Privacy Policy

Data protection

General information about the processing of your data

We are legally obliged to inform you about the processing of your personal data (hereinafter referred to as "data") when you use our website. This privacy policy informs you about the details of the processing of your data and your legal rights in this regard. For terms such as "personal data" or "processing", the legal definitions in Art. 4 UK GDPR apply. We reserve the right to adapt the privacy policy with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or the corresponding case law. We recommend that you read the privacy policy from time to time and keep a printout or copy for your records.

Scope

This privacy policy applies to all pages of https://kijimea.co.uk/. It does not apply to any linked websites or internet presences of other providers.

Responsible person

The person responsible for the processing of personal data within the scope of this data protection declaration is:

Synformulas GmbH
Am Haag 14
82166 Gräfelfing
Germany

E-Mail: info@kijimea.co.uk

UK appointed Representative in accordance with Art 27 UK GDPR:

For food supplements:

GEE EXPANDLY LTD

T/A GEE Compliance

Botley Mills

Botley

Southampton

SO30 2GB

United Kingdom

For medical device:

Qserve Group UK, Ltd.

282 Farnborough Road,

Farnborough,

GU14 7NA

United Kingdom

Questions about data protection

If you have any questions about data protection with regard to our company or our website, you can contact us using the contact details provided in the “Responsible Person” section.

Security

We have taken comprehensive technical and organisational precautions to protect your personal data from unauthorised access, misuse, loss and other external disruptions. To this end, we regularly review our security measures and adapt them to the state of the art.

Your rights

You have the following rights with regard to the personal data concerning you, which you can assert against us:

Right to information: You can request information about your personal data that we process in accordance with Art. 15 UK GDPR.
Right to rectification: If the information concerning you is no longer correct, you can request rectification in accordance with Art. 16 UK GDPR. If your data is incomplete, you can request that it be completed.
Right to erasure: You can request the erasure of your personal data in accordance with Art. 17 UK GDPR.
Right to restriction of processing: In accordance with Art. 18 UK GDPR, you have the right to request restriction of the processing of your personal data.
Right to object to processing: You have the right to object at any time to the processing of your personal data based on Art. 6 Paragraph 1 Clause 1 Letter e) or Letter f) UK GDPR, in accordance with Art. 21 Paragraph 1 UK GDPR, for reasons arising from your particular situation. In this case, we will not process your data any further unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms. Further processing will also take place if the processing serves to assert and exercise or defend against legal claims (Art. 21 Paragraph 1 UK GDPR). In addition, according to Art. 21 Paragraph 2 UK GDPR, you have the right to object at any time to the processing of your personal data for the purposes of direct advertising; this also applies to any profiling insofar as it is associated with such direct advertising. We draw your attention to the right of objection in this data protection declaration in connection with the respective processing.
Right to withdraw your consent: If you have given your consent for processing, you have the right to withdraw your consent in accordance with Art. 7 (3) UK GDPR.
Right to data portability: You have the right to receive the personal data concerning you that you have provided to us in a structured, common and machine-readable format ("data portability") and the right to have this data transmitted to another controller if the requirements of Art. 20 (1) (a) and (b) UK GDPR are met (Art. 20 UK GDPR).

You can exercise your rights by sending a message to the contact details provided in the “Responsible Person” section.

If you believe that the processing of your personal data violates data protection law, you also have the right under Art. 77 UK GDPR to complain to the Information Commissioner’s Office in the United Kingdom.

Use of our website

You can generally use our website for purely informational purposes without disclosing your identity. When you access individual pages of the website in this way, only access data is transmitted to our web space provider so that the website can be displayed to you. The following data is processed in this process:

Browser type/version,
Operating system used,
Language and version of the browser software,
Date and time of access,
Hostname of the accessing device,
IP address,
Content of the request (specific website),
Access status/HTTP status code,
Websites accessed through the website
Referrer URL (the previously visited website),
Message whether the call was successful and
Amount of data transferred.

