Privacy Policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data means all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is DS Safety Wear GmbH, Deutz-Mülheimer-Str. 121, 51063 Cologne, Germany, Tel.: 022129209650, E-mail: d.alexandrakis@dssafety.de. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data that is technically required for us to display the website to you:

Our website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or otherwise used. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the padlock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Amazon Web Services

We use the system of the following provider to host our website and display its content: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg

Data may also be transferred to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

3.2 Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

In the event of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.3 AWS-CloudFront

We use a content delivery network provided by: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg

This service enables us to deliver large media files such as graphics, page content, or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

Data may also be transferred to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

3.4 Cloudflare

We use a content delivery network provided by: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for longer and enable page settings to be stored (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.

If personal data is also processed by individual cookies used by us, the processing is carried out pursuant to Art. 6(1)(b) GDPR either for the performance of the contract, pursuant to Art. 6(1)(a) GDPR where consent has been given, or pursuant to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and in making visits to the site user-friendly and effective.

You can configure your browser to notify you when cookies are set and allow you to decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or altogether.

Please note that if cookies are not accepted, the functionality of our website may be restricted.

5) Contact

5.1 Tidio

This website uses a live chat system provided by the following provider: Tidio Poland Sp. z o.o., Wojska Polskiego 81, 70-481 Szczecin, Poland

The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6(1)(b) GDPR because it is necessary to initiate or perform a contract, or in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in effectively assisting our website visitors.
The data transmitted by you in this manner will be deleted, subject to any conflicting statutory retention periods, once the matter concerned has been conclusively resolved.

In addition, further information may be collected and analyzed using cookies for the purpose of creating pseudonymized usage profiles; however, this information is not used to personally identify you and is not combined with other datasets. If this information relates to an individual, it is processed in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.

The setting of cookies can be prevented by adjusting the corresponding browser settings. However, the functionality of our website may be restricted in this case. You may object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time, with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.2 TidioChat (Tidio Ltd.)
This website uses technologies from Tidio Ltd., 220C Blythe Road, W14 0HH, London, United Kingdom (www.tidiochat.com) to collect and store anonymized data for the purposes of web analysis and operating the live chat system to respond to live support requests. Usage profiles may be created from this anonymized data under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the website visitor's internet browser. Cookies enable the internet browser to be recognized.
The data collected using TidioChat technologies is not used to personally identify visitors to this website without the data subject's separately provided consent, nor is it combined with personal data concerning the holder of the pseudonym. To prevent TidioChat cookies from being stored, you can configure your internet browser so that no further cookies can be stored on your computer, or delete cookies that have already been stored. However, disabling all cookies may mean that some functions on our websites can no longer be performed. You may object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future by sending us an informal objection by email to the email address specified in the legal notice.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.3 Judge.me

For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

Based exclusively on your express consent pursuant to Art. 6(1)(a) GDPR, we transmit your email address and, where applicable, other customer data to the provider so that the provider can contact you by email with a review reminder.

You may withdraw your consent from us or the provider at any time, with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Where data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.4 When you contact us (e.g. via the contact form or by email), personal data is processed exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no statutory retention obligations conflict with this.

6) Commenting function

As part of the commenting function on this website, in addition to your comment, information about the time the comment was created and the commenter name you selected will be stored and published on this website. Your IP address will also be logged and stored. This IP address is stored for security reasons and in case the data subject infringes the rights of third parties or posts unlawful content through a submitted comment. We require your email address to contact you if a third party challenges your published content as unlawful.

The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments if they are challenged by third parties as unlawful.

7) Data processing when opening a customer account

Pursuant to Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. You can find out which data is required to open the account from the input form for the corresponding form on our website.

You may delete your customer account at any time by sending a message to the above-mentioned address of the data controller. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through the account have been fully completed, no statutory retention periods prevent this, and we no longer have a legitimate interest in retaining the data.

8) Use of customer data for direct advertising

8.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you will only receive newsletters once you have expressly confirmed your consent to receive the newsletter by clicking a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6 (1) (a) GDPR. In doing so, we store the IP address registered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter is used strictly for the specified purpose.

