privacy policy

privacy policy

Unless otherwise stated below, the provision of your personal data is neither legally nor
contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data.
Failure to provide this data has no consequences. This only applies if no other information is provided in the subsequent processing operations.
is made.
"Personal data" means any information relating to an identified or identifiable natural person.
server log files
You can visit our websites without providing any personal information.
Every time you access our website, usage data is sent to us or our web host / IT service provider through your Internet browser
and stored in protocol data (so-called server log files). This stored data includes, for example, the name of the accessed
Page, date and time of retrieval, IP address, amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in the
To ensure the smooth operation of our website and to improve our offering.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there.
There is an adequacy decision by the EU Commission for Canada. There is an adequacy decision by the EU Commission for the USA
the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer
is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

contact

responsible person
Please contact us if you wish. The person responsible for data processing is: Mohammed Ali Aslam, Meerkamp
30, 45327 Essen Germany, 017661988749, info@sneppy.de
customer's initiative contact via email
If you initiate business contact with us by email, we collect your personal data (name, email address,
message text) only to the extent provided by you. The data processing serves to process and answer your
contact request.
If the contact serves to carry out pre-contractual measures (e.g. advice in case of interest in purchase, preparation of an offer)
or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit.
b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR from
our legitimate interest in processing and answering your request. In this case, you have the right
for reasons arising from your particular situation, at any time to this based on Art. 6 para. 1 lit. f GDPR
to object to the processing of personal data concerning you.
We only use your email address to process your request. Your data will then be processed in accordance with legal
Retention periods will be deleted unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only in the
The scope made available to you. The data processing serves the purpose of establishing contact.
If the contact serves to carry out pre-contractual measures (e.g. advice in case of interest in purchase, preparation of an offer)
or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 Para. 1 lit.
b GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Paragraph 1 Letter f of GDPR from
our legitimate interest in processing and answering your request. In this case, you have the right to
for reasons arising from your particular situation, at any time to this based on Art. 6 para. 1 lit. f GDPR
to object to the processing of personal data concerning you.
We only use your email address to process your request. Your data will then be processed in accordance with legal
Retention periods will be deleted unless you have consented to further processing and use.

WhatsApp Business
If you contact us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited
(4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are staying outside the European
economic area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to process and answer your contact request. For this purpose, we collect and process your
WhatsApp stored mobile phone number, if provided, your name and other data in the
Scope. We use a mobile device for the service, in whose address book only data of users are stored who
have contacted us via WhatsApp. Any transfer of personal data to WhatsApp without your consent
WhatsApp has given its consent, this will not happen.
Your data will be transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, an adequacy decision
of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has registered under the TADPF
certified and thus obliged to comply with European data protection principles. If contacting the implementation
pre-contractual measures (e.g. advice in case of purchase interest, preparation of an offer) or an agreement already concluded between you and us
concluded contract, this data processing is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR.
If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 Paragraph 1 Letter f of GDPR from
our overriding legitimate interest in providing quick and easy contact and in answering
your request. In this case, you have the right to object to this processing at any time for reasons related to your particular situation.
Art. 6 Para. 1 lit. f GDPR to object to the processing of personal data concerning you.
We only use your personal data to process your request. Your data will then be processed in compliance with legal
Retention periods will be deleted unless you have consented to further processing and use.
For more information on terms of use and data protection when using WhatsApp, please visit
https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.

orders
Collection, processing and transfer of personal data when placing orders
When you place an order, we only collect and process your personal data to the extent necessary to fulfil and process your order.
and to process your inquiries. The provision of data is necessary for the conclusion of the contract.
Failure to provide data means that no contract can be concluded. Processing is carried out on the basis of Art. 6 para. 1 lit. b
GDPR and is necessary for the performance of a contract with you.
Your data will be passed on, for example, to the shipping companies and dropshipping providers you have selected,
Payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal
specifications. The scope of data transmission is limited to a minimum.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there.
There is an adequacy decision by the EU Commission for Canada. There is an adequacy decision by the EU Commission for the USA
the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer
is based on contractual obligations comparable to those of the EU Commission's standard contractual clauses.

