Back to top
Back to top
Back to top

Privacy policy

and information about the consents you provide

As data controller pursuant to statutory data protection provisions we would like to inform you about how we process your personal data.

I. Definition of personal data and other important terms

Personal data is, simply put, any information which can be used to identify you as the data subject. Further definitions of ‘personal data’ and its significance, as well as definitions of other key data privacy terms used in this document, can be found in Article 4 of the GDPR (General Data Protection Regulation).

II. Controller name and contact details; data protection officer contact details

The controller is the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data. The names and contact details of the controller (and the data protection officer if one has been appointed) are provided in our provider identification / our legal notice.

III. Purpose of processing your personal data; legal bases for processing

We process your personal data within the framework of our business activities for the purposes and on the legal bases listed below.

  • 1. Your personal data is processed on the basis of Article 6 (1) f) GDPR for the purpose of pursuing our legitimate interest to maintain the proper operation of our website and provide the most user-friendly experience possible.
  • 2. Your personal data is processed on the basis of Article 6 (1) b) GDPR for the purpose of taking steps after you send us an enquiry prior to entering into a contract.
  • 3. Your personal data is processed on the basis of Article 6 (1) f) GDPR for the purpose of pursuing our legitimate interest to respond to an enquiry from you or implement other measures in connection to an enquiry from you.
  • 4. Your personal data is processed on the basis of Article 6 (1) b) GDPR for the purpose of performing a contract which you have entered into with us.
  • 5. Your personal data is processed with your consent on the basis of Article 6 (1) a) GDPR or Article 6 (1) f) GDPR for the purpose of implementing advertising activities.
  • 6. Your personal data is processed on the basis of Article 6 (1) c) GDPR for the purpose of fulfilling legal obligations which we are subject to.
  • 7. Your personal data is processed on the basis of Article 6 (1) f) GDPR for the purpose of pursuing our legitimate interest to assert our rights and defend claims which are asserted against us.

Technical and organisational measures which reflect the state of the art have been implemented to ensure the security of our systems. As a result of these measures your personal data is protected against access, modification and dissemination by unauthorised persons, as well as loss and destruction.

Information about the specific purposes for which your personal data is processed is provided in the more detailed sections of this privacy policy.

IV. Transfer of personal data to third parties; categories of recipients of your personal data

If it is necessary to achieve the purposes of processing your personal data we transfer your personal data to third parties in compliance with statutory requirements. Detailed information about the specific purposes for which your personal data is transferred to third parties is provided in the more detailed sections of this privacy policy. When your personal data is transferred to third parties we always restrict the scope of data transferred to the necessary minimum.

V. Scope of processing your personal data for the specific purposes

The following sections provide detailed information about the processing of your personal data for the specific purposes.

Your personal data is deleted again when it is no longer required for the processing purpose unless we are legally entitled to process it for another purpose in accordance with this privacy policy.

1. Use of our website for information purposes

If you visit our website without disclosing any personal data to us we will only process the personal data concerning you that is sent by your browser to our server. This includes the following information which is technically necessary to display our website content to you, and to ensure stability and security:

  • - The website you have accessed
  • - Date and time of access
  • - Volume of data transmitted
  • - Referrer URL
  • - Your browser type and version
  • - Your operating system
  • - Your IP address

Your personal data is processed on the basis of Article 6 (1) f) GDPR for the purpose of pursuing our legitimate interest to maintain the proper operation of our website, to provide as user-friendly functions as possible and to analyze the use of our website.

Your personal data is deleted after 6 months unless it is still required to exercise rights or assert claims in connection with measures preventing the proper operation of our website. In this case the data is deleted without delay after the conclusion of the legal proceedings.

You are not legally required to provide your personal data to us. However, if you decide not to provide your personal data to us, it would mean that you cannot view our website.

2. Processing enquiries

If you contact us with an enquiry or message, we process the personal data and information/documents you send us. Irrespective of the means you use to send us your enquiry or message, this information includes:

  • - Date and time of contact
  • - Name
  • - Contact details
  • - Data relating to the enquiry/message
  • - Information/documents provided

Your personal data and the information/documents you send to us are processed - depending on the content of your enquiry or message - on the basis of Article 6 (1) b) GDPR to take steps prior to entering into a contract, or on the basis of Article 6 (1) b) GDPR for the performance of a contract to which you are party, or on the basis of Article 6 (1) f) GDPR so that we can pursue our legitimate interest of responding to enquiries/messages and implement other measures in connection with the processing of enquiries/messages.

We transfer your personal data to third parties in compliance with statutory requirements if this is necessary to process your enquiry/message. When your personal data is transferred to third parties we always restrict the scope of data transferred to the necessary minimum.

Your personal data is deleted again when it is no longer required to process your enquiry/message, but not before the mandatory tax and commercial law archiving periods of 6 and 10 years respectively expire, unless we are legally entitled to process it for another purpose in accordance with this privacy policy.

You are not legally required to provide your personal data to us. However, if you decide not to provide your personal data to us, it would mean that we cannot process your enquiry or your message.

