Privacy Policy
Privacy Policy
Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor necessary for entering into a contract. You are not obligated to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided for the following processing activities.
"Personal data" means any information relating to an identified or identifiable natural person.
Contact
Controller
Contact us if you wish. The controller responsible for data processing is: Fabio Fontes, Kapuzinerstraße, 6, 91315 Höchstadt Germany, +4917663217963, service@viporizerheaven.com
Customer-initiated contact by email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to process and respond to your contact inquiry.
If the contact serves to carry out pre-contractual measures (e.g., advice when considering a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If you contact us for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR, arising from our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of contacting you.
If the contact serves to carry out pre-contractual measures (e.g., advice when considering a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If you contact us for other reasons, this data processing is based on Art. 6 (1) (f) GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) (f) GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
For the technical provision and administration of the withdrawal function on our online presence, we use a software solution from a third-party provider as part of order processingJonas Busch (sole proprietor) Hofstraße No. 2-4 51061 Cologne Germany
When using the withdrawal function, your collected personal data is transmitted to the servers of the aforementioned third-party providers.
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent up to the withdrawal. Your customer account will then be deleted.
Reviews Advertising
We use the "Trustpilot" review system of Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark; "Trustpilot") on our website.
Trustpilot enables us to obtain customer reviews and display them on our website in order to provide you with insight into the quality of our services.
After placing an order, you may receive an invitation from us or Trustpilot to submit a review and may then submit a review. In this context, we or Trustpilot may process, among other things, the following data: email address, name, information about your device and location (IP address, browser settings, type of browser used, browser language, time zone), information about your Trustpilot user account (username, photo, preferred language), information about the purchased product or service used (reference or order number, product details), the content of your review and the star rating you provide, your product photos or videos (if you attached them to your product review). This data may also be used, where applicable, to verify your review.
Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent, provided that you have expressly agreed to the disclosure of your data and to receiving the review invitation. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent until withdrawal.
Further information on data protection when using Trustpilot can be found at: https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms.
Use of the email address to send newsletters
We use your email address to send information and offers by newsletter, provided that you have expressly consented to this. The data processing serves exclusively the purpose of promotional communication. For this purpose, we process your email address and, where applicable, other data that you voluntarily provided when subscribing to our newsletter.
Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can unsubscribe from the newsletter at any time by using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite being removed from the distribution list, we may continue to store your email address on a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6 (1) (f) GDPR, based on our and your legitimate interest in preventing the renewed use of your email address to send our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Use of the email address to send direct advertising
We use your email address, which we received in connection with the sale of a product or service, to send you advertising electronically for our own products or services that are similar to those you have already purchased from us, provided that you have not objected to this use. Providing your email address is required to conclude the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You will find the contact details for exercising your right to object in the legal notice. You can also use the link provided for this purpose in the advertising email. You will not incur any costs other than the transmission costs at the basic rates.
Merchandise management
Use of an external merchandise management system
We use an inventory management system to process contracts as part of order processing. For this purpose, the personal data collected from you as part of your order is transmitted to
Lexware
transmitted.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 para. 1 lit. b GDPR.
Payment service provider
Use of PayPal
We use the PayPal payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling you to pay via the payment service. By selecting and using payment via PayPal, the data required to process the payment is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.
All PayPal transactions are subject to PayPal's privacy policy. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling you to pay via the PayPal Express payment service. To integrate this payment service, PayPal must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable your browser to be recognized.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required to process the payment is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling you to make payments via the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required to process the payment is transmitted to PayPal in order to perform the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
Cookies may be stored that enable your browser to be recognized. The resulting data processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in offering various payment methods in a customer-oriented manner. You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal
For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit report, where applicable, based on mathematical and statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit assessment to a credit agency and uses the information received about the statistical probability of payment default to make a balanced decision on establishing, performing, or terminating the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical and statistical procedures, which may include address data among other information. Your legitimate interests worthy of protection are taken into account in accordance with statutory provisions. The data processing serves the purpose of assessing creditworthiness when initiating a contract. Processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in protecting against payment defaults when PayPal makes advance payments.
