Privacy Policy

1. Information about the Collection of Personal Data and Contact Details of the Data Controller:

1.1 When you visit the website, the company informs you about the handling of your personal data. Personal data includes any information that can identify you personally.

1.2 The data controller for processing personal data on this website, in accordance with the General Data Protection Regulation (GDPR), is Zimmeria.de, with contact information: Email: info@zimmeria.de. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 The company has appointed a data protection officer for this website, who can be reached at:

Zimmeria.de Email: info(at)zimmeria.de

1.4 The website uses SSL/TLS encryption for security reasons and to protect the transmission of personal data and other confidential content, such as orders or inquiries to the data controller. You can recognize an encrypted connection by the “https://” and the padlock symbol in your browser’s address bar.

2. Data Collection when Visiting the Website:

When you visit the website without registering or providing any other information, only data that your browser sends to the server (so-called “server log files”) is collected. The following data is collected for the technical display of the website:

• Visited website
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you accessed the page
• Used browser
• Used operating system
• Used IP address (possibly in anonymized form)

The processing is based on Art. 6(1)(f) of the GDPR, serving the legitimate interest of improving the stability and functionality of the website. The data is not disclosed or used for other purposes, but the server log files may be checked retrospectively in case of concrete indications of unlawful use.

3. Cookies:

To make the visit to the website attractive and enable the use of certain features, the company uses cookies on various pages. Cookies are small text files that are stored on your device. Some of the cookies used are deleted after the end of the browser session (session cookies), while others remain on your device and enable the company or its partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). Cookies may process certain user information such as browser and location data and IP address values. The processing of cookies is based on Art. 6(1)(b) of the GDPR for the performance of a contract or on Art. 6(1)(f) of the GDPR to serve the legitimate interests of optimizing the website’s functionality and providing a customer-friendly and effective browsing experience.

The company may work with advertising partners to make the website more interesting for you. For this purpose, cookies from partner companies may be stored on your hard drive (third-party cookies). Details about the use of such cookies and the scope of the information collected will be provided in separate sections.

You can adjust your browser settings to be informed about the use of cookies and decide on accepting them individually or exclude the acceptance of cookies for specific cases or altogether. The management of cookie settings differs depending on the browser you use. You can find instructions on how to change your cookie settings in the help menu of each browser.

Please note that rejecting cookies may limit the functionality of the website.

4. Contact

When you contact us (e.g., via contact form or email), we collect personal data. The specific data collected via the contact form is apparent from the respective contact form. This data is solely used for the purpose of responding to your inquiry or contacting you and for the associated technical administration. The legal basis for processing the data is our legitimate interest in responding to your request, pursuant to Art. 6(1)(f) of the GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6(1)(b) of the GDPR. Your data will be deleted after the final processing of your inquiry if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided there are no legal retention obligations.

5. Data Processing for Opening a Customer Account and for Contract Processing

According to Art. 6(1)(b) of the GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. The data that is collected is apparent from the respective input forms. You can delete your customer account at any time and can do so by sending a message to the data controller mentioned above. We store and use the data you provide for contract processing. After the full completion of the contract or deletion of your customer account, your data will be blocked in accordance with tax and commercial retention periods and deleted after the expiry of these periods, unless you have expressly consented to the further use of your data or a legally permitted further data use has been reserved, about which we inform you accordingly below.

6. Comment Function

As part of the comment function on this website, in addition to your comment, information on the time the comment was created and the commentator’s chosen user name will be stored and published on the website. Furthermore, your IP address will be logged and saved. This storage of the IP address is done for security reasons and in case the user violates the rights of third parties or posts illegal content through a given comment. We need your email address to contact you if a third party objects to your published content as unlawful. The legal basis for the storage of your data is Art. 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.

7. Use of Your Data for Direct Advertising

Registration for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The mandatory information required for sending the newsletter is solely your email address. The provision of additional data is voluntary and is used to address you personally. For the registration to our newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter if you have explicitly confirmed to us that you agree to receive newsletters. We will then send you a confirmation email asking you to confirm that you want to receive newsletters in the future by clicking on an appropriate link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) of the GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to prevent possible misuse of your email address at a later time. The data collected during the registration for the newsletter will be used exclusively for advertising purposes in the form of the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the data controller mentioned above. After unsubscribing, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

8. Data Processing for Order Processing

8.1 To process your order, we cooperate with the following service providers who support us wholly or partly in the execution of concluded contracts. Some personal data is transmitted to these service providers as specified below.