3. Performance of contracts

If you provide us with personal data in order to conclude a contract with us or in connection with a contract, we process that data for the purpose of contract performance. This personal data includes customer data (e.g. your name and address) and contract data (e.g. information about the contractual products and the terms of payment and delivery).

Your personal data is processed on the basis of Article 6 (1) b) GDPR for the purpose of performing a contract to which you are party.

We transfer your personal data to third parties in compliance with statutory requirements if this is necessary to perform the contract with you. The data is transferred to the service providers who are involved in the performance of the contract. These service providers are the providers of the implementation tools that we use, the shipment companies and the payment service providers.

If you use the payment service provider PayPal for payments, we explicitly refer to the fact that PayPal's data privacy policy applies to all PayPal transactions. It can be found here: https://www.paypal.com/uk/legalhub/paypal/privacy-full

When your personal data is transferred to third parties we always restrict the scope of data transferred to the necessary minimum.

Your personal data is deleted again at the end of the mandatory tax and commercial law archiving periods of 6 and 10 years respectively unless we are legally entitled to process it for another purpose in accordance with this privacy policy.

In order to conclude a contract with us, it is necessary to provide your personal data to us. You are not legally required to provide your personal data to us. However, if you decide not to provide your personal data to us, it would mean that we cannot conclude a contract with you.

4. Newsletter advertising

If you subscribe to our newsletter we process your e-mail address and any other personal data which you provide to us in order to send you information about our promotional offers by e-mail. In this respect, the only personal data required is your e-mail address. If you voluntarily provide further personal data, we may process this data to address you personally in the newsletter.

When you subscribe to our newsletter you provide the following consent: “I consent to receiving information by e-mail about interesting offers and to the processing of my e-mail address any other personal data I provide for the purpose of sending the newsletter to me. This consent may be withdrawn at any time with future effect and without stating a reason. This does not affect the lawfulness of processing up to the time of revocation.”

We use a double opt-in procedure for newsletter subscriptions. When you subscribe to the newsletter you initially receive an e-mail confirming your subscription and requesting your confirmation. Confirmation from you is necessary in order to document your consent to us sending you the newsletter and to prevent unauthorised persons from subscribing with your e-mail address. Your IP address, the data and the time are logged when you subscribe to the newsletter and send your confirmation of subscription so that we have proof of your consent in compliance with legal requirements.

Your personal data is processed on the basis of this consent and Article 6 (1) a) GDPR.

You may withdraw your consent at any time with future effect and without stating a reason by communicating it in writing to the controller at the address stated in the section on the controller. This does not affect the lawfulness of processing up to the time of revocation.

If you withdraw your consent or unsubscribe to our newsletter your e-mail address and any other data you have provided to us will be deleted without delay unless we are legally entitled to process it for another purpose in accordance with this privacy policy.

At least the provision of your e-mail address is required to receive our newsletter. You are not legally required to provide your e-mail address to us. However, if you decide not to provide your e-mail address to us, it would mean that you cannot subscribe to our newsletter.

5. Mailshots

We process the personal data you provide to us about your first name, surname and address to send information to you in mailshots about our promotional offers.

Your personal data is processed on the basis of Article 6 (1) f) GDPR for the purpose of pursuing our legitimate interest to implement mailshot advertising campaigns.

You can withdraw your consent to your personal data being used for the purpose of mailshot advertising campaigns at any time by communicating it in writing to the controller at the address stated in the section on the controller.

If you withdraw your consent to the processing of your personal data for the purpose of implementing mailshot advertising campaigns, the personal data you have provided to us on first name, surname and address will be deleted without delay unless we are legally entitled to process it for another purpose in accordance with this privacy policy.

You are not legally required to provide your personal data to us being used for the purpose of mailshot advertising campaigns. However, if you decide not to provide your personal data to us, it would mean that we cannot send information about our promotional offers to you in mailshots.

6. Fulfillment of legal obligations which we are subject to

We process your personal data to fulfill legal obligations which we are subject to in compliance with the corresponding statutory requirements.

Your personal data is processed on the basis of Article 6 (1) c) GDPR for the purpose of fulfilling legal obligations which we are subject to.

If it is necessary to achieve the purpose of fulfilling legal obligations which we are subject to, we transfer your personal data to third parties in compliance with statutory requirements. When your personal data is transferred to third parties we always restrict the scope of data transferred to the necessary minimum.

Your personal data is deleted again when it is no longer required for the purpose of fulfilling legal obligations which we are subject to unless we are legally entitled to process it for another purpose in accordance with this privacy policy.

7. Enforcement of our rights and defence against claims directed against us

If necessary, we process your personal data to safeguard our legitimate interest in enforcing our rights and to defend against claims directed against us.

In this case, your personal data will be processed on the basis of Article 6 (1) (f) GDPR.

Insofar as it is necessary to safeguard our legitimate interest, we will transmit your personal data to third parties within the framework of the legal requirements. This transfer takes place to the involved debt collection service providers or our lawyers.

