Privacy Policy

1) Introduction and contact details of the responsible party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data that can be used to identify you personally.

1.2 The responsible party for data processing on this website in the sense of the General Data Protection Regulation (GDPR) is DS Safety Wear GmbH, Deutz-Mülheimer-Str. 121, 51063 Cologne, Germany, Tel.: 02205920060, E-Mail: d.alexandrakis@dssafety.de. The party responsible for processing personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Used browser
Used operating system
Used IP address (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible party). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Amazon Web Services

For hosting our website and displaying the page content, we use the system of the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg

Data may also be transmitted to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

All data collected on our website is processed on the servers of the provider. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

3.2 Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

In the case of data transmission to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.3 AWS-CloudFront

We use a content delivery network from the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg

This service allows us to deliver large media files such as graphics, page content, or scripts faster through a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.

Data may also be transmitted to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA

3.4 Cloudflare

We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find out the storage duration in the overview of the cookie settings of your web browser.

If individual cookies used by us also process personal data, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of granted consent, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can set your browser to be informed about the setting of cookies and decide individually on their acceptance or exclude the acceptance of cookies for specific cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contact

5.1 Tidio

This website uses a live chat system from the following provider: Tidio Poland Sp. z o.o., Wojska Polskiego 81, 70-481 Szczecin, Poland

The processing of personal data transmitted via the chat is carried out either in accordance with Art. 6 para. 1 lit. b GDPR, as it is necessary for the initiation or execution of the contract, or in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in effectively supporting our site visitors.
Your data transmitted in this way will be deleted, subject to any conflicting legal retention periods, when the affected matter is finally clarified.

Additionally, further information may be collected and evaluated for the purpose of creating pseudonymized usage profiles using cookies, which, however, do not serve your personal identification and are not merged with other datasets. If this information has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.

The setting of cookies can be prevented by appropriate browser settings. However, the functionality of our website may be limited in this case. You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.2 TidioChat (Tidio Ltd.)
This website collects and stores anonymized data using technologies from Tidio Ltd., 220C Blythe Road, W14 0HH, London, United Kingdom (www.tidiochat.com) for the purpose of web analysis and operating the live chat system to respond to live support inquiries. From this anonymized data, usage profiles can be created under a pseudonym. Cookies may be used for this purpose. Cookies are small text files that are stored locally in the cache of the internet browser of the site visitor. The cookies enable the recognition of the internet browser.
The data collected with TidioChat technologies will not be used to personally identify the visitor of this website without the separately granted consent of the affected person and will not be combined with personal data about the holder of the pseudonym. To avoid the storage of TidioChat cookies, you can configure your internet browser so that no cookies can be stored on your computer in the future or that already stored cookies are deleted. However, disabling all cookies may result in some functions on our websites no longer being executable. You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with effect for the future by sending us your objection informally via email to the email address mentioned in the imprint.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.3 Judge.me

For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

Exclusively based on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address and possibly other customer data to the provider so that they can contact you with a review reminder via email.

You can revoke your consent at any time with effect for the future to us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the case of data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.4 In the context of contacting us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of handling and responding to your concern and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in addressing your concern in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

6) Comment function

As part of the comment function on this website, in addition to your comment, information about the time of the comment's creation and the commentator name you chose will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is done for security reasons and in case the affected person violates the rights of third parties or posts unlawful content through a comment. We need your email address to contact you in case a third party challenges your published content as unlawful.

The legal bases for storing your data are Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are challenged as unlawful by third parties.

7) Data processing when opening a customer account

In accordance with Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary when you provide us with this information when opening a customer account. The data required for account opening can be found in the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the above-mentioned address of the responsible party. After deleting your customer account, your data will be deleted, provided that all contracts concluded in this regard have been fully settled, no legal retention periods are opposed, and we have no legitimate interest in further storage.

8) Use of customer data for direct advertising

8.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. For the newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter after you have explicitly confirmed your consent to receive the newsletter by clicking on a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this context, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration to be able to trace any possible misuse of your email address at a later time. The data we collect during registration for the newsletter will be used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the designated link in the newsletter or by sending a corresponding message to the responsible party mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve a further data use that is legally permitted and of which we inform you in this statement.

