Privacy policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1

We are pleased that you are visiting our website! We appreciate your interest. Here you can find out how we handle your personal data when you use our website. Personal data includes all information through which you can be personally identified.

1.2

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is “Christian Burghardt.” The controller is the person who decides alone or jointly with others about the purposes and means of processing your personal data.

1.3

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries). You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

If you use our website for informational purposes only, meaning you do not register or otherwise transmit information to us, we only collect the data that your browser sends to our server (so-called “server log files”). As soon as you access our website, we collect the following technically necessary data to properly display the website to you:

  • The page visited

  • Date and time of access

  • Amount of data transferred (in bytes)

  • Source/reference from which you reached the page

  • The browser you used

  • The operating system you used

  • Your IP address (possibly anonymized)

The processing of this data takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the stability and functionality of the website. The data is not passed on or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

3) Hosting

Hosting by Shopify

We use the Shopify shop system (Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland) to host and display our online shop. Processing takes place on our behalf.

All data collected on our website is processed on Shopify’s servers. In the course of these services, further processing may also be carried out by:

  • Shopify Inc. (150 Elgin St, Ottawa, ON K2P 1L4, Canada)

  • Shopify Data Processing (USA) Inc.

  • Shopify Payments (USA) Inc.

  • Shopify (USA) Inc.

If data is transferred to Shopify Inc. in Canada, an adequate level of data protection is ensured by the adequacy decision of the European Commission.

More information on Shopify’s privacy practices can be found here:
https://www.shopify.com/legal/privacy

Processing on servers other than Shopify’s only takes place within the scope described here.

4) Cookies

To make your visit to our website more pleasant and to enable certain functions, we use cookies on various pages. These are small text files stored on your device.

  • Session cookies are automatically deleted after you close your browser.

  • Persistent cookies remain on your device and recognize your browser the next time you visit.

Cookies collect certain user information, such as browser and location data as well as IP addresses. Persistent cookies are automatically deleted after a specific period, which depends on the cookie. You can view the storage period in your browser’s cookie settings.

Some cookies make the ordering process easier—for example, by saving the contents of your shopping cart for your next visit.

If we process personal data using cookies, this is done in accordance with:

  • Art. 6(1)(b) GDPR, if the processing is necessary for the performance of a contract

  • Art. 6(1)(a) GDPR, if you have given your consent

  • Art. 6(1)(f) GDPR, to ensure optimal website functionality and a user-friendly experience

We use the service “Paniertes GDPR/DSGVO Cookie.” More information is available here:
https://apps.shopify.com/gdpr-cookie-consent

Adjusting your cookie settings:

You can configure your browser to inform you when cookies are set and decide individually whether to accept them, or to block cookies in certain cases or entirely.

Instructions for various browsers:

  • Internet Explorer: Manage cookie settings

  • Firefox: Allow & block cookies

  • Chrome: Manage cookies

  • Safari: Modify cookie settings

  • Opera: Cookie options

Please note that some functions of our website may be restricted if you do not accept cookies.

5) Contacting Us

If you contact us (e.g., via contact form or email), we collect personal data. You can see which data is collected in the respective contact form.

Your data is used exclusively to process your request and the related technical administration. Processing takes place on the basis of our legitimate interest in answering your inquiry according to Art. 6(1)(f) GDPR. If your inquiry aims at concluding a contract, Art. 6(1)(b) GDPR applies additionally.

Your data will be deleted once your request has been fully processed and no legal retention obligations prevent deletion.

6) Data Processing When Opening a Customer Account and for Contract Fulfillment

In accordance with Art. 6(1)(b) GDPR, we collect and process personal data if you provide it to us for contract fulfillment or when opening a customer account. You can see which data is collected from the respective input form.

You may delete your customer account at any time by sending us a message using the contact details provided above.

We store and use your data for contract processing. After the contract has been fully completed or your customer account has been deleted, your data is blocked and deleted after the expiry of commercial and tax retention periods—unless you have expressly consented to further use or unless legally permitted further processing applies.

