Privacy policy
I. General
Below we inform about the processing of personal data when using Flybaby.berlin
Responsible for data processing is:
Flybaby GmbH
Schmiedehof 23
10965 Berlin
The data protection officer is Dipl. Jurist Larissa Lange. You can reach us at: datenschutz@flybaby.berlin
Protecting your privacy is very important to us. Therefore, please read this privacy policy carefully.
II. Scope of data processing, processing purposes, and legal bases
We explain the scope of data processing, processing purposes, and legal bases in detail below.
-
Art. 4 no. 1 GDPR: Personal data means any information relating to an identified or identifiable natural person (e.g., their name or IP address).
-
Art. 4 no. 2 GDPR: "Processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction;
The following generally apply as legal bases for data processing:
-
Art. 6 para. 1 sentence 1 lit. a GDPR serves as the legal basis for processing operations for which we obtain consent.
-
Art. 6 para. 1 sentence 1 lit. b GDPR is the legal basis insofar as the processing of personal data is necessary for the performance of a contract, e.g., when a site visitor purchases a product from us or we perform a service for them. This legal basis also applies to processing necessary for pre-contractual measures, such as inquiries about our products or services.
-
Art. 6 para. 1 sentence 1 lit. c GDPR applies when we fulfill a legal obligation by processing personal data, as may be the case, for example, in tax law.
-
Art. 6 para. 1 sentence 1 lit. f GDPR serves as the legal basis when we can rely on legitimate interests for the processing of personal data, e.g., for cookies that are necessary for the technical operation of our website.
III. Data transfer outside the EU
1. Data transfer based on an adequacy decision pursuant to Art. 45 GDPR
Insofar as we transfer data to service providers or other third parties outside the EEA, adequacy decisions of the EU Commission pursuant to Art. 45 para. 3 GDPR guarantee the security of the data during transfer, insofar as these exist, as is the case, for example, for the UK, Canada, and Israel.
2. Data transfer to the USA
On 10.07.23, the Data Privacy Framework https://www.dataprivacyframework.gov/s/?hl=de came into effect. The USA is thus a safe third country within the meaning of EU data protection law. The following tools from us are certified by the US Department of Commerce for the Data Privacy Framework: Goolge Inc., Meta Platforms Inc. (Instagram, Facebook), Klaviyo Inc., Notion Labs Inc., Shopify International Limited,
3. Data transfer subject to appropriate guarantees pursuant to Art. 46 GDPR
If no decision pursuant to Art. 45 para. 3 GDPR exists, a controller or processor may only transfer personal data to a third country or an international organization if the controller or processor has provided appropriate guarantees and if enforceable rights and effective legal remedies are available to the data subjects.
IV. Storage Duration
Unless a more specific storage period is stated within this privacy policy, your personal data will remain with us until the purpose for data processing ceases. If you assert a legitimate deletion request or revoke consent to data processing, your data will be deleted unless we have other legally permissible reasons for storing your personal data (e.g. commercial law periods); in the latter case, deletion will occur after the reasons cease.
V. Data Subject Rights
As a data subject, you have the following rights:
-
According to Art. 15 GDPR the right to request information about your personal data processed by us to the extent specified there.
-
According to Art. 16 GDPR the right to request the immediate correction of incorrect or completion of your personal data stored with us
-
According to Art. 17 GDPR the right to request the deletion of your personal data stored with us, unless further processing
– to exercise the right to freedom of expression and information,
– to fulfill a legal obligation,
– for reasons of public interest or
– it is necessary for the assertion, exercise or defense of legal claims.
-
According to Art. 18 GDPR the right to request restriction of the processing of your personal data, insofar as
– the accuracy of the data is disputed by you;
– the processing is unlawful, but you refuse its deletion;
– we no longer need the data, but you need it to assert, exercise or defend legal claims or
– You have objected to the processing pursuant to Art. 21 GDPR.
-
According to Art. 20 GDPR the right to receive your personal data in a structured, commonly used and machine-readable format or to request the transfer to another responsible person.
-
According to Art. 77 GDPR the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your place of residence. Contact details of the data protection supervisory authorities are available at https://www.bfdi.bund.de/DE/Service/Anschriften/Laender/Laender-node.html.
-
According to Article 21 GDPR, the right to object in special cases and against direct advertising.
