Privacy policy


Our privacy policy is currently available in German only. These can be found at https://www.tennis-point.de/datenschutz/
A national translation will be added soon. Below you will find a machine translated version in your local language:


I. Contact
 

This information applies to data processing by: 
 
Tennis Point Europe GmbH 
Hans-Böckler-Str. 29-35 
33442 Herzebrock-Clarholz 
Germany 
Email:[email protected] 
Telephone:+49 (0) 5245 / 8353 - 200 
https://www.tennis-point.co.uk/ 
 
The external Data Protection Officer Nils Möllers from Keyed GmbH can be contacted at the above address, for the attention of the Data Protection Officer, or via email at [email protected].

II. Processing of personal data as well as type and purpose 

1. Web hosting 

To provide this website, we use the web hosting service Shopify 

Shopify.com. Inc, The Landmark @ One Market, Suite 300, San Francisco, CA 94105 (hereinafter “Shopify”). 

Shopify stores this website on its servers (hosting). In order to offer this website, it is necessary to commission a web hosting service. The use of Shopify takes place in accordance with Art. 6 Para. 1 p. 1 lit. f GDPR due to our legitimate economic interest in making our offer available on this website. 

In connection with hosting, Shopify processes personal data on our behalf in the following The user's actions arise: 

  • when visiting our website; 

  • as part of an order in our online shop; 

  • when creating and using a customer account; 

  • when using our re-available function; 

  • when using the contact form; 

  • in connection with our newsletters. 

We have concluded an order processing agreement with Shopify for the use of Shopify. Through this contract, Shopify assures that it will process the data in accordance with the General Data Protection Regulation and ensure the protection of the rights of the data subject. There is an adequacy decision from the EU Commission for the USA, that TransAtlantic Data Privacy Framework (hereinafter “TADPF”, further information under III. 9. of this data protection declaration). Shopify has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles. The forwarding of personal data to Shopify is also based on Shopify's binding internal data protection regulations in accordance with Art. 46 Para. 2b, 47 GDPR (so-called Corporate Binding Rules) as well as the European Commission's standard data protection clauses in accordance with Art. 46 Para. 2c) GDPR. Both sets of regulations are anchored in the Shopify Data Processing Addendum that we have concluded with Shopify. Shopify is also certified by reliable security standards, including PCI-DSS, SOC2, ISO 27001. 

For more information about data protection related to Shopify, please see the Shopify Privacy Policy. 

2. When visiting our website 

When you visit our website https://www.tennis-point.co.uk/The browser used on your device automatically sends information to the server on our website. This information is temporarily stored in a so-called log file. The following information is collected and stored without your intervention and deleted from the log files after 14 days: 

  • IP address of the requesting computer, 

  • Date and time of access, 

  • Name and URL of the retrieved file, 

  • website from which from access takes place (Referrer-URL), 

  • Operating system of the requesting computer, 

  • Browser type and –version as well as other information transmitted by the browser (such as your computer's operating system). 

The data mentioned will be processed by us for the following purposes: 

  • to ensure a smooth connection to the website, 

  • to ensure comfortable use of our website, 

  • to evaluate system security and stability, 

  • to detect and prevent attacks on our website, 

  • to continuously improve the website and 

  • for further statistical and administrative purposes. 

The legal basis for data processing is Article 6 Paragraph. 1 p. 1 lit. f GDPR. Our legitimate interest follows from the data processing purposes listed above. In the event of an attack on our network infrastructure, we will evaluate your collected IP address to assert or defend against legal claims. 

We also use cookies and analysis services when you visit our website. Further explanations can be found in sections IV and V of this data protection declaration. 

3. As part of an order in our online shop 

If you would like to order products via our website as a guest or as a registered customer, we process the following mandatory information: 

  • Salutation, first name, last name, 

  • a valid email address, 

  • Billing and delivery address 

  • Depending on the payment method you selected, payment details (e.g. credit card number) may be required. 

The processing of this data takes place 

  • to be able to identify you as our contractual partner; 

  • to check the entered data for plausibility; 

  • to process payment and ship your order; 

  • for advertising purposes and, if necessary, to personalize advertising measures; 

  • to process any warranty claims that may exist and to assert any claims against you. 

We work with you as part of your order 

parcelLab GmbH Landwehrstr. 39 80336 Munich as well Emarsys Interactive Services GmbH, Willi-Schwabe-Straße 1, 12489 Berlin 

as a service provider for logistics and transaction notifications, to whom we transmit the data required for shipping and any returns, including your email address for notifications regarding tracking numbers and, if necessary, receipt of returns, etc. The service provider was carefully selected and commissioned by us and is subject to our instructions bound and is regularly checked, particularly with regard to the appropriate technical and organizational measures for data security. There is a transfer of data to countries outside the EEA basically does not take place. Only for orders with a delivery address in Switzerland will your data be transferred between Tennis-Point Europe GmbH and Tennis-Point Schweiz AG. 

The data processing takes place at your request and is in accordance with Art. 6 Para. 1 p. 1 lit. b and lit. f GDPR is necessary for the stated purposes for the fulfillment of the contract and for other pre-contractual measures as well as our legitimate interests. 

The personal data processed by us for the order will be stored until the statutory warranty obligation expires and will then be automatically deleted, unless we do so in accordance with Art. 6 Para. 1 p. 1 lit. c DSGVO are obliged to store the data for a longer period of time due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO) or you are required to store data for a longer period of time in accordance with Art. 6 Para. 1 p. 1 lit. a GDPR have consented. 

4. When creating a customer account 

We offer you the opportunity to create a customer account with us. To register and create a customer account, we require the following mandatory information: 

  • Salutation, first name, last name, 

  • a valid email address, 

  • billing and delivery address, 

  • Password. 

In addition, you can voluntarily provide further information (such as your date of birth). The processing of this data takes place 

  • to identify you as our customer; 

  • to check the entered data for plausibility; 

  • to personalize advertising measures; 

  • to process any warranty claims that may exist and to assert any claims against you. 

We work with you 

Emarsys Interactive Services GmbH, Willi-Schwabe-Straße 1, 12489 Berlin (hereinafter “Emarsys“) 

as a specialized service provider for customer relationship management for documentation, administration andmarketing purposestogether, to whom we will send your master data (salutation, first and last name, postal code, city, Email address). This service provider was carefully selected and commissioned by us, is bound to our instructions and is regularly checked, particularly with regard to the appropriate technical and organizational measures for data security. There is no data transfer to non-EEA countries. 

The data processing takes place at your request and is in accordance with Art. 6 Para. 1 p. 1 lit. b and lit. f GDPR for the stated purposes for the fulfillment of the contract and for other pre-contractual measures as well as due to our legitimate interests. 