7) Use of Customer Data for Direct Advertising

7.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we regularly send you information about our offers. Only your email address is required. Any additional information is voluntary and helps us address you personally.

We use the double opt-in procedure:
You will only receive our newsletter once you explicitly confirm that you wish to receive it. For this purpose, we send you a confirmation email containing a link. Only after clicking this link does your subscription become active.

By clicking the confirmation link, you give us your consent in accordance with Art. 6(1)(a) GDPR. When signing up, we also store:

  • Your IP address (assigned by your Internet service provider)

  • Date & time of registration

This helps us trace possible misuse of your email address.

Your data is used exclusively for sending our newsletter. You may unsubscribe at any time via the unsubscribe link in the newsletter or by contacting us.

After unsubscribing, your email address is immediately removed from the mailing list unless you have expressly consented to further use or unless legally permitted further processing applies.

7.2 Newsletter Delivery via Klaviyo

The sending of our email newsletter is carried out via the technical service provider Klaviyo (225 Franklin St, Boston, MA 02110, USA, www.klaviyo.com). For this purpose, we pass on the data you provided during newsletter registration.

This transfer takes place in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in using a secure, user-friendly, and efficient newsletter system. Please note that your data is generally stored on a Klaviyo server in the USA.

Klaviyo processes this data exclusively on our behalf and does not use it for its own purposes or pass it on to third parties.

To protect your data, we have entered into a Data Processing Agreement (“Data Processing Agreement”) with Klaviyo, in which Klaviyo undertakes to protect your data, to process it in compliance with data protection regulations, and not to disclose it to third parties.

Klaviyo’s privacy policy can be found here: https://www.klaviyo.com/privacy

7.3 Back-in-Stock Email Notification

If an item in our online shop is temporarily unavailable, you may subscribe to our email notification service for product availability. We will then inform you once by email as soon as the specific item you selected is available again.

How the registration works:

  • Only your email address is required.

  • Additional information is voluntary and helps us address you personally.

  • We use the double opt-in procedure: you will first receive a confirmation email. Only when you click the confirmation link will your registration become active.

By clicking the confirmation link, you give us your consent according to Art. 6(1)(a) GDPR.

Data storage & unsubscribing:

When registering, we store:

  • Your IP address (assigned by your Internet Service Provider)

  • Date & time of registration

This helps us trace possible misuse of your email address.

Your data will be used exclusively to notify you about the availability of the selected product. You may unsubscribe from the email notification service at any time by sending a message to the contact address provided.

After unsubscribing, your email address will be deleted immediately unless you have expressly consented to further use or unless legally permitted further processing applies.

7.4 Data Processing for Direct Advertising by Postal Mail

Based on our legitimate interest in personalized direct advertising, we reserve the right to store your first and last name, your postal address and — insofar as you have provided us with this information in the context of a contractual relationship — your title, academic degree, year of birth, and your professional, industry, or business designation in accordance with Art. 6(1)(f) GDPR.
We may use this information to send you interesting offers and information about our products by postal mail.

You may object to the storage and use of your data for this purpose at any time by notifying the controller.

8) Data Processing for Order Fulfillment

8.1 Transfer of Personal Data to Shipping Service Providers

DHL

If the delivery of your order is carried out by DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn), and if you have given your consent during the ordering process, we will forward your email address to DHL in accordance with Art. 6(1)(a) GDPR so that DHL can notify you about the shipment or coordinate a delivery date.

If you have not given your consent, we only transfer the data required for delivery according to Art. 6(1)(b) GDPR: your name and delivery address. In this case, prior coordination of delivery times is not possible.

You may revoke your consent at any time with effect for the future by notifying the controller or directly contacting DHL.

8.2 Use of Payment Service Providers

Apple Pay

If you choose the payment method Apple Pay by Apple Distribution International (Apple, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland), the payment processing takes place via the Apple Pay function of your device operating on iOS, watchOS, or macOS. A payment card stored in Apple Pay is charged.

Apple Pay protects your transactions with integrated hardware and software security features. To authorize a payment, you must enter your previously defined code and verify via Face ID or Touch ID.

