Privacy Policy
Privacy Policy
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided in the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Contact
Controller
Please feel free to contact us. The controller responsible for data processing is: Mathias Radden, Gotenstr. 3, 65795 Hattersheim Germany, +49 152 05235182 , m2m.smartek@gmail.com
Customer-initiated contact by e-mail
If you initiate business contact with us via e-mail, we will collect your personal data (name, e-mail address, message text) only to the extent provided by you. Data processing serves the purpose of processing and responding to your contact request.
If the contact serves to perform pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your e-mail address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, provided you have not consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. Data processing serves the purpose of establishing contact.
If the contact serves to perform pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your e-mail address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, provided you have not consented to further processing and use.
WhatsApp Business
If you initiate business contact with us via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you reside outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
Data processing serves the purpose of processing and responding to your contact request. For this purpose, we collect and process your mobile phone number stored on WhatsApp, your name if provided, and other data to the extent provided by you. We use a mobile device for the service, the address book of which stores only data of users who have contacted us via WhatsApp. No personal data is therefore passed on to WhatsApp without you having already consented to this vis-à-vis WhatsApp.
Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under the TADPF and has thus committed to complying with European data protection principles. If the contact serves to perform pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in providing a quick and easy way to contact us as well as in answering your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your personal data only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, provided you have not consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Orders
Reviews Advertising
Use of Judge.me
We use the review system "Judge.me" from Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; "Judge.me") on our website.
Judge.me enables us to collect customer reviews and display them on our website in order to provide you with an insight into the quality of our services.
After an order, you may receive an invitation to submit a review from us or Judge.me and subsequently submit a review. In this process, the following data, among others, may be processed by us or Judge.me: e-mail address, name, phone number, address, information about your device (IP address, information about your web browser and the operating system used), information about the purchased product or the service used (order number, product details), the content of your review and the star rating you gave, your product photos or videos (if you have attached them to your product review). This data may also be used for the purpose of verifying your review.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. For the United Kingdom, there is an adequacy decision by the EU Commission.
Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer takes place on the basis of special contracts approved for use in the United Kingdom that offer the same protection that personal data has in the United Kingdom.
The use of cookies or comparable technologies occurs with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1)(a) GDPR, provided you have expressly agreed to the transfer of your data and the receipt of the review request. You can withdraw your consent at any time without affecting the legality of the processing carried out on the basis of the consent until withdrawal.
Further information on data protection when using Judge.me can be found at: https://judge.me/privacy.
We use your email address to send you information and offers via our newsletter, provided you have expressly consented to this. Data processing is exclusively for the purpose of promotional contact. For this purpose, we process your email address and any additional data you have voluntarily provided when subscribing to our newsletter.
Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will subsequently be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address on a so-called "blacklist" to prevent you from receiving further newsletter emails from us in the future. This storage is based on Art. 6 (1) (f) GDPR, based on our and your legitimate interest in preventing the reuse of your email address for sending our newsletters. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Inventory Management
Use of an external inventory management system
We use an inventory management system to process contracts within the framework of order processing. For this purpose, the personal data collected during your order is transmitted to
plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 (1) (b) GDPR.
Payment service provider
Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of offering you payment via the PayPal Express service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, device location) when the website is accessed. Cookies may also be used for this purpose. These cookies allow your browser to be recognized.
The processing of your personal data is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in providing a customer-oriented selection of various payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR.
Cookies may be stored in this process, which allow for the recognition of your browser. The resulting data processing is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in providing a customer-oriented selection of various payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies if necessary. To do this, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received regarding the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values), which are calculated based on scientifically recognized mathematical-statistical methods and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with legal provisions. Data processing serves the purpose of conducting a credit check for the initiation of a contract. Processing is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in protection against payment default when PayPal provides advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR by notifying PayPal. Providing the data is necessary for the conclusion of the contract with your preferred payment method. Failure to provide it will result in the contract not being able to be concluded using the payment method you selected.
Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6 (1) (b) GDPR. To execute this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6 (1) (b) GDPR. Local third-party providers may include, for example:
Purchase on account via PayPal
When paying via the purchase on account payment method, the data required for payment processing is first transmitted to PayPal. To execute this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR. Ratepay may conduct a credit check based on mathematical-statistical methods (probability or score values) using credit agencies according to the procedure described above. Data processing serves the purpose of conducting a credit check for the initiation of a contract. Processing is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in protection against payment default when Ratepay provides advance payment. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Shopify Payments
We use the "Shopify Payments" payment service from Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). Data processing serves the purpose of being able to offer you payment via the Shopify Payments service. By selecting and using a corresponding "Shopify Payments" method, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR.
