Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for concluding a contract. You are not obliged to provide your data. Not providing it has no consequences. This applies only insofar as no other information is given for the processing operations described below.
"Personal data" is any information relating to an identified or identifiable natural person.

Server log files
You can visit our website without providing any personal information.
Each time you access our website, usage data is transmitted by your internet browser to us or our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the EU Commission. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's Standard Contractual Clauses.

Contact

The controller responsible for data processing is: Artjola Mucaj, Anglerstrasse 5, 47445 Moers, Germany, 01731859293, artjolamucaj1@gmail.com

Customer contact by email
If you contact us by email on your own initiative, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to handle and respond to your enquiry.
If the contact serves to carry out pre-contractual measures (e.g. advice on a purchase, preparing an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If you contact us for other reasons, this data processing is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR.
We use your email address only to handle your enquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of making contact.
If the contact serves to carry out pre-contractual measures (e.g. advice on a purchase, preparing an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If you contact us for other reasons, this data processing is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR.
We use your email address only to handle your enquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Orders

Collection, processing and disclosure of personal data for orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. Providing the data is necessary to conclude the contract. If you do not provide it, no contract can be concluded. The processing is based on Art. 6 (1) (b) GDPR and is necessary for the performance of a contract with you.
Your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, order processing service providers and IT service providers. In all cases, we strictly comply with the legal requirements. The scope of the data transfer is limited to a minimum.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the EU Commission. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's Standard Contractual Clauses.

Inventory management

Use of an external inventory management system
We use an inventory management system as part of commissioned processing to handle contracts. For this purpose, the personal data collected with your order is transferred to Billbee GmbH, Arolser Str. 10, 34477 Twistetal.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 (1) (b) GDPR.

Payment service providers / Credit checks

Use of PayPal
We use the PayPal payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via this payment service. When you select and use payment via PayPal, the data required for payment processing is transferred to PayPal in order to fulfil the contract with you using the chosen payment method. This processing is based on Art. 6 (1) (b) GDPR.

All PayPal transactions are subject to the PayPal Privacy Statement, which you can find at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Express
We use the PayPal Express payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via PayPal Express. To integrate this payment service, PayPal needs to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. These cookies allow your browser to be recognised.
The processing of your personal data is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.
When you select and use PayPal Express, the data required for payment processing is transferred to PayPal in order to fulfil the contract with you using the chosen payment method. This processing is based on Art. 6 (1) (b) GDPR. Further information on data processing when using PayPal Express can be found in the corresponding privacy statement at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Checkout
We use the PayPal Checkout payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal") on our website. The data processing serves the purpose of offering you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, the data required for payment processing is transferred to PayPal in order to fulfil the contract with you using the chosen payment method. This processing is based on Art. 6 (1) (b) GDPR.

Cookies that allow your browser to be recognised may be stored in this process. The resulting data processing is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.

Credit card via PayPal, direct debit via PayPal & "Pay Later" via PayPal
For certain payment methods such as credit card via PayPal, direct debit via PayPal or "Pay Later" via PayPal, PayPal reserves the right to obtain credit information from credit agencies based on mathematical-statistical methods, if necessary. For this purpose, PayPal transfers the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default to make a balanced decision on establishing, carrying out or terminating the contractual relationship. The credit information may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical methods, which take address data into account, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in protection against payment default where PayPal makes an advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR by notifying PayPal. Providing the data is necessary to conclude the contract with your chosen payment method. If you do not provide it, the contract cannot be concluded with your chosen payment method.

Third-party providers
When paying via a third-party payment method, the data required for payment processing is transferred to PayPal. This processing is based on Art. 6 (1) (b) GDPR. To carry out this payment method, PayPal may then pass the data on to the respective provider. This processing is based on Art. 6 (1) (b) GDPR. Local third-party providers may include, for example:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on invoice via PayPal
When paying by purchase on invoice, the data required for payment processing is first transferred to PayPal. To carry out this payment method, PayPal then transfers the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfil the contract with you using the chosen payment method. This processing is based on Art. 6 (1) (b) GDPR. Ratepay may carry out a credit check based on mathematical-statistical methods (probability or score values) using credit agencies, following the process described above. The data processing serves the purpose of a credit check for initiating a contract. The processing is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in protection against payment default where Ratepay makes an advance payment. Further information on data protection and on which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the corresponding privacy statement at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna payment options
We use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. When you select and use payment via Klarna, the data required for payment processing is transferred to Klarna in order to fulfil the contract with you using the chosen payment method. This processing is based on Art. 6 (1) (b) GDPR.