Information from your order process and additional order data will be passed on to Apple in encrypted form. Apple encrypts this data again with a developer-specific key before passing it on to the payment service provider of your card. This ensures that only the website on which you shop can access the payment data.

After successful payment, Apple sends the device account number and a transaction-specific dynamic security code for confirmation. Personal data is processed exclusively for payment processing in accordance with Art. 6(1)(b) GDPR.

Apple stores anonymized transaction data such as approximate purchase amount, approximate date/time, and information on whether the transaction was successful. These data cannot be linked to a person and are used to improve Apple Pay and other Apple services.

If you use Apple Pay on iPhone or Apple Watch to complete purchases in Safari on Mac, communication between the devices occurs via an encrypted channel on Apple’s servers. Apple does not process or store this data in a format that can identify you.

Further information: https://support.apple.com/de-de/HT203027

Klarna

If you select a Klarna payment method, the payment is processed by Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden.

For payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, phone number, IP address) as well as data relating to your order (invoice amount, items, delivery type) are transferred to Klarna for identity and credit checks — but only if you have expressly consented (Art. 6(1)(a) GDPR).

List of possible credit agencies:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

Credit scores may be included in the assessment. If score values are used, they are calculated using a scientific statistical method, which may include address data.

You may revoke your consent at any time. However, Klarna may continue to process your data if necessary for contractual payment processing.

Klarna’s privacy policies:
Germany: https://cdn.klarna.com/.../de_de/privacy
Austria: https://cdn.klarna.com/.../de_at/privacy

PayPal

For payments via PayPal, credit card via PayPal, direct debit via PayPal, or — if offered — “purchase on account” or “installment payment” via PayPal, we forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., Luxembourg.
Transfer takes place according to Art. 6(1)(b) GDPR.

For certain payment methods, PayPal may perform credit checks under Art. 6(1)(f) GDPR.
Privacy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Shopify Payments

We use Shopify Payments, whose payments (except PayPal) are processed via Stripe Payments Europe Ltd. (Dublin, Ireland). We forward:

  • Name

  • Address

  • Account number

  • Bank code

  • Credit card number (if applicable)

  • Invoice amount

  • Currency

  • Transaction number

according to Art. 6(1)(b) GDPR.

Privacy:
Shopify Payments → https://www.shopify.com/legal/privacy
Stripe → https://stripe.com/de/privacy

9) Use of Social Media: Videos

YouTube Videos

This website uses the YouTube embedding function to display videos from YouTube (Google Ireland Limited).

The extended privacy mode is used. According to YouTube, data storage starts only when a video is played. Once you start a video, YouTube sets cookies to collect usage information, including statistics, usability improvement, and fraud prevention.

If you are logged into Google, playback is linked to your Google account. If you do not want this, log out before playing a video.

Google may evaluate your data even if you are not logged in. This processing is based on Art. 6(1)(f) GDPR.

You have the right to object to the creation of such profiles; contact YouTube directly.

Privacy:
YouTube terms → https://www.youtube.com/static?template=terms
Google privacy → https://www.google.de/intl/de/policies/privacy

Consent required (Art. 6(1)(a) GDPR).

10) Online Marketing

10.1 Facebook Pixel for Creating Custom Audiences (with Cookie Consent Tool)

We use the Facebook Pixel of Meta Platforms Ireland Limited.

When you click on one of our ads displayed on Facebook, Facebook Pixel adds a parameter to the URL of our linked page. If our page allows Pixel-based data sharing with Facebook, this parameter is written into your browser via a cookie.

The Facebook Pixel allows Facebook to identify visitors of our website as a target group for ads. We use it to ensure:

  • ads are shown only to interested users (“custom audiences”),

  • ads match user interests,

  • the effectiveness of ads can be measured (“conversion”).

The collected data is anonymous to us but processed by Facebook, allowing linkage to your Facebook profile.

Consent is required (Art. 6(1)(a) GDPR).
You may revoke consent at any time via the Cookie Consent Tool.

