1. Technical Data and Access Data

You can generally visit our websites without providing any personal data. We only collect this data if you provide it to us to process an order, open a customer account, or contact us.

With every page visit, we collect technical data (e.g., IP address, date, time, browser type). This data is used exclusively for the provision and technical optimization of the website (Art. 6 (1) lit. f GDPR).

2. Basic Data

2.1. When Placing an Order

For smooth contract processing (Art. 6 (1) lit. b GDPR), we collect and process the following data:

• First and last name
• Street and house number
• Postal code and city
• Phone number (for forwarding agent announcements or inquiries)
• Email address
• Bank details (optional)
• Date of birth (optional)

2.2. Services on our Websites

For the use of special offers, we collect the following purpose-bound data:

• User Account: Customer type, salutation, name, address, email address, phone number.
• Catalog or Document Request: Name, address, email address.
• Newsletter: Email address.
• Contact: Salutation, name, email address.

3. Usage Data & Services

3.1. Cookies

We use cookies on our websites. These are small text files that your browser saves on your device. They serve user-friendliness and security (e.g., caching the shopping cart). We use technically necessary cookies based on § 25 (2) TDDDG in conjunction with Art. 6 (1) lit. f GDPR. You can disable cookies in your browser, which may limit the functionality of the website.

3.1.1 etracker

We use services from etracker GmbH (Hamburg, Germany) to analyze usage data. By default, we do not use cookies for web analysis. If we use analysis cookies, we will obtain your explicit consent beforehand (Art. 6 (1) lit. a GDPR). etracker cookies do not allow individual users to be identified. The data is processed exclusively in Germany and is subject to strict data protection standards (ePrivacyseal certified). IP addresses and device identifiers are anonymized as early as possible. You can object to data processing at any time via the slider on our website. Further information can be found here.

3.2. PayPal as a Payment Method

If you select PayPal (PayPal Europe S.à.r.l. & Cie. S.C.A., Luxembourg) as a payment method, we transmit your order data (e.g., items, amount, billing information) to PayPal. This is mandatory for payment and contract processing. The legal basis is Art. 6 (1) lit. b GDPR. PayPal reserves the right to pass data on to subcontractors or credit agencies. Details can be found in PayPal's privacy policy.

3.3. Meta / Facebook

We integrate social plugins from Facebook on our website, operated by Meta Platforms Ireland Limited, Dublin, Ireland (Parent company: Meta Platforms Inc., USA). The legal basis is Art. 6 (1) lit. f GDPR. When you visit a page with a plugin, your IP address is transmitted to Meta. If you are logged into Facebook, Meta can assign the visit to your account. An adequate level of data protection for data transfers to the US is guaranteed by Meta's certification under the EU-US Data Privacy Framework (DPF). To avoid assignment, log out of Facebook before your visit or use appropriate browser add-ons.

3.4. YouTube

To display videos, we use YouTube, a service provided by Google Ireland Limited, Dublin, Ireland (Parent company: Google LLC, USA). We embed videos in "extended data protection mode". Data is only transferred to YouTube when you start a video. The legal basis is Art. 6 (1) lit. f GDPR. For transfers to the US, Google is certified under the EU-US Data Privacy Framework (DPF). If you are logged into YouTube, views are assigned to your profile. You can prevent this by logging out of your YouTube account beforehand.

3.5. WhatsApp

We offer contact via WhatsApp. You initiate the communication. We see your phone number and your WhatsApp name. We do not store this data outside the app. WhatsApp does not access our internal customer data. Do not send sensitive data (e.g., bank details) via this channel. WhatsApp's privacy policy applies.

3.6. Catalog View (Yumpu)

For flippable publications, we use Yumpu.com (i-magazine AG, Switzerland). This service uses Google Analytics for cross-device analysis via cookies. The legal basis is your consent (Art. 6 (1) lit. a GDPR) or our legitimate interest (Art. 6 (1) lit. f GDPR). Details can be found at https://www.yumpu.com/de.

3.7. Address Verification

To prevent errors, we check address entries in the webshop in real-time (country, city, zip code, street, house number). We use the service provider Endereco (Randersacker, Germany) for this, who acts strictly according to our instructions. The legal basis is Art. 6 (1) lit. b GDPR (pre-contractual measures/contract fulfillment). Data is not merged and is deleted after saving is complete, at the latest after 30 days.

4. Your Rights as a Data Subject

According to the provisions of the GDPR, you have the following rights:

• Information (Art. 15 GDPR): You can request information about your personal data processed by us.
• Rectification (Art. 16 GDPR): You have the right to have incorrect or incomplete data corrected.
• Erasure (Art. 17 GDPR): You can request the deletion of your data, provided no legal retention requirements oppose it.
• Restriction of processing (Art. 18 GDPR): You can request the restriction of the processing of your data.
• Data portability (Art. 20 GDPR): You have the right to receive your data in a structured, common format.
• Revocation and objection (Art. 7 (3) and Art. 21 GDPR): You can revoke your consent at any time and object to processing based on legitimate interest.
• Right to lodge a complaint (Art. 77 GDPR): You have the right to lodge a complaint with a data protection supervisory authority.