If data processing is based on Art. 6 para. 1 lit. e or f GDPR, you have the right to object at any time for reasons arising from your particular situation to the processing of your personal data. The respective legal basis on which processing is based can be found in this privacy policy. If you object, we will no longer process your affected personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims (objection under Art. 21 para. 1 GDPR).
If your personal data is processed for direct advertising, you have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising.
If you have questions about data collection and data processing, please contact us directly at datenschutz@flybaby.berlin.
VI. Data processing on the website
1. Web hosting and provision of the website
Our website is hosted by:
Shopify International limited,
2nd Floor 1 and 2 Victoria Buildings,
Haddington Road,
Dublin 4, D04 XN32
When you access our website, we automatically collect and store information in so-called server log files. This information is automatically transmitted by your browser to our server or to the server of our hosting company.
These are:
- IP address of the visitor's end device
- Device used
- Hostname of the accessing computer
- Visitor's operating system
- Browser type and version
- Name of the retrieved file
- Time of server request
- Amount of data
- Information on whether the data retrieval was successful
This data is not merged with other data sources.
The personal data collected by this website is stored on the servers of the hosting company. In addition to the data mentioned above, the web host also stores for us, for example, contact inquiries, contact details, names, website access data, meta and communication data, contract data, and other data generated via a website.
The legal basis for processing this data is Art. 6 para. 1 lit. f GDPR. Our legitimate interest is the technically error-free presentation and optimization of this website. If the website is accessed to enter into contract negotiations with us or to conclude a contract, the further legal basis is Art. 6 para. 1 lit. b GDPR.
You can find the data processing addendum from Shopify at the following link: https://www.shopify.com/legal/dpa
2. Informational use of the website
When using the website for informational purposes, i.e., when visitors do not specifically transmit information to us, we collect the personal data that the browser transmits to our server to ensure the stability and security of our website. This is our legitimate interest, so the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.
Server log data
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are
- Browser type and browser version
- Operating system used
- Referrer URL
- Hostname of the accessing computer
- Time of the server request
- IP address
- Access status/HTTP status code
A merging of this data with other data types does not take place.
The collection of this data is based on Art. 6 para. 1 lit. f GDPR. We have a legitimate interest in the technically error-free presentation and optimization of our website – for this purpose, server log files must be recorded.
3. Contact
If you contact us by email, phone, or the contact form on the website, your inquiry including the resulting personal data (name, inquiry, email address, phone number) will be stored and processed by us for the purpose of handling your request. We do not share this data without your consent.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfillment of a contract or necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.
We delete the data collected in this context after storage is no longer necessary or restrict processing if statutory retention obligations exist.
4. Product order
In order for us to deliver your ordered products, we need the following data from you:
- Last name, first name
- Address
- Billing address
- Email address
- Phone number
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfillment of a contract or necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.
5. Registration on the website
You can register on our website and create a user account. For this, you must enter your name, email address, and a password. Registration is voluntary and not a prerequisite for ordering products. It only serves as a convenience for you if you want to return the ordered products.
The processing of this data is based on Art. 6 para. 1 lit. b GDPR, provided your request is related to the fulfillment of a contract or necessary for the implementation of pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective handling of requests addressed to us (Art. 6 para. 1 lit. f GDPR) or on your consent (Art. 6 para. 1 lit. a GDPR), if this has been requested.
VII. Third-party applications related to our website
1. Notices for Cookies and Web Beacons
a. What are cookies?
Cookies are small text files stored on your device when you visit our website. They allow us to save your activities and preferences (such as login data, language, font size, and other display settings) over a certain period so that you do not have to enter them again each time you visit the website.
b. What types of cookies do we use?
We use different types of cookies on our website for different purposes:
Necessary Cookies: These cookies are essential to enable you to navigate the website and use its basic functions. Without these cookies, certain services cannot be provided.
Functional Cookies: These cookies allow our website to remember the decisions you have made (e.g. your username, your language, or the region you are in) and provide enhanced, more personalized features.
Analytical/Performance Cookies: These cookies collect information about how visitors use our website, e.g. which pages are visited most often or whether error messages occur on pages. These cookies do not collect information that identifies a visitor. All information these cookies collect is aggregated and therefore anonymous. They are only used to improve the functionality of our website.
Advertising Cookies: These cookies are used to make advertising more relevant to you and your interests. They are also used to limit the frequency of ads and measure the effectiveness of advertising campaigns.