We store the personal data we collect for registration and login until you request the deletion of your customer account. In the event of a request for deletion, we will only retain the necessary information about your orders if further storage is required on the basis of Art. 6 Para. 1 p. 1 lit b GDPR is necessary for the fulfillment of the contract or we are obliged to do so in accordance with Article 6 para. 1 p. 1 lit. c GDPR are obliged to store data for a longer period of time due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO). 

5. As part of the use of the re-available function 

If the item you want is out of stock, you can use our back in stock function to be notified as soon as the item is available again. To do this, you must provide your name and your details Email address required. 

The data processing takes place at your request and is in accordance with Art. 6 Para. 1 p. 1 lit. b GDPR and is required as pre-contractual measures. 

The personal data we collect will be deleted after your request has been dealt with, unless we have to retain it due to the nature of your request or if we do so in accordance with Art. 6 Para. 1 p. 1 lit. c GDPR are obliged to store data for a longer period of time due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO). 

6. As part of the use of our contact form/customer service 

You can send general inquiries to us using the contact form provided on our site. We ask for your first and last name and a valid email address. We need this information in order to answer your request 

Any additional personal information such as your address, an order number or your telephone number will not be recorded unless you provide this information voluntarily. 

Data processing for the purpose of contacting us takes place at your request and on the basis of Art. 6 Para. 1 p. 1 lit. b GDPR or to protect our legitimate interests in accordance with Art. 6 Para. 1 p. 1 lit. f GDPR. Our legitimate interest lies in being able to respond to inquiries from our customers and thus ensure functioning customer service. 

The personal data we collect for using the contact form will be deleted after your request has been dealt with, unless we have to retain it due to the nature of your request or if we do so in accordance with Art. 6 Para. 1 p. 1 lit. c GDPR are obliged to store data for a longer period of time due to tax and commercial law retention and documentation obligations (from HGB, StGB or AO). 

a. Freshdesk Service 

To process your request, we work with the following specialized service provider to whom we transmit the necessary personal data: 

Customer care about Freshworks Inc., 2950S.Delaware Street, Suite 201, San Mateo, CA 94403 (hereinafter "Freshdesk"). 

This service provider was carefully selected and commissioned by us, is bound to our instructions and is regularly checked, particularly with regard to the appropriate technical and organizational measures for data security. Freshdesk uses servers in Europe for this purpose; data is not transferred to the USA. Further information on data protection can be found here Freshdesk underhttps://www.freshworks.com/privacy/data-hosting/. 

b. Salesupply 

For customer support, we work with the following specialized service provider, to whom we transmit the necessary personal data: 

Salesupply Customer service the Salesupply Deutschland GmbH, Dr.-Detlev-Karsten-Rohwedder-Str. 17, 47228 Duisburg (hereinafter "Salesupply"). 

We have with Salesupply concluded an order processing contract. Through this contract, Salesupply assures that it processes the data in accordance with the General Data Protection Regulation and ensures the protection of the rights of the data subject. 

7. In connection with our newsletters 

7.1 Basics Newsletter dispatch 

As a customer or interested party, we would like to send you our newsletter. If you are not our customer and still want to receive our newsletter, all we need to send the newsletter is your email address and information about whether you would like to be informed about products for women or men. In addition, you can voluntarily provide us with your first and last name so that we can address you personally. The sending takes place on the basis of your explicit consent (Art. 6 para. 1 p. 1 lit. a GDPR). If you sign up for our free newsletter, we will regularly inform you about new products, valuable tips and news as well as exclusive offers from the Sport-Point Group. After registering, you will receive an email with a confirmation link, which you can click to complete the registration. 

To personalize the newsletter, we use the following specialized service provider, to whom we transmit the necessary personal data (email address) as well as customer data, if you have set up a voluntary customer account with us: 

Emarsys Interactive Services GmbH, Willi-Schwabe-Straße 1, 12489 Berlin (hereinafter “Emarsys“) 

Means Emarsys We can monitor the behavior of our registered customers and Newsletter recipient measure and evaluate. This includes the open, click, bounce, delivery, unsubscribe and Conversion-Rate. The evaluation is also carried out using cookies or pixel tags, which collect information such as the IP address, browser type/version, email client and time of access. This also makes it possible to track who opens the email and clicks on the links it contains. User behavior is evaluated for the purpose of identifying reading habits and aligning content accordingly, measuring the success of email campaigns and improving our offering, in particular to present you with relevant and targeted offers based on your interests. There is no data transfer to countries outside the EEA. 

You can object to the personalization of our newsletter at any time by sending us an email[email protected]send. If you choose to do so, we will no longer personalize you but may continue to send you our general newsletter. 

In addition, it is also possible to completely unsubscribe from our newsletters at any time, for example via a link at the end of each newsletter. Alternatively, you can request to unsubscribe at any time[email protected]send by email. Yours in this context and solely for the purposes of newsletter dispatch Processed personal data will be deleted immediately after you unsubscribe, but we will keep the fact that you have objected and yours Email address so that we don't accidentally send you newsletters in the future. 

7.2 Advertising by email in accordance with Section 7 Paragraph 3 UWG 

Within the scope of the legal permission in accordance with Section 7 Paragraph 3 UWG, we are entitled to use the email address that you provided when purchasing a paid service for direct advertising for our own, similar products or services. If you are already a customer of ours, we may send you information on the basis of Art. 6 para. 1 p. 1 lit. f GDPR and our legitimate interests in informing you about current product recommendations (direct marketing), newsletters. If you no longer wish to receive advertising about similar products or services, you can object to the corresponding use of your email address at any time without incurring any costs other than the transmission costs according to the basic tariffs. You can do this by: Click on the unsubscribe link contained in every mailing or by email[email protected]unsubscribe from product recommendations. 

8. To prevent and analyze click fraud 

On our website we use the Ads Defender service 

Hurra Communications GmbH, Wollgrasweg 27, 70599 Stuttgart, Germany (hereinafter referred to as “Hurra.com”). 

Ads Defender is used to analyze and prevent click fraud on our ads. Click fraud occurs when clicks on ads are generated by automated tools or multiple clicks on ads are unlikely to be due to genuine user interest. 

The legal basis for the use of Ads Defender is Article 6 Paragraph 1 lit. f GDPR. There is a legitimate interest in monitoring and preventing fraudulent activity through click fraud and in ensuring the proper functioning of our systems. 

When analyzing by Ads Defender, the following personal data is collected and stored when you click on advertising: IP address, information about the browser used, information about the operating system, location information, Referrer-URL, other online identifiers such as click and cookie IDs, duration of use and time of access and information about interactions with advertising media and our website. 