More information:
https://www.facebook.com/about/privacy/

10.2 Google AdSense

This website uses Google AdSense, an online advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses so-called cookies, which are text files stored on your computer that enable an analysis of your website usage. In addition, Google AdSense also uses so-called “web beacons” (small invisible graphics) to collect information such as visitor traffic on the website.

The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to and stored on a Google server. This may also involve transmission to servers of Google LLC in the USA.

Google uses the obtained information to evaluate your website usage with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. Google may share the collected information with third parties if required by law or if third parties process the data on behalf of Google.

Details on Google AdSense data processing can be found here:
https://policies.google.com/technologies/partner-sites

The described data processing is based on Art. 6(1)(f) GDPR for the purpose of targeted advertising and to exploit the economic potential of our online presence.

Further information on Google’s privacy policy:
https://www.google.de/policies/privacy/

You may permanently disable AdSense cookies by adjusting your browser settings or installing this plug-in:
https://www.google.com/settings/ads/plugin?hl=de

Consent according to Art. 6(1)(a) GDPR is required where applicable and may be revoked at any time.

10.3 Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads” and within the scope of Google Ads, conversion tracking by Google Ireland Limited.

When you click on an ad placed by Google, a conversion tracking cookie is stored on your device. Cookies are small text files. They usually expire after 30 days and are not used for personal identification. If the cookie is still active and you visit a page that contains a conversion tag, Google and we can recognize that you clicked the ad.

Each Google Ads customer receives a different cookie. Cookies cannot be tracked across Ads customers’ websites.

Google provides statistics such as the number of users who clicked an ad and were redirected to a conversion page. Personal identification is not enabled.

Data may be transferred to Google LLC servers in the USA.

Details on data processing:
https://policies.google.com/technologies/partner-sites

All processing is only performed if you provide consent according to Art. 6(1)(a) GDPR. You may revoke your consent at any time via the Cookie Consent Tool.

You may also permanently block Google Ads cookies via this plug-in:
https://www.google.com/settings/ads/plugin?hl=de

For customer matching, we may upload encrypted customer data (e.g., email addresses, phone numbers) to Google to display personalized ads.
This occurs only with your explicit consent according to Art. 6(1)(a) GDPR.

More information:
https://support.google.com/google-ads/answer/6334160?hl=de
Privacy: https://www.google.de/policies/privacy/

10.4 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform (GMP) by Google Ireland Limited.

GMP uses cookies to:

  • show relevant ads to users

  • improve campaign performance reporting

  • avoid showing the same ad repeatedly

Cookie IDs allow Google to track which ads appear in which browsers.

Processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in optimally marketing our website.

GMP may also record conversions (e.g., purchases) when a user interacts with an ad.

Your browser automatically connects to Google’s servers. Even if you are not logged into Google, it is possible that Google retrieves and stores your IP address.

Data may be transferred to Google LLC servers in the USA.

You may block GMP conversion cookies by adjusting browser settings:
https://www.google.de/settings/ads

or via the Digital Advertising Alliance:
www.aboutads.info

Google privacy policy:
https://www.google.de/policies/privacy/

Consent under Art. 6(1)(a) GDPR is required and may be revoked at any time.

11) Web Analytics Services

11.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited. Google Analytics uses cookies that enable analysis of your website use. Data may be transmitted to the USA.

This website uses Google Analytics exclusively with IP anonymization (_anonymizeIp()), meaning your IP address is shortened in the EU or EEA before transmission. Only in exceptional cases will the full IP be sent to Google servers in the USA and shortened there.

Google processes the data on our behalf to evaluate website usage, compile reports, and provide further related services. Your IP address is not merged with other Google data.

Google Analytics may also collect demographic data (age, gender, interests) based on Google advertising and third-party information. These cannot be assigned to specific individuals.

Details:
https://policies.google.com/technologies/partner-sites

Analytics cookies are only set with your consent (Art. 6(1)(a) GDPR).
Consent may be revoked at any time via the Cookie Consent Tool.

We have entered into a Data Processing Agreement with Google.

Data transfer to the USA is based on EU Standard Contractual Clauses.