You have the right, at any time and for reasons arising from your particular situation, to object to the processing of your personal data based on Art. 6 (1) (f) GDPR by notifying PayPal. Providing the data is required to conclude the contract for the payment method you have requested. Failure to provide the data means that the contract cannot be concluded using the payment method you have selected.
Third-party providers
When paying using a third-party provider's payment method, the data required to process the payment is transmitted to PayPal. This processing is based on Art. 6 (1) (b) GDPR. To carry out this payment method, PayPal may then forward the data to the respective provider. This processing is based on Art. 6 (1) (b) GDPR. Local third-party providers may include:
Invoice purchase via PayPal
When paying using the invoice purchase payment method, the data required to process the payment is initially transmitted to PayPal. To carry out this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR. Ratepay may conduct a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies, following the procedure described above. The data processing serves the purpose of checking creditworthiness in preparation for a contract. The processing is based on Art. 6 (1) (f) GDPR, arising from our overriding legitimate interest in protection against payment defaults when Ratepay makes an advance payment. For more information about data protection and which credit agencies Ratepay uses, please visit https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
For more information about data processing when using PayPal, please refer to the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
Analysis Advertising tracking
Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide the website operator with other services related to website use and Internet use.
The following information may be collected, among other things: IP address, date and time of the page view, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you accessed our website), location data, and purchasing activities. Google may link your data with other data, such as your search history, personal accounts, usage data from other devices, and all other data that Google has about you.
Google truncates the IP address beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Google uses technologies such as cookies, browser storage, and tracking pixels that enable analysis of your use of the website. Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Article 6 (1) (a) GDPR.
Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
The information generated as a result about your use of this website is generally transmitted to and stored on a Google server in the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of Shopify Statistics
On our website, we use the statistical and analytical functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") as part of commissioned data processing. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The processing of data serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. Among other things, the following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about the webpages or products you visit, the referrer URL (the website from which you accessed our website), and information about how you interact with the website is also collected. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, particularly in Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission exists, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those under the European Commission's standard contractual clauses.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can find more information about data protection at Shopify under https://www.shopify.com/de/legal/datenschutz, information about the data processing agreement under https://www.shopify.com/de/legal/dpa, and information about the cookies used under https://www.shopify.com/de/legal/cookies.
Use of IONOS WebAnalytics
We use the IONOS SE WebAnalytics service (Elgendorfer Str. 57, 56410 Montabaur, Germany, “IONOS”) on our website as part of order processing.
The data processing serves to analyze this website and its visitors, as well as for marketing and advertising purposes. For this purpose, IONOS, on behalf of the operator of this website, will use the information obtained through pixels or a log file to evaluate your use of the website and optimize the online offering. To protect personal data, IONOS does not use cookies. To protect visitors, IONOS also does not store any personal data of website visitors, so that no conclusions can be drawn about individual visitors. However, the following information may be collected, among other things: visitor's IP address (which is anonymized directly after transmission and processed without any personal reference), referrer (previously visited website), requested website or file, browser type and browser version, operating system used, device type used, time of access.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, due to our overriding legitimate interest in analyzing website visits without cookies and designing our marketing measures in line with requirements and in a targeted manner. Sie have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
Further information on data processing by IONOS can be found at https://www.ionos.de/terms-gtc/datenschutzerklaerung/ and https://www.ionos.de/terms-gtc/avv/ and at https://www.ionos.de/hilfe/datenschutz/datenverarbeitung-von-webseitenbesuchern-ihres-ionos-produktes/webanalytics.
Plug-ins and Other
We use the Cloudflare CDN content delivery network from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This is a global network of servers in various data centers, to which our web server connects and through which certain content from our website is delivered.
The data processing serves to optimize the loading times of our website and thereby make our offering more user-friendly.
This may include the collection of the following information: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has been certified under the TADPF and has thereby committed to complying with European data protection principles.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in designing the website according to users' needs and in a targeted manner. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
For more information about data protection when using Cloudflare, please visit https://www.cloudflare.com/de-de/privacypolicy/.
Use of GoogleMaps
We use the function for embedding GoogleMaps maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.
This function enables the visual display of geographical information and interactive maps. When pages containing GoogleMaps maps are accessed, Google also collects, processes, and uses data from website visitors.