If Ads Defender detects suspicious behavior and suspects click fraud, these IP addresses may be sent to Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). In the case of Google services, the data may be transferred to the USA. 

Further information about data protection at hurra.com can be found at: https://privacy.hurra.com. 

III. Transfer of data to third parties 

To the extent permitted by law and in accordance with Art. 6 Para. 1 p. 1 lit. b GDPR is necessary for the processing of contractual relationships with you, your personal data will be passed on to third parties. 

1. For payment processing 

This includes passing on payment data to payment service providers or credit institutions in order to carry out a payment transaction. For processing, it may be necessary for us to forward the personal data collected during the payment process, such as name, address, telephone number, email address, credit card or bank account details and transaction data, to the payment service provider. As a rule, however, the payment service providers collect this data themselves. The data passed on may only be used by the third party for the purposes mentioned. 

As part of the fulfillment of the contract in accordance with Art. 6 para. 1 p. 1 lit. b GDPR, we use the payment service providers listed below for payment processing. 

a. Payments about Adyen 

When paying by credit card (etc. Visas, MasterCard, American Express), debit card or other locally offered payment methods (etc. EPS, BLIK, Twint, Swish) Your entered payment details will be processed in accordance with Art. 6 Para. 1 p. 1 lit. b GDPR from the 

Adyen N.V., Simon Carmiggeltstraat6-50, 1011 DJ, Amsterdam, Netherlands (hereinafter: “Adyen”) 

recorded, stored and only passed on to the companies involved in the payment process. With the Payment accept the payment provider's terms and conditions. In this case, we will not collect or store payment data. Further information on this can be found in the data protection regulations by Adyen, your credit card company, or the corresponding provider to be removed. 

b. Payment with PayPal 

We offer payment processing via the payment service provider 

PayPal the PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L- 2449 Luxembourg (hereinafter “Paypal“) 

on. If you pay with your PayPal account, you will be redirected to PayPal's website. There you can log in with your account details and instruct the payment. If you choose the payment options “direct debit”, “credit card” or “purchase on account”, you will also be redirected to the PayPal website. There you can instruct the payment with or without a PayPal account by providing the payment information. We have no access to the personal data collected by PayPal. PayPal is responsible for processing them. 

Further information on data protection in connection with PayPal can be found in thePayPal Privacy Policy. 

c. Payment via Klarna 

(i.) Klarna Pay Later 

If you pay for your order on account via Klarna, we will pay in advance. When you select this payment option, your personal data will therefore be passed on to: 

Klarna GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Klarna”) 

(see Klarna’s privacy policy at:https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy) for the purpose of checking our credit risk. 

Klarna has the credit risk assessed by credit agencies and receives information and, if necessary, creditworthiness information based on mathematical-statistical procedures (scoring), the calculation of which includes, among other things, address data and your date of birth. 

Klarna works with the following credit agencies: 

  • Deltavista GmbH, Freisinger Landstraße 74, D-80939 Munich, Tel.: +49 (0)721-25511-777 

  • Credit reform Boniverse GmbH, Hellersbergstrasse 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557 

  • infoscore Consumer Data GmbH, Rheinstraße 99, D-76532 Baden-Baden, Tel.: +49 (0)7221-5040-1000, Fax: -1001 

  • Bürgel Wirtschaftsinformation GmbH & Co. KG, Gasstraße 18, D-22761 Hamburg, Tel.: +49 (0)40-89803-0, Fax: -777 

  • Deutsche Post Direkt GmbH, Junkers ring 57, 53844 Troisdorf 

  • Regis24 GmbH, Wallstraße 58, D-10719 Berlin, Tel.: +49 (0)30 44350-240, Fax: -249 

  • CRIF Bürgel GmbH, Radlkoferstrasse 2, D-81373 Munich, Tel.: +49 40 89803-0, Fax: -777/ 778 

  • SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden (Information about the stored data concerning you can be obtained from SCHUFA Holding AG, Consumer Service, PO Box 5640, 30056 Hanover) 

The collection, storage and transfer is therefore carried out for the purpose of credit checks and in our interest in avoiding payment default and for fraud prevention on the basis of Article 6 Paragraph 1, Sentence 1 lit. f GDPR. Based on this information, a statistical probability of loan default and thus your solvency (creditworthiness) is calculated. If the credit check is positive, an order on account is possible. If the credit check is negative, our shop system will not allow you to pay on account. The decision as to whether an order is also possible on account is based solely on an automated decision made by our online shop system, which Klarna or the credit agencies commissioned by it carry out, so that a manual check of your documents by one of our employees does not take place separately. 

To the extent that we make automated decisions with legal effect, you have the right to receive information about the logic involved, as well as the scope and intended effects of this data processing. You can have the automated decision reviewed by us by expressing your point of view and you have the right to human intervention by us. Please contact us for this[email protected]. 

(ii.) Klarna Pay Now 

1. Klarna instant transfer 

If you pay for your order via instant transfer, all you need is your account number, BIC or sort code, as well as the PIN and TAN of your online banking account. As part of the ordering process, you will automatically be redirected to a secure payment form from Klarna Bank AB (“Klarna”). Immediately afterwards you will receive confirmation of the transaction. We will then receive the transfer credit directly. Anyone who has an activated online banking account with a PIN/TAN procedure can use Sofortüberweisung as a payment method. Please note that a few banks do not yet support payment via instant transfer. 

2. Klarna direct debit 

If you choose the direct debit payment method when placing your order, you must provide your account details (IBAN and BIC), which will be passed on to Klarna. The payment amount is due for payment by direct debit upon conclusion of the contract and will be debited from your specified account by Klarna. The debit takes place after the goods have been dispatched. The time will be communicated to you by email. The direct debit payment method requires, among other things, a successful identity and credit check (see III. 1. e.i.) 

(iii.) Klarna Pay over time („Payment in installments“) 

If you select installment payment as the payment option for your order, your personal data will be passed on to Klarna for the purpose of identity and creditworthiness checks. 

Klarna has the credit risk assessed by credit agencies and receives information and, if necessary, creditworthiness information based on mathematical-statistical procedures (scoring), the calculation of which includes, among other things, address data and your date of birth. For the exact procedure, please see III. 1. e. i. There you will find a list of the credit agencies that Klarna works with. 

The personal data transmitted to Klarna is usually about first name, last name, address, date of birth, gender, email address, IP address, telephone number, mobile phone number and other data necessary to process an installment purchase. To decide on the establishment, implementation or termination of a contractual relationship, Klarna collects and uses data and information about the previous payment behavior of the person concerned as well as probability values for their behavior in the future (so-called scoring). The calculation of the scoring is carried out on the basis of scientifically recognized mathematical and statistical procedures. 