Reviews Advertising
Data collection when writing a comment or review
When you comment on/rate an article or post, we collect your personal data (name, email address,
Comment text) only to the extent provided by you. The processing serves the purpose of providing a comment/rating
and display comments/reviews.
By submitting the comment/rating you consent to the processing of the transmitted data. The processing takes place on
Based on Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by notifying us,
without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your personal
Data will then be deleted.
When your comment/review is published, only the name you provide will be published.
In addition, when you submit a comment/rating, your IP address will be saved for the purpose of preventing misuse of the
comment or rating function and to ensure the security of our information technology systems.
By submitting the comment/rating, you consent to the processing of the transmitted data. The processing takes place on
Based on Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by notifying us,
without affecting the legality of the processing carried out on the basis of the consent until the revocation. Your IP address will
subsequently deleted.
Shopauskunft customer review
For our website we use the evaluation tool “shopauskunft.de” of Händlerbund Management AG (Kohlgartenstraße 11 - 13,
04315 Leipzig; "Shop information").
After placing your order, we would like to ask you to rate and comment on your purchase. For this purpose, we will
by email, using the technical system "Legally Secure Valuation Request (RBA)".
we process the data relating to your order (order number/invoice number, purchase value and shipping costs) as well as your email
Address. We may also use this data for the purpose of verifying your review.
The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent, provided that you agree to the transfer of your data and the
have expressly agreed to receive the request for evaluation.
You can revoke your consent at any time by using the corresponding link in the email or by notifying us without
that the legality of the processing carried out on the basis of the consent until the revocation is affected.
Further information on data protection when using Shopauskunft can be found at:
https://www.shopauskunft.de/datenschutz.
Shop Information Widget
The Shopauskunft widget is integrated into our website. This serves the purpose of showing the number and result of our
Shopauskunft to display and advertise the reviews received.
To display the widget, it is technically necessary to transmit usage data through your Internet browser to the Shopauskunft server.
and store it in log files (so-called server log files) for 7 days. This stored data includes the name and URL
the retrieved file, date and time of retrieval, the IP address of the requesting computer, website from which access is made
(referrer URL), the browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in the application
of our offers by displaying the customer reviews already received. This data is stored together with other
personal data is not processed.
Trustami customer review
To display the collected reviews and social media feedback, the Trustami trust seal is used on this website
This serves to implement our legitimate interests in the optimal marketing of our offer on our own
Website in accordance with Art. 6 Paragraph 1 Clause 1 Letter f of GDPR. When the Trustami trust seal is called up, the web server automatically saves data
(access data) in the form of a server log file, which contains the name of the accessed website, the file, the date and time of access, your
IP address in abbreviated form, the amount of data transferred, the message about a successful retrieval, the browser type, the
The user’s operating system, the referrer URL (of the previously visited page) and the requesting provider. This access data is
not evaluated and automatically overwritten at the latest seven days after the end of your visit to the site. The Trustami trust seal
and the services advertised therein are an offer from Trustami GmbH, Schröderstraße 5, 10115 Berlin. For the processing of the
For data collected by Trustami, Trustami’s privacy policy at www.trustami.com/datenschutz applies.
Use of the email address for sending newsletters
We use your email address, regardless of the contract processing, exclusively for our own advertising purposes to send newsletters,
provided that you have expressly consented to this. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent.
You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by
Unsubscribe from our communications. Your email address will then be removed from the mailing list.
Using Klaviyo
We use the service of Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) to send newsletters in
within the framework of order processing.
We pass on the information you provide during the newsletter registration (email address, if applicable first and
last name) to Klaviyo. The data processing serves the purpose of sending the newsletter and its statistical evaluation.
In order to evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking
Link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links.
In this context, we collect your personal data such as IP address, browser type and device as well as the time.
Data can be used to create user profiles under a pseudonym. The data collected will not be used to identify you personally.
identify. The data collected is only used for statistical evaluation to improve newsletter campaigns.
Your data is usually transferred to Klaviyo servers in the USA and stored there. For the USA, a
The EU Commission has an adequacy decision, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo has committed itself to the
TADPF certified and therefore obliged to comply with European data protection principles.
The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR from our predominantly
legitimate interest in a targeted, promotional and user-friendly newsletter system. You have the right
Reasons arising from your particular situation, at any time to this processing of personal data concerning you
data.
For more information about privacy at Klaviyo, please visit https://www.klaviyo.com/legal/privacy-notice and
https://www.klaviyo.com/legal/data-processing-agreement.
Use of the mobile phone number for sending SMS advertising
We use your mobile phone number, regardless of the contract processing, exclusively for our own advertising purposes to send SMS
Advertising, provided you have expressly consented to this.
The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by
notification to us without affecting the legality of the processing carried out on the basis of the consent until the revocation
Your mobile number will then be removed from the distribution list.
Your mobile phone number will be passed on to a service provider for sending SMS messages as part of order processing.

