. b) GDPR.

Your data will be deleted as soon as your request has been fully answered and there are no legal obligations to retain the data, such as in the case of a subsequent contract execution.

Customer account / Registration function

If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g. your name, address, or e-mail address) exclusively for pre-contractual services, for the fulfillment of the contract, or for customer care purposes (e.g. to provide you with an overview of your previous orders with us or to offer you the so-called notepad function). At the same time, we will then store the IP address and the date and time of your registration. This data will naturally not be passed on to third parties.

As part of the further registration process, your consent to this processing will be obtained and reference will be made to this data protection declaration. The data collected by us will be used exclusively for the provision of the customer account.

If you consent to this processing, Art. 6 para. 1 lit. a) GDPR is the legal basis for the processing.

If the opening of the customer account also serves pre-contractual measures or the fulfillment of the contract, the legal basis for this processing is also Art. 6 para. 1 lit. b) GDPR.

You can revoke your consent to the opening and maintenance of the customer account at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To do this, you only need to inform us of your revocation.

The data collected in this regard will be deleted as soon as the processing is no longer necessary. However, we must observe tax and commercial law retention periods.

Newsletter

If you register for our free newsletter, the data requested from you for this purpose, i.e. your e-mail address and - optionally - your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website, as well as the date and time of your registration. As part of the further registration process, we will obtain your consent to the sending of the newsletter, specifically describe the content, and refer to this data protection declaration. We use the data collected exclusively for sending the newsletter – it will therefore not be passed on to third parties.

The legal basis for this is Art. 6 para. 1 lit. a) GDPR.

You can revoke your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To do this, you only need to inform us of your revocation or click the unsubscribe link contained in each newsletter.

User contributions, comments and ratings

We offer you the opportunity to publish questions, answers, opinions or ratings, hereinafter referred to as "contributions", on our website. If you make use of this offer, we will process and publish your contribution, the date and time of submission, and any pseudonym you may have used.

The legal basis for this is Art. 6 para. 1 lit. a) GDPR. You can revoke your consent at any time with effect for the future in accordance with Art. 7 para. 3 GDPR. To do this, you only need to inform us of your revocation.

In addition, we also process your IP and e-mail address. The IP address is processed because we have a legitimate interest in initiating or supporting further steps if your contribution infringes the rights of third parties and/or is otherwise unlawful.

The legal basis in this case is Art. 6 para. 1 lit. f) GDPR. Our legitimate interest lies in any necessary legal defense.

Contract Processing

The data you provide to use our range of goods and/or services will be processed by us for the purpose of contract execution and are necessary in this respect. Conclusion and execution of the contract are not possible without providing your data.

The legal basis for the processing is Art. 6 para. 1 lit. b) GDPR.

We delete the data upon complete contract execution, but must observe tax and commercial law retention periods.

Within the framework of contract processing, we pass on your data to the transport company commissioned with the delivery of goods or to the financial service provider, insofar as the transfer is necessary for goods delivery or for payment purposes.

The legal basis for the transfer of data is then Art. 6 para. 1 lit. b) GDPR.

Facebook

To promote our products and services and to communicate with interested parties or customers, we operate a company presence on the Facebook platform.

On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Facebook's data protection officer can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, from which the mutual obligations arise, can be accessed via the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the resulting processing of personal data, as reproduced below, is Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, and sale and promotion of our products and services.

The legal basis can also be the user's consent in accordance with Art. 6 para. 1 lit. a GDPR to the platform operator. The user can revoke their consent at any time with effect for the future by notifying the platform operator in accordance with Art. 7 para. 3 GDPR.

When you visit our online presence on the Facebook platform, data of the user (e.g. personal information, IP address etc.) is processed by Facebook Ireland Ltd., as the operator of the platform in the EU.

This user data is used for statistical information about the use of our company presence on Facebook. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. Based on these profiles, Facebook Ireland Ltd. can, for example, advertise to users within and outside Facebook based on their interests. If the user is logged into their Facebook account at the time of access, Facebook Ireland Ltd. can also link the data with the respective user account.

If the user contacts us via Facebook, the personal data entered on this occasion will be used to process the inquiry. The user's data will be deleted by us if the user's inquiry has been conclusively answered and no legal retention obligations, such as in the case of a subsequent contract processing, conflict with this.