More information:
https://policies.google.com/privacy?hl=de&gl=de

11.2 Google Analytics 4

This website uses Google Analytics 4, also provided by Google Ireland Limited.
It also uses cookies and IP anonymization (_anonymizeIp()), and data may be transmitted to the USA.

Google Analytics 4 includes demographic reporting features.
Data collection only occurs with consent (Art. 6(1)(a) GDPR).

Details:
https://policies.google.com/technologies/partner-sites

Privacy: https://policies.google.com/privacy?hl=de&gl=de

12) Retargeting / Remarketing / Referral Advertising

Google Ads Remarketing

Our website uses Google Ads Remarketing to advertise our website in Google search results and on third-party websites. Google Ireland Limited provides this service.

Google places a cookie in your browser to enable interest-based advertising via pseudonymous cookie IDs.

Processing takes place based on Art. 6(1)(f) GDPR due to our legitimate interest in marketing our website.

If you have allowed Google to associate your browsing history with your Google account and enabled personalized ads, Google may use cross-device remarketing.

Data may be transferred to Google LLC in the USA.

Details:
https://policies.google.com/technologies/partner-sites

You may permanently opt out via:
https://www.google.com/settings/ads/onweb/

More Google advertising privacy information:
https://www.google.com/policies/technologies/ads/

Consent (Art. 6(1)(a) GDPR) may be revoked at any time.

TikTok Pixel

This website uses the "TikTok Pixel", a tracking technology of TikTok Technology Limited, Dublin, Ireland.

Cookies collect pseudonymized information such as:

  • Device ID

  • Device type

  • Timestamp

  • Operating system

  • IP address

TikTok may combine these with other account-related information, creating pseudonymized user profiles.

TikTok Pixel also measures conversions, such as:

  • Completed transactions

  • Leads

  • Product page views

  • Searches

When such an action occurs, a request is sent to TikTok’s server.

All processing is based on consent (Art. 6(1)(a) GDPR).
Consent can be revoked via the Cookie Consent Tool.

We have entered into a Data Processing Agreement with TikTok. TikTok may transfer data outside the EEA based on Standard Contractual Clauses.

Privacy:
https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE

13) Use of a Live Chat System

Own Live Chat System

On this website, for the purpose of operating a live chat system that serves to answer live inquiries, the chat name you provide and the chat content you provide are collected as data and stored for the duration of the chat.
The chat and the chat name you provided are stored exclusively in so-called RAM (Random Access Memory) and are deleted immediately once we or you end the chat conversation — at the latest, however, 2 hours after the last message in the chat history.

Cookies are used to operate the chat function. These are small text files stored in the cache of your internet browser. The cookies enable the recognition of your browser in order to distinguish individual users of the chat function on our website.

If the information collected in this way contains personal data, processing takes place in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in effective customer support and the statistical analysis of user behavior for optimization purposes.

To avoid the storage of cookies, you can configure your internet browser so that no cookies are stored on your computer in the future, or cookies already stored are deleted. However, disabling all cookies may cause the chat function on our website to no longer work.

14) Tools and Miscellaneous

14.1 Google Web Fonts

This site uses so-called web fonts provided by Adobe Systems Incorporated, 345 Park Avenue, San Jose, CA 95110-2704, USA (“Adobe”), for the uniform display of fonts. When you access a page, your browser loads the required web fonts into the browser cache to correctly display texts and fonts.

This site also uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), for uniform font display. When you visit a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

For this purpose, the browser you use must connect to Google’s servers. This may also result in the transmission of personal data to the servers of Google LLC in the USA. In this way, Google becomes aware that our website was accessed via your IP address. The use of Google Web Fonts is based on our legitimate interest in a uniform and appealing presentation of our online offerings in accordance with Art. 6(1)(f) GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

More information: https://developers.google.com/fonts/faq
Google privacy policy: https://www.google.com/policies/privacy/

14.2 Google reCAPTCHA

On this website, we also use the reCAPTCHA function of Google Ireland Limited. This function primarily serves to differentiate whether an input is made by a natural person or abusively through automated processing.

