Data protection declaration
Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.
1. Access data and hosting
You can visit our website without indicating any information regarding your person. Each time a web site is visited, the web server automatically saves a so-called server log file, which contains e.g. the name of the requested file, your IP address, time of access, the amount of data transferred and the requesting provider (access data), furthermore, the request is recorded.
These access data are evaluated exclusively to ensure trouble-free functioning of the website and to improve our offer. This is intended to protect our legitimate interests in a correct presentation of our offer. All access data will be deleted no later than seven days after the end of your visit to the site.
Third-party hosting services
As part of processing on our behalf, a third- party provider provides us with hosting and website presentation services. This serves to protect our legitimate interests in a correct presentation of our offer, which predominate within the scope of a balancing of interests. All data collected in the context of the use of this website or in the forms provided for this purpose in the online shop, as described below, are processed on its servers. Processing on other servers only takes place in the framework described here.
This service provider is located within a country of the European Union or the European Economic Area.
2. Data collection and use for contract processing and creating a customer account
We collect personal data when you voluntarily provide it to us in connection with your order, when contacting us (e.g. via contact form or e-mail) or when opening a customer account. Mandatory fields are marked as such, since in these cases we require the data for contract processing, to process your contact or open a customer account. You cannot complete the order and/or open the account nor make contact without their information. Which data is collected can be seen from the respective input forms. We use the data provided by you to process contracts and your enquiries. After complete processing of the contract or deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the storage periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration. The deletion of your customer account is possible at any time and can take place either via a message to the means of contact described below or via a function intended for it in the customer account.
3. Data transfer
For the fulfilment of the contract we pass on your data to the shipping company commissioned with the delivery, as far as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the order process, we pass on the payment data collected for the processing of payments to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must log in to the payment service provider with your access data during the ordering process. The data protection declaration of the respective payment service provider applies in this respect.
Data transfer to Plentymarkets
The order is processed by the service provider "Plentymarkets" (plentymarkets GmbH, Bürgermeister-Brunner-Str. 15, 34117 Kassel, Germany). Name, address and, if applicable, other personal data will be passed on to plentymarkets exclusively for processing the online order in accordance with Art. 6 para. 1 see point 1 letter b GDPR. Your data will only be passed on if this is actually necessary for processing the order. Details on data protection at plentymarkets and the data protection declaration of plentymarkets GmbH can be viewed on the plentymarkets website at www.plentymarkets.co.uk.
Data transfer to shipping companies
If you have given us your express consent to this during or after your order, we will pass on your e-mail address to the selected shipping service provider in order that the latter can contact you before delivery for the purpose of notification or coordination of delivery.
Consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
DHL Paket GmbH
DPD Deutschland GmbH
4. Email Newsletter
Email advertisement with subscription to the newsletter
If you register for our newsletter, we use the data required for this or separately communicated by you in order to send you regularly our e-mail newsletter on the basis of your consent.
You can unsubscribe from the newsletter at any time either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. Once unsubscribed, we delete your e-mail address unless you have expressly consented to further use of your data or if we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
5. Data usage in payment processing
Payment by Amazon Pay
When you pay by Amazon Pay we pass on your payment data primarily to Amazon Payments Europe s.c.a, and secondarily to Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL. All three are located at 5, Rue Plaetis L 2338 Luxembourg (hereinafter "Amazon Payments"). Amazon Payments reserves the right to carry out credit checks. Amazon Payments uses the result of the credit assessment with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. Address data is included in the calculation of the score values. Amazon Payments is also entitled to pass on your data to unnamed third parties (banks, e-service providers, service partners, but also auditors, analysis services, credit agencies, marketing partners, cloud service providers, retargeting providers, affiliated companies). For further information on data protection law, including the credit agencies used, please refer to Amazon Payments' data protection declaration: https://pay.amazon.com/uk/help/201751600
6. Integration of Trusted Shops’s Trustbadge
The Trusted Shops Trustbadge is included on this website to display our Trusted Shops seal of approval, the collected evaluations as well as to offer Trusted Shops products to buyers after an order has been placed.
This serves to protect our legitimate interests in an optimal marketing of our offer which predominates in the context of a balancing of interests. The Trustbadge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.
When the trust badge is accessed to, the web server automatically saves a so-called server log file which, for example, contains your IP address, date and time of access, transferred data volume, the requesting provider (access data) and documents the access. This access data is not evaluated and is automatically overwritten at the latest seven days after the end of your page visit.
Further personal data will only be transferred to Trusted Shops if you have consented to this, decided to use Trusted Shops products after completing an order or you have already registered for use. In this case the contractual agreement between you and Trusted Shops applies.
