Privacy

We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please pay attention and be sure to review their privacy practices.

(1) Purpose of data processing

Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is soley for the purpose of contract performance.

If you send us a request by e-mail or by using the contact form, etc. before concluding the contract, we process the obtained data to carry out pre-contractual measures and answer your questions about e.g. our products.

In the case of opening a customer account, your data (in particular name, address, payment method, e-mail and password) will be processed for registration and creation of a customer login. With the stored data, you are able to shop faster and view your previous orders at any time. By sending us a note or via a delete function you can delete the account again.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (b) of the GDPR.

(3) Recipient categories

Payment service provider, shipping service provider, hosting provider, if necessary merchandise management system, suppliers if necessary (drop-shipping).

(4) Duration of Storage

We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.

We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).

The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.

Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. seal of approval, collected ratings) and to offer Trusted Shops products to shoppers after they have placed an order.

This serves to protect our legitimate interests, which outweigh our interests in the context of a balancing of interests, in optimal marketing by enabling secure shopping in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO. The trust badge and the services advertised with it are an offer of Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany, with whom we are jointly responsible for data protection pursuant to Art. 26 DSGVO. Within the framework of this data protection notice, we inform you in the following about the essential contractual contents in accordance with Art. 26 (2) DSGVO.

The trust badge is provided within the scope of joint responsibility by an US-American CDN provider (content delivery network). An appropriate level of data protection is ensured by standard data protection clauses and further contractual measures. Further information on the data protection of Trusted Shops AG can be found in their privacy policy.

https://www.trustedshops.co.uk/imprint/#user-privacy-policy

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. The IP address is anonymised immediately after collection so that the stored data cannot be assigned to you personally. The anonymised data is used in particular for statistical purposes and for error analysis.

After the order has been completed, your email address, which has been hashed using a cryptological one-way function, is transmitted to Trusted Shops AG. The legal basis is Art. 6 para. 1 p. 1 lit. f DSGVO. This serves to check whether you are already registered for services with Trusted Shops AG and is therefore necessary for the fulfilment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order in each case and the transactional evaluation services in accordance with Art. 6 (1) sentence 1 lit. f DSGVO. If this is the case, further processing will be carried out in accordance with the contractual agreement between you and Trusted Shops. If you have not yet registered for the services, you will subsequently be given the opportunity to do so for the first time. Further processing after registration also depends on the contractual agreement with Trusted Shops AG. If you do not register, all transmitted data will be automatically deleted by Trusted Shops AG and a personal reference is then no longer possible.

The Trusted Shops AG uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 para. 1 lit. f DSGVO for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA by standard data protection clauses and further contractual measures and in the case of Israel by an adequacy decision.

Within the framework of the joint responsibility existing between us and Trusted Shops AG, please prefer to contact Trusted Shops AG with data protection questions and to assert your rights using the contact options given in the data protection information linked above. Irrespective of this, however, you can always contact the data controller of your choice. Your enquiry will then, if necessary, be passed on to the other data controller for a response.

Usercentrics Consent Management Platform

On our website we use the Usercentrics Consent Management Platform ("Usercentrics") to inform you about the cookies and the technologies we use on our website and to obtain, manage and document your consent to the processing of your personal data by these technologies. This is required under Art. 6 (1) (c) GDPR to fulfil our legal obligation under Art. 7 (1) GDPR to be able to prove your consent to the processing of your personal data, to which we are subject. The consent management service Usercentrics is provided by Usercentrics GmbH, Sendlinger Straße 7, 80331 Munich, Germany, which processes your data on our behalf. When you visit our website, Usercentrics' web server stores a so-called server log file, which also contains your anonymised IP address, the date and time of your visit, device and browser information as well as information on your consent behaviour. Your data will be deleted after three years, unless you have expressly consented to further use of your data in accordance with Art. 6 (1) (a) GDPR or we reserve the right to use your data in a manner that goes beyond this, which is legally permitted and about which we inform you in this privacy policy.