shipping service provider merchandise management
Passing on the email address to shipping companies to inform them about the shipping status
We will pass on your email address to the transport company as part of the contract processing, provided that you expressly consent to this in the
order process. The purpose of the transfer is to inform you by email about the shipping status. The processing
is based on Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can revoke your consent at any time by notifying us or
the transport company may revoke your consent without affecting the legality of the processing carried out on the basis of your consent until the revocation.
is touched.
use of an external inventory management system
We use a merchandise management system to process contracts as part of order processing. For this purpose, your data will be
personal data collected during the order
Billbee GmbH, Arolser Str. 10, 34477 Twistetal.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on
Basis of Art. 6 Para. 1 lit. b GDPR.

payment service provider credit report
Using PayPal
We use the PayPal payment service of PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard Royal L-2449,
Luxembourg; "PayPal"). The data processing serves the purpose of being able to offer you payment via the payment service.
By selecting and using payment via PayPal, the data required for payment processing will be transmitted to PayPal in order to
To be able to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy, which can be found
at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Using PayPal Plus
We use the PayPal Plus payment service of PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard Royal L-
2449, Luxembourg; "PayPal"). The data processing serves the purpose of being able to offer you payment via the payment service. With
Selection and use of payment via PayPal, credit card via PayPal, direct debit via PayPal, the data required for payment processing
necessary data to PayPal in order to be able to fulfil the contract with you using the selected payment method. This processing
is based on Art. 6 (1) lit. b GDPR.
For individual payment methods such as credit card via PayPal, direct debit via PayPal, PayPal reserves the right to request a credit check
on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the
Personal data required for credit assessment to a credit agency and uses the information received for statistical purposes
Probability of default for a balanced decision on the establishment, implementation or termination of the
The credit report may contain probability values ​​(score values) that are based on scientific
recognized mathematical-statistical procedures and whose calculations include, among other things, address data.
Your legitimate interests will be taken into account in accordance with the legal provisions. The data processing serves the purpose of
Credit check for contract initiation. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter f of GDPR from our
predominant legitimate interest in protection against payment default when PayPal makes advance payments.
You have the right to object to processing at any time for reasons arising from your particular situation based on Art. 6 para. 1 lit. f
GDPR based processing of personal data concerning you by notifying PayPal. The
Provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data will result in
The consequence is that the contract cannot be concluded using the payment method you have chosen.
Using PayPal Express
We use the PayPal Express payment service of PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard Royal L-
2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the PayPal Express payment service
to be able to.
To integrate this payment service, PayPal must collect data (e.g. IP address, device type,
operating system, browser type, location of your device). Cookies may also be used for this purpose. The
Cookies enable your browser to be recognized.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25 Paragraph 1 Sentence 1 TDDDG in conjunction with
Art. 6 Para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 Para. 1 lit.
a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.
processing carried out.
By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to
To be able to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR.
Further information on data processing when using the PayPal Express payment service can be found in the associated
Privacy Policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS
Using PayPal Check-Out
We use the PayPal Check-Out payment service from PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard
Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of offering you payment via the payment service
By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or “Pay later” via PayPal
the data required for payment processing will be transmitted to PayPal in order to fulfil the contract with you using the selected payment method
This processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
Cookies may be stored here, which enable the recognition of your browser. The resulting
Data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in
customer-oriented offer of various payment methods. You have the right, for reasons related to your particular situation,
to object at any time to the processing of personal data concerning you.
Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal
For individual payment methods such as credit card via PayPal, direct debit via PayPal or “Pay later” via PayPal, PayPal reserves the right to
The right to obtain a credit report based on mathematical-statistical procedures using credit agencies.
PayPal transmits the personal data required for a credit check to a credit agency and uses the received
Information on the statistical probability of a default for a balanced decision on the justification,
Execution or termination of the contractual relationship. The credit report may contain probability values ​​(score values) that
are calculated on the basis of scientifically recognized mathematical-statistical procedures and in whose calculation, among other things,
Address data will be included. Your legitimate interests will be taken into account in accordance with the legal provisions.
Data processing serves the purpose of credit checks for the initiation of a contract. The processing is carried out on the basis of Art. 6 para.
1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal makes advance payments.
You have the right to object to processing at any time for reasons arising from your particular situation based on Art. 6 para. 1 lit. f
GDPR based processing of personal data concerning you by notifying PayPal. The
Provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data will result in
The consequence is that the contract cannot be concluded using the payment method you have chosen.
third-party providers
When paying using a third-party payment method, the data required for payment processing will be transmitted to PayPal.
This processing is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR. To carry out this payment method, the data may then be
by PayPal to the respective provider. This processing is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR. Local
Third-party providers can be, for example:
Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
purchase on account via PayPal
When paying by invoice, the data required for payment processing will first be sent to PayPal
To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29,
10587 Berlin; "Ratepay") in order to fulfil the contract with you using the selected payment method. This processing is carried out on
Basis of Art. 6 para. 1 lit. b GDPR. Ratepay may carry out a credit check on the basis of mathematical-statistical procedures
(probability or score values) using credit agencies according to the procedure described above. The
Data processing serves the purpose of credit checks for the initiation of a contract. The processing is carried out on the basis of Art. 6 para.
1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Ratepay makes advance payments.
Further information on data protection and which credit agencies use Ratpay can be found at https://www.ratepay.com/legal-
payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
Further information on data processing when using PayPal can be found in the associated privacy policy at
https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Using Klarna payment options
We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website.
By selecting and using payment via Klarna, the data required for payment processing will be transmitted to Klarna in order to
To be able to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 Paragraph 1 Letter b of GDPR.
Cookies may be stored here, which enable the recognition of your browser. The resulting
Data processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in
customer-oriented offer of various payment methods. You have the right, for reasons related to your particular situation,
to object at any time to the processing of personal data concerning you.
“Pay Later” (invoice), “Pay Now” (payment by direct debit), “Financing” (installment purchase)
For individual payment methods such as “Pay Later” (invoice), “Pay Now” (payment by direct debit), “Financing” (installment purchase), Klarna reserves the right to
Reserves the right, if necessary, to obtain a credit report on the basis of mathematical-statistical procedures using credit agencies.
For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name,
Address, gender, email address, IP address and data related to the order for the purpose of
Identity and credit check to a credit agency and uses the information received on the statistical probability of a
Payment default for a balanced decision on the establishment, implementation or termination of the contractual relationship.