The personal data collected by us will be passed on to the transport company commissioned with the delivery, as far as this is necessary for the delivery of the goods. Your payment data will be passed on to the assigned payment service provider for payment processing, as far as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you about this below. The legal basis for the transfer of data is Art. 6(1)(b) of the GDPR.

8.2 To fulfill our contractual obligations towards our customers, we work with external shipping partners. We provide your name and delivery address exclusively for the purpose of delivering the goods pursuant to Art. 6(1)(b) of the GDPR to a shipping partner selected by us.

8.3 Use of Special Service Providers for Order Processing

• Easybill Order processing (especially invoicing) is carried out through the service provider “easybill” (easybill GmbH, Düsselstr. 21, 41564 Kaarst). Name, address, and other personal data will be forwarded to easybill in accordance with Art. 6(1)(b) of the GDPR exclusively for the purpose of order processing. Data will only be passed on to the extent necessary for order processing. Details on data protection at easybill and easybill’s privacy policy can be found on easybill’s website at easybill.de.

8.4 Transfer of Personal Data to Shipping Service Providers

• DHL If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Str. 20, 53113 Bonn), we will pass on your email address in accordance with Art. 6(1)(a) of the GDPR before the goods are delivered for the purpose of coordinating a delivery date or to announce delivery status, provided that you have given your express consent during the ordering process. Otherwise, we will only provide the name of the recipient and the delivery address to DHL for the purpose of delivery, in accordance with Art. 6(1)(b) of the GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or transmission of status information regarding the delivery of the goods is not possible. The consent can be withdrawn at any time with future effect against the responsible data controller or against the transport service provider DHL.

• DPD If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstr. 1, 63741 Aschaffenburg), we will pass on your email address and/or telephone number to DPD in accordance with Art. 6(1)(a) of the GDPR prior to the goods being delivered for the purpose of coordinating a delivery date or to announce delivery status, provided that you have given your express consent during the ordering process. Otherwise, we will only provide the name of the recipient and the delivery address to DPD for the purpose of delivery, in accordance with Art. 6(1)(b) of the GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DPD or transmission of status information regarding the delivery of the goods is not possible. The consent can be withdrawn at any time with future effect against the responsible data controller or against the transport service provider DPD.

• UPS If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Str. 1, 41460 Neuss), we will pass on your email address in accordance with Art. 6(1)(a) of the GDPR prior to the goods being delivered for the purpose of coordinating a delivery date or to announce delivery status, provided that you have given your express consent during the ordering process. Otherwise, we will only provide the name of the recipient and the delivery address to UPS for the purpose of delivery, in accordance with Art. 6(1)(b) of the GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with UPS or transmission of status information regarding the delivery of the goods is not possible. The consent can be withdrawn at any time with future effect against the responsible data controller or against the transport service provider UPS.

8.5 Use of Payment Service Providers (Payment Service Providers)

• Amazon Pay If you choose the payment method “Amazon Pay,” the payment processing is carried out by the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter referred to as “Amazon Payments”), to whom we pass on the information you provided during the ordering process together with the information about your order, in accordance with Art. 6(1)(b) of the GDPR. Your data will be passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find further information about Amazon Payments’ privacy policy at https://pay.amazon.com/de/help/201751600

• Stripe

We offer the option of processing the payment transaction via the payment service provider Stripe, ℅ Legal Process, 510, Townsend St., San Francisco, CA 94103 (Stripe). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) of the GDPR). In this context, we transmit the following data to Stripe as far as required for the contract execution (Art. 6(1)(b) of the GDPR).

Cardholder’s name Email address Customer number Order number Bank details Credit card data Valid duration of the credit card Credit card verification number (CVC) Date and time of the transaction Transaction amount Name of the provider Location

The processing of the data indicated under this section is neither legally nor contractually prescribed. Without the transmission of your personal data, we cannot carry out a payment via Stripe. [You have the possibility to choose another payment method.]

Stripe assumes a dual role as a data controller and data processor in the context of data processing activities. As a data controller, Stripe uses your transmitted data to fulfill regulatory obligations. This corresponds to Stripe’s legitimate interest (pursuant to Art. 6(1)(f) of the GDPR) and serves the contract fulfillment (pursuant to Art. 6(1)(b) of the GDPR). We have no influence on this process.

As a data processor, Stripe processes transactions within the payment networks. Within the context of the data processing agreement, Stripe acts solely on our instruction and has contractually obligated itself to comply with data protection regulations in accordance with Art. 28 of the GDPR.