We use a cookie consent cookie to determine which cookie settings the users of our website have made. This cookie is stored locally on the user's device. This is technically necessary for the use of the website and is therefore subject to our legitimate interest, so the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.
c. Web Beacons
Our website Flybaby uses Web Beacons (also known as "pixel tags" or "clear GIFs"). Web Beacons are small graphic files embedded on our web pages or in our emails. They allow us to monitor user behavior on our website and the effectiveness of our email campaigns.
We use Web Beacons for the following purposes:
- Analysis and Improvement: Web Beacons help us analyze the use of our website and thereby improve our content and services. They enable us to understand which pages are visited, how long a user stays on a page, and which actions they perform.
- Performance Monitoring: Through Web Beacons, we can monitor the performance and effectiveness of our website as well as our email campaigns. This helps us optimize the user experience and ensure that our marketing communication is relevant and engaging.
- Marketing and Advertising: Web Beacons allow us to measure the effectiveness of our online advertising and understand which ads and campaigns are most successful. They also help us identify user segments that are most likely interested in our offers.
2. Used Cookies
a. Google Analytics (Analytical/Performance Cookies)
We use Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland for the analysis of our website.
The legal basis is based on your consent, Art. 6 para. 1 lit. a GDPR, which we obtain in the cookie consent tool. You can revoke your consent at any time. After your consent, your data is processed by Google Analytics.
More information on handling user data can be found in the Google Analytics privacy policy: https://policies.google.com/privacy?hl=de
b. Google Ads (Analytical/Performance Cookies)
We use Google Advertisement, through which we receive evaluations of our website visitors. It is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
The legal basis is your consent, Art. 6 para. 1 lit. a GDPR, which we obtain in the cookie consent tool. You can revoke your consent at any time. After your consent, your data is processed by Google Advertisement.
More information on handling user data can be found in the Google Analytics privacy policy: https://policies.google.com/privacy?hl=de
c. Shopify Analytics
We use the Shopify Analytics service on our website. The provider of the service is Shopify International Ltd., 2nd Floor 1 and 2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32, Ireland.
The legal basis is your consent, Art. 6 para. 1 lit. a GDPR, which we obtain in the cookie consent tool. You can revoke your consent at any time. After your consent, your data is processed by Google Advertisement.
Using the service may result in data transfer to a third country (Canada). The European Commission has confirmed an adequate level of data protection for this country by an adequacy decision.
Further information can be found in the provider's privacy information at the following URL: https://www.shopify.com/legal/privacy?shpxid=1c1444d0-C70E-43BB-AD1E-BB3774A7C8C0.
d. Meta Ads
We use Meta Ads, a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. Through Meta Ads, we can obtain evaluations about visitors to our website and their interactions with our advertisements on Facebook, Instagram, and other Meta platforms.
The legal basis for processing your data is your consent according to Art. 6 para. 1 lit. a GDPR, which we obtain via our cookie consent tool. You can revoke your consent at any time. After your consent, Meta processes your data, e.g., information about visited pages, click behavior, or purchases.
Data processing by Meta may also take place outside the European Union, especially in the USA. An adequate level of data protection is ensured by standard contractual clauses according to Art. 46 GDPR.
Further information on how Meta handles user data can be found in Meta's privacy policy: https://www.meta.com/de/legal/privacy-policy/?utm_source=www.meta.com&utm_medium=organicsearch
e. Mable.ai Conversion Tracking
We use Mable.ai, a service of Mable GmbH, Bahnhofplatz 12, 76137 Karlsruhe, to obtain evaluations about visitors to our website and their interactions with our content and advertisements. The legal basis for processing your data is your consent according to Art. 6 para. 1 lit. a GDPR, which we obtain via our cookie consent tool. You can revoke your consent at any time.
After your consent, Mable.ai processes data such as visited pages, click behavior, or purchases.
Further information can be found in the privacy policy of Mable.ai:
https://de.mable.ai/privacy
3. Third-party Software
a. Newsletter Application Klaviyo
If you have explicitly consented according to Art. 6 para. 1 lit. a GDPR, we use the data you provide on this website (first name and/or email address) to send our newsletter, information about the waiting list, or personalized offers, provided you have registered for this.
For shipping, we use the newsletter provider:
Klaviyo Inc.
