Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1
We are pleased that you are visiting our website and thank you for your interest. Below we inform you about how your personal data is handled when you use our website. Personal data is any data by which you can be personally identified.

1.2
The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Ing. Wolfgang Kanduth, MSc MBA MPA, Meisterdrucke, Kärntner Strasse 46, 9586 Finkenstein am Faaker See, Austria, tel.: +43 4257 29415, e-mail: support@meisterdrucke.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3
For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string „https://“ and the padlock symbol in your browser bar.

2) Data Collection When Visiting Our Website

When you use our website for information purposes only, i.e. if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called „server log files“). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our website visited
• Date and time at the moment of access
• Amount of data sent in bytes
• Source/reference from which you reached the page
• Browser used
• Operating system used
• IP address used (where applicable in anonymised form)

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. In doing so, this data passes through the content delivery network described below under section 3, which we use as a processor. No transfer to third parties beyond this takes place. We do, however, reserve the right to check the server log files retrospectively should there be concrete indications of unlawful use.

3) Hosting and Content Delivery Network

Hosting
We operate our website and the associated databases on the infrastructure of Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg (hereinafter "AWS"). The servers used are located within the European Union. On our behalf, AWS processes all data arising from the use of our website, in particular access data, customer account and order data as well as uploaded image files.

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the secure and efficient operation of our offering and, insofar as the processing of orders is concerned, in accordance with Art. 6 (1) lit. b GDPR. We have concluded a data processing agreement with AWS. Further information is available at: https://aws.amazon.com/de/privacy/

AWS-CloudFront (Amazon)
On our website we use the content delivery network (CDN) „AWS CloudFront“ of Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg.

A content delivery network is an online service by means of which, in particular, large media files (such as graphics, page content or scripts) are delivered through a network of regionally distributed servers connected via the internet. The use of Amazon's content delivery network helps us to optimise the loading speeds of our website.

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the secure and efficient provision as well as the improvement of the stability and functionality of our website.

Further information can be found in Amazon's privacy policy at
https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html

Other content delivery networks
Individual program libraries required for the display and operation of our website are obtained via the content delivery networks jsDelivr (operated by Volentio JSD Limited, Suite 2a1, Northside House, Mount Pleasant, Barnet, EN4 9EB, United Kingdom), UNPKG (an open source service delivered via the infrastructure of Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA) and Google Hosted Libraries (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland).

When you access our pages, your browser establishes a direct connection to the servers of these providers and transmits your IP address in the process, since it is technically impossible to deliver the files to your browser without it. In the case of Google Hosted Libraries and UNPKG, a transfer to the USA may occur; the providers base this on the adequacy decision of the European Commission regarding the EU-US Data Privacy Framework as well as, additionally, on standard contractual clauses. For the transfer to jsDelivr in the United Kingdom there is a separate adequacy decision of the European Commission.

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in a uniform presentation and short loading times of our website.

4) Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognised on your next visit (so-called persistent cookies). Where cookies are set, they collect and process certain user information to an individual extent, such as browser and location data as well as IP address values. Persistent cookies are deleted automatically after a specified period, which may differ depending on the cookie. You can find the storage duration of the respective cookie in the overview of the cookie settings of your web browser.

In part, cookies serve to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of consent given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance, or exclude the acceptance of cookies for certain cases or generally. Every browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-loeschen-63947406-40ac-c3b8-57b9-2a946a29ae09
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if cookies are not accepted, the functionality of our website may be limited.

Consent management (Datareporter)
For obtaining, managing and documenting your consent to non-essential cookies and services, we use the consent management tool of Datareporter GmbH, Zeileisstraße 6, 4600 Wels, Austria (hereinafter "Datareporter"). On your first visit, the tool shows you a notice through which you can accept or reject individual categories, and blocks all services requiring consent until you have made your decision. Technically necessary components without which the website does not function are excluded from this.