To the extent that we make automated decisions with legal effect, you have the right to receive information about the logic involved, as well as the scope and intended effects of this data processing. You can have the automated decision reviewed by us by expressing your point of view and you have the right to human intervention by us. Please contact us for this [email protected]. 

d. Payment via Apple Pay 

We accept Paymenten using Apple Pay, a service provided by 
Apple Distribution International Ltd., Hollyhill industrial estate, Hollyhill, Cork, Ireland, 
or Apple Inc., One Apple Park Way, Cupertino, CA 95014, USA. 

If you select Apple Pay, payment processing will take place via the in your AppleWallet stored payment method (e.g. credit card). Apple simply sends us confirmation tokenized Payment information, but not your actual card number. Apple itself does not store complete payment data, but rather processes it in a protected manner SecureElement on your device. 

We have no access to the data collected by Apple. Apple is solely responsible for processing them. 

Further information about data protection with Apple Pay can be found at: 
https://www.apple.com/legal/privacy/ 

e. Payment via Google Pay 

We accept Paymenten via Google Pay, a service provided by 
Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland 
or Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA. 

When paying with Google Pay, the payment is approved via the in your Googleaccount stored payment method (e.g. credit card). Google exclusively provides us with the processing tokenized Payment details available, but not your full card details. 

We have no access to the personal data transmitted or stored by Google. Google is solely responsible for their processing. 

Further information about data protection at Google Pay can be found at: 
https://support.google.com/googlepay/answer/9039712 

2. To ship your order 

In order to be able to ship your order in our shop (Art. 6 Para. 1 p. 1 lit. b GDPR) as well as due to our legitimate interests in making shipping as uncomplicated and smooth as possible (Art. 6 Para. 1 p. 1 lit. f GDPR), we transmit the data you provided as the delivery address and your email address to shipping service providers who transport your shipment, exclusively for the purposes of delivering goods and for the purposes of individualized goods delivery notification. If it is necessary to coordinate a delivery date, for example for freight forwarded goods (Art. 6 Para. 1 S .1 lit. b GDPR) and you have provided us with your telephone number, we will also transmit this to shipping service providers who transport your shipment, exclusively for the purpose of agreeing a delivery date. These service providers are subject to postal secrecy. 

3. Regarding customer review requests 

a. Google reviews 

The Google Customer Reviews survey gives you the opportunity to rate the purchasing process on our website. If you expressly agree to participate in Google customer reviews (Art. 6 Para. 1 p. 1 lit. a GDPR), Google will send you a survey after your order has been delivered. To do this, we provide the following information about your order 

  • the order ID 

  • Your email address 

  • the country to which the order will be delivered 

  • the delivery date of your order, as well 

  • the Global Trade Item Number to assign review data to one of our articles 

on 

Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (in Following Google"). 

There is an adequacy decision from the EU Commission for the USA, that TransAtlantic Data Privacy Framework (hereinafter “TADPF”, further information under III. 9. of this data protection declaration). Google has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles. The processing of personal data by Google is also carried out under Google's own responsibility on the basis of the European Commission's standard data protection clauses in accordance with Article 46 (2c) GDPR. Google has also implemented extensive technical and organizational measures designed to protect personal information from accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access. These measures by Google are in accordance withStandard ISO/IEC 27001:2013certified. 

You can revoke your consent to us at any time. This means that we will no longer be allowed to continue the data processing described above, which is based on this consent, in the future. You can find further information about Google's data protection in connection with the Google Customer Reviews programhereretrieve. 

b. Trustpilot 

To improve our service, we use the rating portal Trustpilot, operated by: 

Trustpilot A/S, Pilestraede 58, 5th floor, 1112 Copenhagen, Denmark (in Following “Trustpilot”). 

An invitation to leave a review is generated for every order placed via our website. For this purpose, your last name, first name, email address and a reference number (order number for unique assignment) will be transmitted to Trustpilot. Trustpilot neither uses this data itself nor passes it on to third parties. The review is verified based on the reference number (order number) using a specially created link. Submitting a review is voluntary. 

In order to submit a rating or collect customer feedback, you must create/open a user profile on Trustpilot. In addition to a rating for the inviting company, ratings can also be recorded for any company on the Trustpilot rating portal. 

If a review is submitted by clicking on the link contained in the invitation, a user profile is automatically created on Trustpilot after entering personal data (name and email address for verification). This constitutes acceptance of Trustpilot's data protection regulations and general terms and conditions. These can be viewed on the Trustpilot website at: 

The transmission of your personal data for the delivery of review emails after ordering in our online shop is carried out to protect our legitimate interests on the basis of Art. 6 Para. 1 p. 1 lit. f GDPR. 

c. Product reviews about Bazaarvoice 

We use the services of 

Bazaarvoice Inc., 10901 Stonelake Blvd. Austin, Texas 78759, USA (www.bazaarvoice.com), 

to know your satisfaction with the goods. To do this, we process your email address and purchase data to send an email in which we ask you to rate the purchase. This data processing is necessary to protect our legitimate interests in evaluating the product range i.S.d. Art. 6 para. 1 p. 1 lit. f GDPR. There is an adequacy decision from the EU Commission for the USA, that TransAtlantic Data Privacy Framework (hereinafter “TADPF”, further information under III. 9. of this data protection declaration). Bazaarvoice has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles. There is also a contract in accordance with the EU standard contractual clauses to ensure an appropriate level of data protection when transferring personal data to third countries. 

4. For voucher offers Sovendus GmbH 

In order to select a voucher offer that is currently of interest to you, we pseudonymize and encrypt the hash value of your email address and your IP address 

Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe (hereinafter “Sovendus“) 

transmitted (Art. 6 Para. 1 f GDPR). 

The pseudonymized hash value of the email address is used to take into account any possible objection to advertising Sovendus used (Art. 21 Para. 3, Art. 6 Para.1 p. 1 lit. c GDPR). The IP address is from Sovendus used exclusively for data security purposes and is usually anonymized after seven days (Art. 6 Para.1 p. 1 lit. f GDPR). We also transmit a pseudonymized order number, order value with currency, session ID, coupon code and time stamp for billing purposes Sovendus (Art. 6 para.1 p. 1 lit. f GDPR). If you are interested in a voucher offer from Sovendus If you are interested, there is no advertising objection to your email address and you click on the voucher banner that is only displayed in this case, we will encrypt your title, name and email address Sovendus transmitted to prepare the voucher (Art. 6 Para. 1 lit. b, f GDPR). 