125 Summer Street, Floor 6
Boston, MA 02111
Email: privacy@klaviyo.com
Your data is transmitted to Klaviyo for shipping purposes. Your consent also includes the following use: Through web beacons or tracking pixels integrated into the emails, certain information can be collected and analyzed, such as:
- Whether you have opened an email
- Time of access
- as well as your IP address
However, this data is not used to create a user profile.
Unsubscribing from the newsletter is possible at any time via the unsubscribe link at the end of each email. Alternatively, you can also send your unsubscribe request by email to datenschutz@flybaby.berlin.
Further information on handling user data can be found in the privacy policy of Klaviyo: https://www.klaviyo.com/privacy
b. Typeform
We use Typeform, a service of Typeform S.L., Carrer Bac de Roda, 163, 08018 Barcelona, Spain, to provide surveys, forms, and other interactive content. Through Typeform, we can collect and evaluate data such as survey responses, contact information, or other information you provide.
The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR, as the processing of personal data is necessary for the performance of a contract.
Further information on handling user data can be found in the privacy policy of Typeform: https://admin.typeform.com/to/dwk6gt.
c. Reviews.io
We use Reviews.io, a service of REVIEWS.io 2020 GmbH ℅ Mindspace, Skalitzer Str 104, 10997 Berlin, to collect and display customer reviews. Through Reviews.io, we can collect, evaluate, and publish feedback from customers.
The legal basis for processing your data is your consent according to Art. 6 para. 1 lit. a GDPR, which we obtain as part of the review request. You can revoke your consent at any time. After your consent, Reviews.io processes your data, e.g., your review, your name (if provided), and other voluntarily provided information.
Further information on handling user data can be found in the privacy policy of Reviews.io:https://www.reviews.io/legal/user-privacy-policy
d. Pathway Solutions Invoicing
We use Pathway Solutions, a service of pathway solutions gmbh, c/o ba tax gmbh, Alstertwiete 3, 20099 Hamburg, to create and process invoices. Through Pathways, data such as name, address, email address, and payment information are processed, which are necessary for the creation and sending of invoices.
The legal basis is Art. 6 para. 1 sentence 1 lit. b GDPR, as the processing of personal data is necessary for the performance of a contract.
Further information on how user data is handled can be found in Pathways' privacy policy: https://www.pathway-solutions.de/pages/datenschutzerklaerung
e. Syncroneo
We use Syncroneo, a service of pakaneo GmbH, reachable at pakaneo GmbH, Goerzallee 311, 14167 Berlin, for the creation and processing of our invoices. Through Syncroneo, data such as name, address, email address, and payment information are processed, which are necessary for creating and sending invoices.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, as the processing of personal data is necessary for the performance of a contract.
Further information on how user data is handled can be found in Syncroneo's privacy policy: https://pakaneo.de/datenschutz.html.
f. Notion labs (CRM)
We use Notion, a service of Notion Labs Inc., 2300 Harrison Street, San Francisco, CA 94110, USA, for our Customer Relationship Management (CRM). Through Notion, data such as name, address, email address, and payment information are processed, which are necessary for creating and sending invoices.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. b GDPR, as the processing of personal data is necessary for the performance of a contract.
Further information on how user data is handled can be found in Notion's privacy policy: https://www.notion.so/notion/Privacy-Policy-3468d120cf614d4c9014c09f6adc9091
g. Jads.io (Marketing & Sales)
We use Jads.io, a service of Jads UG (limited liability) C/O Betahaus Eifflerstraße 43, 22769 Hamburg, to evaluate and optimize our paid advertising campaigns. With the help of Jads.io, data on conversions from Google Ads, Meta Ads, and Google Analytics are processed. This enables us to effectively analyze the interfaces between our advertisements and user interactions.
The processing of personal data is carried out exclusively on the basis of your consent according to Art. 6 para. 1 lit. a GDPR, which we obtain via our cookie consent tool. You can revoke your consent at any time with effect for the future.
Further information on how Jads.io handles your data can be found at: https://jads.io/de/datenschutz
VIII. Data transfer to third parties
1. Postal / shipping service provider:
a. DHL (Shipping within Germany)
For processing shipments within Germany, we pass your data (name, address, and, if necessary, additional contact details such as phone number or email address) to our shipping service provider DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn. The transfer is made solely for the purpose of delivering your order.
The legal basis for the processing and transfer of your data is:
Art. 6 para. 1 lit. b GDPR: Data processing is necessary for the performance of the contract, as delivery is part of the purchase contract.
Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in having your order delivered reliably and efficiently by an external shipping service provider.
DHL uses the transmitted data exclusively to fulfill the shipping order and does not pass it on to third parties.
Further information on data processing by DHL can be found in the privacy policy of DHL: https://www.dhl.de/datenschutz.
b. FedEx (Shipping outside Germany excl. Switzerland)
For the processing of shipping, we pass on your data (name, address, and, if necessary, further contact details such as phone number or email address) to our shipping service provider FedEx Express Deutschland GmbH, Haberstr. 2, 53842 Troisdorf. The transfer is made exclusively for the purpose of delivering your order.
The legal basis for the processing and transfer of your data is:
Art. 6 para. 1 lit. b GDPR: Data processing is necessary for the performance of the contract, as delivery is part of the purchase contract.
Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in having your order delivered reliably and efficiently by an external shipping service provider.
Further information on data processing by FedEx can be found in the privacy policy of FedEx: https://www.fedex.com/de-de/privacy-policy.html.
c. MeinEinkauf AG (Shipping to Switzerland)
For the processing of shipping to Switzerland, we pass on your data (name, address, and, if necessary, further contact details such as phone number or email address) to our service provider MeinEinkauf AG, St. Jakob-Strasse 30, 9000 St. Gallen, Switzerland. The transfer is made exclusively for the purpose of processing the delivery and import clearance.
The legal basis for the processing and transfer of your data is:
Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in processing your order reliably and efficiently through a specialized service provider, especially with regard to customs and import formalities for shipping to Switzerland.
MeinEinkauf AG uses the transmitted data exclusively to fulfill the shipping and import order and only passes it on to third parties if this is necessary for customs clearance.
Since MeinEinkauf AG is based in Switzerland, a third country outside the EU, the protection of your data is ensured by the EU Commission's decision on an adequate level of data protection in Switzerland (according to Art. 45 GDPR).
Further information on data processing by MeinEinkauf AG can be found in the privacy policy of MeinEinkauf AG: https://meineinkauf.ch/datenschutz.
d. Greenfillment (Fulfillment)
We cooperate with Greenfillment GmbH, Bohldamm 6a, 14959 Trebbin, to process orders efficiently. For the processing and shipping of your orders, we pass on data such as your name, address, email address, and, if applicable, your phone number to Greenfillment.
The data transfer is carried out exclusively for the purpose of storage, picking, and shipping of your order.
The legal basis for the processing and transfer of your data is:
Art. 6 para. 1 lit. b GDPR: The processing is necessary for the performance of the contract, as shipping and warehousing logistics are essential components of the purchase contract.
Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in ensuring that order processing is carried out securely and efficiently by a specialized service provider.
Further information on handling user data can be found in the privacy policy of Greenfillment: https://www.greenfillment.de/datenschutz
e. Easy Returns (Returns)
We cooperate with Easyreturns from 247APPS UG (limited liability), In der Goldgrube 28, 56073 Koblenz to efficiently handle returns. For processing and handling returns, we pass on data such as your name, address, email address, and, if applicable, your phone number to Easyreturns.
The transfer is made solely for the purpose of processing your return and the associated processes.
The legal basis for the processing and transfer of your data is:
Art. 6 para. 1 lit. b GDPR: The processing is necessary for the fulfillment of the contract, as the returns processing is part of the purchase contract.
Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in making the processing of returns by a specialized service provider efficient and reliable.
Further information on handling user data can be found in the privacy policy of Easyreturns: https://247apps.dev/apps/easyreturns/terms-conditions.
2. Payment provider:
a. PayPal (Europe) S.à r.l. et Cie
To process payments, we transmit your data (e.g., name, address, email address, phone number, and payment information) to the payment service provider PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. The transfer is made solely for the purpose of payment processing and only to the extent necessary for the execution of the payment.
The legal basis for the processing and transfer of your data is:
Art. 6 para. 1 lit. b GDPR: The data processing is necessary for the fulfillment of the contract, as payment processing is an essential part of the purchase contract.
Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in ensuring secure and reliable payment processing through a specialized service provider.
PayPal processes your data on its own responsibility in accordance with PayPal's privacy policies. It is possible that PayPal also shares data with third parties (e.g., credit institutions, identity verification services, or authorities) as required for payment processing or to comply with legal regulations.