The service includes sending the IP address and possibly further data required by Google for reCAPTCHA to Google and is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in determining individual responsibility on the internet and preventing misuse and spam.

Data may be transferred to Google LLC servers in the USA.

More information:
https://www.google.com/intl/de/policies/privacy/

Where legally required, we obtain your consent according to Art. 6(1)(a) GDPR.
You may revoke your consent at any time by opting out via the method described above.

14.3 Microsoft Power BI

For internal visualization of business processes and for custom analyses of economic processes, we use the service “Microsoft Power BI” by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Personal customer data may be included in visualization and analysis processes and processed by Microsoft BI. Microsoft processes this data as a processor bound by instructions according to Art. 28 GDPR and is contractually obligated to protect the data.

Microsoft uses advanced encryption methods and ensures that all data processing takes place exclusively in data centers within the EU.

More information:
https://www.microsoft.com/de-de/trustcenter/security/powerbi-security

15) Rights of the Data Subject

Under applicable data protection law, you have the following rights toward the controller with regard to the processing of your personal data (rights of access and intervention), where the legal basis for exercising them is referenced:

  • Right of access according to Art. 15 GDPR

  • Right to rectification according to Art. 16 GDPR

  • Right to erasure according to Art. 17 GDPR

  • Right to restriction of processing according to Art. 18 GDPR

  • Right to notification according to Art. 19 GDPR

  • Right to data portability according to Art. 20 GDPR

  • Right to withdraw consent according to Art. 7(3) GDPR

  • Right to lodge a complaint according to Art. 77 GDPR

15.2 Right to Object

If we process your personal data on the basis of our overriding legitimate interest after balancing interests, you have the right at any time to object to this processing for reasons arising from your particular situation, effective for the future.

If you exercise your right to object, we will stop processing the affected data.
However, further processing may continue if we can demonstrate compelling legitimate grounds that override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed by us for the purpose of direct advertising, you have the right to object to such processing at any time.
If you exercise this right, we will stop processing your data for direct advertising purposes.

16) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the processing purpose, and — if applicable — the respective statutory retention period (e.g., commercial and tax retention periods).

If personal data is processed on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, this data will be stored until you revoke your consent.

If statutory retention periods exist for data that is processed within the framework of legal or quasi-legal obligations in accordance with Art. 6(1)(b) GDPR, this data will be routinely deleted after expiry of the retention periods, provided it is no longer required for the fulfillment or initiation of a contract and/or we no longer have a legitimate interest in further storage.

If personal data is processed on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object according to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or if the processing serves the establishment, exercise, or defense of legal claims.

If personal data is processed for the purpose of direct advertising on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object according to Art. 21(2) GDPR.

Unless otherwise stated in the specific information in this Privacy Policy, stored personal data will generally be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Information on Data Protection Regarding Instagram

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1

Below, we inform you about the handling of your personal data. Personal data includes all data by which you can be personally identified.

Please carefully consider which personal data you share with us via Instagram.
Instagram is part of the Meta corporate group and shares infrastructure, systems, and technology with Meta and other Meta companies (https://www.facebook.com/help/111814505650678?ref=dp).

We explicitly point out that Meta stores user data of its services (e.g., personal information, IP address, etc.) and may also use such data for commercial purposes. Detailed information on Meta’s data processing at Instagram can be found in Instagram’s Privacy Policy:
https://help.instagram.com/519522125107875/

We have no influence on Instagram’s or Meta’s data collection or further processing.
Furthermore, it is not apparent to us:

  • to what extent,

  • at which location,

  • and for how long
    data is stored;

whether Meta complies with deletion obligations;
which evaluations and linkages of data are performed;
and to whom the data is forwarded.

If you want to avoid Meta processing personal data that you transmit to us via Instagram, please contact us through another communication channel. You can find our contact details in our Instagram imprint.

