a) Collection of access data and log files
When you visit our website, we collect the Personal Data that your browser automatically transmits to our server. This is technically necessary for us to display our website and to ensure its stability and security. In this sense, we collect the following data: i) IP address of the requesting computer, ii) date and time of access, iii) name and URL of the file accessed, iv) website from which the access was made (referrer URL), v) browser used, and, if applicable, vi) the operating system of your device as well as the name of your access provider. The legal basis is our legitimate interest.

b) Hosting
The hosting service used by us for the purpose of operating our website is Krystal Hosting. In doing so, Krystal Hosting processes inventory data, contact data, content data, contract data, usage data, metadata, and communication data of customers, interested parties, and visitors of our website and shop on the basis of our legitimate interests in an efficient and secure provision of the website and services in conjunction with the provision of contractual services.

c) Content Management System and eCommerce system
We also use the Content Management System (CMS) and the eCommerce system of Shopify to publish and maintain the created and edited content and texts on our website and to offer our products and to accept orders. The legal basis for this processing is our legitimate interest.

d) Cookies
For the processing of personal data using cookies and similar technologies on our website, please refer to our Cookie Policy. The legal basis for the use of cookies is our legitimate interest or your consent when you agree to the use of technically nonessential cookies, as further explained in our Cookie Policy.

e) Contact options
We process and store the Personal Data provided in the contact inquiry solely for the purpose of processing and responding to your inquiry and contacting you. If you contact us, we will process the data you provide to respond to you and answer your questions and requests. In doing so, the principle of data economy and data avoidance is observed in that you only have to provide the data that we absolutely need from you in order to contact you. These are usually your first and last name, your email address, the topic selection, and the message itself. The legal basis for processing is our legitimate interest, the provision or initiation of a contractual service, and your consent.

f) Shopping with us
We process your first name, last name, e-mail address, telephone number, and billing and shipping address for the delivery of your order and the data related to your contract with us to handle the contractual relationship. The legal basis for processing is the provision of a contractual service.

When you place an order and you give us Personal Data of a third party, you represent and warrant that the Personal Data is up-to-date, complete, and accurate and that you have obtained the third party’s prior consent for our collection, use, and disclosure of their Personal Data for this purpose.

g) User account
It is also possible for you to register for an account. For this purpose, you can choose a password together with your email address, both of which will enable you to log in more easily without having to enter your data again when you make a future purchase or to access your order history. We will hold your data for further orders as long as you have your account with us.

h) Payment Data
If you make a purchase, your payment data will be processed via our payment service provider, Shopify Payments (Shopify). Payment data will solely be processed through Shopify Payments, and we have no access to any payment data you may submit. The legal basis for the provision of a payment system is the establishment and implementation of the contract.

i) Affiliate Registration
Affiliate Registration requires some Personal Data and the acceptance of our Affiliate Program Terms. The following information is collected and stored by us : Name, Email, Password. Full registration is necessary to use our Affiliate services. The processing of your Personal Data is based on your consent.

j) Administration, financial accounting, office organisation, contact management
We process data in the context of administrative tasks as well as the organisation of our business and compliance with legal obligations, such as archiving and accounting. In this regard, we process the same data that we process in the course of providing our contractual services. The processing bases are our legal obligations and our legitimate interest.

k) Marketing
Insofar as you have given us your consent to process your Personal Data for marketing and advertising purposes, we are entitled to contact you for these purposes via the communication channels you have given your consent to. Our marketing generally takes the form of email but may also include other less traditional or emerging channels. These forms of contact will be managed by us or by our contracted service providers. Every directly addressed marketing message sent by us or on our behalf will include a means by which you may unsubscribe or opt out.

l) Promotional use of your data
We use your data within the legally permissible scope for marketing purposes, e.g., to draw your attention to special promotions and discount offers. In addition, we may draw your attention to comparable offers by email, e.g., we may inform you about exclusive sales, promotions, or special events. The legal basis for processing is our legitimate interest.

m) E-mail advertising with newsletter registration
If you register for our newsletter, we use the data required for this purpose or separately provided by you in order to send you our email newsletter on a regular basis on the basis of your consent. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your email address unless you have expressly consented to further use of your data, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

n) Postal advertising
In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g., to send you interesting offers and information about our products by post. This serves to protect our legitimate interests.