data protection

• Inventory data (name, address)
• Contact data (e-mail, telephone)
• Contract and payment data
• Content data (e.g., chat or form entries)
• Usage data (visits, interactions)
• Meta/communication data (IP address, device information)

• Provision of the online offering
• Contract processing & orders
• Payment processing
• Customer communication
• Marketing & reach measurement
• Analysis & optimization
• Security & fraud prevention

We process personal data exclusively in compliance with the General Data Protection Regulation (GDPR), the TTDSG, and other applicable data protection laws.

Personal data is any data with which you can be personally identified.

This website is operated on the Shopify platform. Shopify may process data in Canada and the USA.

Data processed

• IP address
• Browser and device information
• Usage data
• Order data
• Payment data (partially via payment service providers)

Legal basis

• Art. 6 para. 1 lit. b GDPR (contract fulfillment)
• Art. 6 para. 1 lit. f GDPR (technical operation)

Third country transfer

A transfer to third countries (especially Canada/USA) may take place. This occurs on the basis of:

• EU Standard Contractual Clauses (SCC)
• Data Privacy Framework (DPF), if the provider is certified

When visiting the website, the following data is automatically collected:

• Visited pages
• Time of access
• IP address (shortened/if possible)
• Referrer URL
• Browser type & version
• Operating system

Purpose

• Ensuring stable operation
• Error analysis
• Website security

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest)

Our website uses cookies and similar technologies.

Technically necessary cookies

• Shopping cart
• Login status
• Security features

Optional cookies

• Marketing (Meta Pixel, Google Ads)
• Analytics (Google Analytics)
• Conversion Tracking

Consent

Non-essential cookies are only set after active consent according to Art. 6 para. 1 lit. a GDPR. Consent is obtained via a cookie consent tool with granular selection options.

If you contact us, your data will be processed:

• Name
• Email address
• Message

Purpose: Processing the request

Legal basis: Art. 6 para. 1 lit. b GDPR or Art. 6 para. 1 lit. f GDPR

Storage period: Data will be deleted as soon as the request has been fully processed, unless there are legal retention obligations.

When ordering or creating a customer account, we process:

• Name, address
• Email
• Order history
• Payment information
• Shipping data

Purpose

• Contract processing
• Delivery
• Customer service

Legal basis: Art. 6 para. 1 lit. b GDPR

For payment processing, we use external providers such as:

• Shopify Payments
• PayPal
• Credit card providers

These process:

• Payment data
• Transaction data
• IP address (for fraud prevention)

Data processing is carried out independently by the payment service providers.

Processed data

• Email address
• Optionally, name

Procedure: Double opt-in procedure

Purpose: Marketing and product information

Legal basis: Art. 6 para. 1 lit. a GDPR

You can unsubscribe from the newsletter at any time.

Google Analytics

Google Analytics is used for reach analysis. Processed data includes:

• IP address (shortened)
• Usage behavior
• Page views
• Device information

Legal basis: Consent according to Art. 6 para. 1 lit. a GDPR

IP anonymization: Is activated

Meta Pixel (Facebook/Instagram)

Meta Platforms Pixel is used for conversion tracking. Processes:

• Page interactions
• Purchase behavior
• Device information

Data may be transferred to the USA (SCC/DPF basis).

We may use remarketing technologies from:

• Google Ads
• Meta Ads

Purpose

• Personalized advertising
• Conversion optimization

Legal basis: Consent according to Art. 6 para. 1 lit. a GDPR

This website uses an AI-based chatbot for customer communication.

Processed data

• Entered chat messages
• Technical metadata (IP address, timestamp)
• Possibly order or product inquiries

Purpose

• Automated customer advice
• Product consultation
• Support optimization

Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in efficient customer service) or Art. 6 para. 1 lit. a GDPR (consent, if required)

Notes

• Please do not enter sensitive data
• Content may be processed to improve the system
• Possibly use of external AI providers (e.g., API service providers)

Third-country transfer

If the AI provider is located outside the EU, the transfer takes place on the basis of SCC/DPF.

We may link to the following platforms:

• Instagram
• Facebook
• YouTube
• TikTok

No automatic data transfer occurs when clicking on external links.

Data will only be disclosed if:

• it is necessary for contract fulfillment
• legal obligations exist
• service providers are acting within the framework of order processing

We store personal data only for as long as it is necessary:

• Legal retention obligations (e.g., 6–10 years)
• Contract processing
• Legitimate interest

You have the following rights at all times:

• Information (Art. 15 GDPR)
• Rectification (Art. 16 GDPR)
• Erasure (Art. 17 GDPR)
• Restriction of processing (Art. 18 GDPR)
• Data portability (Art. 20 GDPR)
• Objection (Art. 21 GDPR)

You can withdraw given consents at any time with effect for the future.

You have the right to lodge a complaint with a data protection supervisory authority.

We use technical and organizational measures to protect your data, in particular:

• SSL-/TLS encryption
• Access restrictions
• Security updates

This privacy policy is regularly adjusted to take into account legal or technical changes.