Our service providers are located and/or use servers in the following countries, for which the European Commission has established an adequate level of data protection by decision: USA.


Cloudflare

We use the Content Delivery Network (CDN) of Cloudflare Germany GmbH, Rosental 7, c/o Mindspace, 80331 Munich Germany (Cloudflare) to increase the security and delivery speed of our website. This corresponds to our legitimate interest (Art. 6 para. 1 lit. f DSGVO). A CDN is a network of [globally] distributed servers that is able to deliver optimised content to the website user. For this purpose, personal data may be processed in server log files by Cloudflare. Please compare the explanations under "Hosting".

Cloudflare is the recipient of your personal data and acts as a processor for us. This corresponds to our legitimate interest within the meaning of Art. 6 (1) sentence 1 lit. f DSGVO not to operate a content delivery network ourselves.

You have the right to object to the processing. Whether the objection is successful is to be determined within the framework of a balancing of interests.

The processing of the data provided under this section is not required by law or contract. The functionality of the website is not guaranteed without the processing.

Your personal data will be stored by Cloudflare for as long as necessary for the purposes described.

For more information on objection and removal options vis-à-vis Cloudflare, please visit: Cloudflare DPA

Cloudflare has implemented compliance measures for international data transfers. These apply to all global activities where Cloudflare processes personal data of individuals in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). For more information, please visit: https://www.cloudflare.com/gdpr/introduction/

DooFinder

For our website we use the service of DooFinder, S.L. (Calle De Cronos 63, 28037 Madrid, Spain). The service offers an intelligent search function for online stores in order to provide you with better search results more quickly. This serves to safeguard our predominantly legitimate interest in an optimized presentation of our offer in accordance with Art. 6 para. 1 lit. f GDPR.

If the search function is used, the browser must connect to the Doofinder servers. As a result, DooFinder becomes aware that your IP address has accessed our website.

Further information on data processing can be found in Doofinder's privacy policy.
https://www.doofinder.com/en/privacy-policy

Ipstack

We use the service IPStack (apilayer Data Products GmbH, Elisabethstrasse 15/5, 1090 Vienna, Austria). This service enables us to geo-locate the IP addresses of our website visitors. As a result, the correct country of delivery, language and VAT rate are displayed to the visitor in the shop.

Legal basis for the use of IPStack: Art. 6 para. 1 p. 1 lit. f DS-GVO.

The privacy policy of the operator ipstack.com can be found here: https://ipstack.com/privacy

DHL Express

If you choose shipping by DHL Express, it is necessary to transmit your first name, last name, address, e-mail address and telephone number to the shipping service provider DHL Express (DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany) so that it can contact you before delivery for the purpose of delivery notification or coordination. The legal basis is Art. 6 para. 1 p. 1 lit. b DSGVO.

The privacy policy of the shipping service provider DHL Express can be found here: https://www.dhl.de/en/toolbar/footer/privacy-notice.html

Without the transmission of your personal data, we cannot carry out the shipment via DHL Express. You have the option of choosing a different shipping method.

Amazon Pay

We offer the option of processing the payment transaction via the payment service provider amazon pay (Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg). This corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f DSGVO). In this context, we pass on the following data to Amazon Payments, insofar as it is necessary for the fulfilment of the contract (Art. 6 para. 1 lit b. DSGVO).

First name, last name, address, email address, telephone number

The processing of the data provided under this section is neither legally nor contractually required. Without the transmission of your personal data, we cannot carry out a payment via amazon pay. You have the option of choosing a different payment method.

Amazon Payments Europe reserves the right to carry out a credit check to ensure your willingness and ability to pay. This corresponds to the legitimate interest of Amazon Payments Europe (pursuant to Art. 6 Para. 1 lit. f DSGVO) and serves the execution of the contract (pursuant to Art. 6 Para. 1 lit. b DSGVO). For this purpose, your data will be passed on to credit agencies and online merchants. In addition, your data may be used for interest-related advertising and marketing purposes by amazon pay, provided you have consented to this in your account settings https://www.amazon.de/adprefs?currency=EUR. We have no influence on this process and only receive the result of whether the payment was made or rejected.

