1 — INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1 Welcome to our website and thank you for your interest. Below we inform you about the processing of your personal data when you use our website. Personal data is any information that can be used to identify you personally.

1.2 The controller responsible for the processing of data on this website within the meaning of the General Data Protection Regulation (GDPR) is Eva Bled. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the operator). You can recognize an encrypted connection by the character string "https://" and the padlock symbol in the address bar of your browser.

2 — DATA COLLECTION WHEN YOU VISIT OUR WEBSITE

If you use our website for informational purposes only — that is, if you do not register or otherwise provide us with information — we only collect the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary to display the website:

• Websites visited
• Access date and time
• Amount of data transferred in bytes
• Source/link from which you came to the page
• Browser used
• Operating system used
• IP address used (if necessary in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and operation of our website. The data will not be passed on or used in any other way. We reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

3 — COOKIES

To make your visit to our website more enjoyable and to enable you to use certain functions, we use so-called cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted at the end of your browser session, i.e. when you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies).

When set, cookies collect and process certain information about the user, such as browser and location data and IP address values. Persistent cookies are automatically deleted after a certain period of time, which may vary depending on the cookie.

In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). If the individual cookies we have implemented also process personal data, the processing is carried out in accordance with Art. 6(1)(b) GDPR for the performance of a contract or in accordance with Art. 6(1)(f) GDPR to protect our legitimate interests in the best possible functioning of the website and a user-friendly and efficient design of the website.

We may work with advertising partners who help us make our website more interesting for you. For this purpose, cookies from partner companies (third-party cookies) may also be stored on your hard drive when you visit our website.

Note: You can set your browser to notify you when cookies are set, so that you can decide individually whether to accept them, or to refuse to accept cookies for specific cases or in general. Each browser differs in how it manages cookie settings. Please note that the functionality of our website may be limited if cookies are not accepted.

Cookie settings in your browser:

• Internet Explorer: support.microsoft.com/help/17442
• Firefox: support.mozilla.org/kb/cookies-erlauben-und-ablehnen
• Chrome: support.google.com/chrome/answer/95647
• Safari: support.apple.com/kb/ph21411
• Opera: help.opera.com/en/latest/web-preferences/#cookies

4 — CONTACT

When you contact us (e.g. via a contact form or email), personal data is collected. Which data is collected in the case of a contact form is clear from the relevant form. This data is stored and used exclusively for the purpose of answering your inquiry or contacting you and for the related technical administration.

The legal basis for data processing is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact is intended to conclude a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted after your inquiry has been finally processed, provided that there are no legal retention obligations.

5 — DATA PROCESSING WHEN OPENING A USER ACCOUNT AND PROCESSING CONTRACTS

In accordance with Art. 6(1)(b) GDPR, we will continue to collect and process personal data if you provide it to us for the performance of a contract or when opening a user account. Which data is collected is clear from the relevant entry forms.

You can delete your user account at any time by sending a message to the above-mentioned address of the controller. We store and use the data you provide to us for the purpose of processing the contract. After the contract has been fully processed or your user account has been deleted, your data will be blocked, taking into account tax and business retention periods, and deleted after these periods have expired, unless you have expressly consented to the further use of your data.

6 — USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 — Newsletter registration

If you register to receive our e-mail newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your e-mail address. We use the so-called double opt-in procedure to send the newsletter. This means that we only send you the e-mail newsletter after you have explicitly confirmed your consent to receive the newsletter.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store your IP address, which is assigned by your Internet service provider (ISP), as well as the date and time of registration. You can unsubscribe from the newsletter at any time via the link provided in the newsletter. After unsubscribing, your e-mail address will be immediately deleted from our newsletter distribution list.

6.2 — Email newsletter for existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers of similar goods or services from our range by email. We do not require your separate consent for this purpose. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6(1)(f) GDPR. You have the right to object at any time, with future effect, to the use of your email address for advertising purposes.

7 — DATA PROCESSING FOR FULFILLING ORDERS

7.1 The personal data we collect will be passed on to the transport company authorised to deliver the goods as part of the contract processing, if this is necessary for the delivery of the goods. We will pass on your payment details to the authorised credit institution as part of the payment processing, if this is necessary for the payment processing. The legal basis for the data transfer is Art. 6(1)(b) GDPR.

7.2 — Payment service providers

SOFORT: When selecting the "SOFORT" payment method, payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany, part of the Klarna Group. Your data is passed on exclusively for the purpose of processing the payment and only to the extent necessary for this.

8 — EVALUATION REMINDER

We use your email address for a one-time reminder to submit a rating for your order for the rating system we use, provided that you have given us your explicit consent during or after your order in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time by sending a message to the data controller.

