data protection

With this data protection declaration we would like to inform you about the type, scope and purpose of the processing of personal data on our website. Personal data is all data that has a personal connection to you, e.g. E.g. name, address, email address or user behavior.

Who is responsible for data processing at our company

Responsible for data processing is:

OMG YESSS! GmbH, Bahnhofstr. 41, 6300 Wörgl, Austria, email: shop@naturecraft.at

Data processing when our website is only used for informational purposes

If you only use our website for informational purposes, only the personal data that the browser you use transmits to our server will be collected. This is the following data:

  • IP address
  • the date and time of access to our website
  • Time zone difference to Greenwich Mean Time (GMT)
  • Access status (HTTP status)
  • the amount of data transferred
  • the Internet service provider of the accessing system
  • the browser type you use and its version
  • the operating system you are using
  • the website from which you may have accessed our website
  • the pages or subpages that you visit on our website.

The aforementioned data is stored as log files on our servers. This is necessary in order to be able to display the website on the device you are using and to ensure stability and security. Legal basis: Data processing is based on our legitimate interest in the efficient and secure provision of our internet offering, Art. 6 Para. 1 lit. f) GDPR. Duration: The above data for the provision of our website will be deleted when the respective session has ended.

Cookies

Our website uses cookies. Cookies are small text files consisting of a series of numbers and letters that are stored and saved on the device you use. Cookies are primarily used to exchange information between the device you are using and our website. This includes, among other things, the language settings on a website, the login status or the location where a video was watched.

Two types of cookies are used when you visit our websites:

  • Temporary cookies (session cookies): These store a so-called session ID, with which various requests from your browser can be assigned to the shared session. The session cookies are deleted when you log out or close your browser.
  • Permanent cookies: Permanent cookies remain stored even after the browser is closed. This means our website recognizes your computer when you return to our website. These cookies store, for example, information about language settings or log-in information. These cookies can also be used to document and store your surfing behavior. This data may be used for statistical, marketing and personalization purposes.

In addition to the above classification, cookies can also be differentiated according to their purpose:

  • Necessary cookies: These are cookies that are absolutely necessary for the operation of our website, to save logins or shopping carts for the duration of your session, or cookies that are set for security reasons.
  • Statistics, marketing and personalization cookies: These are cookies that are used for analysis purposes or to measure reach. Such “tracking” cookies can be used to store information about search terms entered or the frequency of page views. In addition, the surfing behavior of an individual user (e.g. viewing certain content, using functions, etc.) can also be saved in a user profile. Such profiles are used to show users content that matches their potential interests. If we use services that store cookies on your device for statistical, marketing and personalization purposes, we will inform you about this separately in the following sections of our data protection declaration or when obtaining your consent.

Legitimate interest: If we do not obtain your consent to set cookies, we base the processing of your data on our legitimate interest in improving the quality and user-friendliness of our website, in particular the content and functions, Art. 6 Para. 1 f) GDPR. You have the right to use the cookies we set based on our legitimate interest via your browser's security settings contradict. There you have the option of specifying whether you do not accept cookies from the outset or only accept them upon request, or whether you want cookies to be deleted every time you close your browser. If cookies are deactivated for our website, it may no longer be possible to fully use all functions of the website.

Storage period/deletion

We delete or block your personal data as soon as the purpose of storage has been achieved or no longer applies. Storage beyond this will only take place if we are required to do so by national or European regulations. In this case, the data will be blocked or deleted when the storage period prescribed in the respective regulations has expired, unless we need your data to fulfill a contract concluded between us or if this is necessary to assert, exercise or defend legal claims .

Information about the contact options we provide

If you contact us via email, social media, telephone, fax, post, our contact form or otherwise and provide us with personal data such as your name, telephone number or email address or other information about yourself If you answer your request, this data will be stored and further processed in our company to process your request. Legal basis : If you have made your request via our contact form, the legal basis for the processing of your data is Art. 6 Para. 1 lit. a GDPR. If you make your request as part of a contractual or pre-contractual relationship with us, the legal basis for the processing of your data is Article 6 Paragraph 1 Letter b. GDPR. If your request does not fall into one of the aforementioned categories, our legitimate interest in processing your data lies in answering your request properly and in your interests, Art. 6 Para. 1 lit. f GDPR. Deletion: The personal data we collect will be deleted unless it is no longer required. We check the necessity every 2 years. You can also revoke data processing at any time.

