Skip to main content

Privacy policy

1) Introduction and Contact Details of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data with which you can be personally identified.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:
Pack & Smooch GmbH,
Neumann-Reichardt-Str. 27–33,
22041 Hamburg, Germany
Phone: +49 40 526 057 86
Email: info@pack-smooch.com

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 If you visit our website purely for informational purposes, i.e., without registering or otherwise providing us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website:

  • Visited website
  • Date and time at the time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (possibly anonymized)

Processing is carried out pursuant to Art. 6 (1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to retrospectively review the server log files if there are concrete indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

Shopify
We use the services of the following provider for hosting our website and displaying page content:
Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")
Data is also transmitted to: Shopify Inc., 150 Elgin Street, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement (DPA) with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

If data is transferred to Canada, an adequate level of data protection is guaranteed by an adequacy decision of the European Commission.

4) Cookies

To make visiting our website more attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your device. Some of these cookies are deleted automatically after you close your browser (so-called “session cookies”), while others remain on your device longer and allow us to save page settings (so-called “persistent cookies”). You can find the storage duration in your browser’s cookie settings.

If personal data is also processed through individual cookies used by us, the processing takes place either in accordance with Art. 6 (1)(b) GDPR for the execution of a contract, in accordance with Art. 6 (1)(a) GDPR if you have given consent, or in accordance with Art. 6 (1)(f) GDPR to safeguard our legitimate interest in ensuring the best possible functionality of the website and a customer-friendly and effective experience.

You can configure your browser to notify you about the setting of cookies and decide individually about their acceptance or to exclude the acceptance of cookies in certain cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contacting Us

5.1 Brevo

To send review requests, we use the services of the following provider:
Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

We transfer your email address and, if applicable, other customer data to the provider solely on the basis of your express consent pursuant to Art. 6 (1)(a) GDPR, so that they can contact you via email with a review reminder.

You may revoke your consent at any time with future effect by notifying us or the provider.
We have concluded a data processing agreement (DPA) with the provider to ensure the protection of our website visitors’ data and to prevent unauthorized disclosure to third parties.

5.2 Judge.me

To send review requests, we use the services of the following provider:
Judge.me Ltd., c/o Buckworths, 2nd Floor, 1–3 Worship Street, London, England, EC2A 2AB, United Kingdom

We transfer your email address and, if applicable, other customer data to the provider solely on the basis of your express consent pursuant to Art. 6 (1)(a) GDPR, so that they can contact you via email with a review reminder.

You may revoke your consent at any time with future effect by notifying us or the provider.
We have concluded a data processing agreement (DPA) with the provider to ensure the protection of our website visitors’ data and to prevent unauthorized disclosure to third parties.

If data is transferred to the provider’s location, an adequate level of data protection is ensured through an adequacy decision by the European Commission.

5.3 Contact via Contact Form or Email

When contacting us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of responding to your inquiry and only to the extent required.

The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Art. 6 (1)(f) GDPR. If your contact aims to conclude a contract, the additional legal basis is Art. 6 (1)(b) GDPR.

Your data will be deleted once it is evident that the relevant issue has been conclusively resolved and no legal retention obligations apply.

6) Data Processing When Creating a Customer Account

In accordance with Art. 6 (1)(b) GDPR, personal data is collected and processed to the extent necessary when you provide such data to us when opening a customer account. The specific data required for account creation can be found in the respective input form on our website.

You may delete your customer account at any time by sending a message to the contact details of the controller mentioned above.
After the deletion of your account, your data will be deleted, provided all contracts concluded through it have been fully fulfilled, no legal retention periods apply, and we have no legitimate interest in further storage.

7) Use of Customer Data for Direct Advertising

7.1 Subscribing to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required field for sending the newsletter is your email address. Providing any other data is optional and will be used to personalize the communication.

For sending the newsletter, we use the double opt-in process to ensure that you only receive the newsletter if you have expressly confirmed your consent via a verification link sent to the specified email address.

By activating the confirmation link, you consent to the use of your personal data pursuant to Art. 6 (1)(a) GDPR. In this context, we store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of registration, in order to trace any potential misuse of your email address at a later time.

The data collected when registering for the newsletter is used exclusively for the intended purpose. You may unsubscribe from the newsletter at any time via the link provided in the newsletter or by contacting the controller directly. After unsubscribing, your email address will be deleted from our distribution list unless you have expressly consented to further use of your data or we reserve the right to further data usage as permitted by law and as explained in this policy.

7.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address in connection with the purchase of goods or services, we reserve the right to send you regular offers for similar goods or services from our range by email.
In accordance with § 7 (3) of the German Unfair Competition Act (UWG), we do not require separate consent for this.

Processing is based solely on our legitimate interest in personalized direct advertising under Art. 6 (1)(f) GDPR. If you initially objected to the use of your email address for this purpose, you will not receive such emails.

You are entitled to object to the use of your email address for marketing purposes at any time with future effect by notifying the controller. You will only incur transmission costs at basic rates. After receipt of your objection, the use of your email address for advertising purposes will cease immediately.