The temporary processing of this data is necessary in order to technically enable the process of a website visit and the delivery of the website to your device. The access data is not used to identify individual users and is not merged with other data sources. Further storage in log files takes place in order to ensure the functionality of the website and the security of the information technology systems. The legal basis for the processing is Art. 6 Paragraph 1 Clause 1 Letter f) UK GDPR. Our legitimate interests lie in ensuring the functionality of the website as well as the integrity and security of the website. Storing access data in log files, in particular the IP address, for a longer period of time enables us to detect and ward off misuse. This includes, for example, warding off requests that overload the service or any bot use. The access data is deleted as soon as it is no longer required to achieve the purpose of its processing. In the case of data collection for the provision of the website, this is the case when you stop visiting the website. The log data is generally stored directly and exclusively accessible to administrators and is deleted after seven days at the latest.

You can object to the processing. You have the right to object for reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Responsible Person" section.

Device information

In addition to the access data mentioned above, technologies are used when using the website that store information on your end device (e.g. desktop PC, laptop, tablet and smartphone) or access information that is already stored on your end device. These technologies can be, for example, so-called cookies, pixels, local storage, session storage, indexed DB or browser fingerprinting technologies. These technologies can be used to recognize you across devices and websites.

Technically necessary device information

Some elements of our website serve the sole purpose of transmitting a message (or are absolutely necessary to make our website or individual functionalities of our website available to you: Language settings,

Items in the shopping cart and
Login information.

The items are deleted after storage is no longer required.

You can prevent processing by making the appropriate settings in your browser software. For elements whose storage period is not limited to the session, you can delete the elements in the settings of your browser software after your session has ended.

Technically unnecessary device information

We also use elements on the website that are not technically necessary. In accordance with legal requirements, we only use these technologies with your consent. Information on the individual technologies and functions can be found in our "Cookie Settings" and organized according to the individual functions in the information below:

Consent management platform Usercentrics

We use the consent tool “Usercentrics” to request consent for the processing of your end device information and personal data using cookies or other tracking technologies on our website. With the help of “Usercentrics”, you have the option of consenting to or rejecting the processing of your end device information and personal data using cookies or other tracking technologies for the purposes listed in “Usercentrics”. Such processing purposes can include the integration of external elements, integration of streaming content, statistical analysis, reach measurement and personalized advertising. With the help of “Usercentrics”, you can give or refuse your consent for all processing purposes or give or refuse your consent for individual purposes or individual third-party providers. The settings you have made can also be changed by you retrospectively. The purpose of integrating “Usercentrics” is to allow users of our website to decide whether cookies and similar functionalities are set and to offer the option of changing settings that have already been made as part of further use of our website. When using “Usercentrics”, we process personal data and information about the devices used. Your data is also sent to Usercentrics (Usercentrics GmbH, Sendlinger Straße 7, 80144 Munich, Germany). Information about the settings you have made is also stored on your device. The legal basis for the processing is Art. 6 Para. 1 Clause 1 Letter c) UK GDPR in conjunction with Art. 7 Para. 1 UK GDPR, insofar as the processing serves to fulfill the legally standardized proof obligations for granting consent. Otherwise, Art. 6 Para. 1 Clause 1 Letter f) UK GDPR is the relevant legal basis. Our legitimate interests in the processing lie in storing user settings and preferences with regard to the use of cookies and evaluating consent rates. Consent is requested again twelve months after the user settings have been made. The user settings you have made will then be saved again for this period, unless you first delete the information about your user settings in the designated device capacities.

You can object to the processing if the processing is based on Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. You have the right to object for reasons arising from your particular situation. You can prevent processing by deleting the history and website data in the settings of your browser software or by opening the browser you are using in "private mode".

Contacting our company

When you contact our company, e.g. by email or via the contact form on the website, the personal data you provide will be processed by us in order to answer your query. In order to process queries via the contact form, it is essential that you provide a first and last name and a valid email address. When the message is sent to us, your IP address and the date and time of registration are also processed. The legal basis for processing is Art. 6 Para. 1 Clause 1 Letter f) UK GDPR or Art. 6 Para. 1 Clause 1 Letter b) UK GDPR if the contact is aimed at concluding a contract. If the query is aimed at concluding a contract, the provision of your data is necessary and mandatory. If the data is not provided, it is not possible to conclude or implement a contract and process the query. The other data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems. We delete the data collected in this way after processing is no longer required – usually two years after communication has ended – or, if necessary, restrict processing to compliance with existing statutory retention periods.