Further information on how your data is processed Sovendus Please see the online data protection information atwww.sovendus.de/datenschutz. 

5. When clicking on embedded YouTube videos 

On our website we rely on Art. 6 para. 1 p. 1 lit. f GDPR and our legitimate interests in making our website interesting for you Components (videos) of the company YouTube, LLC 901 Cherry Ave., 94066 San Bruno, CA, USA (hereinafter “YouTube”), a company of 

Google Inc., Amphitheater Parkway, Mountain View, CA 94043, USA (in Following Google"), 

a. 

We use the “extended data protection mode” option provided by YouTube: If you access a page that has an embedded video, a connection is established to the YouTube servers and the content is displayed on the website by notifying your browser. According to YouTube, in “extended data protection mode” your data - in particular which of our websites you have visited and device-specific information including the IP address - will only be transmitted to the YouTube server in the USA if you watch the video. By clicking on the video you trigger this transmission. 

If you are logged in to YouTube at the same time, this information will be assigned to your YouTube member account. You can prevent this by logging out of your member account before visiting our website. 

There is an adequacy decision from the EU Commission for the USA, that TransAtlantic Data Privacy Framework (hereinafter “TADPF”, further information under III. 9. of this data protection declaration). Google has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles. The processing of Personal data collected by Google is also based on the European Commission's standard data protection clauses in accordance with Article 46 (2c) GDPR. Google has also implemented extensive technical and organizational measures designed to protect personal information from accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access. These measures by Google are in accordance withStandard ISO/IEC 27001:2013 certified. 

Further information on data protection in connection with YouTube can be found in theGoogle privacy policy. 

6. For travel booking inquiries 

If you have given us your express consent in accordance with Art. 6 Para. 1 p. 1 lit. a DSGVO, we send the following data from the booking form to the tour operator Patricio Travel GmbH, Am Hafen 8, D-94130 Obernzell by email: 

  • Hotel information 

  • Information on meals, travel duration, travel dates, number of people and tennis courts 

  • Travel protection information 

We also transmit the following personal data provided by you: 

  • Salutation 

  • First and last names 

  • Club 

  • Address (street, zip code, city, country) 

  • Telephone number 

  • a valid email address 

  • Notes 

Your data is transmitted in the booking form for the purpose of ensuring that you receive travel offers and information materials tailored to your personal interests from Patricio Travel GmbH and that you can be contacted for a possible booking of a trip with Patricio Travel GmbH. 

The data passed on may only be used by Patricio Travel GmbH for the purposes mentioned. 

7. For further purposes 

In addition, we will only share your personal information with third parties if: 

  • According to Art. 6 Para. 1 p. 1 lit. a DSGVO have given express consent to this, 

  • in the event that the transfer pursuant to Art. 6 para. 1 p. 1 lit. c GDPR there is a legal obligation, as well 

  • the transfer according to Art. 6 para. 1 p. 1 lit. f GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data. 

8. Information about possible risks of data transfers to unsafe third countries, especially to the USA 

A “third country” is a country outside the European Economic Area (EEA) in which the GDPR is not directly applicable. A third country is considered “unsafe” if the EU Commission has not issued an adequacy decision for this country in accordance with Article 45 (1) GDPR, which confirms that there is adequate protection for personal states in the country. On July 10, 2023, the EU Commission issued the Trans-Atlantic-Data Privacy Framework (TADPF) a new adequacy decision i. S.d. Art. 45 Paragraph 1 GDPR passed for secure data traffic between the EU and the USA. The USA is therefore considered a so-called safe third country. 

In this data protection information we inform you when and how we transfer personal data to the USA or other unsafe third countries. We only transmit your personal data if the recipient is certified according to the TADPF or if 

  • the recipient offers sufficient guarantees in accordance with Article 46 Para. 1 GDPR for the protection of personal data; or 

  • You in the transmission after we have informed you about the risks in accordance with Art. 49 Para. 1 lit. a GDPR have expressly agreed; or 

  • the transmission is necessary for the fulfillment of contractual obligations between you and us (Art. 49 Para. 1 lit. b) GDPR) or 

  • another exception from Art. 49 GDPR applies. 

Guarantees according to Art. 46 Para. 1 GDPR can be granted according to Art. 46 Para. 2 lit. b GDPR can be so-called Binding Corporate Rules, i.e. binding internal data protection regulations of a provider agreed with the supervisory authorities. Also come under Article 46 Paragraph 2 lit. c GDPR, so-called standard contractual clauses, which are issued by the European Commission in accordance with Article 93 (2) GDPR, can be considered as suitable guarantees. In these standard contractual clauses, the recipient assures that the data will be adequately protected and thus ensure a level of protection comparable to the GDPR. We ensure beforehand that the recipient can fulfill the agreed guarantees. 

IV. Cookies and pixel tags 

1. What are cookies and pixel tags? 

We use cookies on our site. These are small files that your browser creates automatically and that are stored on your device (laptop, tablet, smartphone, etc.) when you visit our site. Cookies do not cause any damage to your device and do not contain viruses, Trojans or other malware. 

The cookie stores information that arises in connection with the specific end device used. However, this does not mean that we receive direct knowledge of your identity. 

We use pixel tags (also called tracking pixels or tracking pixels) as part of our online offering. Pixels are small graphics that are integrated into the HTML code of our site. The pixel tag itself does not store or change any information on your device, so pixels on your device do not cause any damage and do not contain viruses, Trojans or other malware. 

Pixels may contain personal data, such as your IP address Referrer-URL of the website visited, the time at which the pixel was viewed, the browser used, and previously set cookie information are sent to a web server. This makes it possible to carry out range measurements and other statistical evaluations that serve to optimize our offering. 

On the one hand, the use of cookies serves to make the use of our offer more pleasant for you. We use so-called session cookies to recognize that you have already visited individual pages on our website, that you have already logged into your user account or to display your shopping cart. These are automatically deleted after you leave our site. 

In addition, to optimize user-friendliness, we also use temporary, so-called comfort cookies, which are stored on your device for a specific period of time. If you visit our site again to use our services, it will automatically be recognized that you have already been with us and what entries and settings you have made so that you do not have to enter them again. As a rule, these are deleted after a maximum of 30 days. Only comfort cookies that affect language settings are stored for 365 days. 

On the other hand, we use cookies and pixel tags as part of third-party tools to statistically record the use of our website and to evaluate it for the purpose of optimizing our offering for you (see under V.). These analysis, tracking and targeting cookies enable us to automatically recognize that you have already been with us when you visit our site again. These cookies are automatically deleted after a defined period of time. 