7.3 Brevo

We send our email newsletters via the following provider:
Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

Based on our legitimate interest in effective and user-friendly newsletter marketing, we share the data you provided during newsletter registration with this provider pursuant to Art. 6 (1)(f) GDPR, so that they may send the newsletter on our behalf.

Subject to your express consent pursuant to Art. 6 (1)(a) GDPR, the provider also conducts a statistical performance evaluation of newsletter campaigns using web beacons or tracking pixels in the emails sent. These measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, operating system) may also be collected and analyzed but is not merged with other data sets.

You may revoke your consent to newsletter tracking at any time with future effect.

We have concluded a data processing agreement (DPA) with the provider to ensure the protection of our website visitors’ data and to prevent unauthorized disclosure to third parties.

8) Data Processing for Order Fulfillment

8.1 Transmission of Data to Fulfill Contracts

To the extent required for contract performance for delivery and payment purposes, the personal data we collect will be passed on in accordance with Art. 6 (1)(b) GDPR to the commissioned shipping company and the commissioned financial institution.

If we owe you updates for goods with digital elements or for digital products under a contract, we will use the contact data provided during the order process to personally inform you within the scope of our legal information obligations under Art. 6 (1)(c) GDPR. Your contact details will be used strictly for this purpose and only to the extent necessary.

Additionally, we work with the following service providers to fulfill your order, who support us wholly or partially in processing contracts. The following information outlines the specific data transfers to these providers.

8.2 Post & DHL Shipping (Official)

We use the services of the following provider to prepare shipments:
Deutsche Post DHL Research and Innovation GmbH,
Kurt-Schumacher-Str. 1, 53113 Bonn, Germany

In accordance with Art. 6 (1)(b) GDPR, we transmit digital shipping labels containing your delivery details solely for processing your order. These are transferred from our order system to the provider, who forwards them to our local printers to generate the shipping label. Data is only shared to the extent necessary.

8.3 Transfer of Personal Data to Shipping Providers

– Deutsche Post
Shipping Provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
We share your email address and/or phone number with the provider pursuant to Art. 6 (1)(a) GDPR for delivery coordination or pre-notification—only if you gave explicit consent during checkout.
Otherwise, we transmit only the recipient's name and delivery address in accordance with Art. 6 (1)(b) GDPR. No pre-delivery contact is possible without consent.
Consent can be withdrawn at any time with future effect.

– DHL Paket GmbH
Shipping Provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
Same data handling and legal basis as above.

– DHL Express
Shipping Provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany
Same data handling and legal basis as above.

– DPD Germany
Shipping Provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany
Same data handling and legal basis as above.

– DPD Austria
Shipping Provider: DPD Direct Parcel Distribution Austria GmbH, Arbeitergasse 46, 2333 Leopoldsdorf, Austria
Same data handling and legal basis as above.

– UPS Germany
Shipping Provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany
Same data handling and legal basis as above.

8.4 Use of Payment Service Providers

– Shopify Payments
We offer one or more online payment options via the following provider:
Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland

When selecting a payment method that requires advance payment (e.g., credit card), your payment data (such as name, address, card/bank details, currency, transaction ID) and order details will be transmitted to the provider per Art. 6 (1)(b) GDPR.
This transfer is solely for payment processing and only to the extent required.

9) Online Marketing

9.1 Brevo Tracker (formerly Sendinblue Tracker)

This website uses the web analytics services of Brevo, operated by:

Sendinblue GmbH
Köpenicker Str. 126
10179 Berlin, Germany

With your consent pursuant to Art. 6 (1)(a) GDPR, Brevo Tracker collects pseudonymized user behavior on the website (e.g., page views, session duration, clicked links, referrer URLs, device/browser type, and geolocation based on IP address) to help us optimize our marketing campaigns and better understand user journeys.
We use these insights for internal analytics and to trigger personalized emails based on user behavior (e.g., abandoned cart reminders or onboarding sequences).

You can revoke your consent to Brevo tracking at any time with future effect by updating your cookie preferences or contacting us directly.

We have concluded a Data Processing Agreement (DPA) with Sendinblue/Brevo in accordance with Art. 28 GDPR to ensure the lawful handling of your data.

9.2 Participation in Affiliate Programs

We participate in affiliate marketing programs. These programs are designed to provide a means for websites to earn advertising fees by linking to partner sites. This may involve tracking interactions (such as clicks on affiliate links) to attribute sales or leads.

Affiliate tracking generally uses cookies or similar technologies to assign users to affiliate partners. If you click on such a link and subsequently make a purchase, we may receive a commission from the respective partner.

These tracking processes are carried out exclusively based on your express consent per Art. 6 (1)(a) GDPR. You may revoke this consent at any time in the future.

Information about specific affiliate networks we participate in will be provided in the cookie settings or in separate partner disclosures, as required.

