Privacy policy

Privacy policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide your data. Not providing it has no consequences. This applies only insofar as no other information is given in the processing operations described below.
"Personal data" is any information relating to an identified or identifiable natural person.

Server log files
You can visit our website without providing any personal information.
Each time our website is accessed, usage data is transmitted by your internet browser to us or our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission's standard contractual clauses.

Contact

Controller
Please contact us if you have any questions. The controller responsible for data processing is: Daniela Gattinger, Penzberger Str. 32, 82402 Seeshaupt, Germany, +49 8801 3950307, mail@happy-minerals.business

Contact initiated by the customer by email
If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your enquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice in the case of purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR.
We use your email address only to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the withdrawal button
If you have concluded a contract via our website, we provide you with a withdrawal function (withdrawal button) through which you can submit your notice of withdrawal directly.
When you use the withdrawal function, we collect your personal data (name, email address, details identifying the contract or part of the contract you wish to withdraw from, and the time (date and time) your notice of withdrawal was sent) only to the extent provided by you. The data processing serves to provide you with the legally required option to withdraw from your contract and to process your withdrawal properly.
If the contact relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR. Otherwise, the data processing is carried out on the basis of Art. 6 (1) (c) GDPR, to fulfil our legal obligation to provide you with a withdrawal function on our website.
We use your email address only to process your notice of withdrawal. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

The processing of your personal data serves to fulfil the legal requirements for the design of the withdrawal function in a legally compliant manner and is carried out on the basis of Art. 6 (1) (c) GDPR. This data processing is also carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in providing you with a user-friendly withdrawal option. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR.

Use of address validation by Google Maps API
We use the address validation of the provider Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland; "Google") on our website.
The data processing serves to check your entries in our address forms in real time for input and spelling errors and to complete missing data where necessary. If data has been entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, stored and analysed there.
Among other things, the following information may be transmitted to and processed by Google: postal addresses (country, city, postcode, street, house number), email address, telephone number.
Your data may also be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thus undertaken to comply with European data protection principles.
Your personal data is processed on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in a correct data basis for the fulfilment of our contractual obligations. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
The data is processed separately by the provider and is not combined with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days.
For more information on terms of use and data protection at Google, please visit: https://cloud.google.com/maps-platform/terms and https://policies.google.com/privacy?hl=en.

Customer account, orders

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves to improve your shopping experience and to simplify order processing. The processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data in orders
When you place an order, we collect and process your personal data only to the extent necessary for the fulfilment and processing of your order and for handling your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) (b) GDPR and is necessary for the performance of a contract with you.
Your data is disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the legal requirements. The scope of the data transfer is limited to a minimum.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission's standard contractual clauses.

Reviews, advertising

Data collection when writing a comment or review
When you comment on or review an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves to enable comments/reviews and to display them.

For the purpose of verifying your review/comment, we also collect the following data: order number.

By submitting the comment/review, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal. Your personal data will then be deleted.

When your comment/review is published, only the name you have provided will be published.

Use of Judge.me
We use the review system "Judge.me" of Judge.me Ltd (c/o Buckworths 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB; "Judge.me") on our website.
Judge.me enables us to collect customer reviews and display them on our website in order to give you an insight into the quality of our services.
After an order, you may receive an invitation to submit a review from us or Judge.me and can then submit a review. The following data, among others, may be processed by us or Judge.me: email address, name, telephone number, address, information about your device (IP address, information about your web browser and the operating system used), information about the purchased product or service used (order number, product details), the content of your review and the star rating you have given, your product photos or videos (if you have attached them to your product review). This data may also be used for the purpose of verifying your review.
Judge.me uses technologies such as cookies.
Your data may be transferred outside the EU to the United Kingdom. An adequacy decision of the EU Commission is in place for the United Kingdom.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Judge.me is not certified under the TADPF. This data transfer is based on special contracts approved for use in the United Kingdom which provide the same protection that personal data enjoys in the United Kingdom.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR, provided that you have expressly consented to the disclosure of your data and to receiving the review request. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
Further information on data protection when using Judge.me can be found at: https://judge.me/privacy.

Use of your email address for sending newsletters
We use your email address to send you information and offers by newsletter, provided you have expressly consented to this. The data processing serves exclusively for advertising purposes. For this purpose, we process your email address and any other data you have voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in future. This storage is carried out on the basis of Art. 6 (1) (f) GDPR due to our and your legitimate interest in preventing your email address from being used again for sending our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Use of your email address for direct advertising
We use your email address, which we received in connection with the sale of goods or services, to send you electronic advertising for our own goods or services similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You will find the contact details for exercising your right to object in the legal notice. You can also use the link provided for this purpose in the advertising email. This will not incur any costs other than the transmission costs at the basic rates.

