Privacy policy
Data controller within the meaning of data protection law, especially of the EU General Data Protection Regulation (GDPR):
Linde Eckstein GmbH + Co. KG
Flurstrasse 27a-35
90522 Oberasbach
Germany
Limited partnership, head office: Oberasbach, Fürth District Court HRA 2811
Represented by the managing partner:
Eckstein GmbH, head office: Oberasbach, Fürth District Court HRB 4347 (general partner)
represented by the Managing Directors Iris Eckstein, Verena Eckstein, Michael Eckstein.
Tel: +49 911 9692-0
E-mail: datenschutz@doctoreckstein.de
Questions to the Data Protection Officer
If you have any questions concerning data protection, please send us an email or contact our organisation's Data Protection Officer:
Marc Fuchs (DATEV eG)
Sigmundstrasse 172
90329 Nürnberg
Germany
E-mail: datenschutz@doctoreckstein.de
Your rights as a data subject
You can at any time exercise the following rights using the stated contact details of our Data Protection Officer:
- Information about your data stored by us and their processing
- rectification of incorrect personal data
- erasure of your data stored by us
- restriction of processing of these data in case we are not yet permitted to erase your data due to statutory obligations
- objection to the processing of your data by us and
- data portability, in case you have consented to the data processing or have concluded a contract with us.
If you have granted consent, you can at any time withdraw it with effect for the future.
No fully automated decision-making (including profiling) according to Art. 22 GDPR is used to process the data you have provided.
You can lodge a complaint with the supervisory authority responsible for you at any time. The supervisory authority responsible for you depends on the federal state in which you live or work, or in which the alleged violation occurred. A list of supervisory authorities (for the non-public area) and their addresses is available at: https://www.bfdi.bund.de/DE/Service/Anschriften/anschriften_table.html
Our Privacy Policy
This Privacy Policy describes how Doctor Eckstein® (the “Site,” “we,” “us,” or “our”) collects, uses, and discloses your personal data when you visit doctor-eckstein.myshopify.com (the “Site”), use our services, make a purchase, or otherwise communicate with us in connection with the Site (collectively, the “Services”). For the purposes of this Privacy Policy, “you” and “your” refer to you as a user of the Services, whether as a customer, website visitor, or any other individual whose information we collect pursuant to this Privacy Policy.
Please read this Privacy Policy carefully.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site, update the “Last Updated” date, and take any other steps required by applicable law.
Hosting via Shopify
This website is hosted by Shopify Inc., 150 Elgin St., 8th Fl., Ottawa, ON K2P 1L4, Canada (“Shopify”), which processes all data collected in connection with the operation of this Site (e.g., log files when visiting the website) on our behalf. The legal basis for this processing is our overriding legitimate interest in providing this Site in accordance with Article 6(1)(f) of the GDPR.
Data may also be transferred to Shopify Inc. servers located in Canada. Such transfers are covered by an adequacy decision of the European Commission, ensuring an appropriate level of data protection.
How We Collect and Use Your Personal Data
To provide the Services, we collect personal data as outlined below. The specific data we collect and how we use it depends on how you interact with us.
In addition to the specific purposes listed below, we may use the information we collect about you to communicate with you, provide or improve the Services, comply with applicable legal obligations, enforce any applicable terms of service, and protect or defend the Services, our rights, and the rights of our users or others.
What Personal Data We Collect
The type of personal data we collect about you depends on how you interact with our Site and use our Services. When we refer to “personal data,” we mean information that identifies, relates to, describes, or can be associated with you. The following sections outline the categories and specific types of personal data we collect.
Information You Provide Directly to Us
The information you provide to us directly through the Services may include:
-
Contact Information – including your name, address, telephone number, and email address.
-
Order Information – including your name, billing address, shipping address, payment confirmation, email address, and telephone number.
-
Account Information – including your username, password, security questions, and other information used for account security.