10) Web Analytics Services

10.1 Google Analytics 4

We use Google Analytics 4, a web analytics service provided by:

Google Ireland Limited
Gordon House, Barrow Street,
Dublin 4, Ireland
(“Google”)

With your consent pursuant to Art. 6 (1)(a) GDPR, Google Analytics 4 uses cookies and similar technologies to collect and analyze information about user behavior on our website, such as pages viewed, session duration, device and browser types, referrer URLs, geographic location (based on IP address), and interactions with website elements (e.g., buttons, videos, forms).

IP anonymization is active by default in Google Analytics 4. This means that your IP address will be shortened before it is transmitted to Google servers. Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.

The data collected via Google Analytics 4 may be transferred to servers of Google LLC in the United States. Google LLC is certified under the EU-U.S. Data Privacy Framework (DPF), ensuring a level of protection equivalent to EU standards.

We have signed a Data Processing Agreement (DPA) with Google in accordance with Art. 28 GDPR.

You can withdraw your consent at any time with future effect by using the cookie settings on our site.

Further information:
https://policies.google.com/privacy

10.2 Google Optimize

Our website uses Google Optimize, a testing and personalization service that is part of the Google Marketing Platform. Google Optimize is also provided by Google Ireland Limited.

We use this tool to test different versions of content and layouts (A/B testing) to improve usability and engagement.

The service is used on the legal basis of your consent pursuant to Art. 6 (1)(a) GDPR.

Like Google Analytics, Google Optimize may also use cookies and interact with Google Analytics data. Data collected by Google Optimize may also be processed on servers in the United States under the protection of the EU-U.S. Data Privacy Framework.

You can withdraw your consent to Google Optimize at any time via your cookie preferences.

10.3 Shopify Network Intelligence

This website uses the “Shopify Network Intelligence” feature provided by:

Shopify International Limited
Victoria Buildings, 2nd Floor
1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Where collected, certain customer data (order and search histories, location information, and transaction details) is automatically transmitted to Shopify in pseudonymised form. Shopify processes these data, combines them with pseudonymised data from customers of other Shopify merchants, and evaluates the results for statistical and analytical purposes. Individual merchants never receive access to any raw data outside their own customer base.

Shopify never gains access to plaintext data; the information is encrypted automatically during transmission by means of a proprietary algorithm.

Processing takes place pursuant to Art. 6 (1)(f) GDPR on the basis of our legitimate interest in statistical analysis of our shop reach and user acceptance for optimisation purposes.

Data may also be transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.
We have concluded a Data Processing Agreement (DPA) with Shopify, ensuring protection of our website visitors’ data and prohibiting unauthorised disclosure to third parties. An adequate level of data protection for transfers to Canada is guaranteed by an adequacy decision of the European Commission.

10.4 Triple Whale Analytics

This website uses the web-analytics service of:

Triple Whale Inc.
7th Floor, 224 Jaffa Street, Jerusalem, Israel (“Triple Whale”)

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms that read device and browser information), the service collects and stores pseudonymised visitor data—including IP address and browser details—in order to carry out statistical analyses of user behaviour on our website and to create pseudonymised usage profiles. This includes “heat maps” that show visit duration and interactions with page content (e.g., text input, scrolling, clicks, mouse-overs). Pseudonymisation generally precludes direct personal identification; no merging with other datasets takes place.

All processing described above—particularly the reading or storing of information on your device—occurs only if you have given us your explicit consent pursuant to Art. 6 (1)(a) GDPR. You may revoke your consent at any time with future effect by disabling this service via the cookie-consent tool provided on the website.

We have concluded a DPA with Triple Whale to safeguard our visitors’ data and to prohibit unauthorised disclosure to third parties. An adequate level of data protection for transfers to Israel is ensured by an adequacy decision of the European Commission.

11) Retargeting / Remarketing and Conversion Tracking

11.1 Meta Pixel with Advanced Matching

Within our online offering, we use the "Meta Pixel" service provided by:

Meta Platforms Ireland Limited
4 Grand Canal Square,
Dublin 2, Ireland
(“Meta”)

We use Meta Pixel in Advanced Matching Mode. When a user clicks on one of our ads on Facebook or Instagram, the URL of our linked page is extended by a parameter via Meta Pixel. This URL parameter is inserted into the user’s browser through a cookie set by our own linked page.

This cookie may then collect specific customer data such as email address, which we collect on our website during transactions such as purchases, account logins, or registrations. The cookie enables the transfer of this data—including customer-specific information—to Meta.

We use Meta Pixel with advanced matching to better tailor our Facebook and Instagram ads (so-called "ads") to match user interests or characteristics (e.g., interest in specific topics or products based on website visits), which we transmit to Meta to create Custom Audiences.

In addition, we analyze the effectiveness of our ads by tracking whether users were redirected to our site after clicking the ad (conversion tracking). Compared to the standard Meta Pixel, advanced matching helps us measure our ad campaign performance more accurately by tracking a higher number of attributed conversions.

All transmitted data may be stored and processed by Meta, enabling Meta to associate it with user profiles and use it for its own advertising purposes per its data policy. Meta and its partners may show ads both on and outside Facebook.