Stripe reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies if necessary. To do this, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received regarding the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values), which are calculated based on scientifically recognized mathematical-statistical methods and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with legal provisions. Data processing serves the purpose of conducting a credit check for the initiation of a contract. Processing is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in protection against payment default when Stripe provides advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR by notifying Stripe. Providing the data is necessary for the conclusion of the contract with your preferred payment method. Failure to provide it will result in the contract not being able to be concluded using the payment method you selected.
Further information on data processing when using the Shopify Payments service can be found in Shopify's privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing for payment processing via the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again.
Analysis
Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
Data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services to the website operator related to website and internet usage.
In this context, the following information, among others, may be collected: IP address, date and time of the page visit, click path, information about the browser and device you are using, visited pages, referrer URL (website through which you reached our website), location data, and purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
The IP address is previously truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
The processing of your personal data takes place with your consent based on Art. 6 (1) (a) GDPR. You may revoke your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
The information generated in this way about your use of this website is generally transferred to a Google server in the USA and stored there. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and has thus committed to complying with European data protection principles. Both Google and US government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites, at https://policies.google.com/privacy?hl=de&gl=de, and at https://business.safety.google/privacy/.
Plug-ins and Miscellaneous
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website. When accessing our website, information is automatically sent to the Händlerbund e.V. server by the browser used on your device. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until automated deletion:
Duration of Storage
After complete processing of the contract, the data is initially stored for the duration of the warranty period, then taking into account statutory, especially tax and commercial law retention periods, and then deleted after the period expires, unless you have consented to further processing and use.
Rights of the Data Subject
Provided that legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right to access, to rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) (f) GDPR, as well as to processing for the purpose of direct marketing.
Right to Lodge a Complaint with the Supervisory Authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You can file a complaint with the supervisory authority responsible for us, among others, which you can reach at the following contact details:
Hessischer Beauftragter für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Tel.: +49 611 14080
Fax: +49 611 1408900 or +49 611 1408901
E-mail: poststelle@datenschutz.hessen.de
Right to Object
If the personal data processing listed here is based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation with effect for the future.
After an objection is made, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided in the subsequent processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal information.
Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of retrieval, the IP address, the volume of data transferred, and the requesting provider.
Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website as well as improving our services.
Your data may be transmitted to and processed in third countries outside the EU, in particular to Canada and the USA. For Canada, there is an adequacy decision by the EU Commission. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website as well as improving our services.
Contact
Controller
Please feel free to contact us. The controller responsible for data processing is: Mathias Radden, Gotenstr. 3, 65795 Hattersheim Germany, +49 152 05235182 , m2m.smartek@gmail.com
Customer-initiated contact by e-mail
If you initiate business contact with us via e-mail, we will collect your personal data (name, e-mail address, message text) only to the extent provided by you. Data processing serves the purpose of processing and responding to your contact request.
If the contact serves to perform pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your e-mail address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, provided you have not consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. Data processing serves the purpose of establishing contact.
If the contact serves to perform pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your e-mail address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, provided you have not consented to further processing and use.
Collection and processing when using the cancellation button
If you have concluded a contract via our online presence, we provide a cancellation function (cancellation button) through which you can submit your notice of cancellation directly.
When using the cancellation function, we collect your personal data (name, e-mail address, information identifying the contract or part of the contract you wish to cancel, as well as the time (date and time) of sending the cancellation notice) only to the extent provided by you. Data processing serves the purpose of providing you with the legally required option to cancel your contract as well as the proper processing of your cancellation.
If the contact relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. Otherwise, data processing is carried out on the basis of Art. 6(1)(c) GDPR, as we are legally obliged to provide you with a cancellation function on our online presence.
We use your e-mail address only to process your cancellation notice. Your data will subsequently be deleted in compliance with statutory retention periods, provided you have not consented to further processing and use.
The processing of your personal data serves the purpose of fulfilling legal requirements for the design of the cancellation function in a legally secure manner and is carried out on the basis of Art. 6(1)(c) GDPR. This data processing is also carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in being able to provide you with a user-friendly cancellation option. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
If you initiate business contact with us via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you reside outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
Data processing serves the purpose of processing and responding to your contact request. For this purpose, we collect and process your mobile phone number stored on WhatsApp, your name if provided, and other data to the extent provided by you. We use a mobile device for the service, the address book of which stores only data of users who have contacted us via WhatsApp. No personal data is therefore passed on to WhatsApp without you having already consented to this vis-à-vis WhatsApp.
Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under the TADPF and has thus committed to complying with European data protection principles. If the contact serves to perform pre-contractual measures (e.g., consultation for purchase interest, offer preparation) or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in providing a quick and easy way to contact us as well as in answering your inquiry. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.
