2.1 Registration in our online shop / customer account
You may create a customer account in our online shop in order to place orders. As part of registration, we process the following personal data in particular:
- First and last name and, where applicable, title
- Email address
- Postal address
- Date and time of registration
- Password (stored in encrypted form)
Voluntary information (e.g. phone number) may be provided in addition. Mandatory fields are marked accordingly in the input form.
The legal basis for processing data required for the customer account and order processing is Art. 6(1)(b) GDPR. Where voluntary information is provided, processing is based on Art. 6(1)(a) GDPR (consent).
The data is deleted as soon as the user account is deleted, unless statutory retention obligations require otherwise.
2.2 Billing and payment options
Where you purchase paid goods or services via our web shop, we process the billing and transaction data required for contract performance (e.g. name, billing address, order and payment amount, time of payment, payment method).
Payment processing is generally carried out via external payment service providers (e.g. Shopify Payments, PayPal). Full payment details (e.g. credit card numbers or full bank details) are generally not processed or stored by us, but exclusively by the relevant payment service provider. The legal basis is Art. 6(1)(b) GDPR.
2.3 Shipping process
As part of the shipping process, the recipient’s address data is transmitted to and processed by warehouse and logistics service providers, to the extent required for delivery. The legal basis is Art. 6(1)(b) GDPR.
2.4 Order- and contract-related emails
We contact you as part of order and contract processing in particular by means of:
- Order confirmations
- Shipping confirmations
- Payment and invoice information
- Notifications regarding delivery status or necessary follow-up questions
The legal basis is Art. 6(1)(b) GDPR. These emails are required for proper contract performance and cannot be unsubscribed from.
2.5 Direct marketing to existing customers
In individual cases we process customer data for direct marketing to existing customers (e.g. review requests). The legal basis is Art. 6(1)(f) GDPR in conjunction with § 7(3) UWG (German Unfair Competition Act). You have the right to object to processing for direct marketing purposes at any time.
2.6 Contacting us
If you contact us by email or telephone, we process your information including your contact details (name, email address, phone number) in order to handle your inquiry and any follow-up questions.
For inquiry handling we use the services of Freshworks GmbH, Neue Grünstraße 17, 10179 Berlin, Germany. We have entered into a data processing agreement with Freshworks pursuant to Art. 28 GDPR.
The legal basis is Art. 6(1)(f) GDPR (legitimate interest in efficient communication). Where your inquiry concerns the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR.
Inquiries with potential legal relevance are typically stored until the statutory limitation period expires (generally three years from the end of the calendar year).