Credit report may contain probability values ​​(score values) that are based on scientifically recognized mathematical
statistical procedures and which include, among other things, address data. Your legitimate interests
are taken into account in accordance with the legal provisions. The data processing serves the purpose of credit assessment for a
Contract initiation. The processing is carried out on the basis of Art. 6 Paragraph 1 Letter f of GDPR from our predominantly legitimate
Interest in protection against payment default if Klarna pays in advance. You have the right to object to payment for reasons arising from your
particular situation, at any time against this processing based on Art. 6 para. 1 lit. f GDPR concerning you
personal data by notifying Klarna. The provision of the data is necessary for the conclusion of the contract with
payment method you have chosen is required. Failure to provide this information will result in the contract not being concluded with the payment method you have chosen.
can be closed.
For further information, in particular to which credit agencies Klarna passes on your personal data, please see for Germany
at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies
General information about Klarna can be found for Germany at: https://www.klarna.com/de/ and for Austria at
https://www.klarna.com/at/. Your personal information will be processed by Klarna in accordance with the applicable data protection regulations and
in accordance with the information in Klarna’s privacy policy for Germany at
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.
Using SOFORT
For payment processing on our website we use the payment service provider SOFORT GmbH, (Theresienhöhe 12, 80339
Munich, Germany; “SOFORT”). Sofort GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134
Stockholm, Sweden). The data processing serves the purpose of being able to offer you various payment methods through the
Payment processing via the payment service provider SOFORT. If you have chosen the payment option, the
The data required for payment processing is transmitted to SOFORT. This data processing is carried out on the basis of Art. 6 Paragraph 1 Letter b
GDPR. Further information on data processing when using the payment service provider SOFORT can be found at
https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.
Data collection and processing for payment methods by credit card, direct debit and invoice via secupay AG
We have the components secupay.direct debit, secupay.purchase on account and secupay.credit card from secupay AG on our website
(Goethestr. 6, 01896 Pulsnitz; “secupay”). secupay is a payment institution within the meaning of the Payment Services Supervision Act (ZAG) and
registered with the Federal Financial Supervisory Authority (Graurheindorfer Str. 108, 53117 Bonn; “BaFin”) (registration number: 126737)
and enables cashless payment of products and services on the Internet. secupay is a process through which the
Purchase price claim is assigned to secupay. This enables a merchant to immediately
to deliver to the customer after the order. During the order process in our online shop, select
via secupay "direct debit", "purchase on account" or "credit card", your data will be automatically transmitted to secupay.
By selecting one of these payment options, you consent to the transmission of personal data required for payment processing
The processing is carried out on the basis of Art. 6 Paragraph 1 Letter a of GDPR with your consent. You can withdraw your consent at any time by
notification to us without affecting the legality of the processing carried out on the basis of the consent until the revocation
When processing payments via secupay, the payment method data is transmitted to secupay. secupay then carries out a
technical check of the risk of payment default. The transaction result is then communicated to us automatically.
The personal data exchanged with secupay are first name, last name, address, email address, IP address,
Telephone number or other data necessary for payment processing. The purpose of transmitting the data is to
Payment processing and fraud prevention. We will also transfer other personal data to secupay if a
legitimate interest for the transmission. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR. The
Personal data exchanged between secupay and us may be passed on by secupay to credit agencies
This transmission is for the purpose of identity and credit checks. secupay may pass on the personal data to
affiliated companies and service providers or subcontractors, insofar as this is necessary to fulfil the contractual obligations
is required or the data is to be processed on behalf of the controller. You have the option of withdrawing your consent to the handling of
personal data to secupay at any time. A revocation does not affect personal data that
must be processed, used or transmitted for the (contractual) payment processing. The applicable
secupay’s data protection regulations can be found at https://www.secupay.com/de/datenschutz.