7. Cookies and web analysis
To make visiting our website attractive and to enable the use of certain functions we use so-called cookies on various pages. These are necessary for market research purposes or to display suitable products. This serves to protect our legitimate interests in an optimal marketing of our offer which predominates in the context of a balancing of interests pursuant to Art. 6 para. 1 see point 1 letter f GDPR.
Cookies are small text files that are automatically saved on your end device. Some of the cookies we use will be deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). How long they are saved is indicated in the overview of your web browser’s cookie settings. You can change your browser settings in such a way that you will be informed whenever a cookie will be set and saved. This enables to decide individually whether to accept or exclude cookies for certain cases or in general. Each browser differs in the way it manages the cookie settings. How to change the cookies settings is described in the help menu of each browser which you will find under the following links:
Internet Explorer™ : https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
In case cookies are not accepted, the functionality of our website may be limited. If you have given your consent in pursuance of Art. 6 para. 1 see 1 letter f GDPR, this website also uses the so-called DoubleClick cookie for advertising purposes within the framework of the application of Google Analytics (see below), which enables your browser to be recognised when visiting other websites. The information automatically generated by the cookie about your visit to this website is transferred to a Google server in the USA and saved there. The IP address will be reduced by activating IP anonymisation on this website before being transmitted within the member states of the European Union or to other state parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google will use this information to compile reports on website activity and to provide other services related to website usage. Google may also transfer this information to third parties if this is required by law or if third parties process this data on behalf of Google. The data collected in this context will be deleted after the end of the use of Google DoubleClick by us.
Google Double Click is a service of Google LLC. (www.google.co.uk). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be found here. Due to this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies that are certified under the Privacy Shield.
You can revoke your consent at any time with effect for the future by deactivating the DoubleClick cookie via this link this link. You can also contact the Digital Advertising Alliance to find out how to set cookies and make the relevant settings. Finally, you can set your browser in order to be informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.
Use of Google (Universal) Analytics for web analysis
Provided that you have given your consent pursuant to Art. 6 para. 1 see point 1 letter f GDPR, this website uses Google (Universal) Analytics, a web analysis service of Google LLC (www.google.de), for website analysis purposes. The automatically collected information about your use of this website is usually transferred to a Google server in the USA and saved there. The IP address will be reduced by activating IP anonymisation on this website before being transmitted within the member states of the European Union or to other state parties to the Agreement on the European Economic Area. Only in exceptional cases, the full IP address will be transmitted to a Google server in the USA and shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. After the end of the use of Google Analytics by us the data collected in this context will be deleted.
Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be found here. Due to this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies that are certified under the Privacy Shield.
You can revoke your consent at any time with effect for the future by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en This prevents the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google.
As an alternative to the browser plugin, you can click on this link to prevent Google Analytics from collecting data on this website in the future. By doing so an opt-out cookie is stored on your mobile device. If you delete your cookies, you will be asked to give your consent again.
Use of Nosto for web analysis
Use of Crazy Egg for web analysis
Insofar as you have given your consent pursuant to Art. 6 para. 1 see point 1 letter f GDPR, this website uses the web analysis service "Crazy Egg" of Crazy Egg Inc. USA to collect statistical data on the use of our website. With the help of Crazy Egg Inc. technologies, visitor information is collected and transmitted to the servers of Crazy Egg Inc. The technology makes it possible to collect, analyze and visualize the activities of the user while visiting this website. For example, it is possible to use a "heatmap" to see which areas of the website are visited and clicked on most. You can revoke your consent at any time with effect for the future by deactivating the Crazy Egg Tool via this link.
The purpose and scope of the data collection, the further processing and use of the data by Crazy Egg as well as your relevant rights and setting options for the protection of your privacy can be found in the data protection information of Crazy Inc. under this link.
Use of IntelliAd for web analysis
Insofar as you have given your consent to Art. 6 para. 1 see point 1 letter f GDPR, this website uses the web analysis service with bid management of intelliAd Media GmbH, Sendlinger Str. 7, 80331 Munich. Anonymised usage data is collected and aggregated for the purpose of demand-oriented design and optimisation of this website. User profiles are created from this data using pseudonyms. When intelliAd Tracking is used, cookies are stored locally. The anonymized usage data and profiles can be used by the website operator as well as by other intelliAd customers to identify usage interests without any conclusion being possible regarding your identity as website visitor. You can revoke your consent at any time with effect for the future by using the intelliAd Opt-Out function.
This website uses the Google Tag Manager. Google Tag Manager is a solution that allows marketers to manage website tags through a single interface. The Tool Tag Manager itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If deactivation has been made at the domain or cookie level, it will remain in effect for all tracking tags implemented with Google Tag Manager.