Registration

You have the option to register on our website and create a user account in order to access specific content on our website. For this purpose, it is necessary to provide personal data that results from the input mask. The data requested there includes, in particular, your name, password and email address. This data is stored and processed by us to give you access to your user account. The data can be changed or deleted by you at any time. The data will not be passed on to third parties unless they are used to process the contract. In order to protect you and us from abusive registrations, we store the IP address used during registration as well as the date and time of registration. This data will not be disclosed to third parties. Legal basis : We process your data on the basis of Article 6 Paragraph 1 Letter b GDPR for the purposes of providing your user account. Deletion: The personal data, as well as the IP address, date and time, are stored until the purpose no longer applies. The data collected during registration will be deleted as soon as the associated account on our website is deleted or changed : You can delete your account at any time or request deletion from the above-mentioned data controller.

Online shop

If you use our online shop to place orders, we need certain data in order to process your order. This includes, in particular, your name as well as your address and electronic contact details, information on processing the payment process and the services used. This data is stored by us. The information you provide in the mandatory fields of the order form is absolutely necessary to establish and fulfill the contract. In particular, we use the data you provide to us

  • to identify you as our customer,
  • Process, fulfill and process your order,
  • to get in touch with you,
  • to bill you,
  • to be able to handle any liability claims,
  • to be able to assert contractual claims against you.

Legal basis: The legal basis for processing your data with regard to the processing of your order is Article 6 Paragraph 1 Letter b GDPR. This also applies to the processing operations that are necessary to carry out pre-contractual measures.

We will only share your personal information with third parties if:

  • the disclosure in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR is necessary to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data,
  • There is a legal obligation to do this in accordance with Article 6 Paragraph 1 Sentence 1 Letter c GDPR,
  • this is necessary in accordance with Article 6 Paragraph 1 Sentence 1 Letter b of the GDPR for the processing of the contract concluded with you (e.g. passing on the data to the logistics company commissioned with the delivery or for the purpose of payment processing).

Furthermore, your personal data will not be passed on to third parties without your express consent. If we pass on your personal data to third parties, we will limit the scope of the data transmitted to the necessary minimum.

We can also use the data you provide to inform you by post or email about other interesting products and/or services.

When you place an order, register for a user account or log in again, we store your IP address and the time of the respective user action. The purpose of storage is our, but also your, legitimate interests in protecting against misuse and other unauthorized use. Legal basis: The legal basis for this is Article 6 Paragraph 1 Letter f GDPR. This data will not be passed on to third parties unless the transfer is necessary to pursue our claims or there is a legal obligation to do so in accordance with Article 6 Paragraph 1 Letter c GDPR.

Deletion: Due to commercial and tax law requirements, we are obliged to store your address, payment and order data for a period of 10 years. However, after the statutory warranty rights have expired (2 years), we will restrict processing so that your data will only be used to comply with legal obligations.

Your rights under the GDPR

According to the GDPR, you are entitled to the following rights, which you can assert at any time with the person responsible named in Section 1 of this data protection declaration:

  • Right to information: According to Art. 15 GDPR, you can request confirmation as to whether and which personal data we process about you. In addition, you can obtain information from us free of charge about the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned storage period, the existence of a right to correction, deletion, restriction of processing or objection , the existence of a right to complain and the origin of your data if it was not collected by us. You also have the right to information as to whether your personal data has been transmitted to a third country or to an international organization. If this is the case, you have the right to receive information about the appropriate safeguards in connection with the transfer.
  • Right to rectification: According to Art. 16 GDPR, you can request the correction of incorrect or incomplete personal data stored by us and concerning you.
  • Right to deletion: According to Art. 17 GDPR, you have the right to request the deletion of your personal data stored by us, provided we do not need to process it for the following purposes:
    • to fulfill a legal obligation,
    • to assert, exercise or defend legal claims,
    • to exercise the right to freedom of expression and information or
    • for reasons of public interest mentioned in Article 17 Paragraph 3 Letters c and d GDPR.
  • Right to restriction: According to Art. 18 GDPR, you have the right to request the restriction of the processing of your personal data if
    • the accuracy of the data is disputed by you, for a period that enables us to verify the accuracy of the personal data,
    • the processing of your data is unlawful, but you refuse its deletion and instead request that the use of the data be restricted,
    • we no longer need the personal data for the purposes of processing, but you need the data to assert, exercise or defend legal claims
    • You have objected to the processing of your data in accordance with Art. 21 GDPR, but it is not yet clear whether the legitimate reasons that entitled us to continue processing despite your objection outweigh your rights.
  • Right to information: If you have asserted the right to rectification, deletion or restriction of processing against us, we are obliged to inform all recipients to whom personal data concerning you have been disclosed of the correction or deletion of the data or the restriction of processing requested by you , unless this proves to be impossible or involves disproportionate effort. You have the right to be informed by us about these recipients.
  • Right to data portability: According to Art. 20 GDPR, you can request that we receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format or request that it be transmitted to another person responsible.
  • Right to complain : According to Art. 77 GDPR, you have the right to complain to a supervisory authority. To do this, you can contact the supervisory authority at your usual place of residence, your place of work or our company headquarters.