In order to store your decision and to demonstrate consent in accordance with Art. 7 (1) GDPR, a consent cookie or a corresponding entry in your browser's local storage is processed, as well as your shortened IP address, the time of the decision and its scope. You can change your decision at any time via the link to the cookie settings.

The legal basis for the use of the tool itself is Art. 6 (1) lit. c GDPR in conjunction with our obligation to demonstrate consent, as well as Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in a legally compliant use of cookies. Further information is available at: https://www.datareporter.eu/datenschutz.html

5) Contacting Us

When contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your enquiry or for making contact and for the associated technical administration. The legal basis for the processing of this data is our legitimate interest in answering your enquiry in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted after final processing of your enquiry. This is the case if it can be inferred from the circumstances that the matter concerned has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

6) Data Processing When Opening a Customer Account and for Contract Processing

In accordance with Art. 6 (1) lit. b GDPR, personal data continues to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be effected by sending a message to the above address of the controller. We store and use the data you provide for contract processing. After complete processing of the contract or deletion of your customer account, your data will be restricted having regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or we have reserved further use of the data permitted by law.

7) Use of Single Sign-On Procedures

Google Sign-In
On our website you can create a customer account or sign in using the "Google Sign-In" service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"), provided that you have a Google account. You can recognise the function by the button "Mit Google fortfahren".

The sign-in is only triggered when you click this button. Merely accessing our pages does not transmit any data to Google. After the click you are redirected to Google and sign in there. Google then informs us of the e-mail address stored in your profile as well as your first and last name; we do not request any further profile data. We use this data exclusively to set up and manage your customer account.

The legal basis is your consent in accordance with Art. 6 (1) lit. a GDPR, which you give by using the sign-in function, as well as Art. 6 (1) lit. b GDPR insofar as the processing serves the establishment and performance of the user relationship. You can have the customer account created in this way deleted at any time by sending a message to the controller named at the beginning of this privacy policy.

In the course of the sign-in, personal data may be transferred to the servers of Google LLC in the USA. For the transfer of data from the EU to the USA, Google relies on the adequacy decision of the European Commission regarding the EU-US Data Privacy Framework as well as, additionally, on standard contractual clauses. Please refer to Google's privacy notices for the purpose and scope of the data collection by Google as well as your rights and setting options in this regard for the protection of your privacy: https://policies.google.com/privacy?hl=de

You can view the terms of use for "Google Sign-In" here: https://policies.google.com/terms

8) Data Processing for Order Fulfilment

8.1 - Transmission of image files for order fulfilment via upload function
On our website we offer customers the opportunity to commission the personalisation of products by transmitting image files via an upload function. The submitted image motif is used as a template for the personalisation of the selected product.

Via the upload form on the website, the customer can transmit one or more image files directly from the memory of the end device used to us by automated, encrypted data transfer. We then record, store and use the transmitted files exclusively for the production of the personalised product within the meaning of the respective service description on our website. Insofar as the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all of the processing operations just described are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) lit. b GDPR. We delete image files without an associated order automatically after 3 months. After an order has been dispatched, we retain the associated image files for a further 3 months so that a reprint or a complaint remains possible; thereafter they are deleted automatically and completely, including all backup copies.

8.2 To process your order, we work with the service provider(s) listed below, who support us wholly or partly in the performance of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

The personal data collected by us is passed on, in the course of contract processing, to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods. We pass on your payment data, in the course of payment processing, to the commissioned credit institution, insofar as this is necessary for payment processing. Where payment service providers are used, we inform you about this explicitly below. The legal basis for passing on the data is Art. 6 (1) lit. b GDPR.

8.3 Transfer of personal data to shipping service providers

To deliver your order, we pass on your data to the transport or freight forwarding company commissioned in each case. Depending on the country of destination, the size and the weight of the consignment, we use different service providers, including parcel services and, for bulky consignments, freight forwarders. We will tell you at any time on request which company carried your specific consignment; it is also named in the dispatch confirmation for your order.