Facebook Ireland Ltd. may also set cookies for data processing.

If the user does not agree with this processing, they can prevent the installation of cookies by adjusting their browser settings accordingly. Already stored cookies can also be deleted at any time. The settings for this depend on the respective browser. For Flash cookies, processing cannot be prevented via browser settings but by adjusting the Flash player settings. If the user prevents or restricts the installation of cookies, this may result in not all Facebook functions being fully usable.

Further details on processing activities, how to prevent them, and how to delete data processed by Facebook can be found in Facebook's Data Policy:

https://www.facebook.com/privacy/explanation

It cannot be ruled out that processing by Meta Platforms Ireland Limited also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.

Instagram

To promote our products and services and to communicate with interested parties or customers, we maintain a company presence on the Instagram platform.

On this social media platform, we are jointly responsible with Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Instagram's data protection officer can be reached via a contact form:

https://www.facebook.com/help/contact/540977946302970

We have regulated joint responsibility in an agreement regarding the respective obligations within the meaning of the GDPR. This agreement, which sets out the mutual obligations, can be accessed via the following link:

https://www.facebook.com/legal/terms/page_controller_addendum

The legal basis for the resulting processing of personal data, as outlined below, is Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, communication, and sale and promotion of our products and services.

The legal basis may also be the user's consent in accordance with Art. 6 Para. 1 lit. a GDPR given to the platform operator. The user can revoke this consent at any time for the future by notifying the platform operator in accordance with Art. 7 Para. 3 GDPR.

When accessing our online presence on the Instagram platform, user data (e.g., personal information, IP address, etc.) is processed by Facebook Ireland Ltd., as the platform operator in the EU.

This user data is used for statistical information about the use of our company presence on Instagram. Facebook Ireland Ltd. uses this data for market research and advertising purposes, as well as for creating user profiles. Based on these profiles, Facebook Ireland Ltd. can, for example, advertise to users within and outside Instagram based on their interests. If the user is logged into their Instagram account at the time of access, Facebook Ireland Ltd. can also link the data to the respective user account.

If the user contacts us via Instagram, the personal data entered on this occasion will be used to process the request. The user's data will be deleted by us once the user's request has been fully answered and provided that there are no legal retention obligations, such as in the case of subsequent contract processing.

Facebook Ireland Ltd. may also set cookies for data processing.

If the user does not agree with this processing, they can prevent the installation of cookies by adjusting their browser settings accordingly. Already stored cookies can also be deleted at any time. The settings for this depend on the respective browser. For Flash cookies, processing cannot be prevented via browser settings but by adjusting the Flash player settings. If the user prevents or restricts the installation of cookies, this may result in not all Facebook functions being fully usable.

Further details on processing activities, how to prevent them, and how to delete data processed by Instagram can be found in Instagram's Data Policy:

https://help.instagram.com/519522125107875

It cannot be ruled out that processing by Facebook Ireland Ltd. also takes place via Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA.

Pinterest

We maintain an online presence on Pinterest to present our company and services and to communicate with customers/interested parties. Pinterest is a service of Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.

In this respect, we point out that there is a possibility that user data may be processed outside the European Union, particularly in the USA. This may entail increased risks for users, as, for example, subsequent access to user data may be made more difficult. We also do not have access to this user data. Access is exclusively with Pinterest.

You can find Pinterest's privacy policy at

https://policy.pinterest.com/de/privacy-policy

YouTube

We maintain an online presence on YouTube to present our company and services and to communicate with customers/interested parties. YouTube is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, a subsidiary of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043 USA.

In this respect, we point out that there is a possibility that user data may be processed outside the European Union, particularly in the USA. This may entail increased risks for users, as, for example, subsequent access to user data may be made more difficult. We also do not have access to this user data. Access is exclusively with YouTube.

You can find YouTube's privacy policy at

https://policies.google.com/privacy

General Linking to Third-Party Profiles

The provider uses links to the social networks listed below on the website.

The legal basis for this is Art. 6 Para. 1 lit. f GDPR. The provider's legitimate interest lies in improving the website's usability.

The plugins are integrated via a linked graphic. Only by clicking on the corresponding graphic will the user be redirected to the service of the respective social network.