Use of your email address for availability notifications
We offer an availability notification service on our website. If an item is temporarily unavailable, you can enter your email address on the respective item and be informed by us by email when it becomes available, provided you have consented to this. You will receive a one-time email notification once the respective item is available. The processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.

Payment service providers

Use of PayPal Checkout
We use the payment service PayPal Checkout of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves to offer you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR.

Cookies may be stored that enable your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in offering customer-oriented payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal and "Pay Later" via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical methods using credit agencies, if necessary. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit information may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical methods and whose calculation includes, among other things, address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves to check creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in protection against payment default where PayPal makes advance payments.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.

Third-party providers
When paying via a third-party provider's payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 (1) (b) GDPR. To carry out this payment method, PayPal may then forward the data to the respective provider. This processing is carried out on the basis of Art. 6 (1) (b) GDPR. Local third-party providers may include, for example:

• Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
• Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on account via PayPal
When paying by purchase on account, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical methods (probability or score values) using credit agencies in accordance with the procedure described above. The data processing serves to check creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in protection against payment default where Ratepay makes advance payments. Further information on data protection and the credit agencies used by Ratepay can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Shopify Payments
We use the payment service "Shopify Payments" of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The data processing serves to offer you payment via the Shopify Payments payment service. When you select and use a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 (1) (b) GDPR.
Stripe reserves the right to obtain credit information on the basis of mathematical-statistical methods using credit agencies, if necessary. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. The credit information may contain probability values (score values) which are calculated on the basis of scientifically recognised mathematical-statistical methods and whose calculation includes, among other things, address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves to check creditworthiness for the initiation of a contract. The processing is carried out on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in protection against payment default where Stripe makes advance payments.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR by notifying Stripe. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide it means that the contract cannot be concluded with the payment method you have chosen.
Further information on data processing when using the Shopify Payments payment service can be found in Shopify's privacy policy at: https://www.shopify.com/legal/privacy.
Further information on data processing when payments are processed by the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all the functions of this website to their full extent.

Using the links below, you can find out how to manage (including deactivate) cookies in the most common browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=en
Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/en-us/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies to make our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

The use of cookies or comparable technologies is based on § 25 (2) TDDDG. Your personal data is processed on the basis of Art. 6 (1) (f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Use of the Shopify consent tool (Shopify Privacy and Compliance)
We use the consent tool "Shopify Privacy & Compliance" of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. Shopify is a company affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The data processing serves to obtain and document the required consent to data processing and thus to comply with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transmitted to Shopify.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission's standard contractual clauses.
The data processing is carried out to fulfil a legal obligation on the basis of Art. 6 (1) (c) GDPR.
Further information on data protection at Shopify can be found at https://www.shopify.com/legal/privacy.

Analysis, advertising tracking, communication, AI tools

Use of Google Analytics 4
We use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves to analyse this website and its visitors and for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services related to website and internet use.
The following information, among others, may be collected: IP address, date and time of page view, click path, information about the browser and device you use, pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google holds about you.

The IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

Google uses technologies such as cookies, browser web storage and tracking pixels that enable an analysis of your use of the website. The use of cookies or comparable technologies is based on your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR.

Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.

The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thus undertaken to comply with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites, https://policies.google.com/privacy?hl=en and https://business.safety.google/privacy/.

Use of Shopify Analytics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of data processing on our behalf. Shopify is a company affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves to analyse this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and provided in reports, analyses and statistics. The following device information, among others, is collected and processed: information about the web browser, the IP address, the time zone and some of the cookies installed on your device. When you navigate the website, information about the web pages or products viewed, the referrer URL (website from which you accessed our website) and information about how you interact with the website is also collected. Technologies such as cookies as well as web beacons, tags and pixels (electronic files for recording information about how you navigate the website) are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The EU Commission has issued an adequacy decision for Canada. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the EU Commission's standard contractual clauses.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
Further information on data protection at Shopify can be found at https://www.shopify.com/legal/privacy, information on the data processing agreement at https://www.shopify.com/legal/dpa and information on the cookies used at https://www.shopify.com/legal/cookies.

Use of the Meta Pixel
We use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are joint controllers for the collection of your data and the transfer of this data to Meta that takes place when the service is integrated. This is based on an agreement between us and Meta on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/terms/businesstools. According to this agreement, we are responsible in particular for fulfilling the information obligations pursuant to Art. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR, insofar as a personal data breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling the rights of data subjects pursuant to Art. 15 - 20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for complying with the obligations under Art. 33 and 34 GDPR, insofar as a personal data breach concerns Meta's obligations under the joint processing agreement.
The application serves to address visitors to the website with targeted, interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta's remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta's servers when you visit the website. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalised, interest-based ads.
The application also serves to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag, as well as what actions were taken on this website after the redirection. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has thus undertaken to comply with European data protection principles.
Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
You can deactivate the remarketing function "Custom Audiences" here. For more information on the collection and use of data by Meta, your related rights and options for protecting your privacy, please refer to Meta's privacy policy at https://www.facebook.com/privacy/policy/.

