Privacy and Data Protection
Data Privacy Policy
1) Introduction and Contact Information of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Alina Rupprecht, Mühlgasse 21, 91475 Lonnerstadt, Germany, Tel.: 091932296, Email: frauvogel24@gmail.com. The controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2) Data Collection When You Visit Our Website
2.1 When you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:
- The website visited
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you accessed the page
- Browser used
- Operating system used
- IP address used (if applicable, in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently if there are concrete indications of illegal use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses an SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from "http://" to "https://" and by the lock symbol in your browser line.
3) Cookies
In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for a longer period of time and enable the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies used by us, processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, pursuant to Art. 6 para. 1 lit. a GDPR in the case of consent given, or pursuant to Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser to inform you about the setting of cookies and individually decide on their acceptance or exclude the acceptance of cookies for specific cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contact
In the context of contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of processing and responding to your inquiry and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
5) Data Processing for Order Fulfillment
5.1 To the extent necessary for the processing of contracts for delivery and payment purposes, the personal data collected by us will be transferred to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data (name, address, email address) you provided when placing the order to inform you personally via an appropriate communication channel (e.g., postal or email) in accordance with our legal obligations pursuant to Art. 6 para. 1 lit. c GDPR within the legally prescribed period. Your contact details will be strictly used for notifications about updates owed by us and processed by us only to the extent necessary for the respective information.
In order to process your order, we also cooperate with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.
5.2 To fulfill our contractual obligations to our customers, we work with external shipping partners. We pass on your name and delivery address, and if necessary for delivery, your telephone number, exclusively for the purpose of delivery pursuant to Art. 6 para. 1 lit. b GDPR to a shipping partner selected by us.
5.3 Use of Payment Service Providers (Payment Services)
- Paypal
On this website, one or more online payment methods from the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
When selecting a payment method from the provider where you pay in advance, your payment data provided during the ordering process (including name, address, bank and credit card information, currency, and transaction number) as well as information about the contents of your order will be passed on to them in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
When selecting a payment method where we pay in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, if applicable, data on an alternative payment method).
In order to safeguard our legitimate interest in determining your ability to pay in such cases, we will forward this data to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. Based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), the provider will check whether the payment method you have selected can be granted with regard to payment and/or default risks.
The credit check may contain probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual payment processing.
6) Online Marketing
6.1 Amazon
We participate in the affiliate program of the following provider: Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg
In this context, we have placed links on our website that lead to offers on the provider's or third-party (“partner sites”) websites.
To measure the success of an affiliate link, evaluate orders generated through such a link, and for the corresponding settlement of commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are not responsible under data protection law. In this process, the provider regularly processes the IP address and possibly other device information.
All the processing described above, particularly the reading or storing of information on the device you use, only occurs if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent given once at any time with effect for the future by using the cookie consent management options on the partner sites.
6.2 CJ Affiliate
We participate in the affiliate program of the following provider: CJ Affiliate (Conversant Europe Limited), 1st Floor, 40 Dukes Place, London, EC3A 7NH
In this context, we have placed links on our website that lead to offers on the provider's or third-party (“partner sites”) websites.
To measure the success of an affiliate link, evaluate orders generated through such a link, and for the corresponding settlement of commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites and for which we are not responsible under data protection law. In this process, the provider regularly processes the IP address and possibly other device information.
All the processing described above, particularly the reading or storing of information on the device you use, only occurs if you have given your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent given once at any time with effect for the future by using the cookie consent management options on the partner sites.
An adequate level of data protection is ensured when transferring data to the provider's location by an adequacy decision of the European Commission.
```html
7) Web Analytics Services
7.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when visiting the website, Google (Universal) Analytics sets cookies, which are small text files placed on your device and collect certain information. This information includes your IP address, which, however, is truncated by Google to exclude direct personal reference.
The information is transmitted to Google servers and processed there. Transmissions to Google LLC in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website usage and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. The data collected during the use of Google (Universal) Analytics is stored for a period of two months and then deleted.
All the processing described above, especially the setting of cookies on the device used, only occurs if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, the use of Google (Universal) Analytics during your visit to the site will not take place. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.
We have entered into a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information on Google (Universal) Analytics can be found at https://policies.google.com
Demographic features
Google (Universal) Analytics uses the special feature "demographic features" and can create statistics that provide information about the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be attributed to any specific individual and is deleted after storage for a period of two months.
Google Signals
In addition to Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google account settings. Follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" function may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 para. 1 lit. a GDPR, created an account on this website, and logged in on different devices with this account, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
7.2 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are small text files placed on your device and collect certain information. This information includes your IP address, which, however, is truncated by Google to exclude direct personal reference.
The information is transmitted to Google servers and processed there. Transmissions to Google LLC in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website usage and internet usage. The IP address transmitted by your browser as part of Google Analytics is not merged with other data from Google. The data collected during the use of Google Analytics 4 is stored for a period of two months and then deleted.