After the customer is redirected, the respective network collects information about the user. This initially includes data such as IP address, date, time, and visited page. If the user is logged into their user account of the respective network at the same time, the network operator may be able to assign the collected information about the user's specific visit to the user's personal account. If the user interacts via a "share" button of the respective network, this information may be stored in the user's personal user account and possibly published. If the user wants to prevent the collected information from being directly assigned to their user account, the user must log out before clicking the graphic. In addition, it is possible to configure the respective user account accordingly.

The following social networks are linked by the provider:

Facebook

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Privacy Policy: https://www.facebook.com/policy.php

Instagram

Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland.

Privacy Policy: https://help.instagram.com/519522125107875

Pinterest

Pinterest Inc., 651 Brannan Street, San Francisco, CA, 94107, USA.

Privacy Policy: https://policy.pinterest.com/de/privacy-policy

Google Analytics

We use Google Analytics on our website. This is a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google."

The Google Analytics service is used to analyze user behavior on our website. The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the analysis, optimization, and economic operation of our website.

Usage and user-related information, such as IP address, location, time, or frequency of visiting our website, is transmitted to a Google server in the USA and stored there. However, we use Google Analytics with the so-called anonymization function. Through this function, Google shortens the IP address already within the EU or the EEA.

The data thus collected is then used by Google to provide us with an evaluation of the visit to our website and the usage activities there. This data can also be used to provide further services related to the use of our website and the use of the internet.

Google states that it will not associate your IP address with other data. Furthermore, Google provides additional data protection information at

https://www.google.com/intl/de/policies/privacy/partners

for you, for example, about the options for preventing data usage.

Google also offers a so-called deactivation add-on along with further information at

https://tools.google.com/dlpage/gaoptout?hl=de

This add-on can be installed with common internet browsers and offers you further control over the data that Google collects when you access our website. The add-on tells Google Analytics' JavaScript (ga.js) that information about the visit to our website should not be transmitted to Google Analytics. However, this does not prevent information from being transmitted to us or to other web analysis services. Of course, you will also find out in this privacy policy whether and which other web analysis services we use.

Google Fonts

We use Google Fonts on our website to display external fonts. This is a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

To enable the display of certain fonts on our website, a connection to the Google server in the USA is established when our website is accessed.

The legal basis is Art. 6 Para. 1 lit. f) GDPR. Our legitimate interest lies in the optimization and economic operation of our website.

Through the connection established with Google when you access our website, Google can determine from which website your request was sent and to which IP address the font display is to be transmitted.

Google offers further information at

https://adssettings.google.com/authenticated

https://policies.google.com/privacy

specifically on options for preventing data use.

Shopify (Shop Software + Web Analytics)

a) Shopify Shop Software

We use "Shopify" to host our shop system, display our offers, and process contracts.

The legal basis is Art. 6 Para. 1 lit. b) GDPR (contract initiation/contract processing).

"Shopify" is the service of a group of companies consisting of Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., Shopify Commerce Singapore Pte. Ltd., and Shopify International Limited.

Insofar as we are based in the European Economic Area (EEA), processing is carried out by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter referred to as "Shopify."

Due to the group of companies, it cannot be ruled out that processing also takes place in Canada and the USA, i.e., outside the EEA. However, an adequate level of data protection is ensured for data transfer to the Canadian Shopify Inc. by an adequacy decision of the European Commission.

Shopify processes the following data on our behalf:

Name, billing and, if applicable, shipping address, email address, payment data, if applicable, company name, if applicable, telephone number, IP address, information about orders, information about the merchant shops supported by Shopify that you visit, as well as information about your device and your internet browser.

Shopify also offers further data protection information at

https://www.shopify.de/legal/datenschutz

further data protection information.

b) Shopify Web Analytics

Insofar as we also use Shopify's web analytics service on our website, Shopify stores cookies on your end device via your internet browser. These cookies transmit further information, such as your location, time, or frequency of visiting our website, to a Shopify server for evaluation.

If you have given your consent for this processing, the legal basis is Art. 6 Para. 1 lit. a GDPR. The legal basis can also be Art. 6 Para. 1 lit. f GDPR. Our legitimate interest lies in the analysis and optimization of our website.

If you do not agree with this processing, you have the option to prevent the storage of the cookie by adjusting a setting in your internet browser. Further information on this can be found above under "Cookies".