The name of the recipient and the delivery address are passed on. The legal basis is Art. 6 (1) lit. b GDPR, since delivery is not possible without this information.

We only pass on your e-mail address and, if collected, your telephone number to the transport company if you have given your express consent to this during the ordering process in accordance with Art. 6 (1) lit. a GDPR. This data serves exclusively to arrange a delivery date, to announce the delivery and to transmit status information on the delivery. Without your consent this transfer does not take place; a delivery announcement is then not possible.

You can withdraw your consent at any time with effect for the future vis-à-vis the controller designated above or vis-à-vis the respective transport company.

- Sendcloud
For the creation of shipping labels and the handover of consignment data to the respective transport company, we use the shipping platform Sendcloud B.V., Stadhuisplein 10, 5611 EM Eindhoven, Netherlands (hereinafter "Sendcloud"). For this purpose we transmit the name of the recipient, the delivery address and, where necessary for the delivery notification, the e-mail address and telephone number. Sendcloud processes this data exclusively on our behalf; the legal basis is Art. 6 (1) lit. b GDPR. Via Sendcloud, the data is passed on to the transport company commissioned in each case. Further information is available at: https://www.sendcloud.de/datenschutz/

8.4 Use of payment service providers

- Mollie
If you choose a payment method of the payment service provider Mollie, payment processing is carried out via the payment service provider Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands, to whom we pass on the information you provide during the ordering process together with the information about your order (name, address, IBAN, BIC, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Mollie and only insofar as this is necessary for that purpose.

- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or „instalment payment“ via PayPal, we pass on your payment data in the course of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer is carried out in accordance with Art. 6 (1) lit. b GDPR and only insofar as this is necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or „instalment payment“ via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data is included in the calculation of the score values, among other things but not exclusively. For further data protection information, including on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data insofar as this is necessary for contractual payment processing.

- Stripe
If you select one of the payment methods offered via Stripe during the ordering process (including credit card, Apple Pay, Klarna, Amazon Pay, Alipay, WeChat Pay, MobilePay, Multibanco, Satispay, Billie or Revolut Pay), payment processing is carried out via the payment service provider Stripe Payments Europe, Limited, 1 Wilton Park, Wilton Place, Dublin 2, D02 FX04, Ireland (hereinafter "Stripe"). We pass on to Stripe the information provided during the ordering process together with the information about your order (in particular name, address, e-mail address, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b GDPR. You enter your complete payment data, such as the credit card number, directly with Stripe; it does not become known to us.
The transfer is carried out exclusively for the purpose of payment processing and only insofar as this is necessary for that purpose. To provide the service, Stripe also uses companies of the Stripe group based in the USA; the transfer is based on the standard contractual clauses adopted by the European Commission. For the Klarna payment method, the respective provider reserves the right to carry out a credit check.
Further information on data protection at Stripe is available at: https://stripe.com/de/privacy

9) Newsletter

If you subscribe to our newsletter, we process your e-mail address and, if provided, your name in order to send you regular information about our offering.

Registration takes place using the so-called double opt-in procedure: after your registration you receive an e-mail in which you must expressly confirm receipt. Only then do we add you to the distribution list. The legal basis is your consent in accordance with Art. 6 (1) lit. a GDPR.

To demonstrate consent in accordance with Art. 7 (1) GDPR, we store the time of registration, the time of confirmation and the IP address used in the process. We retain this evidence for the duration of the subscription and beyond that for the duration of the statutory limitation periods.

For dispatch we use the service provider MailerLite Limited, 88 Harcourt Street, Dublin 2, D02 DK18, Ireland (hereinafter "MailerLite"), to whom we pass on your e-mail address and the associated administrative data in accordance with Art. 6 (1) lit. a GDPR. MailerLite processes this data exclusively on our behalf. Further information is available at: https://www.mailerlite.com/legal/privacy-policy

You can withdraw your consent at any time with effect for the future, either via the unsubscribe link at the end of every newsletter e-mail or by sending a message to the controller named at the beginning of this privacy policy. After withdrawal we delete your data from the distribution list, unless we are required to retain it further to demonstrate the consent previously given.