Stripe has implemented compliance measures for international data transfers, which apply to all global activities in which Stripe processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).

Further information on opposition and deletion options with regard to Stripe can be found at: https://stripe.com/privacy-center/legal

We will store your data until the payment transaction is completed. This also includes the period required for processing refunds, debt management, and fraud prevention. [According to [§ 147 AO / § 257 HGB], we have a statutory retention period of [X] years for the following documents: [ ]]

Legal Notice Address

Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland Attention: Stripe Legal

• Paypal If you choose payment via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – “Purchase on Account” or “Installment Payments” via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) in accordance with Art. 6(1)(b) of the GDPR. The data is passed on exclusively for the purpose of payment processing with PayPal and only to the extent necessary for this purpose. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – “Purchase on Account” or “Installment Payments” via PayPal. For this purpose, your payment data may be passed on to credit agencies on the basis of Art. 6(1)(f) of the GDPR on the basis of PayPal’s legitimate interest in determining your ability to pay. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). If score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. In the calculation of the score values, address data, among other things, are included. For further information on data protection law, including the credit agencies used, please refer to PayPal’s data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing.

Please note that the provided information is a translation of the original text. For legally binding purposes, it is essential to consult the official German version provided by the responsible party (Zimmeria.de). The translation is provided for informational purposes only and should not be used as a substitute for legal advice.

9. Contact for Review Reminders

9.1 Own Review Reminder (No Shipping by a Customer Review System)

We use your email address to send you a one-time reminder to submit a review of your order for the review system we use, provided you have given us explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR during or after your order. You can revoke your consent at any time by sending a message to the data controller responsible for processing.

9.2 Review Reminder via ShopVote

If you have given us explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR during or after your order, we will transmit your email address to the review platform ShopVote operated by Blickreif GmbH, Alter Messeplatz 2, 80339 Munich (www.shopvote.de), so that they can send you a review reminder via email. You can revoke your consent at any time by sending a message to the data controller responsible for processing or to the review platform.

9.3 Review Reminder via Trusted Shops

If you have given us explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR during or after your order, we will transmit your email address to the review platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a review reminder via email. You can revoke your consent at any time by sending a message to the data controller responsible for processing or to the review platform.

9.4 Review Reminder via Trustpilot

If you have given us explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR during or after your order, we will transmit your email address to the review platform Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (www.trustpilot.com), so that they can send you a review reminder via email. You can revoke your consent at any time by sending a message to the data controller responsible for processing or to the review platform.

10. Use of Social Media: Social Plugins

10.1 Facebook Plugins with 2-Click Solution

Our website uses so-called social plugins (“plugins”) of the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of the so-called “2-click” solution integrated into the page. Deactivated plugins are recognizable by their gray background. This integration ensures that when you visit a page on our website that contains such plugins, no connection is yet established with Facebook’s servers. Only when you activate the plugins and thus give your consent in accordance with Art. 6 Para. 1 lit. a GDPR for the transfer of data, your browser establishes a direct connection to Facebook’s servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of data that Facebook collects using the plugins. To the best of our knowledge, Facebook receives information about which of our websites you are currently and previously accessing. By integrating the plugins, Facebook also receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in. The information collected (including your IP address) is transmitted directly to a server of Facebook in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a server of Facebook and stored there. The information is also published on Facebook and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transmitted to Facebook.

Facebook Inc. with its headquarters in the USA is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

For the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and setting options for protecting your privacy, please refer to Facebook’s privacy policy: http://www.facebook.com/policy.php

10.2 Google+ Plugins with 2-Click Solution

Our website uses so-called social plugins (“plugins”) of the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of the so-called “2-click” solution integrated into the page. Deactivated plugins are recognizable by their gray background. This integration ensures that when you visit a page on our website that contains such plugins, no connection is yet established with Google+’s servers. Only when you activate the plugins and thus give your consent in accordance with Art. 6 Para. 1 lit. a GDPR for the transfer of data, your browser establishes a direct connection to Google+’s servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Google+. We have no influence on the scope of data that Google+ collects using the plugins. To the best of our knowledge, Google+ receives information about which of our websites you are currently and previously accessing. By integrating the plugins, Google+ also receives information that your browser has accessed the corresponding page of our website, even if you do not have a Google+ profile or are not currently logged in. The information collected (including your IP address) is transmitted directly to a server of Google+ in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a server of Google+ and stored there. The information is also published on Google+ and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transmitted to Google+.

