1. Access Data and Hosting

You can visit our website without providing any personal information. Whenever a page is accessed, the web server automatically stores a so-called server log file. This may include the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting internet service provider. These access data document the request.

We evaluate these access data solely to ensure the proper operation of the website and to improve our services. This serves our legitimate interests, which prevail following a balancing of interests, in presenting our services correctly, pursuant to Article 6(1)(f) GDPR. All access data are deleted no later than seven days after the end of your visit to the website.

Hosting Services Provided by a Third Party

A third-party provider hosts and displays our website on our behalf as part of processing carried out under a data processing agreement. This serves our legitimate interests, which prevail following a balancing of interests, in presenting our services correctly. All data collected when you use this website or enter information into the forms provided for this purpose in the online shop, as described below, are processed on the provider’s servers. Data are processed on other servers only within the scope explained in this Privacy Policy.

This service provider is located in a country within the European Union or the European Economic Area.

2. Collection and Use of Data for Contract Processing and When Opening a Customer Account

We collect personal data when you voluntarily provide them to us as part of an order, when contacting us (for example, via a contact form or email), or when opening a customer account. Mandatory fields are marked as such because we need the information in those fields to process your order, handle your enquiry or open your customer account. Without this information, you will not be able to complete your order or account registration, or submit your enquiry. The data collected are shown in the relevant input forms.

We use the information you provide in accordance with Article 6(1)(b) GDPR to process contracts and handle your enquiries. Once the contract has been fully performed or your customer account has been deleted, the further processing of your data is restricted. The data are deleted after the statutory retention periods under tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data in other ways permitted by law, as explained in this Privacy Policy.

You may delete your customer account at any time by sending a message using the contact details provided below or by using the relevant function in your customer account, where available.

3. Disclosure of Data

To fulfil the contract in accordance with Article 6(1)(b) GDPR, we disclose your data to the shipping company responsible for delivery to the extent necessary to deliver the goods you have ordered. Depending on the payment service provider you select during checkout, we disclose the payment data collected for this purpose to the bank responsible for processing the payment, to payment service providers commissioned by us, or to the selected payment service provider. In some cases, the selected payment service provider collects these data itself if you create an account with that provider. In that case, you must sign in to the payment service provider during checkout using your login details. The privacy policy of the relevant payment service provider applies.

Disclosure of Data to Shipping Service Providers

If you have expressly consented during or after placing your order, we will provide your email address to the selected shipping service provider on the basis of your consent pursuant to Article 6(1)(a) GDPR. This enables the provider to contact you before delivery to notify you of the expected delivery or coordinate the delivery with you.

You may withdraw your consent at any time by sending a message using the contact details provided below or by contacting the shipping service provider directly at the address listed here. After withdrawal, we will delete the data provided for this purpose unless you have expressly consented to further use of your data or we reserve the right to use the data in other ways permitted by law, as explained in this Privacy Policy.

Hermes Europe GmbH
Essener Straße 89
22419 Hamburg
Germany

4. Email Newsletters and Postal Advertising

Email Advertising and Newsletter Subscription

If you subscribe to our newsletter, we use the data required for this purpose or separately provided by you to send you our email newsletter regularly on the basis of your consent pursuant to Article 6(1)(a) GDPR.

You may unsubscribe from the newsletter at any time, either by sending a message using the contact details provided below or by clicking the unsubscribe link included in the newsletter. After you unsubscribe, we will delete your email address unless you have expressly consented to further use of your data or we reserve the right to use the data in other ways permitted by law, as explained in this Privacy Policy.

Postal Advertising and Your Right to Object

We also reserve the right to use your first and last name and postal address for our own advertising purposes, for example to send you information about interesting offers and our products by post. This serves our legitimate interests, which prevail following a balancing of interests, in advertising our products to customers, pursuant to Article 6(1)(f) GDPR.

5. Integration of the Trusted Shops Trustbadge

The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops quality seal and collected reviews, and to offer Trusted Shops products to buyers after an order has been placed.

This serves our legitimate interests, which prevail following a balancing of interests, in marketing our services effectively, pursuant to Article 6(1)(f) GDPR. The Trustbadge and the services advertised through it are provided by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is accessed, the web server automatically stores a server log file. This may include your IP address, the date and time of access, the amount of data transferred and the requesting internet service provider. These access data are not evaluated and are automatically overwritten no later than seven days after the end of your visit to the website.