2. What are the legal bases for processing using cookies and pixel tags? 

The legal basis for processing personal data using cookies and pixel tags depends on the category of cookies and pixel tags used. We use cookies, which are necessary to maintain the functions of the website, to protect our legitimate interests in accordance with Art. 6 Para. 1 p. 1 lit. f GDPR used; Our legitimate interest is to offer a smoothly functioning and attractively designed website. We will only use all other cookies that are not necessary to maintain the functions of the website with your consent in accordance with Art. 6 Para. 1 p. 1 lit. a GDPR used. You can obtain this consent via our websiteCookie consent toolgrant or revoke it at any time with effect for the future. You have the option of either agreeing to the use of all cookie categories or making an individual selection. 

3. Consent management with OneTrust 

The consent management service is available on our website OneTrust the OneTrust, LLC, Dixon House, 1 Lloyd's Avenue, London EC3N 3DQ, United Kingdom (hereinafter “OneTrust"). In this context, the date and time of the visit, browser information, consent information, device information and the IP address of the requesting device are processed. The legal basis is Article 6 Paragraph. 1 p. 1. lit. f GDPR (legitimate interest). Obtaining and managing legally required consent is to be viewed as a legitimate interest within the meaning of the aforementioned provision, since the interference with the rights of users as a result of the use of anonymized IP addresses and the involvement of a service provider based in Germany is very low. OneTrust stores consents and revocations on our behalf and on our instructions. The storage takes place on the basis of Art. 6 Para. 1 p. 1 lit. f GDPR. Being able to comply with the accountability obligation in accordance with Article 5 Para. 2 GDPR is a legitimate interest. Further information on data protection can be found here OneTrust you will findhere. 

V. Tracking and Targeting 

The tracking and targeting measures we use listed below will be carried out if you have given us your consent (see IV.3). 

With the tracking measures we use, we want to ensure a needs-based design and the ongoing optimization of our website. We also use tracking measures to statistically record the use of our website. We also want to use the targeting measures we use to ensure that you only see advertising that is tailored to your actual or perceived interests on your devices. 

The respective data processing purposes and data categories can be found in the description of the corresponding tracking tools. 

1. AWIN 

Due to our legitimate interests in accordance with Art. 6 Para. 1 p. 1 lit. f GDPR, the advertising network of AWIN AG, Eichhornstrasse 3, 10785 Berlin (hereinafter “AWIN”) is used. Using AWIN we can deliver advertising content and analyze the success of the campaigns. 

As part of its service, AWIN stores cookies on the devices of users who visit our website to document transactions (e.g. leads and sales). These cookies serve the sole purpose of correctly assigning the success of an advertising medium and the corresponding billing within the advertising network. A cookie only contains information about when a certain advertising medium was clicked on by a device and, in the case of an order, the OR total, order ID, whether it is a new or existing customer and the time of the order. An individual number sequence that cannot be assigned to the individual user is stored in the tracking cookies 

  • the affiliate program of one Advertisers, 

  • the publisher, 

  • the time of the user’s action (click or view) 

be documented. 

You can prevent the installation of cookies by setting the browser software accordingly; However, we would like to point out that in this case not all functions of this website may be able to be used to their full extent. Please note that if you deactivate the display of personalized advertisements from AWIN and other advertising partners, you will continue to receive advertisements that are less tailored to your interests/surfing behavior. Further information can be found in theAWIN’s privacy policy. 

2. Microsoft Advertising 

We use Conversion Tracking from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.This allows us to track users' activities on our website if they have come to our website via ads from Microsoft Advertising. 
If you reach our website via a Microsoft Advertising ad, a cookie will be placed on your computer. Microsoft stores data about the use of the website (e.g. length of stay, which areas of the website were accessed and which advertisement you used to reach our website) as well as, in the case of an order based on this, the order value and the time of the order. Information about your identity is not collected. 

There is an adequacy decision from the EU Commission for the USA, that TransAtlantic Data Privacy Framework (hereinafter “TADPF”, further information under III. 9. of this data protection declaration). Microsoft has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles. In the event that personal data is transferred from Microsoft to the USA, this will also be done on the basis of the European Commission's standard data protection clauses in accordance with Article 46 (2c) GDPR. Microsoft has also implemented extensive technical and organizational measures designed to protect personal information from accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access. These measures by Microsoft are in accordance withStandard ISO/IEC 27001:2013 certified. 

In addition, we have concluded an order processing agreement with Microsoft for the use of Microsoft Advertising. Through this contract, Microsoft guarantees that it will process the data in accordance with the General Data Protection Regulation and ensure the protection of the rights of the data subject. 

If you do not want to take part in the tracking process, you can also refuse the necessary setting of a cookie - for example by using a browser setting that generally deactivates the automatic setting of cookies. Further information about data protection and the cookies used by Microsoft Advertising can be found on theMicrosoft website. 

3. Econda Web Analytics 

In order to optimize the website and the databases in the background, we use web analysis solutions econda GmbH, Eisenlohrstr. 43, 76135 Karlsruhe (hereinafter “econda“). 

For the procedures used, usage profiles are created under a pseudonym. Cookies are also used for this. Econda is entitled to use the “Tested Data Protection” seal of approval for the “Web Shop Controlling” area. The one with the econda-Technology will not be used to personally identify you as a visitor to this website without your separate consent and will not be combined with directly personal data about the bearer of the pseudonym. For more information please visitwww.econda.de. 

4. Emarsys Webextend 

Webextend-Tracking cookies/pixel tag: We use the cookie/pixel tag from Emarsys Interactive Services GmbH, Willi-Schwabe-Straße 1, 12489 Berlin, (hereinafter “Emarsys Webextend") to create newsletters and newsletters tailored to you and your interests. We use existing information for this, such as receipt and read confirmations of emails, information about your computer and connection to the Internet, operating system and platform, your surfing history, date and time of visit to the homepage, products/Article that you looked at. We generally use this information in a pseudonymized form, but if necessary also to send you newsletters that correspond to your areas of interest. 

If you do not want to receive personalized advertising via newsletter, you can do so at any time by email[email protected]contradict. Alternatively, you can unsubscribe using the unsubscribe link at the end of each newsletter. 

5. Meta Retargeting 

We use advertising services Meta Platforms Ireland Limited, 4 grand Canal Square, Dublin 2, Ireland (hereinafter “Meta“) a. There is a pixel tag on our website from Meta integrated. This is a Java Script-Code through which data about the use of the website is stored. This includes your IP address, the browser used and the starting and landing pages. This information is sent to servers from Meta broadcast in the USA. There it is automatically checked whether you a meta cookie have saved. During this process, you will not be affected by the comparison of data by us or by you Meta personally identified. This enables us to display individually tailored and interest-based advertising on the meta services to certain groups of pseudonymized visitors to our website who also use meta services. 