Right of withdrawal

According to Art. 7 Para. 3 GDPR, you have the right to revoke your consent to the processing of your data at any time. The revocation you have declared does not change the lawfulness of the processing of your personal data prior to the revocation.

Right to object

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data, which is based on a balance of interests (Art. 6 Para. 1 lit. f GDPR). This is particularly the case if data processing is not necessary to fulfill a contract. If you exercise your right to object, we ask you to explain the reasons. We will then no longer process your personal data unless we can prove to you that compelling legitimate reasons for data processing outweigh your interests and rights.

Regardless of the above, you have the right to object at any time to the processing of your personal data for advertising and data analysis purposes.

Please send your objection to the contact address of the person responsible given above.

YouTube

On this website we use components from YouTube, a service provided by YouTube, LLC, 901 Cherry Ave., San Bruno, CA 94066, USA. YouTube, LLC is a subsidiary of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043-1351, USA.

The use of YouTube allows us to embed various videos and clips on the internet platform www.youtube.de to provide. After a page or subpage of our website is accessed on which such an embedding has taken place, the Internet browser you are using will be prompted to download video components of the embedded video or clip. During your visit to our website and its subpages, both YouTube and Google are informed about which page or subpage you have accessed by transmitting your IP address to Google's external servers in the USA. This information is transmitted regardless of whether the videos or clips displayed are actually viewed or clicked on, or whether you are logged into your YouTube or Google account. Google is a participant in the Privacy Shield Agreement and is certified for data processing according to European standards. This information is collected and assigned to your Google account if you are logged in during your visit. Purpose: The use of the YouTube components on our website is intended to provide you with videos and clips from the website www.youtube.de on our website for the purpose of viewing and interaction. Legal basis: We use YouTube due to our legitimate interest in optimizing and designing our online offering, Art. 6 Para. 1 lit. f GDPR. Prevention: You can prevent data transfer at any time by logging out of your YouTube account or using the following link Link to provider After logging in to your Google account, set an opt-out cookie by clicking the logout button.

Third party information:

Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google Maps

On our website we use components of “Google Maps”, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (hereinafter referred to as: “Google”).

Google Maps displays geographical information visually. Here, Google collects and processes the visitor's IP address. This is transmitted to Google regardless of whether Google Maps is actually used or you are logged into your Google account. Your IP address will be assigned to your Google account if you are logged in when you visit our website. This data is transferred to external Google servers in the USA. Google is a participant in the Privacy Shield Agreement and is certified for data processing according to European standards. Google may pass on this data collected via the technical process to third parties. Purpose: The integration of Google Maps serves to simplify visualization and navigation when visiting our location. Google processes data for the purposes of advertising, market research, designing the website and providing needs-based advertising. Legal basis: We use Google Maps due to our legitimate interest in optimizing and designing our online offering, Art. 6 Para. 1 lit. f GDPR. Prevention: You can prevent the allocation of data by not using Google Maps on our website and logging out of your Google account before your visit. You can also deactivate JavaScript in your browser to prevent the map from being displayed. We also refer to Google’s data protection regulations below Link to provider

Third party information:

Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Google Web Fonts

On our website we use “Google Web Fonts”, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA

The service enables us to integrate the display of external fonts (web fonts) into the design of our website and to display them correctly when the website is displayed. This gives us certain design options with which we want to make the design of our website more user-friendly. These web fonts are integrated through a server call. From this server, the fonts are delivered compressed to your browser and unpacked there. This server is usually located in the USA. If you visit one of our pages on which we integrate Google Fonts, Google will be informed which of our websites you have visited. In addition, the IP address of the browser of the visitor's device is stored by Google. Purpose: The aforementioned interests represent the purpose of using Google Web Fonts. Legal basis: We use Google Web Fonts due to our legitimate interest in optimizing and designing our online offering, Art. 6 Para. 1 lit. f GDPR .