Processing for contractual purposes

We process your personal data if and to the extent that this is necessary for the initiation, establishment, implementation and/or termination of a legal transaction with our company. The legal basis for this is Art. 6 Paragraph 1 Clause 1 Letter b) of UK GDPR. The provision of your data is necessary for the conclusion of the contract and you are contractually obliged to make your data available. If your data is not provided, it is not possible to conclude and/or implement the contract. After the purpose has been achieved (e.g. contract processing), the personal data will be blocked for further processing or deleted unless we are authorized to further process it based on consent you have given (e.g. consent to the processing of the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorization (e.g. authorization to send direct advertising) or due to legitimate interests (e.g. retention to enforce claims).

Your personal data will be passed on to third parties if

it is necessary for the establishment, execution or termination of legal transactions with our company (e.g. when passing on data to a payment service provider/a shipping company to process a contract with you), in accordance with Art. 6 Para. 1 Clause 1 Letter b) of UK GDPR, or
a subcontractor or vicarious agent whom we use exclusively to provide the offers or services you have requested requires this data (such assistants are only authorized to process the data to the extent that this is necessary for the provision of the offer or service, unless you are expressly informed otherwise), or
an enforceable official order (Article 6 (1) sentence 1 lit. c) UK GDPR) exists, or
there is an enforceable court order (Article 6 (1) sentence 1 lit. c) UK GDPR), or
we are obliged to do so by law (Art. 6 para. 1 sentence 1 lit. c) UK GDPR), or
the processing is necessary to protect the vital interests of the data subject or of another natural person (Article 6 (1) sentence 1 lit. d) UK GDPR), or
it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Article 6 (1) sentence 1 lit. e) UK GDPR), or
we can rely on our overriding legitimate interests or those of a third party to pass on the data (Article 6 (1) sentence 1 lit. f) UK GDPR).

Your personal data will not be passed on to other persons, companies or bodies unless you have effectively consented to such a transfer. The legal basis for the processing is then Art. 6 Paragraph 1 Clause 1 Letter a) of UK GDPR. In this data protection information, we will draw your attention to the respective recipients in relation to the respective processing procedure.

Online shop

If you would like to place an order in our online shop, it is necessary and obligatory for the initiation and conclusion of the contract that you provide personal data such as your first and last name, your address and your email address. The mandatory information required for order and contract processing is marked separately; further information is provided voluntarily. We process your data for order processing and for this purpose will in particular forward payment data to the payment service provider you have chosen or to our house bank. The legal basis for the processing is Art. 6 Paragraph 1 Clause 1 Letter b) of UK GDPR. The provision of your data is necessary and obligatory for the conclusion or implementation of the contract. If your data is not provided, the conclusion and/or implementation of the contract is not possible. In order to prevent unauthorised third parties from accessing your personal data, the ordering process on the website is encrypted using SSL technology.

You can voluntarily create a customer account in which we will save your data for future visits to the website. When you create a customer account, the data you provide will be processed. You can edit or delete all other data yourself in the customer account after successfully logging in.

We delete the data collected in this context once storage is no longer required, or restrict processing if there are statutory retention periods. Due to mandatory commercial and tax law provisions, we are obliged to retain your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

Shop system "Shopify"

We process your data to carry out orders via the “Shopify” shop system of the provider “Shopify” (Shopify International Ltd. c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32. Ireland and Shopify, Inc., 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada; hereinafter: “Shopify”), so that the data provided as part of the order, such as first and last name, address, email address and information from your shopping cart, are also processed by “Shopify”. The legal basis for the use of “Shopify” is Art. 6 Para. 1 Clause 1 Letter f) of UK GDPR. Our legitimate interests in the use of “Shopify” lie in offering customer-friendly and speedy order processing. The data processed in this context will be deleted as soon as it is no longer required for the purpose of processing"Shopify" also processes your data in Canada and - depending on the service provider used - also in the USA. The legal basis for the transfer to Canada is the adequacy decision of the EU Commission. We will be happy to provide you with a copy of the clauses on request. Further information on the purpose, scope of processing and data transfer to third countries by "Shopify" can be found at https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