-
Purchase Information – including items you view, add to your cart, save in your account (e.g., loyalty points, reviews, recommendations, or gift cards), or purchase.
- Stored Loyalty Points / Product Reviews / Recommendations / Gift Cards
- Customer Support Information – including the content of your communications with us, such as when you send a message through the Services.
Some features of the Services may require you to provide certain personal data. You may choose not to provide this information; however, this may limit your ability to use or access those features.
Information We Collect Automatically About Your Use
We may also automatically collect certain information about your interaction with the Services (“Usage Data”). For this purpose, we may use cookies, pixels, and similar technologies (“Cookies”). Usage Data may include information about how you access and use our Site and your account, including device information, browser information, network connection data, your IP address, and other information regarding your interaction with the Services.
Information Received from Third Parties
We may also receive information about you from third parties, including vendors and service providers who collect information on our behalf, such as:
- Companies that support our Site and Services, such as Shopify.
- Our payment processors, who collect payment information (e.g., bank account details, credit or debit card information, billing address) in order to process your payments, fulfill your orders, and provide you with the products or services you have requested, in order to perform our contract with you.
- When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we or third parties we work with may automatically collect certain information using online tracking technologies such as pixels, web beacons, software development kits, third-party libraries, and cookies.
Any information we receive from third parties will be handled in accordance with this Privacy Policy. Please also refer to the section below titled Third-Party Websites and Links.
How We Use Your Personal Data
- Provision of Products and Services. We use your personal data to provide you with the Services and to perform our contract with you, including processing your payments, fulfilling your orders, sending you notifications related to your account, purchases, returns, exchanges, or other transactions, creating, maintaining, and otherwise managing your account, arranging for shipping, facilitating returns and exchanges, and providing other account-related features and functionalities. The legal basis for these processing activities is the performance of our contractual obligations pursuant to Article 6(1)(b) GDPR, and, where applicable, compliance with our legal obligations pursuant to Article 6(1)(c) GDPR. We may also enhance your shopping experience by enabling Shopify to match your account with other Shopify services you may wish to use. In such cases, Shopify processes your data in accordance with its own Privacy Policy and Consumer Privacy Policy.
- Marketing and Advertising. We may use your personal data for marketing and advertising purposes, such as sending you promotional messages via email, SMS, or postal mail, and displaying advertisements for products or services. This may include using your personal data to better tailor the Services and advertisements on our Site and on other websites. If you are located in the EEA, the legal basis for these processing activities is our legitimate interest in promoting our products pursuant to Article 6(1)(f) GDPR.
- Security and Fraud Prevention. We use your personal data to detect, investigate, and take action against potentially fraudulent, illegal, or malicious activities. If you choose to use the Services and register an account, you are responsible for maintaining the security of your account credentials. We strongly recommend that you do not share your username, password, or other access credentials with any third party. If you believe your account has been compromised, please contact us immediately. If you are located in the EEA, the legal basis for these processing activities is our legitimate interest in ensuring the security of our website for you and other customers, pursuant to Article 6(1)(f) GDPR.
- Communication with You and Service Improvement. We use your personal data to provide customer support and to improve our Services. This is based on our legitimate interest in responding to your inquiries, delivering effective services, and maintaining our business relationship with you, pursuant to Article 6(1)(f) GDPR.
Cookies
Like many websites, we use cookies on our Site. Specific information about the cookies we use in connection with operating our store via Shopify can be found at: https://www.shopify.com/legal/cookies
We use cookies to operate and improve our Site and Services (including storing your actions and preferences), to conduct analytics, and to better understand user interaction with the Services. This is based on our legitimate interest in managing, improving, and optimizing the Services.
We may also allow third parties and service providers to use cookies on our Site to better tailor the Services, products, and advertising on our Site and on other websites.