You may unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending an appropriate message to the controller named at the beginning. After unsubscribing, your email address will be promptly deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we have reserved the right to use your data otherwise to the extent permitted by law and have informed you of this in this statement.

8.2 Brevo

Our email newsletters and other promotional email communications are sent via this provider: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

On the basis of our legitimate interest in effective and user-friendly email marketing, we disclose the data you provided when registering, pursuant to Art. 6 (1) (f) GDPR, to this provider so that it can handle email distribution on our behalf.

We reserve the right, solely on the basis of your express consent pursuant to Art. 6 (1) (a) GDPR, to additionally carry out a statistical evaluation of the success of email campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter content. Device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but is not combined with other data sets.

You may withdraw your consent to email tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

9) Data processing for order processing

Where required for contract processing for delivery and payment purposes, the personal data we collect will be disclosed in accordance with Art. 6 (1) (b) GDPR to the commissioned transport company and the commissioned credit institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6 para. 1 lit. c GDPR. Your contact details are used strictly for the purpose of communicating updates owed by us and are processed by us for this purpose only to the extent necessary for the respective information.

To process your order, we also work with the service provider(s) listed below, who support us in whole or in part in fulfilling concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

10) Web analytics services

10.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, when you visit the website, Google (Universal) Analytics sets cookies that are stored on your device as small text files and collect certain information. This information also includes your IP address, which Google shortens by removing the last digits to prevent direct identification.

The information is transferred to Google's servers and further processed there. This may also involve transfers to Google LLC, which is based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics and shortened is not combined with other data held by Google. The data collected as part of the use of Google (Universal) Analytics is stored for two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and under https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google (Universal) Analytics uses the special "demographic characteristics" function and can use it to create statistics providing information about the age, gender, and interests of visitors to pages. This is done by analyzing advertising and information from third parties. This enables target groups to be identified for marketing activities. However, the collected data cannot be attributed to any specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension of Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including models relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized advertising" function in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension of Google (Universal) Analytics, the "UserIDs" function may be used on this website. If you have consented to the use of Google (Universal) Analytics pursuant to Art. 6 para. 1 lit. a GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, may be analyzed across devices.

10.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies that are stored as small text files on your device and collect certain information. This information also includes your IP address, which Google truncates by removing the last digits to prevent direct identification of individuals.

The information is transferred to Google's servers and further processed there. This may also involve transfers to Google LLC, which is based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website use and Internet use. The IP address transmitted by your browser as part of Google Analytics and shortened is not combined with other data held by Google. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, takes place only if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special “demographic characteristics” function and can use it to create statistics that provide information about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third parties. This makes it possible to identify target groups for marketing activities. However, the data collected cannot be attributed to a specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including models for cross-device conversions. We do not receive personal data from Google, only statistics. If you want to stop cross-device analysis, you can disable the "Personalized advertising" feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, may be analyzed across devices.

10.3 Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the analysis of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization generally rules out direct identification of individuals. The data is not combined with personally identifiable data about you collected by other means.

All processing described above, in particular the reading or storage of information on the device used, will only be carried out if you have given us your express consent to do so pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

In the event of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

11) Page functionalities

11.1 Trusted Shops Trustbadge

Graphic elements from the following provider are integrated into our website to display external customer reviews and/or an externally awarded quality seal: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany

When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements correctly. In this process, certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed in this context, this is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our services and designing our website attractively.

In the case of an online order with us, further processing may take place.

Depending on your express consent pursuant to Art. 6(1)(a) GDPR, your order information (order total, order number, and, where applicable, purchased product) and your email address will be transmitted in encrypted form to the provider via the Trustbadge after an order has been completed, in order to check whether you are already registered for the provider's services (in particular "buyer protection") and, where applicable, enable a new registration.

If an existing registration is identified or if you register with the provider for its services (in particular buyer protection), your order information (order total, order number, purchased product) and your email address will be transmitted to the provider and further processed by it on the basis of the contractual agreement with the provider pursuant to Art. 6(1)(b) GDPR in order to provide the services (in particular buyer protection).