All processing mentioned above—including the placement of cookies to read information from the user's device—is carried out only with your explicit consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service via our cookie consent tool.

We have concluded a data processing agreement with Meta to ensure the protection of visitor data and prohibit unauthorized disclosure to third parties.

Data may be transmitted to Meta servers in the USA. Meta is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection based on the European Commission’s adequacy decision.

11.2 Google Ads Remarketing

This website uses Google Ads Remarketing, a service by:

Google Ireland Limited
Gordon House, 4 Barrow Street,
Dublin, D04 E5W5, Ireland

To enable remarketing, Google sets a cookie in your browser. This cookie uses a pseudonymous ID and tracks the pages you visit to serve personalized ads based on your interests.

Further processing only occurs if you have agreed with Google that your browser and app history will be linked with your Google account and that such data may be used to personalize ads across the web. If you are logged in to your Google account while visiting our website, Google will use your data together with Google Analytics to create cross-device remarketing audiences.

This involves temporarily linking your personal data with Google Analytics data to define custom audiences. Personal data may be transmitted to servers operated by Google LLC in the USA.

All processing—especially setting cookies—is performed only with your explicit consent under Art. 6 (1)(a) GDPR. Without this consent, remarketing will not occur.

You can revoke your consent anytime via the cookie settings on our site.

Google is certified under the EU-U.S. Data Privacy Framework, ensuring compliance with EU data protection standards.

For details on Google’s data processing and privacy practices, see:
https://policies.google.com/technologies/partner-sites
https://business.safety.google/privacy/
https://www.google.de/policies/privacy/

11.3 releva.nz

This website uses releva.nz, a retargeting service provided by:

releva GmbH
Feilnerstr. 10,
10969 Berlin, Germany

This technology enables us to show personalized, interest-based ads to visitors who have previously shown interest in our shop or products. Ad placement is based on cookie-based analysis of past and current user behavior, but no personal data is stored.

A cookie is stored on your device to collect pseudonymized data about your interests, allowing advertising content to be tailored accordingly. These cookies are small text files stored on your computer or mobile device.

All processing—including cookie usage—is carried out only with your explicit consent pursuant to Art. 6 (1)(a) GDPR. Without this consent, no retargeting will take place during your visit.

You may revoke your consent at any time with future effect via our cookie consent tool.

11.4 Google Ads Conversion Tracking

We use the Google Ads online advertising platform, including Google Ads Conversion Tracking, operated by:

Google Ireland Limited
Gordon House, 4 Barrow Street,
Dublin, D04 E5W5, Ireland

We use Google Ads to promote our offers on external websites and analyze the success of our campaigns. When you click on a Google ad, a conversion cookie is set. This cookie expires after 30 days and does not personally identify users.

If the cookie is still valid and you visit specific pages, Google and we can recognize that the ad was clicked and a conversion occurred. Each Google Ads customer receives a unique cookie, making tracking across websites impossible.

The data collected is used to compile anonymous conversion statistics for advertisers. We learn how many users clicked our ads and landed on a tagged conversion page—but not their identities.

Data may be transmitted to servers operated by Google LLC in the USA.

You may revoke your consent anytime via our cookie consent tool.

You can also permanently opt out of conversion tracking cookies by installing the browser plugin here:
https://www.google.com/settings/ads/plugin?hl=en

We also use Google Ads Customer Match, where we upload encrypted customer data (e.g. emails, phone numbers) to Google. These are matched to existing Google accounts to deliver personalized ads across Google services. Google never receives plaintext data.

Customer data is only transmitted to Google if you have explicitly consented under Art. 6 (1)(a) GDPR. You may revoke this consent at any time.

Further information on Customer Match and privacy:
https://support.google.com/google-ads/answer/6334160
https://business.safety.google/privacy/
https://www.google.de/policies/privacy/

Google is certified under the EU-U.S. Data Privacy Framework, ensuring GDPR compliance for U.S. data transfers.

11.5 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to display ads that are relevant to users, improve campaign performance reports, and avoid showing the same ads repeatedly. Google uses a cookie ID to record which ads are shown in which browser, preventing them from being displayed multiple times. Furthermore, GMP can use cookie IDs to track so-called conversions that are related to ad requests—for example, when a user views a GMP ad and later uses the same browser to visit the advertiser’s website and make a purchase. According to Google, GMP cookies do not contain any personal information. Due to the use of marketing tools, your browser automatically establishes a direct connection with Google’s servers.

We have no control over the extent and further use of the data collected by Google through the use of this tool. According to our knowledge, Google receives information that you have accessed the relevant part of our website or clicked on an ad from us. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or are not logged in, there is still the possibility that Google may obtain and store your IP address. Use of GMP may result in the transfer of personal data to the servers of Google LLC in the USA.

All data processing described above, in particular the setting of cookies to read information on the user’s device, only occurs if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may revoke your consent at any time with effect for the future by disabling this service via the "cookie consent tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

GMP by Google’s privacy policies can be found here:
👉 https://business.safety.google/intl/en/privacy/
👉 https://www.google.com/policies/privacy/

11.6 Pinterest Tag Conversion Tracking

This website uses the conversion tracking technology of the following provider:
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

If you were redirected to our website via an advertisement on the provider’s domain, the success of the ad can be tracked using cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests).

