This English version is provided for convenience only. The German version is legally binding.

Privacy policy

Privacy policy.

Order easily and securely with SSL encryption. 

Privacy policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Not providing it has no consequences. This applies only insofar as no other information is given for the processing operations described below.
"Personal data" means any information relating to an identified or identifiable natural person.

 

Server log files

You can visit our website without providing any personal information. 

Each time our website is accessed, usage data is transmitted by your web browser to us or our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services. 
 

Contact

Controller

Contact us if you wish. The contact details of the controller responsible for data processing can be found in our legal notice.

Customer-initiated contact by email

If you contact us on your own initiative by email for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to handle and answer your enquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice on a potential purchase, preparation of a quotation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If you contact us for other reasons, this data processing is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in handling and answering your enquiry. 

In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.

We use your email address only to handle your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
 

Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of establishing contact.

If the contact serves to carry out pre-contractual measures (e.g. advice on a potential purchase, preparation of a quotation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.

If you contact us for other reasons, this data processing is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in handling and answering your enquiry. 

In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.

We use your email address only to handle your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer account      Orders      

Customer account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data for orders

When you place an order, we collect and process your personal data only insofar as this is necessary to fulfil and process your order and to handle your enquiries. The provision of the data is necessary for the conclusion of the contract. If you do not provide it, no contract can be concluded. The processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you. 

Your data is disclosed, for example, to the shipping companies and dropshipping providers you choose, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of the data transfer is limited to a minimum.
 

Reviews      

Data collection when writing a comment

When you comment on an item or a post, we collect your personal data (name, email address, comment text) only to the extent you provide it. The processing serves the purpose of enabling comments and displaying them. By submitting the comment, you consent to the processing of the transmitted data. The processing is based on Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal. Your personal data will then be deleted.

When your comment is published, only the name you have provided is published.

Origin of orders

If you come to us via an advertisement, a post on social networks or another website, we store with your order how you found us (e.g. name of the advertising campaign, search term, domain of the referring page). We do not set any additional cookie for this and do not pass any data on to third parties. The legal basis is our legitimate interest in evaluating our advertising (Art. 6(1)(f) GDPR).

Cookies

Our website uses cookies. Cookies are small text files that are stored in the web browser or by the web browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your web browser, you can be notified before cookies are set and decide individually whether to accept them, and you can prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all the functions of this website to their full extent.

The following links explain how you can manage cookies (including disabling them) in the most important browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=de
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated below in this privacy policy, we only use these technically necessary cookies for the purpose of making our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser even after you change pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.

The use of cookies or comparable technologies is based on § 25(2) TTDSG (German Telecommunications and Telemedia Data Protection Act). Your personal data is processed on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
 

Plug-ins and other services

Use of Google reCAPTCHA 

On our website we use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). The query serves to distinguish whether an entry is made by a human or by automated, machine processing. For this purpose, your entry is transmitted to Google and used further there. In addition, the IP address and, where applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transferred to the servers of Google LLC in the USA. There is no adequacy decision of the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks.

Your personal data is processed on the basis of Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in protecting our website against automated spying, misuse and SPAM. 

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6(1)(f) GDPR.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy. 

Use of Google Tag Manager

On our website we use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). Tag Manager is a tool we use to manage the integration of web analytics services on our website. It does not analyse usage data itself and, according to Google, does not set any cookies of its own. However, when Tag Manager is loaded, a connection to Google's servers is established, and for technical reasons your IP address as well as information about your browser and device are transmitted to Google.

Tag Manager is only loaded once you consent to the group "Analytics and marketing (Google)" in the cookie notice or choose "Accept all cookies". Without your consent no connection to Google is established (Google Consent Mode v2, default setting "denied").

The legal basis is your consent under Art. 6(1)(a) GDPR; storing information on, and accessing information from, your device is based on Section 25(1) TDDDG (German Telecommunications Digital Services Data Protection Act). Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists.

You can withdraw your consent at any time with effect for the future by opening the cookie settings via the "Cookies" link at the bottom of every page and removing your consent to the group "Analytics and marketing (Google)". The lawfulness of the processing carried out until withdrawal remains unaffected.

Further information can be found at: https://marketingplatform.google.com/about/analytics/tag-manager/use-policy/ and in Google's privacy policy at https://policies.google.com/privacy.