Google LLC with its headquarters in the USA is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

For the purpose and scope of data collection and the further processing and use of data by Google+, as well as your rights and setting options for protecting your privacy, please refer to Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/

10.3 Instagram Plugins with 2-Click Solution

Our website uses so-called social plugins (“plugins”) of the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of the so-called “2-click” solution integrated into the page. Deactivated plugins are recognizable by their gray background. This integration ensures that when you visit a page on our website that contains such plugins, no connection is yet established with Instagram’s servers. Only when you activate the plugins and thus give your consent in accordance with Art. 6 Para. 1 lit. a GDPR for the transfer of data, your browser establishes a direct connection to Instagram’s servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Instagram. We have no influence on the scope of data that Instagram collects using the plugins. To the best of our knowledge, Instagram receives information about which of our websites you are currently and previously accessing. By integrating the plugins, Instagram also receives information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in. The information collected (including your IP address) is transmitted directly to a server of Instagram in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a server of Instagram and stored there. The information is also published on Instagram and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transmitted to Instagram.

Instagram LLC with its headquarters in the USA is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

For the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your rights and setting options for protecting your privacy, please refer to Instagram’s privacy policy: https://help.instagram.com/155833707900388/

10.4 Pinterest Plugins with 2-Click Solution

Our website uses so-called social plugins (“plugins”) of the social network Pinterest, operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA, 94103, USA (“Pinterest”).

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of the so-called “2-click” solution integrated into the page. Deactivated plugins are recognizable by their gray background. This integration ensures that when you visit a page on our website that contains such plugins, no connection is yet established with Pinterest’s servers. Only when you activate the plugins and thus give your consent in accordance with Art. 6 Para. 1 lit. a GDPR for the transfer of data, your browser establishes a direct connection to Pinterest’s servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Pinterest. We have no influence on the scope of data that Pinterest collects using the plugins. To the best of our knowledge, Pinterest receives information about which of our websites you are currently and previously accessing. By integrating the plugins, Pinterest also receives information that your browser has accessed the corresponding page of our website, even if you do not have a Pinterest profile or are not currently logged in. The information collected (including your IP address) is transmitted directly to a server of Pinterest in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a server of Pinterest and stored there. The information is also published on Pinterest and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transmitted to Pinterest.

For the purpose and scope of data collection and the further processing and use of data by Pinterest, as well as your rights and setting options for protecting your privacy, please refer to Pinterest’s privacy policy: https://about.pinterest.com/de/privacy-policy

10.5 Twitter Plugins with 2-Click Solution

Our website uses so-called social plugins (“plugins”) of the microblogging service Twitter, operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”).

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of the so-called “2-click” solution integrated into the page. Deactivated plugins are recognizable by their gray background. This integration ensures that when you visit a page on our website that contains such plugins, no connection is yet established with Twitter’s servers. Only when you activate the plugins and thus give your consent in accordance with Art. 6 Para. 1 lit. a GDPR for the transfer of data, your browser establishes a direct connection to Twitter’s servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Twitter. We have no influence on the scope of data that Twitter collects using the plugins. To the best of our knowledge, Twitter receives information about which of our websites you are currently and previously accessing. By integrating the plugins, Twitter also receives information that your browser has accessed the corresponding page of our website, even if you do not have a Twitter profile or are not currently logged in. The information collected (including your IP address) is transmitted directly to a server of Twitter in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a server of Twitter and stored there. The information is also published on Twitter and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transmitted to Twitter.

Twitter Inc. with its headquarters in the USA is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

For the purpose and scope of data collection and the further processing and use of data by Twitter, as well as your rights and setting options for protecting your privacy, please refer to Twitter’s privacy policy: https://twitter.com/privacy

11. Use of Social Media: Video

Use of YouTube Videos

This website uses the YouTube embedding feature to display and play videos from the provider “YouTube,” which is owned by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

This feature uses the extended privacy mode, which, according to the provider, only starts storing user information when the video is played. When the playback of embedded YouTube videos starts, the provider “YouTube” uses cookies to collect information about user behavior. According to “YouTube,” these cookies are used, among other things, to record video statistics, improve user-friendliness, and prevent abusive actions. If you are logged in to Google, your data will be directly associated with your account when you click on a video. If you do not wish to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 Para. 1 lit. f GDPR based on Google’s legitimate interests in displaying personalized advertising, conducting market research, and/or tailoring its website to meet the needs of users. You have a right to object to the creation of these user profiles, although you must contact YouTube to exercise this right.