8.2 Brevo

The dispatch of our email newsletters and other promotional email communications is carried out by this provider: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

Based on our legitimate interest in effective and user-friendly email marketing, we will pass on the data you provided during registration to this provider in accordance with Art. 6 para. 1 lit. f GDPR, so that they can take over the email dispatch on our behalf.

We reserve the right to conduct a statistical success evaluation of mail campaigns using web beacons or tracking pixels in the sent emails based solely on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g., time of access, IP address, browser type, and operating system) will also be collected and evaluated, but not merged with other data sets.

You can revoke your consent to mail tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

9) Data processing for order processing

As far as necessary for the processing of the contract for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact details you provided during the order to inform you personally in accordance with our legal information obligations under Art. 6 para. 1 lit. c GDPR. Your contact details will be used strictly for the purpose of communicating updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the service provider(s) listed below, who assist us in whole or in part with the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

10) Web analytics services

10.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when visiting the website, Google (Universal) Analytics sets cookies, which are small text files stored on your device that collect certain information. This information includes your IP address, which is truncated by Google to exclude the last digits to prevent direct personal identification.

The information is transmitted to servers of Google and processed there. This may also include transmissions to Google LLC based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide additional services related to website usage and internet usage. The IP address transmitted and truncated by your browser in the context of Google Analytics will not be merged with other data from Google. The data collected in the context of using Google (Universal) Analytics will be stored for a period of two months and then deleted.

All of the above-described processing, particularly the setting of cookies on the device used, will only occur if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, the use of Google (Universal) Analytics will not take place during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=en&gl=en and under https://policies.google.com/technologies/partner-sites

Demographic Characteristics
Google (Universal) Analytics uses the special feature "demographic characteristics" and can create statistics that provide insights about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third parties. This allows for the identification of target groups for marketing activities. However, the collected data cannot be assigned to any specific person and will be deleted after a storage period of two months.

Google Signals
As an extension to Google (Universal) Analytics, Google Signals may be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google may analyze your usage behavior across devices, subject to your consent to use Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google account settings. To do this, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
For more information on Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" feature may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 para. 1 lit. a GDPR, set up an account on this website, and log in on different devices with this account, your activities, including conversions, can be analyzed across devices.

10.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows for an analysis of your use of our website.

By default, when visiting the website, Google Analytics 4 sets cookies, which are small text files stored on your device that collect certain information. This information includes your IP address, which is truncated by Google to exclude direct personal identification.

The information is transmitted to servers of Google and processed there. This may also include transmissions to Google LLC based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide additional services related to website usage and internet usage. The IP address transmitted and truncated by your browser in the context of Google Analytics will not be merged with other data from Google. The data collected in the context of using Google Analytics 4 will be stored for a period of two months and then deleted.

All of the above-described processing, particularly the setting of cookies on the device used, will only occur if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, the use of Google Analytics 4 will not take place during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please disable this service using the "Cookie Consent Tool" provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information about Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic Characteristics
Google Analytics 4 uses the special feature "demographic characteristics" and can create statistics that provide insights about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third parties. This allows for the identification of target audiences for marketing activities. However, the collected data cannot be attributed to any specific individual and will be deleted after a storage period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google, subject to your consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, can analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Advertising" feature in your Google account settings. Please follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
For more information on Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" feature can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, set up an account on this website, and log in on different devices with this account, your activities, including conversions, can be analyzed across devices.

10.3 Shopify Analytics

This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

With the help of cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and to create pseudonymized usage profiles. Among other things, this allows for the evaluation of movement patterns (so-called heatmaps), which show the duration of page visits as well as interactions with page content (e.g., text inputs, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally excludes direct personal reference. There is no merging with other collected clear data about you.

All the processing described above, especially reading or storing information on the device used, will only be carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits disclosure to third parties.

In the case of data transmission to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

11) Page functionalities

11.1 Trusted Shops Trustbadge

On our website, graphic elements from the following provider are integrated to display external customer reviews and/or an externally awarded quality seal: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany

When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the servers of the provider to load the elements properly. In this process, certain browser information, including your IP address, is transmitted to the provider.

If personal data is also processed in this context, it will be done in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the optimal marketing of our offerings and the appealing design of our website.

In the case of an online order with us, further processing may occur.