We use your personal data only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, provided you have not consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Orders
Collection, processing and transfer of personal data for orders
When ordering, we only collect and process your personal data insofar as this is necessary for the fulfillment and processing of your order as well as for the processing of your inquiries. The provision of data is necessary for the conclusion of a contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data is passed on, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transfer is limited to a minimum.
Your data may be transmitted to and processed in third countries outside the EU, in particular to Canada and the USA. For Canada, there is an adequacy decision by the EU Commission. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those of the EU Commission's standard contractual clauses.Reviews Advertising
Use of Judge.me
We use the review system "Judge.me" from Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; "Judge.me") on our website.
Judge.me enables us to collect customer reviews and display them on our website in order to provide you with an insight into the quality of our services.
After an order, you may receive an invitation to submit a review from us or Judge.me and subsequently submit a review. In this process, the following data, among others, may be processed by us or Judge.me: e-mail address, name, phone number, address, information about your device (IP address, information about your web browser and the operating system used), information about the purchased product or the service used (order number, product details), the content of your review and the star rating you gave, your product photos or videos (if you have attached them to your product review). This data may also be used for the purpose of verifying your review.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. For the United Kingdom, there is an adequacy decision by the EU Commission.
Your data may be transferred to the USA. For the USA, there is an adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer takes place on the basis of special contracts approved for use in the United Kingdom that offer the same protection that personal data has in the United Kingdom.
The use of cookies or comparable technologies occurs with your consent on the basis of § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1)(a) GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 (1)(a) GDPR, provided you have expressly agreed to the transfer of your data and the receipt of the review request. You can withdraw your consent at any time without affecting the legality of the processing carried out on the basis of the consent until withdrawal.
Further information on data protection when using Judge.me can be found at: https://judge.me/privacy.
Review reminder
After your order, we would like to ask you to review your purchase with us.
For this purpose, we use your personal data (name, e-mail address, order information) independently of the contract fulfillment to send you a review reminder by e-mail after an order has been placed, provided you have expressly consented to this.
Processing is carried out on the basis of Art. 6 (1)(a) GDPR with your consent. You can withdraw your consent at any time by using the corresponding link in the e-mail or by notifying us, without affecting the legality of the processing carried out on the basis of the consent until withdrawal.
Use of email address for sending newslettersAfter your order, we would like to ask you to review your purchase with us.
For this purpose, we use your personal data (name, e-mail address, order information) independently of the contract fulfillment to send you a review reminder by e-mail after an order has been placed, provided you have expressly consented to this.
Processing is carried out on the basis of Art. 6 (1)(a) GDPR with your consent. You can withdraw your consent at any time by using the corresponding link in the e-mail or by notifying us, without affecting the legality of the processing carried out on the basis of the consent until withdrawal.
We use your email address to send you information and offers via our newsletter, provided you have expressly consented to this. Data processing is exclusively for the purpose of promotional contact. For this purpose, we process your email address and any additional data you have voluntarily provided when subscribing to our newsletter.
Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing based on consent before its withdrawal.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will subsequently be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address on a so-called "blacklist" to prevent you from receiving further newsletter emails from us in the future. This storage is based on Art. 6 (1) (f) GDPR, based on our and your legitimate interest in preventing the reuse of your email address for sending our newsletters. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Inventory Management
Use of an external inventory management system
We use an inventory management system to process contracts within the framework of order processing. For this purpose, the personal data collected during your order is transmitted to
plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 (1) (b) GDPR.
Payment service provider
Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of offering you payment via the PayPal Express service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, device location) when the website is accessed. Cookies may also be used for this purpose. These cookies allow your browser to be recognized.
The processing of your personal data is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in providing a customer-oriented selection of various payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. Data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR.
Cookies may be stored in this process, which allow for the recognition of your browser. The resulting data processing is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in providing a customer-oriented selection of various payment methods. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay Later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies if necessary. To do this, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received regarding the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values), which are calculated based on scientifically recognized mathematical-statistical methods and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with legal provisions. Data processing serves the purpose of conducting a credit check for the initiation of a contract. Processing is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in protection against payment default when PayPal provides advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR by notifying PayPal. Providing the data is necessary for the conclusion of the contract with your preferred payment method. Failure to provide it will result in the contract not being able to be concluded using the payment method you selected.
Third-party providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6 (1) (b) GDPR. To execute this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6 (1) (b) GDPR. Local third-party providers may include, for example:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Purchase on account via PayPal
When paying via the purchase on account payment method, the data required for payment processing is first transmitted to PayPal. To execute this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR. Ratepay may conduct a credit check based on mathematical-statistical methods (probability or score values) using credit agencies according to the procedure described above. Data processing serves the purpose of conducting a credit check for the initiation of a contract. Processing is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in protection against payment default when Ratepay provides advance payment. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of Shopify Payments
We use the "Shopify Payments" payment service from Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). Data processing serves the purpose of being able to offer you payment via the Shopify Payments service. By selecting and using a corresponding "Shopify Payments" method, the data required for payment processing is transmitted to Stripe in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR.