Regardless of whether the embedded videos are played, a connection to the Google network “DoubleClick” is established each time this website is accessed, which can trigger further data processing operations without our influence.

Google LLC with its headquarters in the USA is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

For the purpose and scope of data collection and the further processing and use of data by YouTube, as well as your rights and setting options for protecting your privacy, please refer to YouTube’s privacy policy: https://www.google.de/intl/de/policies/privacy

To improve the protection of your data when visiting our website, the videos are embedded in the page using the “advanced privacy mode” provided by YouTube. This means that YouTube does not initially store cookies on your device when you visit the page. However, when you play the videos, YouTube may collect and store personal data. We have no influence on this data collection and cannot control it. For more information, please refer to YouTube’s privacy policy. If you are logged in to your YouTube account while visiting our site, you enable YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account.

12. Online Marketing

Use of Google AdWords Conversion Tracking

This website uses the online advertising program “Google AdWords” and, as part of Google AdWords, the conversion tracking of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to draw attention to our attractive offers on external websites through advertising materials (so-called Google AdWords). We can determine the success of individual advertising campaigns based on the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an ad served by Google AdWords. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and do not serve for personal identification. If the user visits certain pages of this website and the cookie has not expired yet, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked through the websites of AdWords customers. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. The customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in tracking, you can block this usage by deactivating the Google conversion tracking cookie in your internet browser under user settings. You will then not be included in the conversion tracking statistics. We use Google AdWords on the basis of our legitimate interest in targeted advertising pursuant to Art. 6 (1) lit. f GDPR.

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

You can find more information about Google’s data protection regulations at the following internet address: http://www.google.de/policies/privacy/

You can permanently deactivate cookies for ad preferences by preventing them from being stored on your computer or by downloading and installing the browser plug-in available at the following link: http://www.google.com/settings/ads/plugin?hl=en

Please note that certain functions of this website may not be used or may only be used to a limited extent if you have deactivated the use of cookies.

13. Web Analytics Services

Google Universal Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses “cookies,” which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States.

This website uses Google Analytics exclusively with the extension “_anonymizeIp()” which ensures the anonymization of the IP address by shortening it and excludes any direct personal reference. Within member states of the European Union or other parties to the Agreement on the European Economic Area, Google will truncate the IP address before transmitting it to the USA in exceptional cases only and in doing so, will comply with Article 6 (1) lit. f GDPR, our legitimate interest in statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data from Google.

You can prevent the storage of cookies by selecting the appropriate settings in your browser; however, we would like to point out that in this case, you may not be able to use all the features of this website to their full extent. You can also prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plug-in available under the following link: http://tools.google.com/dlpage/gaoptout?hl=en

Alternatively, you can click on the following link to prevent Google Analytics from collecting data on this website in the future. This will set an opt-out cookie on your device, which will prevent your data from being collected when you visit this website in the future: Google Analytics Opt-out

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

For more information on how Google Analytics handles user data, please refer to Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=en

14. Retargeting / Remarketing / Recommendation Advertising

14.1 Facebook Custom Audience using Pixel Method

This website uses the “Facebook Pixel” of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). With the explicit consent, this enables the tracking of users’ behavior after they have seen or clicked on a Facebook advertisement. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising efforts.

The data collected is anonymous to us, so it does not allow us to draw conclusions about the identity of users. However, Facebook stores and processes the data, enabling a connection to the respective user profile and allowing Facebook to use the data for its advertising purposes in accordance with Facebook’s data policy (https://www.facebook.com/about/privacy/). You can also enable Facebook and its partners to display advertisements both on and off Facebook. For this purpose, a cookie may be stored on your computer. These processing operations are carried out only with your explicit consent in accordance with Art. 6 (1) lit. a GDPR.

Consent to the use of the Facebook Pixel is only permitted for users who are at least 13 years old. If you are younger, please ask your legal guardian for permission.

Facebook Inc., based in the USA, is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

To disable the use of cookies on your computer, you can set your internet browser to prevent cookies from being stored on your computer in the future or to delete previously stored cookies. However, deactivating all cookies may mean that some functions on our website can no longer be executed. You can also disable cookies by third-party providers such as Facebook on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/

14.2 Google AdWords Remarketing

Our website uses the features of Google AdWords Remarketing, which allows us to advertise this website in Google search results as well as on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and based on the pages you visit. The processing is carried out on the basis of our legitimate interest in optimal marketing of our website pursuant to Art. 6 (1) lit. f GDPR.