Certain device and browser information—potentially including your IP address—is collected via the tracking technology to measure and evaluate predefined user actions (e.g., completed transactions, leads, website searches, product page views). This allows the creation of statistics about usage behavior after ad redirection, which helps us optimize our offering.

All processing activities described above, especially the use of cookies to read information from your device, will only take place if you have given your express consent according to Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the cookie consent tool provided on the website.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

11.7 Reddit Tracking Pixel

This website uses the conversion tracking technology of the following provider:
Reddit Inc., 420 Taylor Street, San Francisco, CA 94102, USA

If you were redirected to our website via an ad on the provider’s domain, the success of the ad can be tracked using cookies and/or similar technologies (such as tracking pixels, web beacons, pings, or HTTP requests).

The tracking technology reads specific device and browser information—potentially including your IP address—to measure and evaluate predefined user actions (e.g., completed transactions, leads, website searches, product page views). This allows for the creation of statistics on user behavior on our website after redirection via an advertisement, which helps us optimize our offerings.

All processing activities described above, especially the setting of cookies to read information from the device used, will only take place if you have given your express consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

11.8 TikTok Pixel

This website uses the conversion tracking technology of the following provider:
TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

If you were redirected to our website via an ad on the provider’s domain, the success of the advertisement can be tracked using cookies and/or similar technologies (such as tracking pixels, web beacons, pings, or HTTP requests).

This tracking technology reads specific device and browser information—potentially including your IP address—to measure and evaluate predefined user actions (e.g., completed transactions, leads, search queries on the website, product page views). This enables the creation of statistics on user behavior on our website after redirection from an advertisement, which helps us optimize our offer.

All processing operations described above, especially the placement of cookies to read information from the device used, will only occur if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by disabling this service in the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

12.1 Embedding the Instagram Feed via Lightwidget

Our website uses the services of Lightwidget, a widget provided by the company
Black Sail Division, Krystian Żwak, Molczyn 17, Leszna Gorna, 43-445 Dziegielow, Poland (www.lightwidget.com),
to display preview images from our Instagram profile.

Cookies are used in this context—small text files stored locally in your browser’s cache.

The widget establishes a connection to the servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Instagram") when visitors access our website. As a result, Instagram receives certain browser information, including your IP address. In some cases, data may also be transferred to servers of Meta Platforms Inc. located in the USA.

All processing operations described above, particularly the use of cookies to access information on the user’s device, are only carried out if you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by disabling this service in the cookie consent tool provided on our website.

For data transfers to the USA, the provider relies on Standard Contractual Clauses issued by the European Commission, which aim to ensure compliance with the European level of data protection.

12.2 Facebook Plugins

Our website uses plugins from the social network provided by:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To protect your data when visiting our website, the plugins are initially deactivated and integrated into the site using a "2-click" or "Shariff" solution. This setup ensures that when you access a page on our website that contains such plugins, no connection is made to the provider’s servers at that point.

Only when you activate the plugins and thereby give your consent in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection to the provider’s servers. In this process, regardless of whether you are logged into an existing user account, information about your device (including your IP address), browser, and page history may be transmitted to the provider and potentially processed further.

If you are logged into an existing user profile on the provider’s social network, interactions performed via the plugins will also be published there and shown to your contacts. You can revoke your consent at any time by deactivating the plugin again. However, this revocation does not affect any data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which, based on an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

12.3 Instagram Plugins

Our website uses plugins from the social network provided by:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To protect your data when visiting our website, the plugins are initially deactivated and integrated into the site using a “2-click” or “Shariff” solution. This setup ensures that when a page on our website containing such plugins is accessed, no connection is made to the provider’s servers at that point.

Only when you activate the plugins and thereby give your consent in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection to the provider’s servers. During this process, regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), browser, and browsing history may be transmitted to the provider and possibly further processed.

If you are logged into an existing user profile on the provider’s social network, interactions made via the plugins will also be published there and displayed to your contacts. You can withdraw your consent at any time by deactivating the activated plugin again. However, the withdrawal has no effect on data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors’ data and prohibiting unauthorized disclosure to third parties.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection based on a decision of adequacy by the European Commission.

12.4 LinkedIn Plugins

Our website uses plugins from the social network provided by:
LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To protect your data when visiting our website, the plugins are initially deactivated and integrated using a so-called “2-click” or “Shariff” solution. This ensures that when you access a page on our website containing such plugins, no connection is established with the provider’s servers at that point.

Only when you activate the plugins and thereby give your consent in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection with the provider’s servers. In doing so, regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), browser, and page history is transmitted to the provider and may be further processed.

If you are logged into an existing user profile on the provider’s social network, interactions performed via the plugins will also be published there and shown to your contacts. You can revoke your consent at any time by deactivating the activated plugin again. However, the revocation has no effect on data already transmitted to the provider.