9 — USE OF SOCIAL NETWORKS: SOCIAL PLUGINS

9.1 — Facebook Plugins (Shariff Solution)

Our website uses so-called social plugins of the social network Facebook, which is operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA. In order to increase the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins, but only via an HTML link. This ensures that no connection to the Facebook servers is established when you access a page of our website that contains such buttons. After clicking on the button, a new browser window opens, which opens a Facebook page where you can interact with the plugins.

9.2 — Google+ Plugins (Shariff solution)

Our website uses social plugins from the social network Google+, which is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. To protect your data, the same Shariff HTML connection solution is used, which ensures that no direct connection to Google servers is established until you actively click on the button.

9.3 — Instagram Plugin (Shariff Solution)

Our website uses social plugins from the online service Instagram, which is operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA. The same Shariff HTML link solution applies, which ensures that no connection to Instagram servers is established until you actively click on the button.

10 — ONLINE MARKETING

10.1 — DoubleClick by Google

This website uses the online marketing tool DoubleClick from Google (Google LLC). DoubleClick uses cookies to show relevant advertisements to users, improve campaign performance reports or prevent the user from seeing the same advertisement multiple times. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6(1)(f) GDPR. According to Google, DoubleClick cookies do not contain any personal information.

10.2 — Google AdWords Conversion Tracking

This website uses the online advertising program Google AdWords and its conversion tracking. We use Google AdWords to highlight our attractive offers on external websites. Conversion tracking cookies are set when a user clicks on a Google AdWords ad. These cookies usually expire after 30 days and are not used for personal identification. The processing is based on our legitimate interest in accordance with Art. 6(1)(f) GDPR.

11 — WEB ANALYTICS SERVICES

Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC. Google Analytics uses cookies to help analyze your use of the website. This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which ensures anonymization of the IP address by shortening it and excluding a direct personal connection.

Google will use this information on our behalf to evaluate your use of the website, compile reports on website activity and provide other services relating to website and internet use. The IP address transmitted by your browser within the framework of Google Analytics will not be merged with other Google data.

This website also uses Google Analytics to analyze visitor flows across devices via the user ID. When you first visit the site, a unique, permanent and anonymized ID is assigned, which is set across devices. The user ID does not contain any personal data and is not passed on to Google. You can object to the collection and storage of data via the user ID at any time with future effect.

12 — RETARGETING / REMARKETING / REFERRAL ADVERTISING

Facebook Custom Audience (Pixel)

This website uses the "Facebook Pixel" from Facebook Inc. If explicit consent is given, the user's behavior after seeing or clicking on an advertisement on Facebook can be tracked. This process serves to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes. The data collected is anonymous for us. The data is stored and processed by Facebook. Processing only takes place on the basis of explicit consent in accordance with Art. 6(1)(a) GDPR. Consent to the use of Facebook Pixel can only be given by users who are 13 years or older.

Google AdWords Remarketing

Our website uses Google AdWords remarketing functions. Google sets a cookie on your device's browser that automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you have visited. The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR. Further data processing will only take place if you have consented to Google associating your internet and app usage with your Google account.

13 — RIGHTS OF THE INDIVIDUAL TO WHOM PERSONAL DATA RELATES

13.1 The relevant data protection regulations grant you extensive individual rights (rights of access and interference) against the controller regarding the processing of your personal data:

• Right of access (Art. 15 GDPR): Right to information about the personal data processed, the purposes of processing, categories, recipients, intended retention period and other facts.
• Right to rectification (Art. 16 GDPR): The right to immediately correct inaccurate data and/or complete incomplete data we hold about you.
• Right to erasure (Art. 17 GDPR): The right to request the erasure of your personal data if the conditions set out in Art. 17(1) GDPR are met.
• Right to restriction of processing (Art. 18 GDPR): The right to request restriction of processing of your personal data.
• Right to information (Art. 19 GDPR): The right to be informed of all recipients to whom personal data have been disclosed.
• Right to data portability (Art. 20 GDPR): The right to receive your personal data in a structured, commonly used and machine-readable format.
• Right to withdraw consent (Art. 7(3) GDPR): Right to withdraw consent at any time, with future effect.
• Right to complain (Art. 77 GDPR): Right to lodge a complaint with a supervisory authority.

13.2 — Right to object

Right to object: If we process your personal data on the basis of our overriding legitimate interest in the context of a weighing of interests, you have the right to object to this processing at any time, with future effect, on grounds relating to your particular situation. If you exercise your right to object, we will no longer process the data concerned. However, further processing is reserved if we demonstrate compelling legitimate grounds which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

Direct advertising: If we process your personal data for the purposes of direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising. If you exercise your right to object, we will cease processing the data concerned for the purposes of direct advertising.

14 — PERSONAL DATA RETENTION PERIOD

The retention period of personal data is based on the relevant statutory retention period (e.g. business and tax retention periods). After this period has expired, the relevant data is routinely deleted if it is no longer required for the fulfillment or conclusion of a contract and/or if there is no legitimate interest on our part in its continued storage.