8. Advertisement via marketing-networks
Google AdWords Remarketing
We use Google Adwords to advertise this website in Google search results and on third-party websites. Insofar as you have given your consent pursuant to Art. 6 para. 1 see point 1 letter f GDPR, the so-called remarketing cookie is set by Google when you visit our website. This remarketing cookie automatically uses a pseudonym CookieID and enables interest-based advertising on the basis of the pages you have visited. After the end of the use of Google AdWords Remarketing by us the data collected in this context will be deleted.
Any additional data processing will only take place if you have agreed with Google that your web and app browsing history will be linked to your Google account as well as that information from your Google Account will be used to personalise advertisement you see on the web. If you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups.
Google AdWords Remarketing is a service of Google LLC (www.google.co.uk). Google LLC is headquartered in the USA and is certified under the EU-US Privacy Shield. A current certificate can be found here. Due to this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies that are certified under the Privacy Shield.
You can revoke your consent at any time with effect for the future by deactivating the remarketing cookie via this link. Furthermore, you can contact the Digital Advertising Alliance to find out how to set cookies and to make the relevant settings.
Through our advertising partner AdRoll Advertising Limited, Level 6, 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland, we advertise this website in search results and on third-party websites. Insofar as you have given your consent to Art. 6 para. 1 see point 1 letter. f GDPR, a cookie of these providers or their partners is automatically set when you visit our website, which makes interest-based advertising possible by means of a pseudonymous CookieID and on the basis of the pages you have visited. After the end of our use of AdRoll Retargeting, the data collected in this context will be deleted. You can revoke your consent at any time with effect for the future by deactivating the retargeting cookie by clicking on the following link: https://app.adroll.com/optout/safari
Use of Conversion Pixel by Adform
Insofar as you have given your consent to Art. 6 para. 1 see point 1 letter f GDPR, this website uses the conversion tracking of Adform, 1st sal. K, Wildersgade 10B, 1408 Copenhagen, Denmark. The conversion tracking cookie is set when a user has contact to an ad placed by Adform. These cookies do not contain any information with which users can be personally identified. You can revoke your consent at any time with effect for the future by following this link. Further information on the data protection provisions of Adform can be obtained there.
Use of Facebook Remarketing
Use of rtbLab
9. Sending rating reminders by e-mail
If you have given us your explicit consent during or after your order, we will send your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Colgone (www.trustedshops.com) in order that they can send you a rating reminder by e-mail.
This consent can be revoked at any time by sending a message directly to Trusted Shops or to the means of contact described below
10. How to contact us and your rights
As a person concerned, you have the following rights:
• In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us to the extent described therein;
• In accordance with Art. 16 GDPR, you have the right to demand your personal data stored by us to be immediately completed or corrected.
• In accordance with Art. 17 GDPR, you have the right to demand your personal data stored with us to be deleted unless the further processing of it is not necessary
- to exercise freedom of expression and information
- to fulfil a legal obligation
- for reasons of public interest or it is required
to assert, exercise or defend legal claims
• In accordance with Art. 18 GDPR, you have the right to demand your personal data processed to be restricted, insofar as
- the correctness of the data is denied by you
- the processing is unlawful, but you refuse to delete it
- we no longer need the data, but you do need it to assert, exercise or defend legal claims or
- you have lodged an objection to the processing pursuant to Art. 21 GDPR
• In accordance with Art. 20 GDPR, you have the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request its transfer to another person responsible
• In accordance with Art. 77 GDPR, you have the right to complain to a supervisory authority. Usually you can contact the supervisory authority at your usual place of residence, workplace or at our company headquarter.
If you have any questions regarding the collection, processing or use of your personal data, information, correction, blocking or deletion of data or revocation of consent given or objection to a specific use of data, please contact us directly via the contact data in our imprint or our data protection officer.
Data protection officer
hofstein GmbH has appointed a data protection officer. If you have any questions regarding data protection, please send them to [email protected]
Rright of objection
Insofar as we process personal data as described above in order to protect our legitimate interests, which predominate within the scope of a balance of interests, you can object to this processing with effect for the future. If the data is processed for direct marketing purposes, you can exercise this right at any time as described above. If the processing takes place for other purposes, you are only entitled to a right of objection if there are reasons arising from your particular situation.
After exercising your right of objection, we will not process your personal data further for these purposes, unless we can prove compelling reasons worthy of protection for the processing, which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.
This does not apply if the processing is for direct marketing purposes. Then we will not process your personal data for this purpose.