1.2 Controller for GDPR purposes

Controller for the processing of data transmitted to us via Instagram concerning the brand NEOaging is:

MITOcare GmbH & Co. KG
Thalkirchner Str. 210
81371 Munich
Germany
Email: info@neoaging.de

To the extent that data transmitted to us via Instagram is also or exclusively processed by Meta, the additional controller within the meaning of the GDPR is:

Meta Platforms Ireland Ltd.
4 Grand Canal Square
Grand Canal Harbour
Dublin 2
Ireland

A controller is the natural or legal person who determines — alone or jointly with others — the purposes and means of processing personal data.

2) Data Protection Officer

You can contact Meta’s Data Protection Officer using the online contact form provided at:
https://www.facebook.com/help/contact/540977946302970

3) Data Processing When Contacting Us via Instagram

We collect personal data ourselves when you contact us via Instagram (e.g., through a contact form or chat). You can see which data we collect in the respective contact area.

This data is stored and used exclusively for the purpose of responding to your request and for technical administration related to this process.

The legal basis is our legitimate interest in responding to your inquiry according to Art. 6(1)(f) GDPR.
If your inquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR applies additionally.

Your data will be deleted once your request has been fully processed and no statutory retention requirements prevent deletion. Completion is assumed when it is clear from the circumstances that the matter in question has been conclusively clarified.

4) Data Processing for Contract Fulfillment

If your contact via Instagram results in a contract for the supply of goods and/or provision of services, we additionally process the data transmitted in this context as follows:

4.1

We forward your payment data to the credit institution commissioned with payment processing, provided this is necessary for payment processing.
Legal basis: Art. 6(1)(b) GDPR.

4.2

For contracts for the delivery of goods, we pass on the personal data necessary for delivery to the shipping company commissioned with delivery.

If we owe you updates for goods with digital elements or digital products based on the respective contract, we process the contact data you provided when placing the order (name, address, email address) to notify you personally about pending updates within the legally required period according to Art. 6 Abs. 1 lit. c DSGVO.

Your contact data is used strictly for notifications about updates we are legally obligated to provide and is processed only to the extent necessary for such communication.

Klar Attribution — English Version

We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany) on our website. Klar collects, processes, and stores data on this website and its subpages for reach measurement and statistical analysis on our behalf.

This collection is carried out on the following legal basis:

If the user has given consent according to Article 6(1)(a) GDPR and Section 25(1) TTDSG, the data to be processed is collected on a user-specific basis.

Different types of collection use different cookies to ensure the respective data collection method.

Objection

To object to the fundamental use of Klar, please use this link:
https://485951287.neoaging.de/donottrack/me

This will set a cookie named “do_not_track” from the domain “neoaging.de”.
Please do not delete this cookie, otherwise we cannot guarantee that Klar will not track you.

Information about data protection and data use by Klar can be found at:
https://www.getklar.com/data-protection

Klar Attribution — German Original 

Wir nutzen auf unserer Website die Dienstleistungen von Klar (Klar Insights GmbH, Marktstr. 18, 80802 München, Deutschland). Klar erhebt, verarbeitet und speichert auf dieser Webseite und deren Unterseiten Daten zur Reichweitenmessung und statistischen Analyse in unserem Auftrag.
Diese Erhebung erfolgt auf folgender Rechtsgrundlage: Liegt eine Einwilligung des Nutzers nach Artikel 6 Abs. 1 Satz 1 a DSGVO und § 25 Abs. 1 Satz 1 TTDSG vor, werden die zu verarbeitenden Daten nutzerbezogen erhoben.
Für die vorgenannten unterschiedlichen Erfassungsarten werden unterschiedliche Cookies eingesetzt, um die jeweilige Erfassungsart zu gewährleisten.

Cookie – Widerspruch
Um der Verwendung von Klar grundsätzlich zu widersprechen, verwenden Sie bitte diesen Link:
https://485951287.neoaging.de/donottrack/me

Dadurch wird ein Cookie mit dem Namen „do_not_track“ von der Domain „neoaging.de“ gesetzt.
Bitte löschen Sie dieses nicht, da sonst nicht gewährleistet werden kann, dass Sie nicht durch Klar getrackt werden.

Informationen zum Datenschutz und zur Datennutzung durch Klar können Sie der folgenden Webseite entnehmen:
https://www.getklar.com/data-protection