In the case of the transmission of your personal data to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the retention periods under tax and commercial law of 6 or 10 years, unless we are allowed to use the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

8. Use of cookies

We use cookies on our website. These are small files that are stored on your device and through which certain information is transmitted to us. Cookies are used to enable you to use certain functions and to make our offer more user-friendly overall.

The use of cookies on our website is technically necessary in order to be able to provide you with the functions of our service you require and to document the consent you have given. For this reason, you cannot deselect the use of the corresponding cookies (opt-out). You can prevent the storage of cookies by setting your browser software accordingly. You can delete saved cookies using the relevant settings. If necessary, please refer to your browsers help function in order to see how the corresponding settings can be made. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent.

Technically required cookies are cookies that are required so that you can use the functions of our service that you have requested (to carry out an order). This concerns, for example, the storage of entries in connection with the use of the shopping cart function or the storage of entries after registration in connection with the creation of a customer account.

Person in charge:
The processing of your personal data is carried out by us. The name and contact details of the person responsible (and, if a data protection officer has been appointed, the contact details of the data protection officer) can be found in our provider designation / imprint. Information on whether the cookies are set by us (first-party cookies) can be found in the information on the individual cookies.

Processing purposes and legal basis:
The processing of your personal data takes place on the basis of Article 6 (1) (b) GDPR to carry out pre-contractual measures that take place at your request as the data subject or on the basis of Article 6 (1) (b) GDPR for the performance of a contract of which you are a contracting party.

Name / designation: session, vsid
Provider: Violey GmbH
Description: Is used to recognize the user on the shop pages during the browser session.
Duration: The cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies).

VI. Length of time for which your personal data is stored and the criteria used to determine the length of time for storage

Your personal data is deleted again when it is no longer required for the processing purpose unless we are legally entitled to process it for another purpose in accordance with this privacy policy. Information about the length of time for which your personal data is stored and the criteria used to determine the length of time for storage is provided in connection with the information about the processing of your personal data in this privacy policy.

VII. Your rights

1. Overview

As a data subject, you have the following rights to ensure the fair and transparent processing of your personal data:

The right to access pursuant to Article 15 GDPR

The right to rectification pursuant to Article 16 GDPR

The right to erasure pursuant to Article 17 GDPR

The right to restriction of processing pursuant to Article 18 GDPR

The right to data portability pursuant to Article 20 GDPR

The right to withdraw consent at any time pursuant to Article 7 (3) GDPR,

The right to object to processing pursuant to Article 21 GDPR, in respect of which separate information is provided below

The right to lodge a complaint with a supervisory authority pursuant to Article 77 GDPR, in respect of which separate information is provided below

2. Your right to object to processing

IT IS ADMISSIBLE TO PROCESS YOUR PERSONAL DATA IF THE PROCESSING IS NECESSARY FOR THE PURPOSES OF THE LEGITIMATE INTERESTS PURSUED BY THE CONTROLLER OR BY A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE OVERRIDDEN BY THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT WHICH REQUIRE PROTECTION OF PERSONAL DATA, IN PARTICULAR WHERE THE DATA SUBJECT IS A CHILD, PURSUANT TO ARTICLE 6 (1) F) GDPR.

AS A DATA SUBJECT YOU HAVE THE RIGHT TO WITHDRAW YOUR CONSENT TO THE PROCESSING OF YOUR PERSONAL DATA IN ACCORDANCE WITH ARTICLE 6 (1) GDPR FOR REASONS RELATING TO YOUR PERSONAL SITUATION AT ANY TIME; THIS ALSO APPLIES TO PROFILING ON THE BASIS OF THESE PROVISIONS.

IF YOU EXERCISE YOUR RIGHT TO OBJECT WE STOP PROCESSING YOUR PERSONAL DATA UNLESS WE ARE ABLE TO PROVIDE COMPELLING LEGITIMATE GROUNDS TO CONTINUE PROCESSING IT WHICH OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS AS A DATA SUBJECT OR THE DATA IS PROCESSED TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT ADVERTISING PURPOSES, YOU HAVE THE RIGHT AS THE DATA SUBJECT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR DIRECT ADVERTISING PURPOSES; THIS ALSO APPLIES TO PROFILING IN CONNECTION WITH SUCH DIRECT ADVERTISING ACTIVITIES. IF YOU OBJECT TO THE PROCESSING OF YOUR DATA FOR DIRECT ADVERTISING PURPOSES AS A DATA SUBJECT, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THIS PURPOSE.

3. Your right to lodge a complaint with a supervisory authority

Unless an administrative or judicial remedy provides otherwise, you have the right as a data subject to lodge a complaint with a supervisory authority, particularly in the Member State you live or work in, or at the place of the suspected contravention if you believe that the processing of your personal data violates the provisions of the General Data Protection Regulation.

VIII. Information on the basis for the provision of your personal data and on possible consequences of the non-provision

To the extent necessary to ensure the fair and transparent processing, you find information on the basis for the provision of your personal data and on possible consequences of the non-provision in the information about the specific purposes for which your personal data is processed.

Back to Home
Back to top
Scroll to Top