Most browsers accept cookies by default. However, you can configure your browser settings to remove or reject cookies. Please note that removing or blocking cookies may negatively affect your user experience and may cause some parts of the Services, including certain features and functionalities, to not function properly or become unavailable. Additionally, blocking cookies may not completely prevent us from sharing information with third parties, such as our advertising partners.
How We Share Personal Data
Under certain circumstances, we may share your personal data with third parties for the purpose of fulfilling our contractual obligations, for legitimate interests, or for other reasons as outlined in this Privacy Policy. These circumstances may include:
- With vendors or other third parties who perform services on our behalf (e.g., IT management, payment processing, data analytics, customer support, cloud storage, order fulfillment, and shipping).
- With business and marketing partners to provide you with Services and to market to you. Our business and marketing partners will use your data in accordance with their own privacy policies.
- When you instruct us to do so, request it, or otherwise consent to the sharing of certain information with third parties—for example, to send you products or through your use of social media widgets or login integrations—with your consent.
- With our affiliates or otherwise within our corporate group, based on our legitimate interest in operating a successful business.
- In connection with a business transaction, such as a merger or bankruptcy; to comply with applicable legal obligations (including responding to subpoenas, search warrants, and similar requests); to enforce any applicable terms of service; and to protect or defend the Services, our rights, and the rights of our users or others.
We disclose the categories of personal data and sensitive personal data described above under “How We Collect and Use Your Personal Data” and “How We Share Personal Data” for the purposes outlined therein.
|
Category |
Categories of Recipients |
|
|
We do not use or disclose this information without your consent or for the purpose of inferring characteristics about you.
With your consent, we may share personal data for the purpose of conducting promotional and marketing activities as described above.
EU Withdrawal Button by Anviara
To fulfill our existing legal obligation to provide a so-called withdrawal button on our website, we transmit the necessary personal data to Anviara (Provider: Anviara LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA) in accordance with Article 6(1)(c) GDPR. Anviara processes your data on our behalf exclusively to fulfill legal obligations and only on German servers.
The following data you enter will be transmitted to Anviara and processed further:
- Name (mandatory under § 356a)
- Email address for the confirmation of receipt (mandatory under § 356a)
- Order or contract number (mandatory under § 356a) — as free text entered by you
- Reason for withdrawal — voluntary information only
- Submission language — the language in which the form was completed is stored so that the confirmation is sent in the same language.
- Server timestamp of the withdrawal — mandatory under § 356a as part of the receipt confirmation; adjusted to the merchant’s time zone.
You can find Anviara’s privacy policy here: EU Withdrawal Button — Privacy Policy — Anviara
Data Processing Agreement (DPA): We have concluded a Data Processing Agreement (DPA) with the aforementioned provider. This ensures that they process your personal data exclusively in accordance with our instructions and in compliance with the GDPR.
Review Management and Display of Social Media Content via Judge.me
With your consent granted during or after your order in accordance with Art. 6(1)(a) GDPR, we transmit your email address, order number, and order date to the review platform Judge.me, operated by Judge.me LLC, PO Box 7403, Jackson, Wyoming 83002, USA. Judge.me will send you a review reminder via email. You may revoke your consent at any time by contacting us at datenschutz@doctoreckstein.de.
Our website also integrates functionalities for collecting and displaying product reviews via Judge.me. When submitting a review, your personal data is processed for verification purposes. Upon submission, your first and last name, email address, order date and number, as well as product name and, if applicable, international references (GTIN/ISDNF), are transmitted to Judge.me and evaluated to authenticate the review in relation to a specific transaction. This processing is carried out pursuant to Art. 6(1)(f) GDPR, based on our legitimate interest in obtaining authentic customer reviews with verifiable transaction references and preventing review abuse. After the review has been verified and approved, the data is deleted by Judge.me.
Furthermore, we use the “UGC Media Grid” feature provided by Judge.me to embed and display social media content (Instagram) within our shop. This is done in our legitimate interest in presenting our company and products authentically, pursuant to Art. 6(1)(f) GDPR. The source of the displayed content is our own social media presence (Instagram).