Some of the sub-service providers and technical infrastructures used by Shopify are located in the USA. For data transfers to the USA, there is an adequacy decision of the EU Commission of 10 July 2023 within the framework of the EU-U.S. Data Privacy Framework (DPF). Shopify is certified according to the DPF. Should a transfer to non-certified service providers take place in individual cases, Shopify also relies on standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR. Further information on data protection at Shopify can be found at:

https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

You can object to the processing if the processing is based on Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. You have the right to object for reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Responsible Person" section.

Fraud prevention

The fraud prevention tool “minFraud” from the provider MaxMind, Inc. (51 Pleasant Street #1020 Malden, MA 02148, USA; hereinafter: “MaxMind”) is integrated into “Shopify Plus” via a programming interface (API - Application Programming Interface) in our shop system. For the purpose of fraud prevention, “minFraud” processes first and last name, IP address, email address, telephone number, payment details, billing address, delivery address, end device information such as location and time, and information about the hosting provider. The “minFraud” service is a data return service that helps companies prevent online fraud by providing risk assessments and risk data for online transactions. The above-mentioned data collected when ordering is forwarded to the “minFraud” service for analysis, which then transmits the data back with a risk assessment. Based on reputation information based on a customer network (the "minFraud" network) and billions of transactions, a scoring value is created that indicates how high the probability of fraud is in the transaction being checked. The legal basis for this downstream data processing is Art. 6 Paragraph 1 Clause 1 Letter f) UK GDPR. Our legitimate interests lie in the prevention of attempted fraud. Using "minFraud" we can check digital transactions in advance when making purchases in the web shop and thus prevent fraud. This enables us to avert financial damage to our company and help prevent criminal offenses. Your data processed in this context will be deleted as soon as it is no longer required for the purpose of processing.

“MaxMind” also processes your data in the USA. The USA ensures an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-US Data Privacy Framework for of personal data transfers between the UK and the USA. However, in the event of improper processing of your data by MaxMind, you are guaranteed all legal remedies, including free, independent dispute resolution through arbitration.

Further information on the purpose and scope of processing by “MaxMind” can be found at https://www.maxmind.com/en/privacy-policy.

You can object to the processing if the processing is based on Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. You have the right to object for reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Responsible Person" section.

Customer account

To create a customer account independent of an order via our online shop, you must register with the following information:

E-mail address,
Self-selected password,
First and Last Name,
Username and
Address.

There is no obligation to use your real name; you are free to use a pseudonym. Furthermore, your IP address and the date and time of registration are processed at the time of registration.

Furthermore, your data will be deleted as soon as it is no longer required to achieve the purpose of processing. This is the case for the data collected during the registration process if the registration on the website is canceled or changed.

The following functions are available in the login area:

Change your profile data,
View orders/bookings made and
Managing your newsletter subscription.

If you use the login area of the website, for example to edit your profile data or to view orders you have placed, we also process the data about you required to initiate or fulfill the contract, in particular address data and information on the method of payment.

The legal basis for processing is Art. 6 Paragraph 1 Clause 1 Letter b) of UK GDPR. The provision of your data is necessary and obligatory for the conclusion or implementation of the contract. If you do not provide your data, you will not be able to register or use the login area, i.e. the conclusion and/or implementation of the contract is not possible.

Your data will be deleted as soon as it is no longer required for the purpose of processing. This is the case after deletion of the customer account, unless we are legally obliged to retain the data. In this case, we will restrict processing. Due to mandatory commercial and tax law regulations, we are obliged to retain your address, payment and order data for a period of up to ten years.