There is an adequacy decision from the EU Commission for the USA, that TransAtlantic Data Privacy Framework (hereinafter “TADPF”, further information under III. 9. of this data protection declaration). Meta has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles. The transfer of this information to the USA is also based on the European Commission's standard data protection clauses in accordance with Article 46 (2c) GDPR. Meta has also implemented extensive technical and organizational measures designed to protect personal data from accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access. 

Further information on data protection can be found here Meta can be found in theMeta Privacy Policy. 

Meta Deactivate tracking:Click here. 

6.New relic 

We use the web analysis service New Relic for the statistical evaluation of visitor access, operated by New Relic, Inc., 188 Spear St, San Francisco, CA 94105, USA. New Relic collects and stores data from which usage profiles are created under a pseudonym for the purpose of analyzing visitor behavior and improving the design of the offer, as well as for optimization and marketing purposes. New Relic uses cookies. These cookies serve to recognize the browser and thus enable the statistical data to be determined more precisely. New Relic will use this information to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage. New Relic Under no circumstances will your directly personal data be combined with other data from New Relic connect. If you do not want to take part in the tracking process, you can also refuse the necessary setting of a cookie - for example byBrowser setting, which generally deactivates the automatic setting of cookies. 

There is an adequacy decision from the EU Commission for the USA, that TransAtlantic Data Privacy Framework (hereinafter “TADPF”, further information under III. 9. of this data protection declaration). New Relic has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles. Further details and information can be found in theNew Relic Privacy Policy. 

7. Trade doubler 

This website participates in affiliate programs Trade doubler GmbH, Herzog-Wilhelm-Straße 26, 80331 Munich (hereinafter "TradeDoubler"), a service for integrating advertisements in the form of text links, image links, advertising banners or input masks. TradeDoubler uses cookies that are stored on your computer become as well as pixel tags that enable analysis of the use of the website. This allows information such as visitor traffic on these pages to be evaluated. 

The information generated by cookies and pixel tags about the use of this website (including obfuscated IP addresses) and delivery of advertising formats is sent to a server by TradeDoubler transferred and stored there. This information can be from TradeDoubler to contractual partners of TradeDoubler be passed on. TradeDoubler However, we will not combine your IP address with other data stored about you. 
Further information on data usage can be found in theTradeDoubler privacy policy. 

8. Criteo 

We use Criteo Remarketing. These are the services of Criteo (Registration number: 484786249), registered at 32 Rue Blanche, 75009 Paris. Our website uses cookies/advertising IDs for advertising purposes. This allows us to show our advertising to visitors interested in our products on partner websites, apps and emails. Re-targetingTechnologies use cookies or advertising IDs and display advertising based on your previous browsing behavior. To opt-out of this interest-based advertising, please visit the following websites: 

We may share information such as technical identifiers from your registration information on our website or CRM system with trusted advertising partners. This allows us to link your devices and/or environments and provide you with a seamless experience across the devices and environments you use. For further details on these linking capabilities, please refer to the privacy policy found on the aforementioned platforms or the explanations below. 
Data protection policy of Criteo: www.criteo.com/de/privacy 

9. Google Ads (with Remarketing) 

We use Google on our website Conversion Tracking and that Remarketing Pixel from Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). The service enables us to design, statistically record, optimize and display advertising content based on needs. In order to ensure the visibility of our offer, we rely on such advertising content. 

Google Ads sets a cookie on your computer if you came to our website via a Google ad. These cookies expire after 30 days. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. In addition, we use information about your use of this website, which Google collects and evaluates on our behalf (see more here). This allows us to address you on other websites with content relevant to you. 

In addition, we set this Remarketing-Pixel that collects and evaluates information about your use of this website. This allows us to address you on other websites with content relevant to you. A merger of the Remarketing According to Google, the data collected with personal data that may be stored by Google does not take place. Google also pseudonymizes this data. 

Each Ads customer receives a different cookie. Cookies cannot therefore be tracked via the websites of Ads customers. The using the ConversionThe information collected through cookies is used to Conversion-Create statistics for Ads customers who opt in Conversion-Tracking have decided. As an Ads customer, we find out the total number of users who clicked on an ad and one with one Conversion-tracking tag page were redirected. However, we do not receive any information with which we can personally identify you. 

The information generated by the cookie about your use of this website, such as click behavior on texts and products or interactions with videos, is transmitted to a Google server in the USA and stored there. 

For the USA, there is an adequacy decision from the EU Commission that trans-Atlantic Data Privacy Framework (hereinafter “TADPF”, further information under III. 9. of this data protection declaration). Google has certified itself according to the TADPF and is therefore obliged to comply with European data protection principles. The processing of personal data by Google is also carried out under Google's own responsibility on the basis of the European Commission's standard data protection clauses in accordance with Article 46 (2c) GDPR. Google has also implemented extensive technical and organizational measures designed to protect personal information from accidental or unlawful destruction or accidental loss, damage, alteration, unauthorized disclosure or access. These measures by Google are in accordance withStandard ISO/IEC 27001:2013 certified. 

Further information on data protection can be found in thePrivacy Policyfrom Google and on the Google website on the topicPrivacy and Terms of Use. 

10. Google Analytics 

We use Google Analytics, a web analysis and advertising service from Google LLC., 1600, on our website Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter “Google”). In this context, pseudonymized usage profiles are created and cookies and pixel tags (see IV above) are used. The information processed in this way about your use of this website such as 

  • Browser type/version, 

  • operating system used, 

  • Referrer-URL (the previously visited page), 

  • Host name of the accessing computer (IP address), 

  • time of server request, 

as well as other information about the use of our website. The IP addresses are anonymized so that they cannot be assigned to you personally (IP address).Masking). 

There is an adequacy decision from the EU Commission for the USA, that TransAtlantic Data Privacy Framework (hereinafter “TADPF”, further information under III. 9. of this data protection declaration). Google has certified itself according to the TADPF and thus obliged to comply with European data protection principles. We have concluded order processing agreements with Google for the use of the marketing platform. In this, Google assures that they process the data in accordance with our instructions and ensure that the rights of the data subject are protected. The information may be transferred to third parties if required to do so by law or so far Third parties process this data on behalf of you. 

You can find further information on data protection in connection with Google Analyticshere. 

By using Google Analytics, Google processes the information on our behalf to evaluate the use of the website, to compile reports on website activities and to provide us with other services related to website and internet usage for the purposes of market research and the needs-based design of these websites. 

We only use Google Analytics with IP anonymization activated. This means that the user's IP address is shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. 