The aforementioned data processing may involve the transfer of data to countries outside the European Economic Area, particularly the United States. Judge.me has entered into EU Standard Contractual Clauses to ensure an adequate level of data protection.
Judge.me’s privacy policy is available at: https://judge.me/privacy
Data Processing Agreement: We have entered into a data processing agreement (DPA) with the aforementioned provider. This ensures that your personal data is processed exclusively in accordance with our instructions and in compliance with the GDPR.
Third-Party Websites and Links
Our Site may contain links to websites or other online platforms operated by third parties. If you follow links to websites that are not affiliated with or controlled by us, you should review their privacy and security policies as well as their terms and conditions. We do not guarantee and are not responsible for the privacy or security of such websites, including the accuracy, completeness, or reliability of any information found on those websites. Information you provide in public or semi-public areas, including information you share on third-party social networking platforms, may also be visible to other users of the Services and/or users of those third-party platforms, without limitation as to its use by us or by a third party. The inclusion of such links does not imply endorsement of the content of such platforms or their owners or operators, except as expressly disclosed in the Services.
Referral Marketing with BixGrow
With your consent given during or after your registration or order in accordance with Art. 6 (1) (a) GDPR, we will transmit the personal data you entered in the corresponding form to BixGrow (provider: BixGrow, Inc., 651 N Broad St, Suite 206, Middletown, DE 19709, USA). BixGrow is an affiliate marketing platform that we use to manage and administer our partner program. All data processing described below is also carried out with your consent. You can revoke your consent at any time by sending us a message (datenschutz@doctoreckstein.de).
The following data you provide will be transmitted to BixGrow and processed there:
- full name, email, address, customer number
- optional: website, social media profile
BixGrow will then generate a link, which will be sent to you via email or will be found in your dashboard, which you can share with others to recommend our products.
By clicking on this link, the following data of the person being referred will be processed by BixGrow to track what the referred persons have ordered and who the referrer was:
- clicks on affiliate links, including date, device data (browser, OS), referrer URL, and target URL
- order date, order number, order total, commission amount, status of the order/commission/payment
BixGrow also uses cookies, i.e. small text files stored locally in your web browser's cache on your device.
BixGrow does not share any personal data with third parties.
BixGrow's privacy policy can be found at: https://bixgrow.com/privacy-policy/
The data processing described above is carried out to provide the affiliate with commission for recommendations made. Furthermore, it serves marketing and optimization purposes, to improve our offering and make it more attractive to you.
Your consent is also given for any data processing and possible transfer to countries outside the European Economic Area (especially the USA). These countries may not have the same level of data protection, and the enforcement of your rights may be limited or impossible.
Data processing: We have concluded a data processing agreement (DPA) with the above-mentioned provider. This ensures that they process your personal data exclusively in accordance with our instructions and in compliance with the GDPR.
The use of Microsoft Clarity
This website employs Microsoft Clarity, a web analytics service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052‑6399, USA. Microsoft Clarity assists us in better understanding user behavior on our website by analyzing interactions such as mouse movements, clicks, scrolling behavior, and page views. To this end, cookies and similar technologies are utilized to collect information about your use of our website.
The information collected by Microsoft Clarity is generally transmitted to Microsoft’s servers and processed there. This may involve the transfer of personal data to the United States. Microsoft is certified under the EU‑US Data Privacy Framework, thereby ensuring an adequate level of data protection in compliance with Art. 45 of the GDPR.
Microsoft Clarity anonymizes sensitive information by default. Text inputs (e.g., in forms) and other personal content are not recorded.
The legal basis for processing this data is your consent pursuant to Art. 6(1)(a) GDPR, provided that you have granted it via our cookie consent tool. Consent may be withdrawn at any time with future effect.