Further personal data are transferred to Trusted Shops only if you have given your consent, choose to use Trusted Shops products after completing an order, or have already registered to use them. In such cases, the contractual agreement between you and Trusted Shops applies.

6. Cookies

We use cookies on various pages to make visiting our website more attractive, enable the use of certain functions, display suitable products or conduct market research. This serves our legitimate interests, which prevail following a balancing of interests, in optimising the presentation of our services, pursuant to Article 6(1)(f) GDPR.

Cookies are small text files that are automatically stored on your device. Some cookies we use are deleted at the end of your browser session, when you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies). You can find the storage duration in the cookie overview in your web browser’s settings.

You can configure your browser to notify you when cookies are set and to decide individually whether to accept them, or to reject cookies in certain cases or altogether. Each browser manages cookie settings differently. The help menu in your browser explains how to change these settings. Instructions for the following browsers can be found here:

• Internet Explorer™
• Safari™
• Chrome™
• Firefox™
• Opera™

If you do not accept cookies, the functionality of our website may be limited.

7. Social Media Plugins

Use of Facebook and Google Social Plugins with the “Two-Click Solution”

Our website uses social plugins (“plugins”) from social networks. To improve the protection of your data when you visit our website, these plugins are integrated using a so-called “two-click solution”. This means that when you access a page on our website containing such plugins, no connection to the servers of the relevant social network is established initially. Your browser connects directly to the servers of the social network only when you activate the plugins.

The content of the relevant plugin is then transmitted directly from its provider to your browser and integrated into the page. By integrating the plugins, the providers receive information that your browser has accessed the relevant page of our website, even if you do not have a profile with that provider or are not logged in. This information, including your IP address, is transmitted directly by your browser to a server operated by the relevant provider (possibly in the United States) and stored there.

If you interact with the plugins, for example by clicking a “Like” or “Share” button, the relevant information is also transmitted directly to the provider’s server and stored there. The information may also be published on the social network and displayed to your contacts. This serves our legitimate interests, which prevail following a balancing of interests, in marketing our services effectively, pursuant to Article 6(1)(f) GDPR.

For details about the purpose and scope of data collection, the further processing and use of data by the providers, contact options, and your related rights and privacy settings, please consult the providers’ privacy policies:

• Facebook Privacy Policy
• Google policy for the +1 button

8. Email Review Reminders

If you have expressly consented during or after placing your order in accordance with Article 6(1)(a) GDPR, we will use your email address to remind you to review your order through the review system we use.

You may withdraw this consent at any time by sending a message using the contact details provided below.

Review Reminders from Trusted Shops

If you have expressly consented during or after placing your order in accordance with Article 6(1)(a) GDPR, we will transmit your email address to Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany (www.trustedshops.de), so that Trusted Shops can send you an email reminder to submit a review.

You may withdraw this consent at any time by sending a message using the contact details provided below or by contacting Trusted Shops directly.

9. Contact Details and Your Rights

As a data subject, you have the following rights:

• Under Article 15 GDPR, the right to request access to the personal data we process about you, within the scope specified there.
• Under Article 16 GDPR, the right to request without undue delay the rectification of inaccurate personal data or the completion of incomplete personal data stored by us.
• Under Article 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary:
  • to exercise the right to freedom of expression and information;
  • to comply with a legal obligation;
  • for reasons of public interest; or
  • to establish, exercise or defend legal claims.
• Under Article 18 GDPR, the right to request restriction of the processing of your personal data where:
  • you contest the accuracy of the data;
  • the processing is unlawful but you oppose erasure;
  • we no longer need the data, but you need them to establish, exercise or defend legal claims; or
  • you have objected to processing under Article 21 GDPR.
• Under Article 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that they be transmitted to another controller.
• Under Article 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the authority in your usual place of residence, your place of work or the place where our company is established.

If you have questions about the collection, processing or use of your personal data, or wish to request access, rectification, restriction or erasure of data, withdraw consent, or object to a particular use of data, please contact us using the contact details in our Legal Notice (Imprint).

Right to Object

Where we process personal data as explained above to protect our legitimate interests, which prevail following a balancing of interests, you may object to this processing with effect for the future. If your data are processed for direct marketing purposes, you may exercise this right at any time as described above. If processing is carried out for other purposes, you may object only where there are grounds relating to your particular situation.

After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing is necessary to establish, exercise or defend legal claims.

This does not apply where the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for those purposes.