Your data may also be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has been certified under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on the collection and use of data by Google can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. There, in the Privacy Center, you also have the option to change your settings so that you can manage and protect the data processed by Google.
Integration of the Händlerbund member logo
Our website includes the Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig). When you access our website, the browser used on your device automatically sends information to the server of Händlerbund e.V. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your involvement and stored until it is automatically deleted:
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of ensuring the consistent display of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used in this process. Among other things, your IP address and information about the browser you use are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
More detailed information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Data subject rights and retention period
Retention period
After the contract has been fully performed, the data will initially be stored for the duration of the warranty period, and thereafter in accordance with statutory retention periods, particularly those under tax and commercial law, and then deleted once the retention period has expired, unless you have consented to further processing and use.
Rights of the data subject
Subject to the statutory requirements, you have the following rights under Arts. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing, and data portability.
Furthermore, pursuant to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You may lodge a complaint with, among others, the supervisory authority responsible for us, which you can reach using the following contact details:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de
Right to object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
After you have objected, processing of the data concerned will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
If personal data is processed for the purposes of direct marketing, you may object to this processing at any time by notifying us. After you have objected, we will stop processing the data concerned for the purposes of direct marketing.
Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor necessary for entering into a contract. You are not obligated to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is provided for the following processing activities.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal information.
Whenever you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). The stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
The processing is based on Art. 6 para. 1 lit. f GDPR, arising from our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our services.
Your data may be transferred to and processed in third countries outside the EU, particularly in Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission exists, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those under the European Commission's standard contractual clauses.The processing is based on Art. 6 para. 1 lit. f GDPR, arising from our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our services.
Contact
Controller
Contact us if you wish. The controller responsible for data processing is: Fabio Fontes, Kapuzinerstraße, 6, 91315 Höchstadt Germany, +4917663217963, service@viporizerheaven.com
Customer-initiated contact by email
If you initiate business contact with us by email, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to process and respond to your contact inquiry.
If the contact serves to carry out pre-contractual measures (e.g., advice when considering a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If you contact us for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR, arising from our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves the purpose of contacting you.
If the contact serves to carry out pre-contractual measures (e.g., advice when considering a purchase, preparing a quotation) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR.
If you contact us for other reasons, this data processing is based on Art. 6 (1) (f) GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Art. 6 (1) (f) GDPR.
We use your email address only to process your inquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the withdrawal button
If you have concluded a contract via our online presence, we provide you with a withdrawal function (withdrawal button) through which you can submit your withdrawal statement directly.
When using the withdrawal function, we collect your personal data (name, email address, information identifying the contract or part of the contract you wish to withdraw from, and the time (date and time) the withdrawal statement was sent) only to the extent provided by you. The data processing serves the purpose of providing you with the legally required option to withdraw from your contract and properly processing your withdrawal.
If the contact concerns a contract already concluded between you and us, this data processing is based on Art. 6 (1) (b) GDPR. Otherwise, the data processing is based on Art. 6 (1) (c) GDPR, to fulfill a legal obligation to provide you with a withdrawal function on our online presence.
We use your email address only to process your withdrawal statement. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Disclosure to third-party providers (plugin use)For the technical provision and administration of the withdrawal function on our online presence, we use a software solution from a third-party provider as part of order processingJonas Busch (sole proprietor) Hofstraße No. 2-4 51061 Cologne Germany
When using the withdrawal function, your collected personal data is transmitted to the servers of the aforementioned third-party providers.
The processing of your personal data serves the purpose of fulfilling the statutory requirements for designing the withdrawal function in a legally secure manner and is based on Art. 6(1)(c) GDPR. This data processing is also based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in providing you with a user-friendly withdrawal option. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6(1)(f) GDPR..
Use of Google Maps API address validation
We use the address validation service provided by Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, “Google”) on our website.
The data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors and, where applicable, supplementing missing data. If data is entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there, and evaluated.
The following information, among other things, may be transmitted to Google and processed there: postal addresses (country, city, postal code, street, house number), email address, telephone number.
Your data may also be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
Your personal data is processed on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in maintaining a correct data basis for fulfilling our contractual obligations. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
The data is processed separately by the provider and is not combined with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days.