Use of PayPal as a Payment Method

If you choose to pay with the online payment service provider PayPal during your ordering process, your contact details will be transmitted to PayPal as part of the order thus triggered. PayPal is a service of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an online payment service provider and trustee and offers buyer protection services.

The personal data transmitted to PayPal usually includes first name, last name, address, telephone number, IP address, e-mail address, or other data required for order processing, as well as data related to the order, such as the number of items, item number, invoice amount and taxes in percentage, invoice information, etc.

This transmission is necessary for processing your order with the payment method you have chosen, in particular for confirming your identity, for administering your payment and the customer relationship. The transmission of your data to PayPal is therefore based on Art. 6 para. 1 lit. b GDPR.

Please note, however: Personal data may also be passed on by PayPal to service providers, subcontractors or other affiliated companies, insofar as this is necessary to fulfil the contractual obligations arising from your order or if the personal data is to be processed on our behalf.

Depending on the payment method selected via PayPal, e.g. invoice or direct debit, the personal data transmitted to PayPal will be transmitted by PayPal to credit agencies. This transmission serves to check your identity and creditworthiness in relation to the order you have placed. You can find out which credit agencies are involved and which data is generally collected, processed, stored and passed on by PayPal in PayPal's privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Klarna "CHECK-OUT"

For the payment processing of orders via our online shop, we use the payment service of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter referred to as "Klarna", on our website.

For this purpose, we have integrated Klarna's so-called Check-Out into the final order page of our online shop.

The legal basis is the fulfilment of the contract according to Art. 6 para. 1 lit. b.) GDPR. In addition, we have a legitimate interest in offering effective and secure payment options, so that a further legal basis results from Art. 6 para. 1 lit. f.) GDPR.

By integrating Klarna, your internet browser loads the Klarna Check-Out page from a Klarna server. This means that the operating system you are using, the type and version of your internet browser, the website from which the Check-Out was requested, the date and time of access and the IP address are transmitted to Klarna – even if you do not interact with the Check-Out page.

As soon as you complete the order in our online shop, the data you have entered into the input fields of the Check-Out page will be processed by Klarna on its own responsibility for the purpose of payment processing.

For the payment methods offered "PayPal" and "Prepayment", the processing is limited to the transfer of payment data to us or PayPal without your further consent.

For the payment methods offered "Purchase on account", "Instalment purchase", "Credit card", "Direct debit" or "Sofort-Überweisung", the following personal data in particular will be processed by Klarna for the purpose of payment processing and identity and creditworthiness checks:

– Contact information, such as name, address, date of birth, gender, e-mail address, telephone number, mobile phone number, IP address, etc.

– Information for order processing, such as product type, product number, price, etc.

– Payment information, such as debit and credit card details (card number, expiry date and CCV code), invoice details, account number, etc.

If you choose "Purchase on account" or "Instalment purchase" as the payment method, Klarna collects and uses personal data and information about your previous payment behaviour to decide whether to grant you the desired payment method. In addition, probability values for your future payment behaviour (so-called scoring) are used. The scoring is calculated on the basis of scientifically recognised mathematical-statistical methods.

Klarna provides additional information on the processing described above and the applicable data protection regulations at

https://cdn.klarna.com/1.0/shared/content/policy/data/de_de/data_protection.pdf

further information on the processing described above and the applicable data protection regulations.

Google AdWords with Conversion Tracking

On our website, we use the advertising component Google AdWords and its so-called conversion tracking. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google".

We use conversion tracking for targeted advertising of our offer. If you have given your consent for this processing, the legal basis is Art. 6 para. 1 lit. a GDPR. The legal basis can also be Art. 6 para. 1 lit. f GDPR. Our legitimate interest lies in the analysis, optimisation and economic operation of our website.

If you click on an ad placed by Google, the conversion tracking we use stores a cookie on your end device. These so-called conversion cookies lose their validity after 30 days and are otherwise not used for your personal identification.

If the cookie is still valid and you visit a specific page of our website, both we and Google can evaluate that you clicked on one of our ads placed with Google and that you were then redirected to our website.

Through the information thus obtained, Google creates a statistic for us about the visit to our website. In addition, we receive information about the number of users who clicked on our ad(s) and about the pages of our website subsequently accessed. However, neither we nor third parties who also use Google AdWords are able to identify you in this way.