Cookies that allow your browser to be recognised may be stored in this process. The resulting data processing is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.

"Pay Later" (invoice), "Pay Now" (direct debit, credit card, instant bank transfer), "Financing" (instalments)
For certain payment methods such as "Pay Later" (invoice), "Pay Now" (direct debit, credit card, instant bank transfer) and "Financing" (instalments), Klarna reserves the right to obtain credit information from credit agencies based on mathematical-statistical methods, if necessary.
For this purpose, Klarna transfers the personal data required for a credit check, such as first and last name, address, gender, email address, IP address and data related to the order, to a credit agency for identity and credit checks, and uses the information received on the statistical probability of a payment default to make a balanced decision on establishing, carrying out or terminating the contractual relationship. The credit information may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical methods, which take address data into account, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in protection against payment default where Klarna makes an advance payment. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR by notifying Klarna. Providing the data is necessary to conclude the contract with your chosen payment method. If you do not provide it, the contract cannot be concluded with your chosen payment method.
Further information, in particular on which credit agencies Klarna passes your personal data to, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies.
General information about Klarna can be found for Germany at https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data is handled by Klarna in accordance with the applicable data protection regulations and as described in Klarna's privacy notices for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

Use of Shopify Payments
We use the "Shopify Payments" payment service of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The data processing serves the purpose of offering you payment via Shopify Payments. When you select and use a Shopify Payments payment method, the data required for payment processing is transferred to Stripe in order to fulfil the contract with you using the chosen payment method. This processing is based on Art. 6 (1) (b) GDPR.
Stripe reserves the right to obtain credit information from credit agencies based on mathematical-statistical methods, if necessary. For this purpose, Stripe transfers the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default to make a balanced decision on establishing, carrying out or terminating the contractual relationship. The credit information may include probability values (score values) calculated on the basis of scientifically recognised mathematical-statistical methods, which take address data into account, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for initiating a contract. The processing is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in protection against payment default where Stripe makes an advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6 (1) (f) GDPR by notifying Stripe. Providing the data is necessary to conclude the contract with your chosen payment method. If you do not provide it, the contract cannot be concluded with your chosen payment method.
Further information on data processing when using Shopify Payments can be found in Shopify's privacy policy at https://www.shopify.com/de/legal/datenschutz.
Further information on data processing for payments handled by Stripe can be found in Stripe's privacy policy at https://stripe.com/de/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that allows the browser to be uniquely identified when the website is visited again.

Cookies are stored on your computer, so you have full control over their use. By choosing the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide individually whether to accept them, and prevent cookies from being stored and their data transmitted. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website to their full extent.

The links below explain how to manage cookies (including disabling them) in the most common browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies
Unless otherwise stated in this privacy policy below, we only use these technically necessary cookies to make our services more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without cookies. For these, the browser must be recognised even after a page change.

The use of cookies or similar technologies is based on § 25 (2) TDDDG. The processing of your personal data is based on Art. 6 (1) (f) GDPR, on the basis of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.
You have the right to object to this processing of your personal data at any time on grounds relating to your particular situation.

Use of the GDPR cookie management tool
We use the GDPR/DSGVO cookie management of iSense LLC (855 W Maude Ave, Mountain View, CA 94043, USA; "iSenseLabs") on our website.
This service allows you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The data processing serves the purpose of obtaining and documenting the necessary consents for data processing and thus complying with legal obligations. Cookies are used for this to store your consent status.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). iSenseLabs is not certified under the TADPF.
The data processing is carried out to fulfil a legal obligation based on Art. 6 (1) (c) GDPR.
Further information on data protection at iSenseLabs can be found at https://isenselabs.com/pages/privacypolicy

Analytics / Advertising tracking

Use of Google Analytics 4
We use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of analysing this website and its visitors, as well as marketing and advertising purposes. On behalf of the operator of this website, Google will use the information obtained to evaluate your use of the website, to compile reports on website activity and to provide further services related to website and internet use to the website operator.
The following information, among other things, may be collected: IP address, date and time of the page view, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you came to our website), location data, purchase activity. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google holds about you.

Your IP address is first shortened by us on our own servers, so Google only receives pseudonymised data.

Google uses technologies such as cookies, browser web storage and tracking pixels that enable an analysis of your use of the website. The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR.

The processing of your personal data is based on your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

We use the advanced implementation of Consent Mode (Advanced Consent Mode). With this, user data is sent to Google in the form of "pings" even if consent has not been given. These pings may contain, among other things, the following information: IP address to determine the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (the website from which our website was accessed) or information about website events being triggered, such as a conversion. Based on this information, Google models user data in order to carry out a comprehensive usage analysis even when consent has been refused.