You can find further information on objection and removal options vis-à-vis Amazon Payments Europe at: https://pay.amazon.de/help/201212490.

Your data will be stored by us until the completion of the payment processing. This includes the period required for processing refunds, claims management and fraud prevention. In accordance with § 147 AO / § 257 HGB, we have a statutory retention period of 10 years for the following documents: invoices.

Mollie

For our website we use the service of Mollie B.V. (Keizersgracht 126, 1015CW Amsterdam, Netherlands). The service is a payment provider that enables online stores to accept online payments from consumers. We offer various payment methods with the use of Mollie. These include: Credit and debit card, iDEAL, Bancontact, SOFORT Überweisung, Giropay, PRzelewy24, Belfius Direct Net, EPS, KBC/CBC Payment.

The use of the Mollie service corresponds to our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f GDPR). In this context, we pass on the following data to Mollie insofar as it is necessary for the fulfillment of the contract (Art. 6 para. 1 lit. b. GDPR).

Your payment data (e.g. bank account number or credit card number)
Your IP address
Your internet browser and device type
In some cases, your first and last name
In some cases, your address data
In some cases, your e-mail address and/or telephone number
In some cases, information about the product you have purchased

You can find more information about data processing in Mollie's privacy policy.
https://www.mollie.com/privacy

easyCredit

For our website we use the service of easyCredit. The service is an online payment procedure from the company TeamBank AG Nürnberg, Beuthener Str. 25, 90471 Nürnberg, Germany. You can find out which data is used for the use of the service in the easyCredit privacy policy.

https://www.easycredit.de/datenschutz

Klarna

We use the Klarna service for our website. The service is an online payment method from the company Klarna Bank AG, Sveavägen 46, 111 34 Stockholm, Schweden. You can find out which data is used for the use of the service in easyCredit's privacy policy.

https://cdn.klarna.com/1.0/shared/content/legal/terms/en/privacy

Greyhound Customer-Relationship-Management

For our customer communication we use the following technologies of the company GREYHOUND Software GmbH & Co. KG, Segelfliegerweg 53, 49324 Melle, Germany.

When contacting us via contact form, e-mail or telephone, the user's details are used to process the enquiry and handle it in accordance with Art. 6 Para. 1 lit. b. (in the context of contractual/pre-contractual relations), Art. 6 para. 1 lit. f. (other enquiries) DSGVO.

The user's details are stored and processed in the GREYHOUND customer relationship management system. There is a legitimate interest pursuant to Art. 6 Para. 1 lit. f. DSGVO, as enquiries can be processed more quickly and efficiently.

We delete the enquiries if they are no longer required. The statutory archiving obligations apply.

All other applicable data protection provisions of GREYHOUND Software GmbH & Co. KG can be found at https://greyhound-software.com/datenschutz.

Brevo (CRM, marketing automation, tracking, and email marketing)

We use the Brevo service (formerly Sendinblue) on our website, provided by Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

We use Brevo to manage customer contacts (CRM), to conduct and analyze email marketing campaigns (newsletters and direct mail), and to analyze user behaviour on our website.

We have entered into a data processing agreement with Brevo, obligating them to protect our customers' data and not to disclose it to unauthorized third parties.

Data processing via the website (tracking and CRM)

Data from website visitors is transmitted to Brevo via an interface between our shop system and Brevo, where it is processed. The following data may be processed:

• IP address
• device and browser information
• pages visited and interactions
• time of access
• referrer URL (source of origin)
• personal data such as email address, if actively provided

This data may be combined by Brevo with existing contact information to create user profiles and analyze user behaviour.