For additional information on Microsoft’s privacy practices, please refer to: https://privacy.microsoft.com/de-de/privacystatement
Marketing and Review Management with Vitals: Reviews, Bundles & 40+
With your consent in accordance with Article 6 (1) (a) of the General Data Protection Regulation (GDPR), we transmit your data, which may include personal data, to Vitals, operated by APPSOLVE, 14 Bogdan Voda Street, Bucharest 010936, Romania. Vitals enable us to administer and import customer reviews, create appropriate offers, obtain information on visitor activity, and generate wish lists, fixed shopping carts, and comparable website content. You may withdraw your consent at any time via the consent management tool.
Your customer number, name, email address, telephone number, as well as your shipping and billing addresses are transmitted to APPSOLVE and further processed by that entity. For further details, please refer to the provider´s privacy policy available at the following link:
Legal — Privacy policy | Vitals™
Data Processing Agreement: We have entered into a data processing agreement (DPA) with the provider named above. This agreement ensures that your personal data is processed exclusively in accordance with our instructions and in compliance with the GDPR.
Product Recommendation Quiz with RevenueHunt
With your consent, granted by actively entering information in accordance with Art. 6 (1) (a) GDPR, we will transmit the data, part of which personal data, you entered in the corresponding form to RevenueHunt (DAIRY CAPITAL LIMITED, Vision Accounting Fortis House, Cothey Way, Ryde, ENG, PO33 1QT, GB). The quiz helps both of us to find the most suitable product for your needs more quickly, using the information you provide. You may revoke your consent at any time by sending us a message (datenschutz@doctoreckstein.de).
The data you enter will be transmitted to RevenueHunt and further processed there. Please refer to the provider's privacy policy at the following link for further information:
Terms of Service and Privacy Policy - RevenueHunt
Your consent also applies to any data processing and any data transfer to countries outside the European Economic Area (especially the USA). These countries may not have the same level of data protection, and the enforcement of your rights may be limited or impossible.
Data processing: We have concluded a data processing agreement (DPA) with the above-mentioned provider. This ensures that your personal data is processed exclusively in accordance with our instructions and in compliance with the GDPR.
Newsletter
On our website, users have the option to subscribe to a free newsletter. We use Klaviyo for the distribution of this newsletter. Klaviyo is a service that facilitates the organization and analysis of newsletter distribution. The provider is Klaviyo Inc., 60 South Street, Suite 910, Boston, Massachusetts, USA (“Klaviyo”). For data transfers to the United States, Klaviyo is certified under the EU-U.S. Data Privacy Framework.
When visiting our website, making a purchase, contacting us via email, or subscribing directly to our newsletter, the following categories of data may be processed: identification and contact data as provided by the user (such as name, email address, telephone number, notes, and any uploaded files); IT-related information (including IP addresses, open and click rates, online navigation data, location data, device data, and browser data); and transmission data (such as date and time).
Newsletters are only sent to users who have explicitly consented to receive them. Any data not required for these purposes will be promptly deleted.
Legal basis: The processing of data in connection with the newsletter subscription is based on your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time by clicking the “Unsubscribe” link at the bottom of any newsletter or by sending an informal email to newsletter@doctoreckstein.de. The lawfulness of data processing carried out prior to the withdrawal remains unaffected.
Retention period: After unsubscribing from the newsletter, your email address will be stored in a so-called blacklist to prevent future mailings. The data in the blacklist will be used solely for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with legal requirements for newsletter distribution (legitimate interest pursuant to Art. 6(1)(f) GDPR). The storage in the blacklist is not time-limited. You may object to this storage by sending an email to newsletter@doctoreckstein.de.
Data stored for other purposes remains unaffected by this.
Data Processing Agreement: We have concluded a data processing agreement (DPA) with the aforementioned provider. This ensures that your personal data is processed exclusively in accordance with our instructions and in compliance with the GDPR.
