The controller within the meaning of the General Data Protection Regulation (GDPR) and other national data protection laws is:
As a matter of principle, we process personal data of our users only to the extent necessary to provide a functioning online shop as well as our content and services. Personal data means any information relating to an identified or identifiable natural person (e.g. name, address, e-mail address, order data).
Our online shop is based on the Shopware shop software. We do not use any analytics or tracking services (such as Google Analytics), no external advertising networks and no social media plugins. Fonts and other resources are – wherever technically possible – served locally from our own server and not loaded from third-party providers.
Where we obtain consent for processing operations, Art. 6(1)(a) GDPR is the legal basis. Where processing is necessary for the performance of a contract or pre-contractual measures (e.g. order handling), Art. 6(1)(b) GDPR applies. Processing to comply with a legal obligation is based on Art. 6(1)(c) GDPR. Where processing is necessary to safeguard our legitimate interests and the interests of the data subject do not override them, Art. 6(1)(f) GDPR serves as the legal basis.
We store personal data only for as long as it is necessary for the respective purposes or as long as statutory retention periods require. Commercial and tax retention obligations may in particular require invoice and order data to be retained for several years. Once the purpose no longer applies and any retention periods have expired, the data is deleted.
With regard to the personal data concerning you, you have the following rights vis-à-vis us:
To exercise these rights, an informal message to the contact details above is sufficient.
We hereby object to the use of contact data published within the scope of our legal notice obligations for sending advertising and information material that has not been expressly requested. We expressly reserve the right to take legal action in the event of the unsolicited sending of advertising information.
Each time our online shop is accessed, our system or that of our hosting provider automatically collects data and information from the accessing device. This generally includes:
This data serves the technical delivery of the website, ensuring system security and stability, and error analysis. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a secure and functioning online presence). The log files are deleted after no more than 30 days, unless they are required to investigate a specific security incident.
Our online shop is operated by an external service provider (host). The provider is netcup GmbH, Daimlerstraße 25, 76185 Karlsruhe, Germany. The host processes the data required for provision on our behalf. We have concluded a data processing agreement pursuant to Art. 28 GDPR with the provider.
For security reasons and to protect the transmission of confidential content – such as orders or contact enquiries – this site uses SSL/TLS encryption. You can recognise an encrypted connection by the “https://” in your browser's address bar and the lock symbol. When encryption is active, the data you transmit to us cannot be read by third parties.
Our online shop uses cookies and comparable technologies (the browser's local storage). Cookies are small text files that are stored on your device and cause no harm. We use exclusively technically necessary cookies that are required for the operation of the shop. These include, in particular, cookies used by Shopware for:
No consent is required for storing technically necessary cookies. The legal basis is Art. 6(1)(f) GDPR (legitimate interest in a functioning shop) in conjunction with the applicable national provisions implementing the ePrivacy Directive (Art. 5(3) of Directive 2002/58/EC). As we do not use any analytics, marketing or third-party cookies, no cookies are set beyond the technically necessary scope.
You can set your browser to inform you about the setting of cookies, to allow cookies only in individual cases or to exclude them generally, and to enable the automatic deletion of cookies when closing the browser. Disabling technically necessary cookies may limit the functionality of the shop.
You can create a customer account in our shop. Registration is required to use certain functions. We use the data entered (including name, address, e-mail address, access credentials) to provide the customer account, handle the contract and manage your orders. The legal basis is Art. 6(1)(b) GDPR (contract or pre-contractual measures) and – insofar as you voluntarily create a permanent account – Art. 6(1)(a) GDPR.
You can delete your customer account at any time. An informal message to the contact details above is sufficient. This does not affect data that we are required to retain due to statutory retention obligations (e.g. invoice data).
When you place an order in our shop, we process the data required to perform the contract. This includes, in particular, master data (name, address), contact data (e-mail, possibly telephone), contract data (ordered items, prices) as well as payment and delivery information. The legal basis is Art. 6(1)(b) GDPR. To fulfil the contract, we pass on your data – where necessary – to the shipping companies commissioned with delivery and to the payment service providers you have selected.
Due to commercial and tax law requirements, we are obliged to retain order, contract and invoice data for the statutory periods. The legal basis for this is Art. 6(1)(c) GDPR.
To process payments, we offer various payment methods. Depending on the payment method selected, the data required for the payment is transmitted to the respective provider. The legal basis is Art. 6(1)(b) GDPR (contract performance) and, where applicable, Art. 6(1)(f) GDPR. The privacy notices of the respective provider apply in addition.
To deliver your order, we pass on the data required for this purpose (in particular name and delivery address, and where applicable e-mail address or telephone number for shipment tracking) to the commissioned shipping company. The legal basis is Art. 6(1)(b) GDPR.
Depending on the destination and the selected shipping method, delivery is carried out by one of the following providers: DHL, UPS and – in particular for shipments to or within Spain – Correos. The privacy notices of the respective commissioned provider apply in addition.
If you contact us by e-mail, contact form or telephone, we process your details to handle the enquiry and in case of follow-up questions. The legal basis, where there is a contractual or pre-contractual context, is Art. 6(1)(b) GDPR; otherwise our legitimate interest in answering enquiries pursuant to Art. 6(1)(f) GDPR or your consent pursuant to Art. 6(1)(a) GDPR. We delete the data once the enquiry has been conclusively processed and no statutory retention obligations prevent this.
If you sign up for our newsletter, we use the e-mail address you provide to send the newsletter. Registration takes place using the so-called double opt-in procedure: after signing up, you will receive an e-mail asking you to confirm your registration. This ensures that no one can register you using someone else's e-mail address. The legal basis is your consent pursuant to Art. 6(1)(a) GDPR.
The newsletter is sent using the built-in function of our shop system (Shopware). Your e-mail address is not passed on to external newsletter service providers. You can unsubscribe from the newsletter and withdraw your consent at any time, for example via the unsubscribe link at the end of each newsletter e-mail. The lawfulness of the processing carried out until withdrawal remains unaffected.
We adjust this privacy policy as soon as changes to the data processing we carry out or to the legal framework make this necessary. The current version published on this page applies in each case.
Last updated: July 2026