Further information on Google's terms of use and privacy policy can be found at: https://cloud.google.com/maps-platform/terms or at https://www.google.de/policies/privacy/.
Customer account Orders We use the address validation service provided by Google (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, “Google”) on our website.
The data processing serves the purpose of checking your entries in our address forms in real time for input and spelling errors and, where applicable, supplementing missing data. If data is entered incorrectly, alternative suggestions for correcting the data are displayed. For this purpose, the address data you enter is transmitted to the provider, stored there, and evaluated.
The following information, among other things, may be transmitted to Google and processed there: postal addresses (country, city, postal code, street, house number), email address, telephone number.
Your data may also be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
Your personal data is processed on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in maintaining a correct data basis for fulfilling our contractual obligations. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
The data is processed separately by the provider and is not combined with other data. It is deleted by the provider as soon as the status of the entered data has been determined, but no later than after 30 days.
Further information on Google's terms of use and privacy policy can be found at: https://cloud.google.com/maps-platform/terms or at https://www.google.de/policies/privacy/.
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent up to the withdrawal. Your customer account will then be deleted.
Collection, processing, and disclosure of personal data when placing orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and handle your inquiries. Providing the data is necessary to conclude the contract. Failure to provide the data means that no contract can be concluded. Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary to fulfill a contract with you.
Your data may be disclosed, for example, to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers handling order processing, and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of the data transferred is limited to the minimum necessary.
Your data may be transferred to and processed in third countries outside the EU, particularly in Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission exists, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those under the European Commission's standard contractual clauses.Reviews Advertising
Shopauskunft customer review
We use the “shopauskunft.de” review tool provided by Händlerbund Management AG (Kohlgartenstraße 11 - 13, 04315 Leipzig; "Shopauskunft") for our website.
After your order, we would like to ask you to rate and comment on your purchase from us. For this purpose, we will contact you by email, using the technical system "Legally compliant review request (RBA)" use. In doing so, we process the data relating to your order (order number/invoice number, purchase value and shipping costs) as well as your email address. Where applicable, we also use this data to verify your review.
We use the “shopauskunft.de” review tool provided by Händlerbund Management AG (Kohlgartenstraße 11 - 13, 04315 Leipzig; "Shopauskunft") for our website.
After your order, we would like to ask you to rate and comment on your purchase from us. For this purpose, we will contact you by email, using the technical system "Legally compliant review request (RBA)" use. In doing so, we process the data relating to your order (order number/invoice number, purchase value and shipping costs) as well as your email address. Where applicable, we also use this data to verify your review.
Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent, provided that you have expressly consented to the disclosure of your data and receipt of the review request.
You may withdraw your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent up to the withdrawal.
Further information on data protection when using Shopauskunft can be found at:
https://www.shopauskunft.de/datenschutz.
You may withdraw your consent at any time by using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing carried out on the basis of your consent up to the withdrawal.
Further information on data protection when using Shopauskunft can be found at:
https://www.shopauskunft.de/datenschutz.
Shopauskunft Widget
The Shopauskunft widget is integrated into our website. It serves to display and promote the number and results of the reviews we have received via Shopauskunft to date.
To display the widget, it is technically necessary to transmit usage data via your Internet browser to Shopauskunft's server and store it in log data (so-called server log files) for 7 days. The stored data includes the name and URL of the file accessed, the date and time of access, the IP address of the requesting computer, the website from which access is made (referrer URL), the browser used and, where applicable, your computer's operating system, as well as the name of your access provider.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in promoting our offers by displaying customer reviews already received. These data are not stored together with other personal data.
Use of TrustpilotWe use the "Trustpilot" review system of Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark; "Trustpilot") on our website.
Trustpilot enables us to obtain customer reviews and display them on our website in order to provide you with insight into the quality of our services.
After placing an order, you may receive an invitation from us or Trustpilot to submit a review and may then submit a review. In this context, we or Trustpilot may process, among other things, the following data: email address, name, information about your device and location (IP address, browser settings, type of browser used, browser language, time zone), information about your Trustpilot user account (username, photo, preferred language), information about the purchased product or service used (reference or order number, product details), the content of your review and the star rating you provide, your product photos or videos (if you attached them to your product review). This data may also be used, where applicable, to verify your review.
Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent, provided that you have expressly agreed to the disclosure of your data and to receiving the review invitation. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent until withdrawal.
Further information on data protection when using Trustpilot can be found at: https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms.
Use of the email address to send newsletters
We use your email address to send information and offers by newsletter, provided that you have expressly consented to this. The data processing serves exclusively the purpose of promotional communication. For this purpose, we process your email address and, where applicable, other data that you voluntarily provided when subscribing to our newsletter.
Processing is carried out on the basis of Art. 6 (1) (a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can unsubscribe from the newsletter at any time by using the relevant link in the newsletter or by notifying us. Your email address will then be removed from the distribution list. Despite being removed from the distribution list, we may continue to store your email address on a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6 (1) (f) GDPR, based on our and your legitimate interest in preventing the renewed use of your email address to send our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you.
Use of the email address to send direct advertising
We use your email address, which we received in connection with the sale of a product or service, to send you advertising electronically for our own products or services that are similar to those you have already purchased from us, provided that you have not objected to this use. Providing your email address is required to conclude the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6 (1) (f) GDPR, based on our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You will find the contact details for exercising your right to object in the legal notice. You can also use the link provided for this purpose in the advertising email. You will not incur any costs other than the transmission costs at the basic rates.
Merchandise management
Use of an external merchandise management system
We use an inventory management system to process contracts as part of order processing. For this purpose, the personal data collected from you as part of your order is transmitted to
Lexware
transmitted.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 para. 1 lit. b GDPR.
Payment service provider
Use of PayPal
We use the PayPal payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling you to pay via the payment service. By selecting and using payment via PayPal, the data required to process the payment is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.
All PayPal transactions are subject to PayPal's privacy policy. This can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
We use the PayPal Express payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling you to pay via the PayPal Express payment service. To integrate this payment service, PayPal must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable your browser to be recognized.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
By selecting and using PayPal Express, the data required to process the payment is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of PayPal Check-Out
We use the PayPal Check-Out payment service provided by PayPal (Europe) S.à r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of enabling you to make payments via the payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required to process the payment is transmitted to PayPal in order to perform the contract with you using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.
Cookies may be stored that enable your browser to be recognized. The resulting data processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in offering various payment methods in a customer-oriented manner. You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.
Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal
For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit report, where applicable, based on mathematical and statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit assessment to a credit agency and uses the information received about the statistical probability of payment default to make a balanced decision on establishing, performing, or terminating the contractual relationship. The credit report may contain probability values (score values) calculated on the basis of scientifically recognized mathematical and statistical procedures, which may include address data among other information. Your legitimate interests worthy of protection are taken into account in accordance with statutory provisions. The data processing serves the purpose of assessing creditworthiness when initiating a contract. Processing is based on Art. 6(1)(f) GDPR, due to our overriding legitimate interest in protecting against payment defaults when PayPal makes advance payments.
You have the right, at any time and for reasons arising from your particular situation, to object to the processing of your personal data based on Art. 6 (1) (f) GDPR by notifying PayPal. Providing the data is required to conclude the contract for the payment method you have requested. Failure to provide the data means that the contract cannot be concluded using the payment method you have selected.
Third-party providers
When paying using a third-party provider's payment method, the data required to process the payment is transmitted to PayPal. This processing is based on Art. 6 (1) (b) GDPR. To carry out this payment method, PayPal may then forward the data to the respective provider. This processing is based on Art. 6 (1) (b) GDPR. Local third-party providers may include:
- Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
Invoice purchase via PayPal
When paying using the invoice purchase payment method, the data required to process the payment is initially transmitted to PayPal. To carry out this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is based on Art. 6 (1) (b) GDPR. Ratepay may conduct a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies, following the procedure described above. The data processing serves the purpose of checking creditworthiness in preparation for a contract. The processing is based on Art. 6 (1) (f) GDPR, arising from our overriding legitimate interest in protection against payment defaults when Ratepay makes an advance payment. For more information about data protection and which credit agencies Ratepay uses, please visit https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.
