1) Introduction and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about how we handle your personal data when you use our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Kristina Günther, ever&again, Lucaestr. 6, 60433 Frankfurt, Deutschland, Tel.: +49(0)1736940206, E-Mail: he***@ev**********.com. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data collection when visiting our website
2.1 If you use our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the site server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of unlawful use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.
3) Hosting & content delivery network
Shopify
We use the system of the following provider to host our website and display the page content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data is also transferred to: Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected on our website is processed on the provider’s servers. We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
In the case of data transfer to Canada, an appropriate level of data protection is guaranteed by an adequacy decision of the European Commission.
4) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for longer and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the cookie settings overview of your web browser.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be restricted.
5) Making contact
5.1 WhatsApp Business
We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the so-called “business version” of WhatsApp for this purpose.
If you contact us via WhatsApp on the occasion of a specific transaction (e.g. an order placed), we will store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 para. 1 lit. b. GDPR to process your request. GDPR to process and respond to your request. On the same legal basis, we may ask you to provide further data (order number, customer number, address or e-mail address) via WhatsApp in order to be able to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (e.g. about the range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and – if provided – your first and last name in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient and timely provision of the requested information.
Your data will only ever be used to respond to your request via WhatsApp. Your data will not be passed on to third parties.
Please note that WhatsApp Business receives access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of those users who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp telephone number from the address books of their chat contacts in accordance with Art. 6 para. 1 lit. a GDPR when using the app on their device for the first time by accepting the WhatsApp terms of use. The transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.
The purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, can be found in WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
As part of the above-mentioned processing, data may be transferred to Meta Platforms Inc. servers in the USA.
For data transfers to the USA, the provider has signed up to the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
5.2 When you contact us (e.g. via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Data processing when opening a customer account
In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. The data required to open an account can be found in the input mask of the corresponding form on our website.
Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, there are no legal retention periods to the contrary and we have no legitimate interest in further storage.
7) Use of customer data for direct advertising
7.1 Registration for our email newsletter
If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending newsletters, which ensures that you only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning. Once you have unsubscribed, your email address will be deleted from our newsletter mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
7.2 Shopping cart reminders by e-mail
If you cancel your purchase with us before completing the order, you have the option of receiving a one-off e-mail reminder of the contents of your virtual shopping cart.
Required information for sending this reminder is solely your email address. The provision of any further data is voluntary and may be used, if necessary, to address you personally. For email dispatch, we use the so-called double opt-in procedure, which ensures that you will only receive a notification after you have expressly confirmed your consent by clicking on a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR for sending a shopping cart reminder. In this process, we store your IP address as entered by the Internet Service Provider (ISP), along with the date and time of registration, in order to trace any potential misuse of your email address at a later time. The data collected during registration for our email notification service will be used strictly for this purpose.
You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be promptly deleted from our distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, which we will inform you about in this notice.
8) Data Processing for Order Fulfillment
8.1 To the extent necessary for contract fulfillment for delivery and payment purposes, the personal data we collect will be shared with the transport company and the financial institution assigned to the transaction, in accordance with Article 6(1)(b) of the GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided during the order (name, address, email address) to inform you personally, via a suitable communication channel (such as postal mail or email), of upcoming updates within the legally required period, in accordance with our legal information obligations under Article 6(1)(c) of the GDPR. Your contact data will be strictly used for notifications regarding updates that we owe you and will only be processed by us to the extent necessary for providing the respective information.
To process your order, we also work with the following service provider(s), who partially or fully assist us in executing the contracts. Certain personal data will be transmitted to these service providers according to the following information.
8.2 Disclosure of Personal Data to Shipping Providers
– DHL
The following provider is used as a transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.
The email address and/or phone number will be shared with the provider for the purpose of coordinating a delivery date or sending a delivery notification before the delivery of the goods, in accordance with Art. 6 Para. 1 (a) GDPR, provided that express consent was given during the ordering process. Otherwise, only the recipient’s name and delivery address will be shared with the provider for delivery purposes in accordance with Art. 6 Para. 1 (b) GDPR. The data is shared only to the extent necessary for the delivery of the goods. In this case, coordinating the delivery date or sending a delivery notification with the provider is not possible.
Consent can be revoked at any time with future effect, either with the responsible party named above or directly with the provider.
– DHL Express
The following provider is used as a transport service provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany.
The email address and/or phone number will be shared with the provider for the purpose of coordinating a delivery date or sending a delivery notification before the delivery of the goods, in accordance with Art. 6 Para. 1 (a) GDPR, provided that express consent was given during the ordering process. Otherwise, only the recipient’s name and delivery address will be shared with the provider for delivery purposes in accordance with Art. 6 Para. 1 (b) GDPR. The data is shared only to the extent necessary for the delivery of the goods. In this case, coordinating the delivery date or sending a delivery notification with the provider is not possible.
Consent can be revoked at any time with future effect, either with the responsible party named above or directly with the provider.
### 8.3 Use of Payment Service Providers
– Klarna
One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.
When selecting a payment method provided by the provider where prepayment is required (e.g., credit card payment), the payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about the order will be shared with the provider in accordance with Art. 6 Para. 1 (b) GDPR. This data sharing is solely for the purpose of payment processing with the provider and only to the extent necessary.
When selecting a payment method where the provider makes a prepayment (e.g., invoice or installment purchase, direct debit), it is necessary to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data on an alternative payment method) during the order process.
To protect the legitimate interest in determining the payment ability of customers, this data will be forwarded to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 (f) GDPR. The provider will check, based on the personal data provided, as well as other data (such as shopping cart, invoice amount, order history, payment experiences), whether the selected payment option can be granted with regard to payment and/or default risks.
For the decision on the application review, identity and credit information from the following credit agencies may be included in addition to internal provider criteria in accordance with Art. 6 Para. 1 (f) GDPR:
[https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies](https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies)
The credit report may contain probability values (so-called score values). These score values are based on a scientifically recognized mathematical-statistical procedure. Address data is also included in the calculation of the score values, among other factors.
It is possible to object to this data processing at any time by sending a message either to the responsible party or to the provider. However, the provider may still be entitled to process personal data if this is necessary for contractual payment processing.
– Paypal
One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When selecting a payment method provided by the provider where prepayment is required, the payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about the order will be shared with the provider in accordance with Art. 6 Para. 1 (b) GDPR. This data sharing is solely for the purpose of payment processing with the provider and only to the extent necessary.
When selecting a payment method where prepayment is made by the provider, it is necessary to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data on an alternative payment method) during the order process.
To protect the legitimate interest in determining payment ability, this data will be forwarded to the provider for the purpose of a credit check in accordance with Art. 6 Para. 1 (f) GDPR. The provider will check, based on the personal data provided, as well as other data (such as shopping cart, invoice amount, order history, payment experiences), whether the selected payment option can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). These score values are based on a scientifically recognized mathematical-statistical procedure. Address data is also included in the calculation of the score values, among other factors.
It is possible to object to this data processing at any time by sending a message either to the responsible party or to the provider. However, the provider may still be entitled to process personal data if this is necessary for contractual payment processing.
– SOFORT
One or more online payment methods from the following provider are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.
When selecting a payment method provided by the provider where prepayment is required (e.g., credit card payment), the payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about the order will be shared with the provider in accordance with Art. 6 Para. 1 (b) GDPR. This data sharing is solely for the purpose of payment processing with the provider and only to the extent necessary.