We are jointly responsible with the provider for the processing described above in accordance with Art. 26 GDPR. The agreement on joint responsibility can be viewed here: https://help.etrusted.com/hc/de/articles/23970817960082

11.2 Google Maps

This website uses an online mapping service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive (road) maps in order to present geographical information visually. Using this service displays our location and makes it easier to find directions.

When you access those subpages into which the Google Maps map is embedded, information about your use of our website (such as your IP address) is already transmitted to Google’s servers and stored there; this may also involve transmission to the servers of Google LLC. in the USA. This takes place regardless of whether Google provides a user account that you are logged into or whether a user account exists. If you are logged into Google, your data will be directly assigned to your account. If you do not want this association with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them.

The collection, storage, and analysis are carried out in accordance with Art. 6(1)(f) GDPR on the basis of Google’s legitimate interest in displaying personalized advertising, conducting market research, and/or designing Google websites to meet users’ needs. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google. If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, can then no longer be used.

Where legally required, we have obtained your consent to the processing of your data described above in accordance with Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the procedure described above for lodging an objection.

Further information on Google's data protection provisions can be found here: https://business.safety.google/intl/de/privacy/

11.3 - Google reCAPTCHA

On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA.

For the visual design of the CAPTCHA window, the provider uses “Google Fonts,” i.e. fonts loaded from the internet by Google. No processing of information beyond that described above, which is already transmitted to Google through the functionality of reCAPTCHA, takes place in this context.

The service checks whether an input is made by a natural person or abusively through machine-based and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access attempts. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the device used, identifying data regarding the browser and operating system type used, and the date and duration of the visit, and transmits this information to the provider’s servers for analysis. Cookies may be used in this process, i.e. small text files stored in the browser of the device used.

If the processing described above is based on cookies, these are only set if you have given us your explicit consent to do so pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual responsibility on the internet and preventing misuse and spam pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

11.4 Google Customer Reviews (formerly Google Certified Shops Program)

We work with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program enables us to collect customer reviews from users of our website. After using our services, you will be asked on our website whether you would like to participate in an email survey conducted by Google.

If you give your consent pursuant to Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchasing experience on our website. The rating you submit will then be combined with our other ratings and displayed in our Google Customer Reviews logo and our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. As part of the use of Google Customer Reviews, personal data may also be transferred to the servers of Google LLC. in the USA.

You can withdraw your consent at any time by sending a message to the controller responsible for data processing or to Google.

Further information on Google's data protection provisions can be found here: https://business.safety.google/intl/de/privacy/

12) Tools and Miscellaneous

12.1 Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications requiring consent. The “Cookie Consent Tool” is displayed to users when they access the page in the form of an interactive user interface, on which consent can be given for specific cookies and/or cookie-based applications by checking a box. Through the use of the tool, all cookies/services requiring consent are loaded only if the respective user has given the corresponding consent by checking a box. This ensures that such cookies are set on the respective user's device only if consent has been given.

The tool uses technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning, or logging cookie settings, this is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.

Another legal basis for processing is also Art. 6 para. 1 lit. c GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.

Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the settings options of the cookie consent tool can be found directly in the corresponding user interface on our website.

12.2 Judge.me

For verifying and publishing customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

If you submit a review on our website, your first and last name, email address, order date and number, as well as the name and international references (GTIN/ISDNF), are collected, transmitted to the provider, and evaluated there to determine whether a customer review for a specific order is legitimate. This processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in ensuring the authenticity of customer reviews by establishing their connection to a transaction and preventing review abuse. After the review has been checked and approved, the data is deleted by the provider.

Where data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

13) Data subject rights

13.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby the applicable legal basis is referred to for the respective conditions for exercising these rights:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

WHEN WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ESTABLISH, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA TO CONDUCT DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing and - where applicable - additionally by the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

If statutory retention periods apply to data processed in the context of contractual or contract-like obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted after the retention periods expire, provided that it is no longer required for contract performance or the initiation of a contract and/or we no longer have a legitimate interest in retaining it.

When personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.

When personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise indicated by the other information in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

data protection