10) Contacting You for a Review Reminder

Own review reminder (not sent by a customer review system)
We use your e-mail address for a single reminder to submit a review of your order for the review system used by us, provided that you have given us your express consent to this during or after your order in accordance with Art. 6 (1) lit. a GDPR.

You can withdraw your consent at any time by sending a message to the controller responsible for the data processing. You also have the right to object at any time to the processing of your data for the purposes of direct marketing in accordance with Art. 21 (2) GDPR.

11) Use of Review and Trust Seal Graphics

ProvenExpert widget
On our website we use the seal of ProvenExpert, a widget of Expert Systems AG, Quedlinburger Straße 1, 10589 Berlin (hereinafter "ProvenExpert"). When you visit our website, dynamic content (such as the current rating of the shop or the certificate) is embedded into the page from ProvenExpert's servers. In this process your IP address is transmitted to ProvenExpert, since it is technically impossible to deliver the graphic to your browser without it.

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in presenting independent customer reviews and the associated building of trust.

Further information on data protection at ProvenExpert is available at: https://www.provenexpert.com/de-de/datenschutzbestimmungen/

12) Online Marketing

12.1 Google Ads conversion tracking
This website uses the online advertising programme "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads offering in order to draw attention to our offers on external websites with the help of advertising material and to determine how successful individual advertising measures are.

The cookie for conversion tracking is set when a user clicks on an Ads advertisement placed by Google. These cookies generally lose their validity after 30 days and do not serve to identify individuals. If the user visits certain pages of our website and the cookie has not yet expired, we and Google can recognise that the user clicked on the advertisement and was redirected to this page. We do not receive any information by which users can be personally identified.

Further information about Google's data protection provisions is available at: https://policies.google.com/privacy?hl=de

You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the cookie consent tool provided on the website.

12.2 ADCELL partner programme
We participate in the "ADCELL" partner programme of Firstlead GmbH, Rosenfelder Straße 15-16, 10315 Berlin (hereinafter "ADCELL"). Within the framework of its services, ADCELL stores cookies on users' end devices to document transactions when they reach our website via a partner link.

The information generated by cookies and tracking pixels about the use of this website, including the IP address, as well as about the completion of an order, including the order number and order value, is transmitted to a server of ADCELL and stored there. ADCELL can thereby recognise via which partner link a visit and, where applicable, a purchase came about, which forms the basis for the settlement of the commission.

The use is based exclusively on your consent in accordance with Art. 6 (1) lit. a GDPR, which you give in the cookie consent tool.

Further information on data protection at ADCELL is available at: https://www.adcell.de/datenschutz

You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the cookie consent tool provided on the website.

13) Web Analytics Services

Google Analytics 4
This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"). Google Analytics uses cookies and similar technologies that enable an analysis of your use of the website. The information generated in the process about your use of this website is transmitted to a Google server and stored there; a transfer to servers of Google LLC in the USA may also occur in this process.

Google Analytics 4 shortens IP addresses within the member states of the European Union and in the other states party to the Agreement on the European Economic Area before they are stored. Complete IP addresses are not stored.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services connected with website use.

Google Analytics also enables the creation of statistics with information about the age, gender and interests of site visitors. This allows the definition and differentiation of user groups for the purpose of target-group-optimised alignment of marketing measures. The data sets recorded in this way cannot be attributed to any specific person.

If you have activated personalised advertising in your Google account and have linked your devices to that account, Google can, where corresponding consent is given, evaluate user behaviour across devices. In this process we do not receive any personal data from Google, but only statistics created from it. You can deactivate the "personalised advertising" function in the settings of your Google account: https://support.google.com/ads/answer/2662922?hl=de

All of the processing described above, in particular the setting of cookies and the reading of information on the end device used, is only carried out if you have given us your express consent to this in accordance with Art. 6 (1) lit. a GDPR. Without this consent, Google Analytics is not used during your site visit.