You can also prevent or restrict the installation of cookies by adjusting the settings in your internet browser. At the same time, you can delete already stored cookies at any time. However, the necessary steps and measures for this depend on the internet browser you are using. If you have any questions, please use the help function or documentation of your internet browser or contact its manufacturer or support.

Furthermore, Google also offers further information on this topic and, in particular, on the possibilities of preventing data use at

https://services.google.com/sitestats/de.html

https://www.google.com/policies/technologies/ads/

http://www.google.de/policies/privacy/

further information on this topic and, in particular, on the possibilities of preventing data use.

Electronic Right of Withdrawal Function

To exercise the statutory right of withdrawal, we provide an electronic withdrawal function on our website.

For the provision and processing of this function, we use the service Revoq – EU Withdrawal Button by Revoq GmbH.

When using the withdrawal function, the following personal data, in particular, may be processed:

  • First and last name
  • Email address
  • Order number
  • Order or contract details
  • Date and time of the declaration of withdrawal
  • Other information voluntarily submitted by the user

The processing takes place for the purpose of receiving, processing, and documenting declarations of withdrawal, as well as fulfilling our legal obligations in connection with consumer withdrawals.

Legal Basis

Processing is based on Art. 6 para. 1 lit. c GDPR (fulfilment of a legal obligation) and Art. 6 para. 1 lit. b GDPR (performance of a contract or implementation of pre-contractual measures).

Recipient of the Data

For the technical provision of the withdrawal function, data is transmitted to our service provider Revoq – EU Withdrawal Button. According to the provider, processing takes place in compliance with GDPR on servers within the European Union.

Microsoft Clarity

We use Microsoft Clarity on our website, a web analytics service from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Microsoft Clarity allows for the analysis of user behavior on our website by recording mouse movements, clicks, scrolling, and similar interactions. This helps us improve the usability of our online offering and identify technical problems.

Processing is carried out exclusively on the basis of your consent according to Art. 6 para. 1 lit. a GDPR.

The information collected through Microsoft Clarity may be transferred to Microsoft servers in the USA and stored there. Microsoft is certified under the EU-U.S. Data Privacy Framework.

Further information can be found at:
https://privacy.microsoft.com/de-de/privacystatement

Klaviyo

For sending our newsletter and conducting automated marketing activities, we use Klaviyo, a service of Klaviyo Inc., 125 Summer Street, Boston, MA 02110, USA.

If you sign up for our newsletter or interact with our shop, personal data such as name, email address, purchase history, order information, and information about the use of our emails may be processed.

Processing is based on your consent according to Art. 6 para. 1 lit. a GDPR.

Further information can be found at:
https://www.klaviyo.com/legal/privacy

Loox Product Reviews

To display and manage product reviews, we use the Loox service by Loox Online Ltd.

When you submit a review or respond to a review request, personal data such as name, email address, review content, images, and order information may be processed.

Processing is based on your consent according to Art. 6 para. 1 lit. a GDPR, as well as on our legitimate interest according to Art. 6 para. 1 lit. f GDPR in the transparent display of customer reviews.

Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, on our website.

The Meta Pixel allows us to measure the effectiveness of our advertisements and target website visitors with advertising.

In particular, the following data may be processed:

  • Pages visited

  • Content viewed

  • Device information

  • Browser information

  • IP address

  • Purchase and order events

Processing is carried out exclusively on the basis of your consent according to Art. 6 para. 1 lit. a GDPR.

Further information:
https://www.facebook.com/privacy/policy/

Google Analytics 4

If you have given your consent, we use Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 uses technologies to analyze the use of our website. In particular, usage data, device information, IP address (shortened), location data, and interactions on our website may be processed.

Processing is carried out exclusively on the basis of your consent according to Art. 6 para. 1 lit. a GDPR.

Further information:
https://policies.google.com/privacy

Google Ads Conversion Tracking

We use Google Ads Conversion Tracking to measure the success of our advertising campaigns.

Processing is carried out exclusively on the basis of your consent according to Art. 6 para. 1 lit. a GDPR.

Further information:
https://policies.google.com/privacy

Pandectes GDPR Cookie Consent

To manage and document your cookie consents, we use Pandectes GDPR Compliance.

Information about the consents you have given or withdrawn is stored to comply with our legal obligations to provide proof.

The legal basis is Art. 6 para. 1 lit. c GDPR and Art. 6 para. 1 lit. f GDPR.