For more information about data processing when using PayPal, please refer to the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
Use of the Mollie payment service provider
We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; “Mollie”) to process payments on our website. The data processing serves the purpose of offering you various payment methods through payment processing by the payment service provider Mollie. If you choose one of the payment options offered by the payment service provider Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment details (for example, bank account number or credit card number), your IP address, your internet browser and device type, and in some cases your first and last name, address details, and information about the product or service you purchased from us. This data processing is based on Art. 6 para. 1 lit. b GDPR. For more information about data processing when using the payment service provider Mollie, please see the associated privacy policy https://www.mollie.com/de/legal/privacy
We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; “Mollie”) to process payments on our website. The data processing serves the purpose of offering you various payment methods through payment processing by the payment service provider Mollie. If you choose one of the payment options offered by the payment service provider Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment details (for example, bank account number or credit card number), your IP address, your internet browser and device type, and in some cases your first and last name, address details, and information about the product or service you purchased from us. This data processing is based on Art. 6 para. 1 lit. b GDPR. For more information about data processing when using the payment service provider Mollie, please see the associated privacy policy https://www.mollie.com/de/legal/privacy
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then be unable to use all the functions of this website to their full extent.
You can find information at the links below on how to manage cookies (including disabling them) in the most common browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically necessary cookies
Unless otherwise stated below in the privacy policy, we use only these technically necessary cookies for the purpose of making our offering more user-friendly, effective, and secure. In addition, cookies enable our systems to recognize your browser even after you change pages and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these functions, the browser must be recognized again after you change pages.
The use of cookies or comparable technologies is based on § 25 para. 2 TDDDG. The processing of your personal data is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the website’s optimal functionality and providing a user-friendly and effective design of our offering.
You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.
Use of Complianz GDPR Cookie Consent
We use the Complianz GDPR Cookie Consent plugin from iubenda s.r.l. (Via San Raffaele 1, 20121 Milan, Italy; “iubenda”) on our website.
The plug-in allows you to give consent to data processing via the website, in particular to the setting of cookies, and to exercise your right to withdraw consent already given. The data processing serves the purpose of obtaining and documenting the required consent to data processing and thereby complying with legal obligations. Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to iubenda: uniquely assignable ID, consent status. These data are not disclosed to any other third parties.
The data processing is carried out to fulfill a legal obligation on the basis of Art. 6 para. 1 lit. c GDPR.
For more information about data protection, please visit: https://complianz.io/de/legal-deutsch/datenschutzerklaerung-von-complianz-shopify/
Analysis Advertising tracking
Use of Google Analytics 4
We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, compile reports on website activity, and provide the website operator with other services related to website use and Internet use.
The following information may be collected, among other things: IP address, date and time of the page view, click path, information about the browser and device you use, pages visited, referrer URL (the website from which you accessed our website), location data, and purchasing activities. Google may link your data with other data, such as your search history, personal accounts, usage data from other devices, and all other data that Google has about you.
Google truncates the IP address beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Google uses technologies such as cookies, browser storage, and tracking pixels that enable analysis of your use of the website. Cookies or comparable technologies are used with your consent on the basis of Section 25 (1) sentence 1 TDDDG in conjunction with Article 6 (1) (a) GDPR.
Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
In this context, we also use the Google Signals service. Google Signals enables cross-device tracking. Your data may therefore be analyzed across devices if you have activated “personalized advertising” in your account settings and your devices are linked to your Google Account. This makes it possible to recognize which device you use to search for products and later return to complete purchases on another device, such as a tablet.
The cross-device reports created in this context contain only aggregated data. We therefore receive only statistics generated on the basis of Google Signals. To prevent data collection and storage by Google Signals across devices, you can deactivate the “personalized ads” function in your Google Account settings. You can find more information about this at https://support.google.com/ads/answer/2662922?hl=de.
You can find more detailed information on data processing and data protection regarding Google Signals at https://support.google.com/analytics/answer/7532985?hl=de.