Third party information:

Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

Vimeo

On this website we use components from Vimeo, a service provided by Vimeo LLC, 555 West 18th Street, New York 10011, USA.

Vimeo is a video portal where users can watch videos for free. Vimeo offers website operators the opportunity to embed videos on their own website. For this purpose, Vimeo provides a code snippet that displays the video in a so-called inline frame. After a page or subpage of our website is accessed on which such an embedding has taken place, the Internet browser you are using will be prompted to download video components of the embedded video or clip. This process requires that Vimeo reads the IP address assigned to you; otherwise Vimeo would not be able to deliver the video to your browser. Vimeo can recognize that you have visited one of our pages on which we have embedded a Vimeo video if you are logged in to Vimeo. This information is transmitted to Vimeo even if you do not click on the Vimeo video. Vimeo collects this information and assigns it to your Vimeo account. Purpose: The use of the Vimeo components on our website is intended to provide you with videos and clips from the Vimeo website on our website for the purpose of viewing and interaction. Legal basis: We use Vimeo based on our legitimate interest in optimizing and designing our online offering, Art. 6 Para. 1 lit. f GDPR. Prevention: You can prevent this data transfer at any time by logging out of your Vimeo account.

Third party information:

Our online presence on social networks

We operate online presences within the social networks listed below. If you visit one of these sites, your usage data will be collected and processed by the respective provider. This is usually done through cookies that are stored on the device you use. For the term cookie, see the relevant heading above. Cookies are used to store your usage behavior and interests and create corresponding usage profiles. Data can also be stored in the usage profiles regardless of the device you use. This is particularly the case if you are a member of the respective platform and logged in to it.

We have plugins on our website in the form of. “Social media buttons” from the providers we use are embedded. You can tell which plugin belongs to which provider by the logo that the plugin is marked with. If you access a page of our online presence on which such a plugin is implemented, a connection will automatically be established between your browser and the provider's servers with the respective provider of the plug-in and the provider will place a cookie on yours device used. Already at this point in time, data transfer can take place even if you do not have an account with the respective operator of the social network or have an account there but are not logged in there at the moment you visit our website. In addition, data is transmitted to the provider as a result of further interactions with the respective social plugin (e.g. clicking the “Like” button on Facebook, re-tweet button on Twitter).

The data collected is generally used by the provider for advertising and market research purposes by creating usage profiles based on your usage behavior. These in turn can be used by the providers to show you interest-based advertising. You have the right to revoke the creation of user profiles. In order to exercise this, you must contact the respective provider. If you have an account with the provider, your usage data can be linked to it. To prevent your data from being linked in this way, you can log out of the provider's service before visiting our site.

You can find out for what purpose and to what extent data is collected by the provider in the respective data protection declarations of the providers provided below. We ourselves have no influence on which data is collected and how this data is used by the provider. If you would like to request detailed information or make use of your rights as a data subject, the most effective way to do this is to contact the respective provider yourself, as only the respective provider has access to your data.

We would like to point out that your user data may be transferred and processed outside the European Union. In this case, there is a risk that the enforcement of your data subject rights may be made more difficult. Those US providers who are certified under the Privacy Shield are committed to complying with EU data protection standards. You can find information about whether the respective provider has such a certificate in the information about the providers listed below.

Legal basis: If you have been asked by one of the providers listed below for your consent to data processing, the legal basis for the processing is Art. 6 Para. 1 lit. a GDPR. Otherwise, your data will be processed on the basis of our legitimate interests in contacting you and communicating with you, Article 6 Paragraph 1 Letter f of the GDPR. Prevention: For information on the respective objection options (opt-out), we refer to the information provided by the providers linked below.