We have activated the advertising functions of Google Analytics. This creates reports on target groups, demographic characteristics such as age, gender and interests of site visitors, as well as our marketing campaigns. The data for this comes from campaigns carried out via Google services, from interest-based advertising from Google, the Google Display Network and from visitor data from third parties. This does not immediately reveal your identity to us. With the help of these reports, we can better evaluate user behavior in connection with our online offerings and optimize the approach to target groups. 

If you do not want your user behavior to be taken into account in these reports, you can deactivate this via the ad settings in your own Google account or prevent the collection of data by Google Analytics as described below. You can also limit collection by not logging into your own Google account when you visit our pages. 

We do not use the Universal Analytics with User ID offered by Google. 

If necessary, the collected data will be transferred to third parties if this is required by law or so far Third parties process the data on behalf of you. 

The user data collected via cookies is automatically deleted after 14 months. 

Further information on data protection in connection with Google Analytics can be found in theGoogle Analytics Help. Information about Google's data usage can be found in theirPrivacy Policy. 

11. Shop line 

On our website we use technology (e.g. tracking pixels) from Ladenzeile GmbH, Zimmerstraße 50, 10888 Berlin, Germany (hereinafter “Ladenzeile”). It operates the Ladenzeile and portals ShopAlike. This technology is executed on your device when an order process is completed. Anonymous data about your ordering process (e.g. value of the shopping cart) as well as your IP address are recorded in a pseudonymized form by Ladenzeile. This is done based on your consent in order to attribute sales, for marketing purposes and to prove civil claims. Ladenzeile deletes the data as soon as it is no longer needed for these purposes. For this purpose, we refer to Ladenzeile’s data protection declaration: https://www.ladenzeile.de/datenschutzerklaerung.html. If you do not agree to tracking, you can prevent this in the browser using the do-not-track setting. 

12. ProductsUp 

We use this on our website Conversion-Tracking of ProductsUp. This is software for optimizing feed management. The provider is Products Up GmbH, Bahnhofstr. 5, 91425 Simmelsdorf, Germany (hereinafter “Products Up”). With that Conversion-Tracking of ProductsUp We can analyze the behavior of our website visitors. For this purpose, the pages you visit and your purchasing activity, which your browser transmits to our web server when you access the website, are recorded. This allows us to monitor website interactions such as length of stay, Conversions, measure scroll events, clicks and page views of website visitors. The IP address is included in the analysis ProductsUp anonymized as early as possible so that the interactions can only be assigned to the website visitor for the duration of the current day at most, so that they can be recognized when they visit again. The data will be deleted as soon as it is no longer needed for this purpose. 

Without your consent, no cookies will be stored in your browser and no information will be read from your device's memory. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR. Consent can be revoked at any time. You can prevent tracking in your browser using the do-not-track setting. 

For further information, please see Products Up's privacy policy at: https://www.productsup.com/privacy-policy/. 

13.Dynamic Yield 

We use the Dynamic personalization software on our website Yield GmbH, Unter den Linden 26-30, 10117 Berlin (hereinafter “Dynamic Yield“) to personalize the user experience by creating customized product recommendations and monitoring results through A/B testing and real-time analytics. Cookies are used as well Local Storage used. The one from Dynamic Yield The data analyzed helps us understand which pages and products are of particular interest to website visitors. 

Data processing is based on your consent in accordance with Article 6 Para. 1 lit. a GDPR. The IP address, user IDs, pages accessed, Referrer, URL parameters, search queries/terms, information on search results, membership of target groups, interactions, geographical location as well as technical, non-behavioral information about your device and browser. The data will be deleted 12 months after collection. 

If you have also given your consent in Google Analytics, Google will receive data from Dynamic Yield processed data/segments for further use. You can find information about Google Analytics or Google in this data protection declaration. 

In exceptional cases, the collected data may be sent to Dynamic's headquarters for technical support measures Yield be transmitted in Israel. These are secured by an adequacy decision within the meaning of Art. 45 GDPR. 

We have with Dynamic Yield concluded an order processing contract in accordance with Art. 28 GDPR. Further information on data protection at Dynamic Yield can be found at https://www.dynamicyield.com/de/gdpr-and-privacy/ and in Dynamic's data protection declaration Yield: https://www.dynamicyield.com/privacy-policy/. 

VI. Rights of those affected 

You have the right: 

  • In accordance with Art. 7 Para. 3 GDPR, you can revoke your consent to us at any time. This means that we are no longer allowed to continue the data processing based on this consent in the future; 

  • in accordance with Art. 15 GDPR, to request information about your personal data processed by us. In particular, you can obtain information about the purposes of processing, the category of personal data, the categories of recipients, to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection, the existence of a right to complain, the origin of your data if it was not collected by us, and the existence of automated decision-making including Profiling and, if necessary, request meaningful information about their details; 

  • in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or complete personal data stored by us; 

  • in accordance with Art. 17 GDPR, to request the deletion of your personal data stored by us, unless the processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest or to assert, exercise or defend legal claims; 

  • in accordance with Art. 18 GDPR, to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its deletion and we no longer need the data, but you need it to assert, exercise or defend legal claims or you have objected to the processing in accordance with Art. 21 GDPR; 

  • in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transmitted to another person responsible and 

  • to complain to a supervisory authority in accordance with Art. 77 GDPR. As a rule, you can contact the supervisory authority at your usual place of residence or work or at our company headquarters. 

To assert your data subject rights against us, please contact us[email protected]. 

VII. Right to object in accordance with Art. 21 GDPR 

If your personal data is based on legitimate interests in accordance with Art. 6 para. 1 p. 1 lit. f DSGVO are processed, you have the right to object to the processing of your personal data in accordance with Art. 21 DSGVO, provided there are reasons for this that arise from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which we will implement without specifying a special situation. 

If you would like to exercise your right to object, simply send an email to[email protected]. 

VIII. Data security 

All data you personally transmit is encrypted using the generally accepted and secure TLS (Transport Layer Security) standard. TLS is a secure and proven standard that is also used in online banking, for example. You can recognize a secure TLS connection, among other things, by the appended s to http (i.e. https://..) in the address bar of your browser or at the lock symbol at the top of your browser. 

We also use appropriate technical and organizational security measures to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties. Our security measures are continuously improved in line with technological developments. 

IX. Currentness and changes to this data protection declaration 

This data protection declaration is currently valid and is valid as of January 2026. 

Due to the further development of our website and offers on it or due to changed legal or official requirements, it may become necessary to update this data protection declaration to change. The current data protection declaration can be viewed at any time on the websiteData protectioncan be accessed and printed out by you.