Use of the Pinterest Tag
We use the Pinterest Tag of Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; "Pinterest") on our website.
The application serves to address visitors to the website with targeted, interest-based advertising on the social network Pinterest. For this purpose, Pinterest's conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest's servers when you visit the website. This transmits to the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged in to the social network. When you visit Pinterest, you will then be shown personalised, interest-based Pinterest ads.
If you reach our website via a Pin on the social network Pinterest, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognise that you clicked on the Pin and were redirected to this page. The information obtained using the conversion cookie serves to create conversion statistics and thus to optimise our website. The following information, among others, may be processed: total number of users who clicked on one of our Pins and were redirected to our website, subpages visited on our website (e.g. category or product pages), searches on our website, your shopping cart contents, completed transactions.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. The data transfer takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
For more information on the collection and use of data by Pinterest, your related rights and options for protecting your privacy, please refer to Pinterest's privacy policy at https://policy.pinterest.com/en/privacy-policy.

Use of the TikTok Pixel
We use the TikTok Pixel of TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK") on our website. Both companies are joint controllers for the data processing (hereinafter "TikTok").
The data processing serves to identify and analyse our customers' website visits, to address customers more effectively by placing targeted advertisements and to evaluate the effectiveness of advertisements on TikTok. For this purpose, TikTok uses technologies such as cookies and pixels that enable your browser to be recognised. The following information, among others, may be collected and transmitted to TikTok: date and time of the visit, information about the browser and device type you use, screen resolution, IP address. TikTok may assign this information to your personal TikTok user account. User profiles may be created from the data collected in this way using pseudonyms. However, this does not allow users to be personally identified.
Your data may be transferred to third countries such as the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. The data transfer to the USA and to third countries without an adequacy decision takes place, among other things, on the basis of standard contractual clauses as appropriate safeguards for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/en and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Use of "Shopify Network Intelligence"
In our online shop, we use the security and analysis function "Shopify Network Intelligence" of Shopify Inc., Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Shopify Network Intelligence is an automated system based on artificial intelligence. This system serves network security, fraud detection and the optimisation of shop performance.
For this purpose, Shopify Network Intelligence monitors network access and user behaviour in order to detect and prevent fraudulent activities (e.g. credit card misuse, bot attacks) at an early stage. Data is also used for technical stability and performance analysis.
In accordance with Art. 50 of the AI Regulation, we would like to point out that you are interacting with an AI system. The responses generated by Shopify Network Intelligence may contain errors or be incomplete. Please review the content critically and do not rely solely on the chatbot's responses for legally binding matters.
Shopify Network Intelligence helps us ensure IT security and fraud prevention, the availability of the online shop, and the analysis and optimisation of shop performance.
Cookies are used for this purpose. The cookies enable the internet browser to be recognised. Your data may be transferred to Canada. For Canada, there is an adequacy decision of the EU Commission covering data processing by companies subject to the Personal Information Protection and Electronic Documents Act (PIPEDA). Shopify, headquartered in Canada, is subject to PIPEDA and is obliged to comply with the data protection principles under PIPEDA.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
Further information on data processing can be found in Shopify's privacy policy at https://www.shopify.com/legal/privacy.

Plug-ins and other services

Use of YouTube
We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iFrame on the website. The "enhanced privacy mode" option is activated. As a result, YouTube does not store any information about website visitors. Information is only transmitted to and stored by YouTube when you watch a video. Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has thus undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. Your personal data is processed with your consent on the basis of Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until its withdrawal.
For more information on the collection and use of data by YouTube and Google, your related rights and options for protecting your privacy, please refer to YouTube's privacy policy at https://www.youtube.com/t/privacy.

Rights of data subjects and storage period

Storage period
After complete processing of the contract, the data is initially stored for the duration of the warranty period, then in compliance with statutory retention periods, in particular those under tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, rectification, erasure, restriction of processing and data portability.
In addition, under Art. 21 (1) GDPR you have a right to object to processing based on Art. 6 (1) (f) GDPR and to processing for the purposes of direct advertising.

Right to lodge a complaint with the supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with, among others, the supervisory authority responsible for us, which can be contacted at:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Germany
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de

Right to object
If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future on grounds relating to your particular situation.
After an objection, the processing of the data concerned will be stopped unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

If personal data is processed for the purposes of direct advertising, you can object to this processing at any time by notifying us. After an objection, we will stop processing the data concerned for the purposes of direct advertising.