The information generated about your use of this website is usually transferred to and stored on a Google server in the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites, at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.

Use of Shopify Analytics
We use the statistics and analytics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of commissioned processing. Shopify is an affiliate of Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analysing this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and provided in reports, analyses and statistics. The following device information, among other things, is collected and processed: information about the web browser, IP address, time zone and some of the cookies installed on your device. As you navigate the website, information about the web pages or products viewed, the referrer URL (the website from which you came to our website) and how you interact with the website is also collected. Technologies such as cookies, web beacons, tags and pixels (electronic files that record information about how you navigate the website) are used for this.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the EU Commission. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the EU Commission's Standard Contractual Clauses.
The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is based on your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa and information on the cookies used at https://www.shopify.com/de/legal/cookies.

Use of the Meta Pixel
We use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are joint controllers for the collection of your data when the service is integrated and for the transfer of this data to Meta. This is based on an agreement between us and Meta on the joint processing of personal data, which sets out the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools. Under it, we are responsible in particular for fulfilling the information obligations under Art. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement. Meta is responsible for enabling the rights of data subjects under Art. 15–20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for the obligations under Art. 33 and 34 GDPR insofar as a personal data breach concerns Meta's obligations under the joint processing agreement.
The application serves the purpose of addressing visitors to the website with targeted, interest-based advertising on the social networks Facebook and Instagram. For this, Meta's remarketing tag has been implemented on the website. Through this tag, a direct connection to Meta's servers is established when you visit the website. This tells the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit Facebook or Instagram, you will then be shown personalised, interest-based ads.
The application also serves the purpose of compiling conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag, as well as which actions were taken on this website after the redirect. However, we do not receive any information that personally identifies users.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has therefore committed to complying with European data protection principles.
The processing of your personal data is based on your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can deactivate the "Custom Audiences" remarketing function here. Further information on the collection and use of data by Meta, your rights in this regard and options for protecting your privacy can be found in Meta's privacy notice at https://www.facebook.com/about/privacy/.

Use of the TikTok Pixel
We use the TikTok Pixel of TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; "TikTok UK") on our website. Both companies are joint controllers for the data processing (hereinafter "TikTok").
The data processing serves the purpose of identifying and analysing our customers' website visits, addressing customers better by placing targeted ads, and evaluating the effectiveness of ads on TikTok. For this, TikTok uses technologies such as cookies and pixels that allow your browser to be recognised. The following information, among other things, may be collected and transferred to TikTok: date and time of the visit, information about the browser and device type you use, screen resolution, IP address. TikTok may assign this information to your personal TikTok user account. Usage profiles may be created from the data collected using pseudonyms. However, this does not allow users to be personally identified.
Your data may be transferred to third countries such as the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. The data transfer to the USA and to third countries without an adequacy decision is based, among other things, on Standard Contractual Clauses as appropriate safeguards for the protection of personal data, available at https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.
The use of cookies or similar technologies is based on your consent under § 25 (1) sentence 1 TDDDG in conjunction with Art. 6 (1) (a) GDPR. The processing of your personal data is based on your consent under Art. 6 (1) (a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on data protection can be found at https://www.tiktok.com/legal/page/eea/privacy-policy/de and https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Plug-ins and other services

Use of Google Tag Manager
We use Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags that are used in particular to implement tracking and analytics tools. The data processing serves the purpose of designing and optimising our website according to needs.
Google Tag Manager itself does not store cookies or process personal data. However, it does enable other tags to be triggered that may collect and process personal data.
Further information on terms of use and data protection can be found here.

Data subject rights and storage period

Storage period
After the contract has been fully processed, the data is first stored for the duration of the warranty period, then in accordance with statutory retention periods, in particular under tax and commercial law, and is deleted once these periods have expired, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing and data portability.
In addition, under Art. 21 (1) GDPR you have the right to object to processing based on Art. 6 (1) (f) GDPR and to processing for direct marketing purposes.

Right to lodge a complaint with the supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint with, among others, the supervisory authority responsible for us, which can be contacted as follows:

State Commissioner for Data Protection and Freedom of Information of North Rhine-Westphalia (Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen)
Postfach 20 04 44
40102 Düsseldorf
Germany
Phone: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de

Right to object
If the processing of personal data described here is based on our legitimate interest under Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.
After an objection, the processing of the data concerned will stop, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves to establish, exercise or defend legal claims.