Data may also be transferred to: LinkedIn Inc., USA

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.5 Pinterest Plugins

Our website uses plugins from the social network provided by:
Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To protect your data when visiting our website, the plugins are initially deactivated and integrated using a so-called “2-click” or “Shariff” solution. This ensures that when you access a page on our website containing such plugins, no connection is established with the provider’s servers at that point.

Only when you activate the plugins and thereby give your consent in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection with the provider’s servers. In doing so, regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), browser, and page history is transmitted to the provider and may be further processed.

If you are logged into an existing user profile on the provider’s social network, interactions performed via the plugins will also be published there and shown to your contacts. You can revoke your consent at any time by deactivating the activated plugin again. However, the revocation has no effect on data already transmitted to the provider.

Data may also be transferred to: Pinterest Inc., USA

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.6 Reddit Plugins

Our website uses plugins from the social network provided by:
Reddit Inc., 548 Market St., Suite 16093, San Francisco, CA 94104, USA

These plugins enable direct interactions with content on the social network.

To protect your data when visiting our website, the plugins are initially deactivated and integrated using a so-called “2-click” or “Shariff” solution. This ensures that when you access a page on our website containing such plugins, no connection is established with the provider’s servers at that point.

Only when you activate the plugins and thereby give your consent in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection with the provider’s servers. In doing so, regardless of whether you are logged into an existing user profile, certain information about your device (including your IP address), browser, and page history is transmitted to the provider and may be further processed.

If you are logged into an existing user profile on the provider’s social network, interactions performed via the plugins will also be published there and shown to your contacts. You can revoke your consent at any time by deactivating the activated plugin again. However, the revocation has no effect on data already transmitted to the provider.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

For data transfers to the USA, the provider relies on the Standard Contractual Clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.7 Vimeo

This website uses plugins to display and play videos from the following provider:
Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If video playback is started via the embedded plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. To prevent this association, you must log out of your account before pressing the playback button.

All aforementioned processing, particularly the setting of cookies to read information on the device used, will only take place if you have given us your explicit consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection based on a decision by the European Commission.

12.8 YouTube

This website uses plugins to display and play videos from the following provider:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA

When you access a page on our website that contains such a plugin, your browser will establish a direct connection to the provider's servers at the latest when playback begins, in order to load the content. In this process, certain information, including your IP address, is transmitted to the provider.

If the playback of embedded videos is initiated, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. To prevent this association, you must log out of your account before pressing the playback button.

All aforementioned processing, particularly the setting of cookies to read information on the device used, will only take place if you have given us your explicit consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the “cookie consent tool” provided on the website.

For data transfers to the USA, the provider is certified under the EU-U.S. Data Privacy Framework, which ensures an adequate level of data protection based on a decision by the European Commission.

12.9 Judge.me

Our website integrates graphic elements from the following provider to display external customer reviews and/or an externally awarded quality seal:
Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you access a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to properly load the elements. Certain browser information, including your IP address, is transmitted to the provider.

If personal data is processed in this context, it is done based on our legitimate interest in the optimal marketing of our offering and the appealing presentation of our website, pursuant to Art. 6 (1)(f) GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

An adequate level of data protection is ensured for transfers to the provider’s location by an adequacy decision of the European Commission.

12.10 Google Web Fonts

This site uses so‑called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, to ensure a consistent presentation of fonts.
When you visit a page, your browser loads the required web fonts into its cache to display text properly, establishing a direct connection to the provider’s servers. During this process, certain browser information—including your IP address—is transmitted to the provider.
Data may also be transferred to Google LLC in the USA.
The processing of personal data in the course of connecting to the font provider occurs only if you have given us your explicit consent pursuant to Art. 6(1)(a) GDPR. You can withdraw this consent at any time for the future by disabling this service via the cookie-consent tool provided on the website.
If your browser does not support web fonts, a standard system font will be used instead.
For data transfers to the USA, the provider is certified under the EU‑US Data Privacy Framework, ensuring an adequate level of data protection based on a Decision by the European Commission.
For further details on Google‘s privacy practices, please refer to: https://business.safety.google/intl/de/privacy/

12.11 Google reCAPTCHA

This website uses the CAPTCHA service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Data may also be transferred to Google LLC in the USA. For the visual styling of the reCAPTCHA widget, the provider uses “Google Fonts,” i.e., fonts loaded from Google’s internet servers. Apart from the data already transmitted via reCAPTCHA functionality, no additional information is sent.
The service verifies whether input is made by a human or is being generated automatically, blocking spam, DDoS attacks, and similar automated abuse. To do so, it collects your device’s IP address, browser and OS data, as well as the date and duration of your visit, and transmits this to the provider’s servers. Cookies may be used in this process.
If the above-described processing occurs based on cookies, these are only set if you have given us your explicit consent under Art. 6(1)(a) GDPR. You can withdraw this consent at any time via the cookie-consent tool on the website.
If the processing is conducted without cookies, the legal basis is our legitimate interest under Art. 6(1)(f) GDPR in verifying user authenticity and preventing misuse.
We have concluded a Data Processing Agreement with the provider to safeguard your data and prevent unauthorized third‑party access.
For data transfers to the USA, the provider is certified under the EU‑US Data Privacy Framework, ensuring compliance with EU data protection standards based on a Decision by the European Commission.
For further guidance on Google’s privacy policies, see: https://business.safety.google/intl/de/privacy/