Payment Service Provider (PSP)

Shopify Payments

The payment options Credit Card, Google Pay and Apple Pay are integrated via “Shopify Payments” (Shopify International Ltd. Attn: Data Protection Officer c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32. Ireland and Shopify Inc. ATTN: Chief Privacy Officer, 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada; hereinafter: “Shopify”). If you select one of the payment options mentioned, your payment data provided during the booking process along with the information about your booking will be passed on to “Shopify Payments” for the purpose of payment processing. Processing is carried out on the basis of Art. 6 Para. 1 S. 1 lit. b) UK GDPR. The provision of payment data is necessary and mandatory for the conclusion or implementation of the contract. If the payment data is not provided, the conclusion and/or implementation of the contract using the payment methods mentioned is impossible. "Shopify" also processes your data in Canada and - depending on the service provider used - also in the USA. The legal basis for the transfer to Canada is the adequacy decision of the EU Commission. We will be happy to provide you with a copy of the clauses on request. Further information on the purpose, scope of processing and data transfer to third countries by "Shopify" can be found at https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

You can object to the processing if the processing is based on Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. You have the right to object for reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Responsible Person" section.

Shop Pay

The payment checkout option “Shop Pay” is a checkout feature available (Shopify International Ltd., incorporated in Ireland under registration number 560279, with its registered offices located at 2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, VAT number IE 3347697KH. 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada; hereinafter: “Shopify”). [MH1] [MH2] “Shop Pay” is Shopify’s rapid checkout feature, which has been designed to streamline the online purchase process on Shopify. If you select “Shop Pay”, your payment data provided during the booking process along with the information about your booking will be passed on to “Shop Pay” and “Shopify Payments” for the purpose of payment processing. Processing is carried out via the payment gateway “Shopify Payments[MH3] ” on the basis of Art. 6 Para. 1 S. 1 lit. b) UK GDPR. The provision of payment data is necessary and mandatory for the conclusion or implementation of the contract. If the payment data is not provided, the conclusion and/or implementation of the contract using the payment methods mentioned is impossible. “Shopify” also processes your personal data in Canada. The legal basis for the transfer to Canada is the adequacy decision of the UK Government.[MH4] Further information on the purpose and scope of processing by “Shop Pay” can be found at Shopify Legal - Shopify UK.

Credit card payment

For the purpose of payment processing, we pass on the payment data required for the credit card payment to the credit institution commissioned with the payment or to the payment and billing service provider commissioned by us, if applicable. The processing is carried out on the basis of Art. 6 Paragraph 1 Clause 1 Letter b) of UK GDPR. The provision of your payment data is necessary and obligatory for the conclusion or implementation of the contract. If the payment data is not provided, it is not possible to conclude and/or implement the contract using a credit card payment. The data required for payment processing is transmitted securely using the "SSL" procedure and processed exclusively for payment processing. We delete the data collected in this context after storage is no longer required or restrict processing if statutory retention periods exist. Due to mandatory commercial and tax law regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

Apple Pay

On our website we offer you the option of paying via “Apple Pay” (Apple Distribution International Limited, HOLLYHILL INDUSTRIAL ESTATE CORK, T23 YK84, Ireland and Apple, Inc., Cupertino, CA 95014, USA; hereinafter: “Apple” and “Apple Pay”). If you select this payment method, payment will be processed via “Apple Pay”. We will pass on your payment details provided during the booking process, along with information about your booking, to “Apple Pay” for the purpose of processing the payment. Processing is carried out on the basis of Art. 6 Paragraph 1 Clause 1 Letter b) of UK GDPR. The provision of payment details is necessary and mandatory for the conclusion or implementation of the contract. If the payment details are not provided, the conclusion and/or implementation of the contract using the “Apple Pay” payment method is not possible. We will delete the data collected in this context once storage is no longer required or restrict processing if there are statutory retention periods. Due to mandatory commercial and tax law regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

"Apple" may also process your data in the USA.

Personal data relating to individuals in the European Economic Area, the United Kingdom and Switzerland is controlled by Apple Distribution International Limited in Ireland. Apple's international transfer of personal data collected in the European Economic Area, the United Kingdom and Switzerland to third countries such as the United States is governed by Standard Contractual Clauses. Apple maintains additional technical and organisational safeguards to ensure the protection of this data in third countries. If you have any questions or would like a copy of Apple's standard contractual clauses, please contact .