Further data processing will only take place if you have given your consent to Google to link your internet and app browsing history to your Google account and to use information from your Google account to personalize advertisements you see on the web. If you are logged in to Google during your visit to our website, Google will use your data along with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form target groups.

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can obtain information about the setting of cookies and make adjustments to them from the Digital Advertising Alliance at the following internet address: www.aboutads.info. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

For more information about advertising and Google’s privacy policy, please visit the following website: http://www.google.com/policies/technologies/ads/

15. Tools and Miscellaneous

15.1 Google Maps

On our website, we use Google Maps (API) provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service that displays interactive (land) maps to visually represent geographical information. By using this service, our location will be shown to you, making it easier for you to find directions.

When you access the subpages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers in the USA, regardless of whether Google provides a user account through which you are logged in or if no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as user profiles and evaluates them. Such evaluation is carried out in accordance with Art. 6 (1) lit.f GDPR based on Google’s legitimate interests in displaying personalized advertising, conducting market research, and/or optimizing its website according to users’ needs. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube.

Google LLC, based in the USA, is certified for the US-European data protection agreement “Privacy Shield,” which guarantees compliance with the data protection level applicable in the EU.

If you do not consent to the future transmission of your data to Google when using Google Maps, you can completely deactivate the Google Maps web service by disabling JavaScript in your browser. In this case, Google Maps, and therefore the map display on this website, cannot be used.

You can view Google’s terms of use at http://www.google.de/intl/en/policies/terms/regional.html, and the additional terms of use for Google Maps can be found at https://www.google.com/intl/en_US/help/terms_maps.html

For detailed information on privacy in connection with the use of Google Maps, please visit Google’s website (“Google Privacy Policy”): http://www.google.de/intl/en/policies/privacy/

15.2 Trusted Shops Trustbadge

To display our Trusted Shops seal of approval and offer the Trusted Shops membership for buyers after placing an order, this website includes the Trusted Shops Trustbadge. This serves to safeguard our legitimate interests in the optimal marketing of our offer pursuant to Art. 6 (1) lit. f GDPR. The Trustbadge and the services advertised are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which may include your IP address, date and time of access, transferred data volume, and the requesting provider (access data) and documents the access. These access data are not evaluated and are automatically overwritten no later than seven days after the end of your website visit. Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered for their use. In this case, the contractual agreement between you and Trusted Shops applies.

16. Rights of the Data Subject

16.1 The applicable data protection law grants you comprehensive rights with respect to the processing of your personal data by the data controller. These rights (information and intervention rights) are explained below:

• Right to information according to Art. 15 GDPR: You have the right to obtain confirmation as to whether or not personal data concerning you is being processed, and, where that is the case, access to the personal data and the following information: the purposes of the processing, the categories of personal data concerned, the recipients or categories of recipients to whom the personal data has been or will be disclosed, the envisaged period for which the personal data will be stored, the existence of the right to request rectification, erasure, restriction of processing, or objection, the right to lodge a complaint with a supervisory authority, the source of your personal data if it has not been collected from you, and the existence of automated decision-making, including profiling, and, if so, meaningful information about the logic involved, as well as the significance and the envisaged consequences of such processing.
• Right to rectification according to Art. 16 GDPR: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and the right to have incomplete personal data completed.
• Right to erasure (“right to be forgotten”) according to Art. 17 GDPR: You have the right to obtain the erasure of personal data concerning you without undue delay under certain circumstances.
• Right to restriction of processing according to Art. 18 GDPR: You have the right to obtain restriction of processing under certain circumstances.
• Right to be informed according to Art. 19 GDPR: If you have exercised your right to rectification, erasure, or restriction of processing, the data controller is obliged to communicate any rectification or erasure of personal data or restriction of processing to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort.
• Right to data portability according to Art. 20 GDPR: You have the right to receive the personal data concerning you in a structured, commonly used, and machine-readable format or to request the transmission of this data to another controller, under certain circumstances.
• Right to withdraw consent according to Art. 7 (3) GDPR: You have the right to withdraw your consent to the processing of personal data at any time with effect for the future. In the event of withdrawal, the data concerned will be deleted immediately, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint according to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work, or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.

16.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO SUCH PROCESSING AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING, OR DEFENDING LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

17. Duration of Storage of Personal Data

The duration of the storage of personal data is based on the respective legal retention period (e.g., commercial and tax retention periods). After the expiry of this period, the corresponding data is routinely deleted, provided it is no longer necessary for the fulfillment or initiation of a contract and/or there is no longer a legitimate interest on our part in further storage.