Thus, depending on your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, your order information (order amount, order number, possibly purchased product) as well as your email address will be encrypted and transmitted to the provider via the Trustbadge after completing an order, to verify an existing registration for the provider's services (especially "buyer protection") and, if necessary, to enable a new registration.

In the event of an existing registration being identified or in the case of a new registration with the provider for its services (especially buyer protection), your order information (order amount, order number, purchased product) as well as your email address will be transmitted to them based on the contractual agreement with the provider in accordance with Art. 6 para. 1 lit. b GDPR and will be further processed by them to provide the services (especially buyer protection).

We are jointly responsible with the provider for the processing described above in accordance with Art. 26 GDPR. The contract on joint responsibility can be viewed here: https://help.etrusted.com/hc/de/articles/23970817960082

11.2 Google Maps

This website uses an online mapping service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. By using this service, our location is shown to you, and any access is facilitated.

Already when accessing those subpages where the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account that you are logged into or whether a user account exists. If you are logged into Google, your data is directly associated with your account. If you do not wish for the association with your Google profile, you must log out before activating the button. Google stores your data (even for non-logged-in users) as usage profiles and evaluates them.

The collection, storage, and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on Google's legitimate interest in displaying personalized advertising, market research, and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google in the context of using Google Maps, there is also the option to completely disable the Google Maps web service by turning off JavaScript in your browser. Google Maps and thus the map display on this website cannot be used then.

As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned option for making an objection.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

11.3 Google reCAPTCHA

On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC, USA.

For the visual design of the captcha window, the provider uses "Google Fonts," which are fonts loaded from the internet by Google. No further information processing beyond what has already been transmitted to Google through the functionality of reCAPTCHA occurs in this context.

The service checks whether an input is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is taken by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits this for evaluation to the provider's servers. Cookies may be used in this process, which are small text files stored in the browser of the device used.

If the processing described above is based on cookies, these will only be set if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

If the processing described above is carried out without the use of cookies, the legal basis is our legitimate interest in determining individual accountability on the internet and preventing abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

11.4 Google Customer Reviews (formerly Google Certified Shops Program)

We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to collect customer reviews from users of our website. You will be asked on our website, after using our services, whether you would like to participate in an email survey from Google.

If you give your consent in accordance with Article 6(1)(a) of the GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. The rating you provide will then be aggregated with our other ratings and displayed in our logo Google Customer Reviews as well as in our Merchant Center dashboard. Additionally, your rating will be used for Google Seller Ratings. In the context of using Google Customer Reviews, there may also be a transfer of personal data to the servers of Google LLC in the USA.

You can revoke your consent at any time by sending a message to the data controller or to Google.

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/

12) Tools and Others

12.1 Cookie Consent Tool

This website uses a so-called "cookie consent tool" to obtain valid user consents for cookies that require consent and cookie-based applications. The "cookie consent tool" is displayed to users upon page access in the form of an interactive user interface, where consents for specific cookies and/or cookie-based applications can be granted by checking boxes. In this way, all cookies/services that require consent are only loaded if the respective user grants the corresponding consents by checking the boxes. This ensures that such cookies are only set on the user's device if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, the processing of personal data (such as the IP address) occurs for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our online presence.

Another legal basis for processing is also Article 6(1)(c) of the GDPR. As data controllers, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user consent.

Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For more information about the operator and the settings of the cookie consent tool, please refer directly to the corresponding user interface on our website.

12.2 Judge.me

To verify and publish customer reviews, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you submit a review on our website, your first and last name, email address, order date and number, as well as name and international references (GTIN/ISDNF) are collected, transmitted to the provider, and evaluated there to decide on the legitimacy of a customer review for a specific order. This processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in ensuring the authenticity of customer reviews by ensuring transaction relevance and preventing review abuse. After the review has been checked and approved, the data will be deleted by the provider.

In the case of data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

Rights of the data subject

13.1 The applicable data protection law grants you the following rights as a data subject against the controller regarding the processing of your personal data (rights of access and intervention), with reference to the respective conditions for exercise based on the cited legal basis:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent given pursuant to Art. 7(3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTERESTS IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the affected data will be stored until you revoke your consent.

If there are statutory retention periods for data processed in the context of contractual or contract-like obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods expire, provided that they are no longer necessary for the fulfillment of the contract or the initiation of a contract and/or we have no legitimate interest in further storage.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information of this declaration regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

data protection