Communication via WhatsApp Business
We use WhatsApp Business for communication with you via the provider ChatWerk of Inbox Solutions GmbH, Pretzfelder Straße 7–11, 90425 Nuremberg (“ChatWerk”) in accordance with Art. 6 para. 1 lit. b) GDPR, if the communication serves the initiation or execution of a contractual relationship, or with your consent pursuant to Art. 6 para. 1 lit. a) GDPR, if you have subscribed to the WhatsApp newsletter or contact us directly. The data is stored on servers of ChatWerk in Germany on our behalf. You can find ChatWerk’s data protection information at: Datenschutzerklärung App - ChatWerk.
You can revoke your consent to receive promotional information at any time by sending us a message with the content “INFOSTOP”; a complete unsubscribe can be achieved with the message “STOP”. If the processing is based on your consent, the data will be deleted as soon as you withdraw your consent. Otherwise, we delete your data once the purpose of processing no longer applies (e.g. your request has been fully answered). If legal retention obligations prevent deletion, the data will be restricted for further use until the retention period expires.
If you use WhatsApp to contact us, we process your phone number, your name, and other data you provide in order to respond to your request or—if you have explicitly consented—to send you promotional messages.
We use ChatWerk for communication via WhatsApp. The operator of the WhatsApp service is WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“WhatsApp”), a company of Meta Platforms, Inc. (formerly Facebook). WhatsApp processes data in accordance with its privacy policy. The content of communication is end-to-end encrypted. All additional data is encrypted by ChatWerk using 256-bit encryption.
WhatsApp may also collect so-called “metadata”, which may include information about the identity of the sender and recipient, as well as the phone number, device information, and information on WhatsApp usage (e.g. duration and frequency). WhatsApp also uses this data for its own purposes, such as improving the WhatsApp service. Further information can be found in the WhatsApp privacy policy. We have no knowledge of the details of this data processing and no influence over it. We cannot rule out that data may be transferred to other recipients within the Meta group in countries outside the EU (particularly the USA). However, Meta is certified under the EU-US Data Privacy Framework, and data transfers to the USA are generally permissible in this case.
Data processing agreement: We have concluded a data processing agreement (DPA) with the above-mentioned provider. This ensures that your personal data is processed exclusively according to our instructions and in compliance with the GDPR.
Meta Pixel
If you consent to “Advertising” in our consent tool, you agree to the following data processing activities and the potential transfer of your data to countries outside the European Economic Area. These countries may not provide the same level of data protection, and the enforcement of your rights may be limited or not possible.
Our website uses the so-called Meta Pixel. The service is operated by Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). The Meta Pixel is used for remarketing purposes, allowing us to re-engage with you within 180 days. This enables users of our website to be shown interest-based advertisements (“Facebook Ads”) while visiting Facebook or other websites that also use the Meta Pixel. Our aim is to display advertisements that are relevant to you and to tailor our offerings accordingly. Additionally, we can assess the effectiveness of Facebook Ads for statistical and market research purposes.
Once you have given your consent to “Advertising” in our consent tool, your browser automatically establishes a direct connection to Facebook’s servers. Through the integration of the Meta Pixel, Facebook is informed that you have visited our website or interacted with one of our ads. If you are registered with a Meta service, Facebook may associate your visit with your user profile.
The processing of data by Meta is carried out in accordance with Meta’s privacy policy. Specific information and details about the Meta Pixel and how it works can be found at:
https://de-de.facebook.com/business/tools/meta-pixel
Joint Controllership
We act as joint controllers with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”) for the collection and transmission of data.
Any processing that takes place after the data has been collected and transmitted is the sole responsibility of Meta.
Analyses in anonymized form are carried out under a data processing agreement and therefore fall under our responsibility.
We have entered into an agreement with Meta regarding joint controllership, which defines the respective responsibilities for fulfilling obligations under the GDPR.