Use of cookies and tracking technologies

We use cookies and similar technologies when you use Brevo. These include, in particular:

• _plantrack: Links website activity to a specific user profile (e.g., based on an email address)
• first_referrer: stores the user's original referrer
• FPLC: contains a unique identifier for user recognition and tracking support
• visitorId / anonymous_id: used to recognize visitors
• amplitude_id_*: analyzes user behavior

These technologies make it possible to recognize users across sessions and analyze their behaviour across sessions.

Email marketing (newsletter)

When you subscribe to our newsletter, we use Brevo for sending and analyzing it. Subscription uses a double opt-in process, meaning you will receive a confirmation email after subscribing, which you must use to actively confirm your subscription.

The following data may be collected as part of email tracking:

• whether an email was opened
• whether and which links were clicked
• time of interaction
• technical information (e.g., device, email client)
• conversion rate (whether specific actions were performed after opening or clicking)

This data is used to analyze user behaviour, optimize our content, and provide personalized content.

Your data provided for receiving the newsletter will be stored until you unsubscribe or withdraw your consent. After unsubscribing, your email address may be stored on a blacklist to reliably prevent future mailings. This blacklist data is used exclusively for this purpose and is not combined with other data (Art. 6 para. 1 lit. f GDPR).

Direct marketing via email to existing customers

If you have provided your email address when purchasing goods or services on our website, we reserve the right to send you regular offers for similar products or services via email.

This is done on the basis of Section 7 paragraph 3 of the German Unfair Competition Act (UWG) in conjunction with article 6 paragraph 1 letter f of the GDPR, as we have a legitimate interest in direct marketing to existing customers to inform them about products and offers relevant to them.

Emails will only be sent if:

• you have not objected to the use of your email address,
• we obtained your email address in connection with the sale of goods or services, and
• the marketing is limited to our own similar goods or services.


Purposes of processing

Personal data is processed in connection with Brevo for the following purposes:

• provision and optimization of our online services
• analysis of user behavior on the website
• creation of user profiles for marketing purposes
• customer relationship management (CRM)
• sending and evaluating email campaigns (newsletters and direct marketing)
• personalization of content and offers


Legal Basis

The processing of data in connection with tracking, cookies, and email analysis is based exclusively on your consent pursuant to Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TTDSG.

The logging of newsletter registration (double opt-in) is based on Art. 6 para. 1 lit. c GDPR (legal obligation) and Art. 6 para. 1 lit. f GDPR (proof of consent).

Direct marketing via email to existing customers is based on Art. 6 para. 1 lit. f GDPR. Pursuant to section 7 paragraph 3 of the German Unfair Competition Act (UWG) (legitimate interest).

Storage period

The information stored by cookies remains on your device until it is deleted or the respective storage period expires (usually between one day and up to two years).

Personal data is stored for as long as necessary for the respective purposes or until you withdraw your consent. Deleting contact details does not affect your customer status.

Newsletter data is stored until you unsubscribe. Afterwards, your email address may remain on a blacklist to prevent further mailings (unlimited storage based on legitimate interest, Art. 6 para. 1 lit. f GDPR).

Disclosure and transfer to third countries

Data processing by Brevo generally takes place within the European Union (processing locations: Germany and France).

The transfer of data to third countries (in particular the USA) cannot be completely ruled out when using sub-processors. In these cases, the transfer is based on appropriate safeguards pursuant to Art. 44 et seq. GDPR (e.g., EU standard contractual clauses).

Revocation and objection

You can revoke your consent or object to the use of your data at any time with effect for the future - without incurring any costs other than the transmission costs at basic rates. Your contact details will then be permanently blocked for this use.

Options for revocation/objection:

1. via the settings of our cookie consent tool on the website
2. via the unsubscribe link at the end of each email
3. in writing, by telephone, or by email to:

r2 Handels GmbH
Data Protection
Niedersedlitzer Straße 75
01257 Dresden
Telephone: +49 351 81197590
Email: [email protected]

The lawfulness of the processing carried out until the revocation remains unaffected.