You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the cookie consent tool provided on the website. We have concluded a data processing agreement with Google. For the transfer of data from the EU to the USA, Google relies on the adequacy decision of the European Commission regarding the EU-US Data Privacy Framework as well as, additionally, on standard contractual clauses.

Further information on Google Analytics can be found here: https://policies.google.com/privacy?hl=de

Microsoft Clarity
This website uses Microsoft Clarity, an analytics service of Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland (hereinafter "Microsoft"). Clarity records interactions with our website, such as mouse movements, scrolling behaviour and clicks, and presents them in aggregated form as heatmaps and session recordings. We use this evaluation to identify usability problems and to improve the website.

Your IP address and information about your end device are also processed in this context. Entries in form fields are masked by Clarity by default and are not transmitted in plain text. Personal data may be transferred to servers of Microsoft in the USA. For the transfer of data from the EU to the USA, Microsoft relies on the adequacy decision of the European Commission regarding the EU-US Data Privacy Framework as well as, additionally, on standard contractual clauses.

The use is based exclusively on your express consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool provided on the website.

Further information can be found in Microsoft's privacy statement: https://privacy.microsoft.com/de-de/privacystatement

14) Retargeting / Remarketing / Referral Advertising

Google Ads Remarketing

Our website uses the functions of Google Ads Remarketing, by means of which we advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your end device which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. The use is based exclusively on your consent in accordance with Art. 6 (1) lit. a GDPR, which you give in the cookie consent tool.

Data processing beyond this only takes place if you have agreed with Google that your internet and app browsing history may be linked by Google to your Google account and that information from your Google account may be used to personalise advertisements that you view on the web. If, in this case, you are logged in to Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google to Google Analytics data in order to form target groups. In the course of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA. For the transfer of data from the EU to the USA, Google relies on the adequacy decision of the European Commission regarding the EU-US Data Privacy Framework as well as, additionally, on standard contractual clauses.

You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available under the following link:
https://www.google.com/settings/ads/onweb/

You can view further information and the data protection provisions relating to advertising and Google here:
https://www.google.com/policies/technologies/ads/

You can withdraw the consent you have given at any time with effect for the future. To exercise your withdrawal, deactivate this service in the cookie consent tool provided on the website.

15) Tools and Miscellaneous

15.1 Google Web Fonts

For the uniform display of fonts, this page uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you use must establish a connection to Google's servers. Personal data may also be transferred to the servers of Google LLC in the USA in this process. For the transfer of data from the EU to the USA, Google relies on the adequacy decision of the European Commission regarding the EU-US Data Privacy Framework as well as, additionally, on standard contractual clauses. In this way, Google becomes aware that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. If your browser does not support web fonts, a standard font is used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

15.2 Google reCAPTCHA

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). This function serves above all to distinguish whether an entry is made by a natural person or improperly by machine and automated processing. The service includes sending the IP address and, where applicable, further data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in establishing individual personal responsibility on the internet and in avoiding misuse and spam. In the course of using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the USA. For the transfer of data from the EU to the USA, Google relies on the adequacy decision of the European Commission regarding the EU-US Data Privacy Framework as well as, additionally, on standard contractual clauses.

Further information on Google reCAPTCHA as well as Google's privacy policy can be viewed at: https://www.google.com/intl/de/policies/privacy/

15.3 Search function (Amazon OpenSearch Service)

For searching for articles via the search field as well as for navigation and filters, we use the Amazon OpenSearch Service of Amazon Web Services EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg. The service runs on servers located within the European Union.

For this purpose the search query and certain technical user information (such as a session identifier) are processed. No merging with your customer account takes place.

Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing a fault-tolerant search and in making our products easier to find in the shop.

Further information on data protection at Amazon Web Services can be found here: https://aws.amazon.com/de/privacy/


15.4 Map display during the ordering process

During the ordering process we show you a map view to check your delivery address, which we embed via Google Maps of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter "Google"). In this process the delivery address you have entered is transmitted to Google, because the map cannot be displayed without this information. In addition, Google receives your IP address.

Processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in showing you the address you have entered for checking before you submit the order, thereby avoiding incorrect deliveries. Personal data may be transferred to the servers of Google LLC in the USA in this process. For the transfer of data from the EU to the USA, Google relies on the adequacy decision of the European Commission regarding the EU-US Data Privacy Framework as well as, additionally, on standard contractual clauses.

Please refer to Google's privacy notices for further information: https://policies.google.com/privacy?hl=de

16) Rights of the Data Subject

Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

- Right of access in accordance with Art. 15 GDPR: You have in particular a right of access to your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the envisaged storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed which safeguards exist in accordance with Art. 46 GDPR when your data is transferred to third countries;

- Right to rectification in accordance with Art. 16 GDPR: You have a right to the immediate rectification of inaccurate data concerning you and/or the completion of your incomplete data stored by us;

- Right to erasure in accordance with Art. 17 GDPR: You have the right to demand the erasure of your personal data where the requirements of Art. 17 (1) GDPR are met. This right does not exist, however, in particular where processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

- Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to demand the restriction of the processing of your personal data for as long as the accuracy of your data contested by you is being verified, if you refuse the erasure of your data on account of unlawful data processing and instead demand the restriction of the processing of your data, if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data once the purpose has been achieved, or if you have lodged an objection on grounds relating to your particular situation, for as long as it has not yet been established whether our legitimate grounds prevail;

- Right to notification in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing vis-à-vis the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.

- Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format or to demand the transmission to another controller, insofar as this is technically feasible;

- Right to withdraw consent given in accordance with Art. 7 (3) GDPR: You have the right to withdraw consent once given to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal;

- Right to lodge a complaint in accordance with Art. 77 GDPR: If you are of the opinion that the processing of the personal data concerning you infringes the GDPR, you have the right - without prejudice to any other administrative or judicial remedy - to lodge a complaint with a supervisory authority, in particular in the member state of your residence, your place of work or the place of the alleged infringement. The supervisory authority responsible for us is the Austrian Data Protection Authority (Österreichische Datenschutzbehörde), Barichgasse 40-42, 1030 Vienna, https://www.dsb.gv.at.

17) Right to Object

If, in the course of a balancing of interests, we process your personal data on the basis of our overriding legitimate interest, you have the right at any time to object to this processing with effect for the future on grounds relating to your particular situation.

If you exercise your right to object, we will cease the processing of the data concerned. Further processing remains reserved, however, if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

If your personal data is processed by us in order to conduct direct marketing, you have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising. You can exercise the objection as described above.

If you exercise your right to object, we will cease the processing of the data concerned for direct marketing purposes.

18) Duration of Storage of Personal Data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the processing purpose and - where applicable - additionally on the basis of the respective statutory retention period (e.g. commercial and tax law retention periods).

Where personal data is processed on the basis of express consent in accordance with Art. 6 (1) lit. a GDPR, this data is stored until the data subject withdraws their consent.

Where statutory retention periods exist for data processed in the context of legal or quasi-legal obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for the performance or initiation of a contract and/or there is no continuing legitimate interest on our part in its further storage.

Where personal data is processed on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purposes of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object in accordance with Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this policy about specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

For the third-party services named in this policy, the storage period is governed by the requirements of the respective provider. The decisive factors are the duration of your consent, the lifetime of the cookies used as set by the provider, and the period the service requires to fulfil the purpose described in each case. Further details can be found in the providers' privacy notices linked above.

Version of this privacy policy: 17 August 2026