You can find Meta’s full data policy here:
https://de-de.facebook.com/full_data_use_policy
Withdrawal / Deletion
Non-logged-in Meta users can delete these cookies as follows (How to clear cache and cookies in your browser):
https://de.norton.com/blog/how-to/clear-cache-and-cookies
Logged-in users of a Meta platform can do so here:
https://www.facebook.com/settings/?tab=ads#
Cookies set by this website have a lifespan of up to 180 days after the last interaction.
The legal basis for the processing of data is Art. 6(1)(a) GDPR.
Children’s Data
Our services are not intended for use by children, and we do not knowingly collect personal data from children. If you are a parent or legal guardian of a child who has provided us with personal data, you may contact us using the contact details provided below to request the deletion of that data.
As of the effective date of this privacy policy, we have no actual knowledge that we “share” or “sell” personal data of individuals under the age of 16, as those terms are defined under applicable law.
Security and Retention of Your Data
Please note that no security measures are perfect or impenetrable, and we cannot guarantee “perfect security.” Additionally, information you transmit to us may not be secure during transmission. We recommend that you do not use unsecure channels to communicate sensitive or confidential information to us.
The length of time we retain your personal data depends on various factors, including whether we need the data to manage your account, provide services, comply with legal obligations, resolve disputes, or enforce other applicable agreements and policies.
Your Rights
Depending on your place of residence, you may have some or all of the rights listed below with respect to your personal data. These rights are not absolute and apply only under certain circumstances. In some cases, we may lawfully deny your request.
-
Right of Access/Information: You may have the right to request access to the personal data we hold about you, including details on how we use and share your data.
-
Right to Deletion: You may have the right to request the deletion of personal data we hold about you.
-
Right to Rectification: You may have the right to request the correction of inaccurate personal data we hold about you.
-
Right to Data Portability: You may have the right to receive a copy of your personal data and, in certain circumstances and with certain exceptions, to request the transfer of that data to a third party.
-
Right to Opt-Out of Sale, Sharing, or Targeted Advertising: You may have the right to instruct us not to “sell” or “share” your personal data, or to object to the processing of your personal data for purposes considered “targeted advertising” under applicable privacy laws. Note: If you visit our site with the “Global Privacy Control” opt-out preference signal enabled, we will treat this—depending on your location—as a request to opt out of the “sale” or “sharing” of information for the device and browser you use to access the site.
-
Right to Restrict Processing: You may have the right to request that we stop or restrict the processing of your personal data.
-
Right to Withdraw Consent: Where we rely on your consent to process your personal data, you may have the right to withdraw that consent.
-
Right to Appeal: If we deny your request, you may have the right to appeal our decision. You can do so by replying directly to our denial.
- Manage Communication Preferences: We may send you marketing emails, and you can opt out of receiving such emails at any time by using the unsubscribe option provided in our emails. Even if you opt out, we may still send you non-promotional emails, such as those related to your account or orders.
You can exercise these rights as described on our website or by contacting us using the contact details provided below.
We will not discriminate against you for exercising any of your rights. To verify your identity, we may need to collect information from you, such as your email address or account details, before responding substantively to your request. Under applicable law, you may designate an authorized agent to make requests on your behalf. Before accepting such a request, we may require proof that you have authorized the agent to act on your behalf and may also require you to verify your identity directly with us. We will respond to your request in a timely manner as required by applicable law.
International Users
Please note that we may transfer, store, and process your personal data outside the country in which you reside. Your personal data may also be processed by staff, external service providers, and partners in those countries.
When we transfer your personal data to countries outside of Europe, we rely on recognized transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent contracts approved by the relevant UK authority, unless the data is transferred to a country that has been deemed to provide an adequate level of data protection.
This Agreement is executed in multiple languages for convenience only. In the event of any inconsistency or discrepancy between the German version and any translation, the German version shall prevail and be deemed the binding and controlling version for all purposes.
Last updated: June 18, 2026