We maintain online presences on the following social networks:

Instagram

Instagram is a service of Instagram LLC, 1601 Willow Rd, Menlo Park CA 94025 - USA

Pinterest

Pinterest is a service of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2 - Ireland

  • Data protection declaration and opt-out option available at: Link to provider

Facebook

Facebook is a service of Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304 – USA.

Headquarters in the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 – Ireland

Google Analytics

On our website we use “Google Analytics”, a service provided by Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

We use Google Analytics to record and statistically evaluate the flow of visitors to our website. Google Analytics collects, among other things, data about which website you came to our website from (so-called referrers), which subpages of the website you accessed or how often and for how long a subpage was viewed and what interactions you made. In order to collect and store this data, Google Analytics sets a cookie on the device you are using (see the term above under the heading Cookies). We use the AnonymizeIP function to anonymize your IP address so that it is shortened and can no longer be assigned to your visit to our website. Further transmitted information is not assigned to or linked to the anonymized IP address by Google. The information generated in this way is transmitted to Google servers in the USA and stored there. Google may pass on the personal data collected via the technical process to third parties. We have concluded an order processing agreement with Google. Google is then entitled and obliged to evaluate the information obtained for us and to create statistical reports for us about the type and extent of website use. These statistics enable us to continually improve our offering, carry out a cost-benefit analysis of our internet marketing and make our internet presence more interesting and user-friendly for you as a user. Legal basis: We use Google Analytics due to our legitimate interest in the analysis, optimization and economic operation of our online offering, Art. 6 Para. 1 lit. f GDPR. Deletion: The data we collect and transmit in this way is never automatically deleted. Prevention: You can prevent the storage of cookies by downloading and installing the browser add-on provided by Google. This is available under link to provider . However, you may then no longer be able to fully use all of the functions of our website. Alternatively, you can prevent the storage of cookies by setting a so-called opt-out cookie, which will prevent your data from being recorded on our website in the future. To do this, please click on the following <Link>. You also have the option of preventing cookies from being stored by setting this in your browser. Cookies that have already been set can be deleted at any time.

Third party information:

Headquarters within the EU: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

  • Terms of use: Linkl
  • Overview of data protection: Link to the provider
  • Data protection declaration: Link to the provider
  • Use of data by Google when you use our partners' websites or apps: Link to the provider
  • Use of data for advertising purposes: Link to the provider
  • Personalized advertising by Google: Link to the provider
  • Google has submitted and certified itself to the Privacy Shield Agreement concluded between the European Union and the USA. As a result, Google commits itself to complying with the standards and regulations of European data protection law. Further information can be found in the entry linked below: Link to the provider .

Facebook pixels

On our website we use the Facebook Pixel, Custom Audiences and Facebook Conversion functions from Facebook Inc. 1 Hacker Way, Menlo Park, CA 94025, USA.

Facebook Pixel is an analysis tool with which we can evaluate the effectiveness of the advertisements we place on Facebook (so-called “Facebook Ads”). It allows us to target audiences for our advertisements. This allows us to only show our Facebook ads to Facebook users who have previously visited one of our websites. We can also use Facebook Pixel to see whether you were redirected to our website after clicking on one of our Facebook ads. This enables us to show you advertisements that are tailored to your interests. For this purpose, we have implemented a tracking pixel from Facebook on our website. This is a small graphic that enables log file recording and log file analysis. When you visit our website, a direct connection is established to the Facebook servers. According to our knowledge, Facebook receives information about which page of our website you have visited or which of our Facebook ads you have clicked on. If you are logged in to Facebook, Facebook can assign your visit to our website or the click on our Facebook ads to your Facebook account. It cannot be ruled out that Facebook reads and stores your IP address and other identifying features, even if you are not logged in to Facebook. You can read details about how the Facebook Pixel works here: Link to provider . We have no influence on the quantity, quality or storage period of the transferred data. Facebook may pass on your data to third parties. Facebook is a participant in the Privacy Shield Agreement and is certified for data processing according to European standards. Purpose: We use Facebook pixels to show you advertising that is interesting to you and to make our website more attractive. Legal basis: We use Facebook pixels due to our legitimate interest in the analysis, optimization and economic operation of our online offering, Art. 6 Para. 1 lit. f GDPR. Prevention: You can deactivate Facebook Custom Audiences by logging into your Facebook account and setting this up using the following link Link to the provider You can also deactivate the display of interest-based advertising on the following pages http://www.aboutads.info/choices and http://www.youronlinechoices.com/uk/your-ad-choices/. You can also prevent the use of cookies, which are used to measure reach and for advertising purposes, via the Network Advertising Initiative's offer, which you can find here Link to provider or here Link to provider can retrieve. Alternatively, you can also use this website Link to provider Explain your objection.