cookies
Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on the
computer system of a user. When a user visits a website, a cookie can be stored on the operating system of the
This cookie contains a characteristic string that uniquely identifies the browser when
allows you to access the website again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting
By making appropriate technical settings in your Internet browser, you can be notified before cookies are set and
decide individually whether to accept them or not and prevent the storage of cookies and the transmission of the data they contain.
Stored cookies can be deleted at any time. However, we would like to point out that in this case you may not be able to access all
can fully use the functions of this website.
The links below will tell you how to manage cookies in the most important browsers (including
deactivate):
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-
2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablassen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated in the privacy policy below, we only use these technically necessary
Cookies to make our service more user-friendly, effective and secure. Cookies also enable
our systems to recognize your browser even after you change pages and to offer you services. Some functions of our
The website cannot be offered without the use of cookies. These require that the browser is
page change is recognized.
The use of cookies or similar technologies is based on Section 25 Paragraph 2 of the TDDDG. The processing of your
personal data is processed on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in the
Ensuring optimal functionality of the website as well as a user-friendly and effective design of our offering.
You have the right, for reasons related to your particular situation, to object at any time to the processing of personal data concerning you.
personal data.

Plug-ins and Others
use of social plug-ins
We use social network plug-ins on our website. The integration of social plug-ins and the associated
Data processing serves the purpose of optimizing advertising for our products.
When integrating social plug-ins, a link is established between your computer and the servers of the provider of the social
Network and the plug-in is displayed on the page by notifying your browser, provided that you have expressly consented to
Both your IP address and the information about which of our pages you have visited will be sent to the
provider server. This applies regardless of whether you are registered or logged in to the social network. Even if you are not
A transmission takes place to registered or non-logged-in users. If you are simultaneously logged in to one or more of your social
Network accounts, the information collected can also be assigned to your corresponding profiles.
Use of the plug-in functions (e.g. by pressing the button) this information is also assigned to your user account. This
You can prevent this assignment by logging out of your browser before visiting our website and before activating the buttons.
Log out of social media accounts.
The use of cookies or similar technologies takes place with your consent on the basis of Section 25 Paragraph 1 Sentence 1 TDDDG in conjunction with
Art. 6 Para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 Para. 1 lit.
a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of your consent until the revocation.
processing carried out.
The social networks named below are integrated into our website via social plug-in. Further information on the scope and
The purpose of the collection and use of data as well as your rights and options for protecting your privacy can be found
You can find more information in the linked data protection notices of the providers.
Facebook of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)
Meta Platforms Ireland and we are jointly responsible for the collection of your data when integrating the service and
Transmission of this data to Facebook. The basis for this is an agreement between us and Meta Platforms Ireland regarding the
joint processing of personal data, in which the respective responsibilities are defined. The agreement is under
https://www.facebook.com/legal/controller_addendum. We are then particularly responsible for the fulfilment of the
Information obligations pursuant to Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the
correct technical implementation and configuration of the service as well as compliance with the obligations under Art. 33, 34 GDPR,
to the extent that a breach of the protection of personal data would violate our obligations under the Agreement on the joint
Meta Platforms Ireland is responsible for protecting the rights of data subjects in accordance with Art. 15 - 20 GDPR.
enable compliance with the security requirements of Art. 32 GDPR with regard to the security of the service and the obligations
pursuant to Art. 33, 34 GDPR, insofar as a breach of the protection of personal data would violate the obligations of Meta Platforms Ireland
pursuant to the Joint Processing Agreement.
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists,
the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself according to the TADPF and is thus committed to European
comply with data protection principles.
Further information on the collection and use of data by Facebook, your rights in this regard and options for
For more information about the protection of your privacy, please see Facebook’s privacy policy at https://www.facebook.com/about/privacy/.
Instagram of Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://help.instagram.com/155833707900388
Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission exists,
the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself according to the TADPF and is thus committed to European
to comply with data protection principles.
Integration of the Händlerbund member logo
The Händlerbund member logo (Händlerbund eV, Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated into our website.
When you visit our website, the browser used on your device automatically sends information to the server
des Händlerbund eV. This information is temporarily stored in a so-called server log file for 7 days. The following
Information is collected without your intervention and stored until it is automatically deleted:
IP address of the requesting computer,
date and time of access,
Name and URL of the retrieved file,
Website from which access is made (referrer URL),
browser used and, if applicable, the operating system of your computer and the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable the delivery of the website.
The IP address must be stored for the duration of the session. The storage in log files is done to ensure the functionality of the
website. In addition, the data is used to optimize the website and to ensure the security of the
information technology systems. This data is not stored together with other personal data.
The legal basis for data processing is Art. 6 Para. 1 S. 1 lit. f GDPR.

Rights of data subjects and storage period
duration of storage
After the contract has been fully processed, the data will be stored initially for the duration of the warranty period, then taking into account
statutory, in particular tax and commercial law retention periods and then deleted after expiry of the period, provided that you
have not consented to further processing and use.
rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information,
rectification, erasure, restriction of processing, data portability.
In addition, according to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR
based, as well as against processing for direct marketing purposes.
right to lodge a complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you consider that the processing
your personal data is not processed lawfully.
You can lodge a complaint with the supervisory authority responsible for us, which you can reach at the following contact details
to reach:
State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
PO Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
E-Mail: poststelle@ldi.nrw.de
right of objection
The personal data processing listed here is based on our legitimate interest in accordance with Art. 6 Para. 1 lit.
f GDPR, you have the right, for reasons arising from your particular situation, to object to this processing at any time with effect
to object in the future.
After objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds
for the processing which overrides your interests, rights and freedoms, or if the processing is necessary for the assertion,
exercise or defense of legal claims.

last updated: November 29, 2023