Stripe reserves the right to obtain a credit report based on mathematical-statistical methods using credit agencies if necessary. To do this, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received regarding the statistical probability of a payment default for a balanced decision on the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values), which are calculated based on scientifically recognized mathematical-statistical methods and whose calculation includes, among other things, address data. Your legitimate interests are taken into account in accordance with legal provisions. Data processing serves the purpose of conducting a credit check for the initiation of a contract. Processing is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in protection against payment default when Stripe provides advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR by notifying Stripe. Providing the data is necessary for the conclusion of the contract with your preferred payment method. Failure to provide it will result in the contract not being able to be concluded using the payment method you selected.
Further information on data processing when using the Shopify Payments service can be found in Shopify's privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing for payment processing via the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is accessed again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on their acceptance, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies already stored can be deleted at any time. However, please note that you may not be able to fully use all the functions of this website if you do so.
Under the links below, you can find information on how to manage (including disabling) cookies in the most important browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically necessary cookies
Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our website more user-friendly, effective, and secure. Furthermore, cookies allow our systems to recognize your browser even after a page change and offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change.
The use of cookies or comparable technologies is based on Section 25 (2) TDDDG. The processing of your personal data is based on Art. 6 (1) (f) GDPR, due to our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our services.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data.
Analysis
Use of Google Analytics 4
We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
Data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services to the website operator related to website and internet usage.
In this context, the following information, among others, may be collected: IP address, date and time of the page visit, click path, information about the browser and device you are using, visited pages, referrer URL (website through which you reached our website), location data, and purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
The IP address is previously truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
The processing of your personal data takes place with your consent based on Art. 6 (1) (a) GDPR. You may revoke your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.
The information generated in this way about your use of this website is generally transferred to a Google server in the USA and stored there. An adequacy decision by the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself according to the TADPF and has thus committed to complying with European data protection principles. Both Google and US government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites, at https://policies.google.com/privacy?hl=de&gl=de, and at https://business.safety.google/privacy/.
Plug-ins and Miscellaneous
Use of Google Tag Manager
We use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools in particular. Data processing serves the purpose of demand-oriented design and optimization of our website.
The Google Tag Manager itself does not store cookies, nor are personal data processed through it. However, it enables the triggering of further tags which may collect and process personal data.
Further information on terms of use and data protection can be found here.
Integration of the Händlerbund Member LogoWe use the Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags used to implement tracking and analysis tools in particular. Data processing serves the purpose of demand-oriented design and optimization of our website.
The Google Tag Manager itself does not store cookies, nor are personal data processed through it. However, it enables the triggering of further tags which may collect and process personal data.
Further information on terms of use and data protection can be found here.
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website. When accessing our website, information is automatically sent to the Händlerbund e.V. server by the browser used on your device. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which access is made (referrer URL),
- Browser used and, if applicable, your computer's operating system as well as the name of your access provider.
Integration of the "Käufersiegel" Logo
The Käufersiegel logo (Händlerbund Management AG, Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website. When accessing our website, information is automatically sent to the Händlerbund Management AG server by the browser used on your device. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until automated deletion:
The Käufersiegel logo (Händlerbund Management AG, Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website. When accessing our website, information is automatically sent to the Händlerbund Management AG server by the browser used on your device. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your intervention and stored until automated deletion:
- IP address of the requesting computer,
- Date and time of access,
- Name and URL of the retrieved file,
- Website from which access is made (referrer URL),
- Browser used, protocol, and, if applicable, your computer's operating system as well as the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this, the IP address must remain stored for the duration of the session. Storage in log files occurs to ensure the functionality of the website. Furthermore, the data serves to optimize the website and to ensure the security of our information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6 (1) sentence 1 (f) GDPR.
Data Subject Rights and Retention PeriodDuration of Storage
After complete processing of the contract, the data is initially stored for the duration of the warranty period, then taking into account statutory, especially tax and commercial law retention periods, and then deleted after the period expires, unless you have consented to further processing and use.
Rights of the Data Subject
Provided that legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right to access, to rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) (f) GDPR, as well as to processing for the purpose of direct marketing.
Right to Lodge a Complaint with the Supervisory Authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You can file a complaint with the supervisory authority responsible for us, among others, which you can reach at the following contact details:
Hessischer Beauftragter für Datenschutz und Informationsfreiheit
Postfach 3163
65021 Wiesbaden
Tel.: +49 611 14080
Fax: +49 611 1408900 or +49 611 1408901
E-mail: poststelle@datenschutz.hessen.de
Right to Object
If the personal data processing listed here is based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation with effect for the future.
After an objection is made, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.