Third party information:
Headquarters within the EU: Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Amazon affiliate program

We use the Amazon Europe S. Ã . affiliate program on our website. rl 5, Rue Plaetis, L-2338 Luxembourg.

With affiliate marketing, those interested can offer their own advertising on third-party websites. This includes, among other things, data such as the identification number of the affiliate (the person on whose site advertising is placed), the serial number of the visitor to a website and that of the advertising medium clicked on. Interested parties can offer their own advertising on third-party websites. There may be advertisements and links from www.amazon.de placed on our website, which can also lead to reimbursement of advertising costs. Amazon sets a cookie here (see the term above under the heading Cookies). The cookie set determines the pages you visit, including your IP address. We have no influence on the quantity, quality or storage period of the transferred data. No personal data is stored here. Amazon is a participant in the Privacy Shield Agreement and is certified for data processing according to European standards. Amazon may pass on your data to third parties. This information is collected and assigned to your Amazon account if you are logged in during your visit. Purpose: The advertising is displayed with the purpose of showing you advertising that is interesting to you and making our website more attractive. The data provided is stored in order to process commission payments between the advertiser and the person who allows this advertising to be displayed on their site. Legal basis : We use the Amazon partner program due to our legitimate interest in the economic operation of our online offering, Art. 6 Para. 1 lit. f GDPR . Prevention: You can prevent the storage of cookies by switching off the display of interest-based advertising using the following link Link to provider . It is also possible to deactivate interest-based advertising by using the following link http://www.aboutads.info/choices . You also have the option of preventing cookies from being stored by setting this in your browser. Cookies that have already been set can be deleted at any time.

Third party information:

Klarna

We offer payment processing on our website via the payment service provider Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden.

The following data will be transmitted to Klarna or collected by Klarna: first and last name, address, date of birth, email address, telephone number, IP address as well as the data necessary for processing the purchase on account that is related to the order, such as the number of items, details of the products ordered, item number, invoice amount and taxes in percent. In addition, Klarna collects information about purchases you have previously made with Klarna, your previous payment behavior and probability values ​​about your future behavior. Klarna also records the way you use Klarna, for example information about the devices you use when ordering or your location. Purpose : This data is transmitted so that Klarna can create an invoice and carry out an identity check to process your purchase with the invoice processing you want. This makes it possible, among other things, to detect fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that Klarna can estimate your creditworthiness or Klarna can pass the data on to credit reporting agencies to estimate your creditworthiness in the form of a credit check. The data collected can also be used by Klarna for analysis purposes, in particular for customer analysis, risk analysis, data analysis for the purposes of developing and improving the services offered by Klarna. Legal basis : The legal basis for the use of the data described above is Article 6 Paragraph 1 Letter b GDPR. Deletion: The data we collect and transfer in this way will be automatically deleted after 26 months. Further information on Klarna's terms of use and data protection can be found at Link to provider Prevention: You can revoke your consent to Klarna’s use of your personal data at any time. Despite revocation, Klarna may continue to be entitled to process, use and transmit personal data that is absolutely necessary for contractual payment processing.

PayPal

We offer payment processing on our website via the payment service provider PayPal (PayPal (Europe) S.Ã .rl &amp; Cie. SCA, 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg).

If you have decided to pay via PayPal, the following of your data will be transmitted to PayPal as part of the order: first and last name, address, date of birth, email address, telephone number, IP address and the data necessary to process the respective order . This data is transmitted so that PayPal can carry out an identity check to process your purchase. This makes it possible, among other things, to detect fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that PayPal can estimate your creditworthiness if necessary or PayPal can pass on the data to credit reporting agencies to estimate your creditworthiness in the form of a credit check. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The data collected can also be used by PayPal for analysis purposes, in particular for customer analysis, risk analysis, data analysis for the purposes of developing and improving the services offered by PayPal. Legal basis: The legal basis for the above-described use of the data is Art. 6 Para. 1 lit b GDPR. Deletion: The data we collect and transfer in this way will be automatically deleted after 26 months. Revocation: You can revoke your consent to PayPal's use of personal data at any time. Despite revocation, PayPal may continue to be entitled to process, use and transmit personal data that is absolutely necessary for contractual payment processing.