Use of Google Analytics 4

With your consent, we use Google Analytics 4 on our website, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google"). It helps us understand how our website is used, where our visitors come from, which products are viewed and ordered and at which point orders are abandoned, so that we can improve our range and our website.

For this purpose, cookies (e.g. "_ga" and "_ga_Z7Y1BLWY77") are stored in your browser; they contain a randomly generated identifier and recognise your browser on subsequent visits. In particular, the following data is processed: pages visited, date and time of the visit, the previously visited page (referrer), information about browser, operating system, device and screen resolution, the approximate location derived from the IP address (country, region, city) and your interactions on our website: scrolling, clicks on links, site search, file downloads, video engagement and form interactions, viewing products, adding items to the cart, starting the checkout, submitting a contact request and clicks on our telephone number or e-mail address. When you place an order, we transmit the order number, the order value excluding VAT and the items ordered to Google Analytics; we do not transmit your name, address, e-mail address or telephone number to Google Analytics.

Google Analytics 4 does not store full IP addresses; for access from the EU, the IP address is only used to derive the approximate location and is then discarded. We have switched off the settings for voluntarily sharing data with Google (data sharing for Google products and services). The features "Google signals" and "user-provided data collection" are switched off. Google processes the data on our behalf; we have concluded a data processing agreement with Google.

Google Analytics is only loaded via Google Tag Manager once you consent to the group "Analytics and marketing (Google)" in the cookie notice or choose "Accept all cookies". Without your consent, no cookies are set and no data is transmitted to Google.

The legal basis is your consent under Art. 6(1)(a) GDPR; storing information on, and accessing information from, your device is based on Section 25(1) TDDDG. The data is processed by Google within the European Union and may also be transferred to Google LLC in the USA. Google LLC is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission exists.

Storage period: the event data stored in Google Analytics is deleted automatically after 14 months. The cookies "_ga" and "_ga_Z7Y1BLWY77" are stored for up to 2 years unless you delete them earlier or withdraw your consent.

You can withdraw your consent at any time with effect for the future by opening the cookie settings via the "Cookies" link at the bottom of every page and removing your consent to the group "Analytics and marketing (Google)". From the next page view onwards, Google Analytics will no longer be loaded. The lawfulness of the processing carried out until withdrawal remains unaffected.

Further information on Google Analytics and on data protection at Google can be found at: https://support.google.com/analytics/answer/6004245 and https://policies.google.com/privacy.

Data subject rights and storage period

Storage period

After the contract has been fully processed, the data is initially stored for the duration of the warranty period, then in accordance with statutory retention periods, in particular those under tax and commercial law, and is deleted once these periods have expired, unless you have consented to further processing and use.

Rights of the data subject

If the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing and data portability.

In addition, under Art. 21(1) GDPR you have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for the purposes of direct marketing.

Right to lodge a complaint with the supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

Right to object

If the processing of personal data listed here is based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.

Once you have objected, the processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

Shopware Analytics

Purpose of processing:

Together with our store software service provider, we evaluate certain information from our customer base under joint responsibility (e.g. customer group, pages visited, click paths, date and time of the visit, information about the end device used (resolution, resolution density, operating system), referrer URL, information about the browser used, locale, search queries and time zone). This information is processed by an external service provider and forwarded to us in approximate real time so that we can monitor the use of our website and improve our offerings.

Legal basis:

Art. 6 para. 1 letter f GDPR

Data categories:

Derived from core and contact data (the customer group, no individual customer data), usage data, connection data

Recipients of the data:

shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany (as joint controller), IT service provider

The essence of joint responsibility:

The joint responsibility exists between us and shopware AG; the data is collected in our store and then transferred to servers of shopware or its service providers; with the exception of obtaining your consent for the use of cookies or comparable technologies and the fulfillment of these information obligations, all obligations, in particular the implementation of the rights of data subjects, are the responsibility of shopware AG, which you can reach at legal@shopware.com. You can also assert your data subject rights with us; we will then forward your request to shopware AG accordingly. shopware AG can derive behavior patterns on our store from the data collected, but cannot assign this data to you as a person.

Intended third country transfer:

None

Do we store or read personal data on your end device based on your consent?

Yes, see Consent Management for details.