All the processing described above, especially the setting of cookies on the device used, only occurs if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, the use of Google Analytics 4 during your visit to the site will not take place. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.
We have entered into a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://policies.google.com
Demographic features
Google Analytics 4 uses the special feature "demographic features" and can create statistics that provide information about the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be attributed to any specific individual and is deleted after storage for a period of two months.
Google Signals
In addition to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google account settings. Follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the "UserIDs" function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, created an account on this website, and logged in on different devices with this account, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
``` ```html
7.3 Hotjar
This website uses the web analytics service provided by the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used such as IP address and browser information, in order to analyze usage behavior on our website for statistical purposes and to create pseudonymized usage profiles. This includes the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text inputs, scrolling, clicks, and mouse-overs). Pseudonymization generally excludes direct personal reference. There is no merging with clear data collected in other ways about your person.
All the processing described above, especially the reading or storing of information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
8) Retargeting/ Remarketing and Conversion Tracking
Meta Pixel
Within our online offering, we use the "Meta Pixel" service provided by the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")
If a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel." After redirection, this URL parameter is then entered into the user's browser via a cookie set by our linked page.
As a result, Meta can determine the visitors of our online offering as a target group for the display of ads ("Ads"). Accordingly, we use the service to display Facebook and/or Instagram ads only to users who have shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products, which are determined based on the visited websites) that we transmit to Meta (so-called "Custom Audiences").
On the other hand, the "Meta Pixel" can track whether users were redirected to our website after clicking on an advertisement and what actions they take there (so-called "conversion tracking").
The data collected is anonymous to us, so it does not provide us with any conclusions about the identity of the users. However, the data is stored and processed by Meta, allowing a connection to the respective user profile and Meta to use the data for its own advertising purposes.
All the processing described above, especially the setting of cookies for reading information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is usually transferred to a Meta server and stored there; in this context, there may also be a transfer to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
``` ```html
9) Site Functionalities
9.1 Youtube
This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
When you visit a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.
If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider during your visit to our site, your data will be directly associated with your account when you click on a video. If you do not wish this association with your account, you must log out before clicking the playback button.
All of the above processing, especially the setting of cookies for reading information on the device used, only occurs if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
9.2 Google Web Fonts
This page uses so-called web fonts for the uniform display of fonts from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you visit a page, your browser loads the required web fonts into its cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider.
Data may also be transmitted to: Google LLC, USA
The processing of personal data in connection with the connection to the provider of the fonts is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font will be used from your computer.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
9.3 Google reCAPTCHA
This website uses the CAPTCHA service from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. For the visual design of the captcha window, the provider uses "Google Fonts", i.e., fonts loaded from the internet by Google. This does not result in the processing of additional information beyond that which is already transmitted to Google via the functionality of reCaptcha.
The service checks whether input is made by a natural person or is abusive through machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is taken by a human and not by an automated bot, the provider collects the IP address of the device used, detection data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this for evaluation to the provider's servers.
The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
9.4 Google Customer Reviews (formerly Google Certified Merchant Program)
We cooperate with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program allows us to obtain customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in a Google email survey.
If you consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the shopping experience on our website. The rating you provide will then be summarized with our other ratings and displayed in our Google Customer Reviews logo as well as in our Merchant Center dashboard. Additionally, your rating will be used for Google seller ratings. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can revoke your consent at any time by sending a message to the data controller or to Google.
For data transfers to the USA, the provider has joined the EU-US Privacy Shield Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.
``` ```html
10) Tools and Miscellaneous
Cookie Consent Tool
This website uses a so-called "Cookie Consent Tool" to obtain effective user consent for consent-required cookies and cookie-based applications. The "Cookie Consent Tool" is displayed to users as an interactive user interface when visiting the site, allowing them to give consent for specific cookies and/or cookie-based applications by checking boxes. Through the use of the tool, all consent-required cookies/services are loaded only when the respective user gives the corresponding consent by checking boxes. This ensures that such cookies are only set on the respective user's device if consent is given.
The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for processing is Art. 6 para. 1 lit. c GDPR. As data controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
If necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.
11) Rights of the Data Subject
11.1 The applicable data protection law grants you, as the data subject, the following rights with regard to the processing of your personal data by the controller (information and intervention rights), with reference to the legal basis stated for each:
- Right to information pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
12) Duration of Personal Data Storage
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).
When processing personal data based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data in question will be stored until you revoke your consent.
If there are legal retention periods for data processed within the framework of legal or similar obligations based on Art. 6 para. 1 lit. b GDPR, these data will be routinely deleted after the retention periods expire, provided they are no longer necessary for the fulfillment of the contract or for contract initiation on our part and/or there is no longer a legitimate interest on our part in continuing to store them.
When processing personal data based on Art. 6 para. 1 lit. f GDPR, these data will be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, these data will be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.
Unless otherwise indicated in the other information provided in this statement concerning specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.
```