Further information about data processing by PayPal can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.
b. Google Pay
To process payments, we transmit your data (e.g., name, payment information, and information about your order) to the payment service provider Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The transfer is made solely for the purpose of payment processing and only to the extent necessary for the execution of the payment.
The legal basis for the processing and transfer of your data is:
Art. 6 para. 1 lit. b GDPR: The data processing is necessary for the fulfillment of the contract, as payment processing is an essential part of the purchase contract.
Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in ensuring secure and reliable payment processing through a specialized service provider.
Data processing by Google Pay
Google Pay acts as an intermediary between you and your stored payment method (e.g., credit card or bank account). Your data is processed by Google Ireland Limited in accordance with its own privacy policies. It is possible that data necessary for payment processing will be transmitted to other service providers or banks as required.
Further information on data processing by Google Pay can be found in Google's privacy policy: https://policies.google.com/privacy.
c. Shopify Payments
To process payments, we transmit your data (e.g., name, address, email address, payment information, and information about your order) to the payment service provider Shopify Payments, provided by Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. The transfer is made exclusively for the purpose of payment processing and only to the extent necessary for the execution of the payment.
The legal basis for the processing and transfer of your data is:
Art. 6 para. 1 lit. b GDPR: The data processing is necessary for the fulfillment of the contract, as payment processing is an essential part of the purchase contract.
Art. 6 para. 1 lit. f GDPR: We have a legitimate interest in ensuring secure and reliable payment processing through a specialized service provider.
Further information on data processing by Shopify Payments can be found in Shopify's privacy policy: https://www.shopify.com/legal/privacy.
IX. Data processing on social media platforms
We are represented on social media networks to present our organization and our products there. The operators of these networks regularly process data of their users for advertising purposes. Among other things, they create user profiles from their online behavior, which are used, for example, to show advertising on the network pages and elsewhere on the internet that corresponds to the interests of the users. For this purpose, the operators of the networks store information about usage behavior in cookies on the users' computers. It is also not excluded that the operators combine this information with other data. Further information and instructions on how users can object to the processing by the site operators can be found in the privacy policies of the respective operators listed below. It may also be that the operators or their servers are located in non-EU countries, so that they process data there. This can pose risks for users, e.g., because enforcing their rights is more difficult or government authorities gain access to the data.
When users of the networks contact us through our profiles, we process the data provided to answer the inquiries. This is our legitimate interest, so the legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR.
1. Instagram and Threads
We have a profile on "Instagram" and "Threads". The provider is Instagram Inc., 1601 Willow Road, Menlo Park, CA, 94025, USA.
Further information and the applicable privacy policies of "Instagram" can be found here: https://help.instagram.com/519522125107875.
2. Facebook
We have a profile on "Facebook." The provider is Meta Platforms, Inc., 1 Hacker Way, Menlo Park, CA 94025, USA.
Further information and the applicable privacy policies of "Facebook" can be found here: https://www.facebook.com/privacy/policy/?entry_point=data_policy_redirect&entry=0
3. Linked In
We have a profile on "Linked In". The provider is Linked In Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
Further information and the applicable privacy policies of "Linked In" can be found here: https://www.linkedin.com/legal/privacy-policy?trk=content_footer-privacy-policy
4. TikTok
We are also active on "TikTok". The provider is TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. When using TikTok, data such as your interactions with our content (e.g., likes, comments, or shared videos) as well as your usage behavior may be processed by TikTok. TikTok processes your data according to its own privacy policies.
Further information and the applicable privacy policies of "TikTok" can be found here: https://www.tiktok.com/legal/privacy-policy.
5. YouTube
We operate a YouTube channel. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. When you visit our channel, watch a video, or interact with our content, YouTube processes data about your usage behavior. Google Ireland Limited acts as the controller according to its own privacy policies.
Further information and the applicable privacy policies of "YouTube" can be found here: https://policies.google.com/privacy.
6. Pinterest
We maintain a profile on "Pinterest". The provider is Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
When you visit our profile, save content ("pin") or otherwise interact with our content, Pinterest processes personal data. This may include interaction data, location data, and device-related information. Pinterest processes your data according to its own privacy policies.
Further information and the applicable privacy policies of "Pinterest" can be found here: https://policy.pinterest.com/de/privacy-policy.
X. Changes to this Privacy Policy
We reserve the right to change this privacy policy with effect for the future. A current version is always available here.
As of January 15, 2025