Further Information

Further information on data processing by Brevo can be found in the provider's privacy policy:
https://www.brevo.com/legal/privacypolicy/

(1) Purpose of data processing

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics 4 uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. According to Google, Google Analytics 4 does not log or store individual IP addresses. No precise location data is provided in Analytics. Instead, the following metadata is derived from IP addresses: "city" (and the derived latitude and longitude of the city), "continent", "country", "region", "subcontinent" (and the ID-based equivalents). For accesses originating from the EU, IP addresses are only used to derive location data and are immediately deleted afterwards. They are not logged, are not accessible, and are not used for any other use cases. When collecting measurement data in Analytics, all IP searches take place on EU-based servers before the traffic is forwarded to Analytics servers for processing. These servers are also located outside the EU.

On behalf of the operator of this website, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

(3) Recipient categories

Google and its partners.

(4) Transfer to a third country

Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043). The basis for the transfer of personal data from the EU to the US is the EU-U.S. Data Privacy Framework.

(5) Duration of Storage

2 months

(6) Right of revocation

You can revoke your consent at any time with effect for the future via our cookie banner or via our website.

You can prevent the installation of the cookies in your browser settings. If you choose to change your settings you may not be able to use the full functionality of this website.

You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website and from processing this data by Google by downloading and installing the browser plug-in available under the following link: optout

Please note that all PayPal transactions are subject to the PayPal Privacy Policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Please note the following data protection regulations: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

(1) Purpose of data processing

This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system. These cookies are employed, for example, when several products must be inserted in a shopping cart.

Other cookies remain stored permanently and recognize your browser on your next visit. These cookies are employed, for example, to store permanently your passwords for a customer account.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

You have expressly given your consent to the use of cookies on our website as follows:

We use cookies to give you the best possible service. If you continue browsing, you agree to the use of cookies.

(3) Duration of Storage

The technically necessary cookies are usually deleted when the browser is closed. Permanently stored cookies remain stored from a few minutes to several years.

(4) Right of revocation

If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website.

Your consent to persistent cookies can be withdrawn at any time by deleting the cookies in your browser settings.

(1) Purpose of data processing

When registering for the newsletter, your e-mail address will be used for advertising purposes, i.e. the newsletter will inform you in particular about products from our product range. For statistical purposes we may evaluate which links are viewed in the newsletter. However, it is not recognizable for us, which concrete person has accessed the links. You have expressly given the following consent separately or, as the case may be, in the course of the ordering process: Subscribe

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

(3) Recipient categories

if necessary: newsletter provider

(4) Duration of Storage

Your e-mail address will only be stored for the respective duration of your registration.

(5) Right of revocation

You may revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you may unsubscribe as follows: by an unsubscribe link in the newsletter, by mail (r2 Handels GmbH, Datenschutz, Niedersedlitzer Str. 75, 01257 Dresden), by phone (+49 351 81197590) or by e-mail ([email protected])

If your personal data is processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:

1. Right to information

You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.

2. Right to rectification

If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.

3. Right to erasure

You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.

4. Right to restriction of processing

You have the right to restrict the processing your personal data under Article 18 of the GDPR.

5. Right to data portability

You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

6. Right to revoke the consent given under data protection law

You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.

7. Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement ).

Please also note your right of objection under Article 21 GDPR:

a) In general: reasonable objection required

If the processing of personal data concerning you takes place in order

- to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR)

or

- to safeguard the public interest (legal basis: Article 6 (1e) GDPR),

you are entitled to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;

b) Special case of direct marketing: simple objection is sufficient

If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Responsible for data processing:
r2 Handels GmbH
Niedersedlitzer Str. 75
01257 Dresden
Phone: 0351-81197590
[email protected]

Contact details of our data protection officer:
Niedersedlitzer Str. 75
01257 Dresden
[email protected]