We use the advanced implementation of Consent Mode (Advanced Consent Mode). In this process, user data is transmitted to Google in the form of “pings” even if consent has not been granted. These pings may contain, among other things, the following information: IP address for deriving the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (the website from which our website was accessed), or information about the triggering of website events such as a conversion. Based on this information, Google models user data in order to carry out comprehensive usage analysis despite consent being refused.The information generated as a result about your use of this website is generally transmitted to and stored on a Google server in the USA. An adequacy decision by the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF), is in place for the USA. Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of Shopify Statistics
On our website, we use the statistical and analytical functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") as part of commissioned data processing. Shopify is an affiliated company of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The processing of data serves the purpose of analyzing this website and its visitors. For this purpose, data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. Among other things, the following device information is collected and processed: information about the web browser, IP address, time zone, and some of the cookies installed on your device. When you navigate the website, information about the webpages or products you visit, the referrer URL (the website from which you accessed our website), and information about how you interact with the website is also collected. Technologies such as cookies, web beacons, tags, and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, particularly in Canada and the USA. An adequacy decision by the European Commission exists for Canada. For the USA, an adequacy decision by the European Commission exists, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those under the European Commission's standard contractual clauses.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can find more information about data protection at Shopify under https://www.shopify.com/de/legal/datenschutz, information about the data processing agreement under https://www.shopify.com/de/legal/dpa, and information about the cookies used under https://www.shopify.com/de/legal/cookies.
Use of IONOS WebAnalytics
We use the IONOS SE WebAnalytics service (Elgendorfer Str. 57, 56410 Montabaur, Germany, “IONOS”) on our website as part of order processing.
The data processing serves to analyze this website and its visitors, as well as for marketing and advertising purposes. For this purpose, IONOS, on behalf of the operator of this website, will use the information obtained through pixels or a log file to evaluate your use of the website and optimize the online offering. To protect personal data, IONOS does not use cookies. To protect visitors, IONOS also does not store any personal data of website visitors, so that no conclusions can be drawn about individual visitors. However, the following information may be collected, among other things: visitor's IP address (which is anonymized directly after transmission and processed without any personal reference), referrer (previously visited website), requested website or file, browser type and browser version, operating system used, device type used, time of access.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, due to our overriding legitimate interest in analyzing website visits without cookies and designing our marketing measures in line with requirements and in a targeted manner. Sie have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
Further information on data processing by IONOS can be found at https://www.ionos.de/terms-gtc/datenschutzerklaerung/ and https://www.ionos.de/terms-gtc/avv/ and at https://www.ionos.de/hilfe/datenschutz/datenverarbeitung-von-webseitenbesuchern-ihres-ionos-produktes/webanalytics.
Use of the Meta Pixel
We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta") on our website.
Meta and we are joint controllers for the collection of your data and the transfer of this data to Meta that take place when the service is integrated. This is based on an agreement between us and Meta on the joint processing of personal data, which defines the respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools accessible. Thereafter, we are in particular responsible for fulfilling the information obligations pursuant to Articles 13 and 14 GDPR, for complying with the security requirements of Article 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Articles 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the agreement on joint processing. Meta is responsible for enabling data subject rights pursuant to Articles 15 - 20 GDPR, complying with the security requirements of Article 32 GDPR with regard to the security of the service, and complying with the obligations under Articles 33 and 34 GDPR insofar as a personal data breach concerns Meta's obligations under the agreement on joint processing.
The application is intended to target visitors to the website with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta's remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta's servers when the website is visited. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads.
The application is also used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag, as well as which actions are taken after being redirected to this website. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
You can deactivate the “Custom Audiences” remarketing function here. Further information about the collection and use of data by Meta, your related rights, and options for protecting your privacy can be found in Meta’s privacy policy at https://www.facebook.com/about/privacy/.
You can deactivate the “Custom Audiences” remarketing function here. Further information about the collection and use of data by Meta, your related rights, and options for protecting your privacy can be found in Meta’s privacy policy at https://www.facebook.com/about/privacy/.
Use of Google Ads conversion tracking
We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking (visit action evaluation). Google conversion tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period, do not contain personal data, and are therefore not used for personal identification. If you visit certain pages on our website while the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the servers of Google LLC in the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles.
We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking (visit action evaluation). Google conversion tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period, do not contain personal data, and are therefore not used for personal identification. If you visit certain pages on our website while the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to create conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the servers of Google LLC in the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Use of the remarketing or "Similar Audiences" function of Google Inc.