12.12 Google Photos

This website integrates and displays images using the “Google Photos” service from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google Photos”).
Google Photos itself does not store or read any data on users' devices, nor does it perform independent data analysis.
However, when pages are loaded that embed images from Google’s network, your IP address will be transmitted to Google and may be stored. Data may also be transferred to Google LLC in the USA.
This processing only occurs if you have provided us with your explicit consent under Art. 6(1)(a) GDPR. Without this consent, images via Google Photos will not be loaded.
You may withdraw your consent at any time using the cookie-consent tool on the website. We have a Data Processing Agreement with Google requiring that they protect and not share your data with third parties.
For data transfers to the USA, the provider is certified under the EU‑US Data Privacy Framework, ensuring EU-level protection per a Decision by the European Commission.

12.13 Google Customer Reviews (formerly Google Certified Shopper Program)

We collaborate with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to request reviews from customers via email following their purchase.
If you consent under Art. 6(1)(a) GDPR, we transmit your email address to Google. You will then receive an email from Google Customer Reviews asking you to rate your shopping experience on our website.
Your review will be aggregated with others, displayed with our Google Customer Reviews badge, and shown in our Merchant Center Dashboard. Your rating may also be used in Google Seller Ratings.
Data transfers to Google LLC in the USA may occur in this context. Your consent can be revoked at any time by contacting the data controller or Google directly.
For data transfers to the USA, Google is certified under the EU‑US Data Privacy Framework, ensuring adequate protection based on a Decision by the European Commission.
For further details on Google’s privacy measures, please visit: https://business.safety.google/intl/de/privacy/

12.14 Google Forms

We use online forms and surveys via Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Data may also be transmitted to Google LLC in the USA.
This service allows us to create and evaluate surveys and forms. In addition to the personal data you enter, the service collects your operating system, browser type, date/time of visit, referrer URL, and your IP address, which are transmitted and stored on the provider’s servers.
Data necessary for contract execution (including pre-contractual measures) is processed under Art. 6(1)(b) GDPR; data processed with your consent is based on Art. 6(1)(a) GDPR. You may withdraw consent at any time for the future.
We have a Data Processing Agreement in place to ensure your data is protected and not disclosed to unauthorized third parties.
For data transfers to the USA, the provider is certified under the EU‑US Data Privacy Framework, guaranteeing compliance with EU data protection standards per a Decision by the European Commission.
For further details, consult: https://business.safety.google/intl/de/privacy/

12.15 Shopsync for Shopify

This website uses the Shopify app “Shopsync”, provided by ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA. Shopsync is used to synchronize the newsletter service Mailchimp with our Shopify account, ensuring that updates to Mailchimp’s email lists (e.g., a newsletter unsubscribe) are automatically reflected in Shopify, and new contact data generated via contracts on Shopify is automatically transferred to Mailchimp’s email lists.

In the first case, data is processed pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in the effective and cross-system management of marketing contacts and the proper handling of legally relevant changes in user status.

In the second case, data is transmitted only on the basis of the user’s explicit consent under Art. 6(1)(a) GDPR after a purchase is completed. The transmitted data includes first and last name, address, email address, and transaction-related information (purchase amount, time, and date), which Shopsync then sends to Mailchimp.

Such data is not stored or retained by Shopsync after synchronization. All information exchanged between Shopify and Mailchimp is transmitted using SSL encryption (Secure Socket Layer) and remains encrypted during the entire synchronization process.

Synchronization involves connecting to Amazon Web Services servers in the USA via a secure connection.

For additional information on Shopsync's data protection practices, visit: https://www.shop-sync.com/privacy-policy

13) Tools and Other Services

13.1 Billbee

We use the cloud-based accounting software provided by Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany for our bookkeeping.
The provider processes incoming and outgoing invoices and, if applicable, banking transactions of our company to automatically capture, match, and semi-automatically generate financial accounting records.

If personal data is processed in this context, it is based on our legitimate interest in efficient organization and documentation of business operations pursuant to Art. 6(1)(f) GDPR.

13.1 Lexware

We use the cloud-based accounting software provided by Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany for our bookkeeping.
The provider processes incoming and outgoing invoices and, where applicable, banking transactions of our company to automatically capture and match them to transactions, generating accounting records in a semi-automated process.

If personal data is processed, it is based on our legitimate interest in the efficient organization and documentation of our business processes pursuant to Art. 6(1)(f) GDPR.

13.2 Cookie Consent Tool

This website uses a cookie consent tool to obtain valid user consent for the use of cookies and cookie-based applications that require consent.
The cookie consent tool is displayed as an interactive interface when the page is accessed, allowing users to grant consent for specific cookies and/or services by selecting checkboxes.