Third party information:

Instant bank transfer

We offer payment processing via the payment system on our website Instant bank transfer of the payment service provider SOFORT (SOFORT GmbH, Fußbergstraße 1, 82131 Gauting, Germany).

If you have decided to pay via Sofortüberweisung, the following of your data will be transmitted to Sofortüberweisung as part of the order: first and last name, address, date of birth, email address, telephone number, IP address and the data necessary to process the respective order . In addition, you transmit the TAN number generated for the respective payment transaction and the PIN of your online banking account. This data is transmitted so that Sofortüberweisung can carry out an identity check to process your purchase. This makes it possible, among other things, to detect fraudulent activities and prevent the misuse of data. In addition, the data is transmitted so that Sofortüberweisung can query your account balance and, if necessary, estimate your creditworthiness or Sofortüberweisung can pass on the data to credit reporting agencies to estimate your creditworthiness in the form of a credit check. Sofortüberweisung uses the result of the credit check in relation to the statistical probability of payment default for the purpose of deciding whether to provide the respective payment method. The data collected can also be used by Sofortüberweisung for analysis purposes, in particular for customer analysis, risk analysis, data analysis for the purposes of developing and improving the services offered by Sofortüberweisung. Legal basis : The legal basis for the above-described use of the data is Art. 6 Para. 1 lit. a GDPR, Art. 6 Para. 1 lit. b GDPR. Deletion: The data we collect and transfer in this way will be automatically deleted after 26 months. Further information on the terms of use and data protection of Sofortüberweisung can be found at https://www.sofort.de/datenschutz.html Revocation: You can revoke your consent to the use of personal data to Sofortüberweisung at any time. Despite revocation, Sofortüberweisung may continue to be entitled to process, use and transmit the personal data that is absolutely necessary for contractual payment processing.

Amazon Pay

We offer payment processing via the payment service on our website Amazon Pay (Amazon Payments Europe sca, 5 Rue Plaetis - 2338 Luxembourg).

If you have decided to pay via Amazon Pay, as part of the order, Amazon Pay will collect and store all the information that you enter when using the Amazon Pay service as well as the data necessary to process the respective order. The way you use Amazon Pay is also recorded by Amazon Pay, for example information about the devices you use when ordering or your location and your IP address. The payment details stored in your Amazon account will not be passed on to us. You do not have to specify this when ordering from us. Purpose : This data is transmitted to process the payment and to communicate with you about the order you have placed. Amazon Pay also stores and processes the data collected to detect fraudulent activities and prevent misuse of data. In addition, the data is transmitted so that Amazon Pay can estimate your creditworthiness if necessary or Amazon Pay can pass on the data to credit reporting agencies to estimate your creditworthiness in the form of a credit check. The data collected may also be used by Amazon Pay for analysis purposes, in particular for customer analysis, risk analysis, data analysis and for the purposes of developing and improving the services offered by Amazon Pay. Legal basis : The legal basis for the use of the data described above is Article 6 Paragraph 1 Letter b GDPR. Deletion: The data we collect and transfer in this way will be automatically deleted after 26 months. For more information about Amazon Pay's terms of use and data protection, please visit Link to provider Prevention: You can revoke your consent to the use of personal data by Amazon Pay at any time. Despite revocation, Amazon Pay may continue to be entitled to process, use and transmit personal data that is absolutely necessary for contractual payment processing.

Safety measures

We also take state-of-the-art technical and organizational security measures to comply with the provisions of data protection laws and to protect your data against accidental or intentional manipulation, partial or complete loss, destruction or against unauthorized access by third parties.

Currentness and changes to this data protection declaration

This data protection declaration is currently valid and is dated April 2020. Due to changes in legal or official requirements, it may become necessary to adapt this data protection declaration.

This data protection declaration was created with the help of SOS Recht. You can find the data protection declaration generator here. SOS Law is an offer from the Mueller.legal lawyers partnership based in Berlin.