We use the remarketing or "Similar Audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application serves to analyze visitor behavior and interests. To analyze website usage, which forms the basis for creating interest-based advertisements, Google uses cookies. The cookies record website visits and anonymized data about website usage. Visitors' personal data is not stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account product and information sections you previously viewed.
Your data may be transferred to servers of Google LLC in the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has been certified under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
We use the remarketing or "Similar Audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The application serves to analyze visitor behavior and interests. To analyze website usage, which forms the basis for creating interest-based advertisements, Google uses cookies. The cookies record website visits and anonymized data about website usage. Visitors' personal data is not stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account product and information sections you previously viewed.
Your data may be transferred to servers of Google LLC in the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has been certified under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information about Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
Plug-ins and Other
Use of Google Tag Manager
We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of tailoring and optimizing our website to users' needs.
Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the activation of additional tags that may collect and process personal data.
You can find more information about terms of use and data protection here.
Use of CloudflareWe use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application manages JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of tailoring and optimizing our website to users' needs.
Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the activation of additional tags that may collect and process personal data.
You can find more information about terms of use and data protection here.
We use the Cloudflare CDN content delivery network from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; “Cloudflare”) on our website. This is a global network of servers in various data centers, to which our web server connects and through which certain content from our website is delivered.
The data processing serves to optimize the loading times of our website and thereby make our offering more user-friendly.
This may include the collection of the following information: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflare has been certified under the TADPF and has thereby committed to complying with European data protection principles.
Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, based on our overriding legitimate interest in designing the website according to users' needs and in a targeted manner. You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you based on Art. 6 para. 1 lit. f GDPR.
For more information about data protection when using Cloudflare, please visit https://www.cloudflare.com/de-de/privacypolicy/.
Use of GoogleMaps
We use the function for embedding GoogleMaps maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.
This function enables the visual display of geographical information and interactive maps. When pages containing GoogleMaps maps are accessed, Google also collects, processes, and uses data from website visitors.
Your data may also be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has been certified under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
Further information on the collection and use of data by Google can be found in Google's privacy policy at https://www.google.com/privacypolicy.html. There, in the Privacy Center, you also have the option to change your settings so that you can manage and protect the data processed by Google.
Integration of the Händlerbund member logo
Our website includes the Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig). When you access our website, the browser used on your device automatically sends information to the server of Händlerbund e.V. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without your involvement and stored until it is automatically deleted:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the file retrieved,
- Website from which access is made (referrer URL),
- browser used and, where applicable, your computer's operating system and the name of your access provider.
Use of Google Fonts
We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The data processing serves the purpose of ensuring the consistent display of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used in this process. Among other things, your IP address and information about the browser you use are processed and transmitted to Google. This data is not linked to your Google account.
Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby committed to complying with European data protection principles.
The use of cookies or comparable technologies is based on your consent pursuant to § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. Your personal data is processed with your consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.
More detailed information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ and at https://developers.google.com/fonts/faq.
Data subject rights and retention period
Retention period
After the contract has been fully performed, the data will initially be stored for the duration of the warranty period, and thereafter in accordance with statutory retention periods, particularly those under tax and commercial law, and then deleted once the retention period has expired, unless you have consented to further processing and use.
Rights of the data subject
Subject to the statutory requirements, you have the following rights under Arts. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing, and data portability.
Furthermore, pursuant to Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 f GDPR, as well as to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You may lodge a complaint with, among others, the supervisory authority responsible for us, which you can reach using the following contact details:
Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de
Right to object
If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.
After you have objected, processing of the data concerned will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the assertion, exercise or defense of legal claims.
If personal data is processed for the purposes of direct marketing, you may object to this processing at any time by notifying us. After you have objected, we will stop processing the data concerned for the purposes of direct marketing.
Vaporizerheaven
Why Vaporizerheaven
Customer Satisfaction
We are committed to providing the best possible service to satisfy our customers. If any problems do arise, we are happy to assist and resolve them as quickly as possible.
Youth protection
Youth protection is a top priority:
Our products are sold exclusively to persons over 18 years old. We reliably verify age at purchase and delivery.
Our service hours
We are also happy to assist you by phone with any questions about your order or for personal advice.
Monday-Friday
Available from 2 PM to 7 PM
Tel. +49 176 63217963