Cookies and services requiring consent are only loaded if the user has actively granted permission via checkbox selection. This ensures that such cookies are only set if the user has explicitly agreed.

The tool uses technically necessary cookies to store user preferences. No personal user data is processed unless, in specific cases, it is necessary for logging or assigning cookie settings (e.g., IP address). In such cases, data is processed on the basis of Art. 6(1)(f) GDPR, representing our legitimate interest in lawful and user-specific consent management and the proper operation of our website.

Another legal basis for processing may be Art. 6(1)(c) GDPR, as we are legally obliged to ensure that non-essential cookies are only used with user consent.

Where applicable, we have signed a Data Processing Agreement with the provider to ensure the protection of visitor data and prevent unauthorized third-party access.

Further details about the operator and customization options of the cookie consent tool can be found in the interface provided on our website.

13.3 Judge.me

To verify and publish customer reviews, we use services provided by Judge.me Ltd., c/o Buckworths, 2nd Floor, 1–3 Worship Street, London, England, EC2A 2AB, United Kingdom.

If you submit a review on our website, the following personal data is collected and transferred to the provider for validation and evaluation: your first and last name, email address, order date and number, product name, and international product references (GTIN/ISDNF).

This processing is carried out under Art. 6(1)(f) GDPR, based on our legitimate interest in ensuring the authenticity of customer reviews by verifying that a transaction occurred and preventing review abuse. After a review has been verified and approved, the data is deleted by the provider.

Where data is transferred to the provider’s location, an adequate level of data protection is ensured through a European Commission adequacy decision.

13.4 Channable

This website uses Channable, an online marketing tool provided by ProductImpulse BV, Kromme Nieuwegracht 66, 3512 HL Utrecht, Netherlands. The use of Channable is based on Art. 6(1)(f) GDPR. Channable uses so-called cookies, which are text files stored on your device to analyze your usage of the website.

The information generated by the cookie (e.g., browser type/version, referrer URL, hostname of the accessing device, IP address, time of server request) is usually transmitted to a Channable server located in Germany and stored there. The IP address transmitted by your browser is not merged with other Channable data and is stored only temporarily (usually for a maximum of 24 hours) before being anonymized. This short-term storage serves exclusively for the purpose of detecting click fraud (bot detection).

On behalf of the website operator, Channable uses this information to evaluate the performance of connected online marketing channels such as idealo.de or Google Shopping.

You can prevent the storage of cookies by adjusting your browser settings accordingly; however, please note that doing so may prevent the full functionality of the website. You can also prevent the collection of data generated by the cookie and related to your website usage (including your IP address) as well as the processing of this data by Channable by using the opt-out feature provided at the following link:
www.channelpilot.de/optout
This will set an opt-out cookie that prevents data collection during future visits to this website using the same browser. If you delete your cookies, the opt-out cookie must be set again.

Further information on data protection related to Channable can be found at:
https://www.channable.com/privacy-policy

If legally required, we have obtained your consent pursuant to Art. 6(1)(a) GDPR for the processing described above. You may revoke your consent at any time with future effect. To exercise your right of withdrawal, please follow the instructions above regarding objection.

14) Data Subject Rights

14.1

Under applicable data protection law, you have the following rights regarding the processing of your personal data, provided certain legal conditions are met. The specific legal basis is referenced with each right:

  • Right to access (Art. 15 GDPR)
  • Right to rectification (Art. 16 GDPR)
  • Right to erasure (Art. 17 GDPR)
  • Right to restriction of processing (Art. 18 GDPR)
  • Right to be informed (Art. 19 GDPR)
  • Right to data portability (Art. 20 GDPR)
  • Right to withdraw consent (Art. 7(3) GDPR)
  • Right to lodge a complaint (Art. 77 GDPR)

14.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR LEGITIMATE INTEREST PURSUANT TO ART. 6(1)(F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO SUCH PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS BEING PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF SUCH DATA FOR MARKETING AT ANY TIME.
IF YOU OBJECT, WE WILL IMMEDIATELY STOP PROCESSING YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES.

15) Duration of Personal Data Storage

The storage duration of personal data depends on the legal basis, the processing purpose, and—if applicable—statutory retention periods (e.g., commercial or tax retention periods).

  • If data is processed based on explicit consent under 6(1)(a) GDPR, it is stored until that consent is withdrawn.
  • If legal retention periods apply under 6(1)(b) GDPR, the data is deleted once those periods expire, unless it is still required for fulfilling or initiating a contract or we have a legitimate interest in further storage.
  • If data is processed on the basis of 6(1)(f) GDPR, it is stored until you exercise your right to object under Art. 21(1) GDPR, unless overriding legitimate grounds for further processing exist.
  • For direct marketing purposes under 6(1)(f) GDPR, data is stored until you object under Art. 21(2) GDPR.

Unless otherwise stated in this policy, personal data will be deleted when it is no longer needed for its original purpose.