Google Pay

On our website we also offer you the option of paying via “Google Pay” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC 1600 Amphitheatre Parkway Mountain View, CA 94043, USA). If you select this payment method, payment will be processed via “Google Pay”. We will pass on your payment details provided during the booking process, along with information about your booking, to “Google Pay” for the purpose of processing the payment. Processing is carried out on the basis of Art. 6 Paragraph 1 Clause 1 Letter b) of UK GDPR. The provision of payment details is necessary and mandatory for the conclusion or implementation of the contract. If the payment details are not provided, the conclusion and/or implementation of the contract using the “Google Pay” payment method is impossible. We will delete the data collected in this context once storage is no longer required, or restrict processing if there are statutory retention periods. Due to mandatory commercial and tax law regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

“Google” also processes your personal data in the USA. The USA ensures an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-US Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Google, you are guaranteed all legal remedies, including free, independent dispute resolution through arbitration.

PayPal

We also offer you the option of paying via “PayPal” on our website (PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg and PayPal Holdings, Inc., 2211 North First Street · 95114 San José, California, USA; hereinafter: “PayPal”). To pay, you must log into your “PayPal” account. Your payment details provided to “PayPal” will be processed by “PayPal” for the purpose of processing the payment. You can find more information about data processing by “PayPal” here: PayPal Privacy Statement

In order to be able to allocate your payment, we process your delivery/billing address, email address and the selected payment method. We delete the data arising in this context after storage is no longer required, or restrict processing if there are statutory retention periods. Due to mandatory commercial and tax law regulations, we are obliged to store your address, payment and order data for a period of up to ten years. Two years after termination of the contract, we restrict processing and reduce processing to compliance with existing legal obligations.

The legal basis is Art. 6 Paragraph 1 Clause 1 Letter b) of UK GDPR. The provision of your payment details is necessary and obligatory for the conclusion or implementation of the contract. If the payment details are not provided, the conclusion and/or implementation of the contract using the “PayPal” payment method is not possible.

“PayPal” may also process your data in the USA.

Personal data relating to individuals in the European Economic Area, the United Kingdom and Switzerland is controlled by PayPal (Europe) S.à.r.l. et Cie in Luxembourg. PayPal's transfer of personal data collected in the European Economic Area, the United Kingdom and Switzerland to affiliated companies in third countries such as the United States is governed by binding corporate rules (BCRs). These are internal regulations that have been approved by the competent data protection supervisory authority. Transfers to other recipients are based on standard data protection clauses prescribed by the EU Commission. PayPal maintains additional technical and organisational safeguards to ensure the protection of this data even in third countries. Further information on data protection at PayPal can be found at PayPal Privacy Statement. PayPal's binding corporate rules can be found at PayPal BCR.

Klarna purchase on account

In cooperation with Klarna Bank AB (publ) (hereinafter: Klarna), Sveavägen 46, 111 34 Stockholm, Sweden, we offer you the payment option "purchase on account". If you choose this payment option, the personal data required for processing the purchase on account, payment and an identity and credit check (first and last name, address, date of birth, gender, email address, IP address, telephone number, number of items, item number, invoice amount and tax rate) will be transmitted to Klarna. This data is processed so that Klarna can carry out an identity and credit check and create a payment request in order to process your purchase and invoice processing. With regard to the identity and credit check, Klarna may obtain additional information from credit agencies, fraud prevention agencies, retailers and public databases.

As part of the decision on the purchase on account payment option, Klarna also uses information about your previous payment behaviour and probability values for this behaviour in the future. Klarna calculates these score values based on a scientifically recognised mathematical statistical procedure. Klarna will use your address data, among other things, for this purpose. Details on how Klarna processes your data can be found in Klarna's privacy policy at https://www.klarna.com/uk/terms-and-conditions/.

Klarna processes your data for the purpose of fulfilling your agreement with Klarna to pay for your purchase on account. The legal basis is Art. 6 Para. 1 lit. b) UK GDPR. In addition, the personal data collected is processed based on Klarna's legitimate interest in offering you effective and secure payment options and preventing fraud in this context. The legal basis is Art. 6 Para. 1 lit. f) UK GDPR. You can object to the processing. However, Klarna may then no longer be able to offer you purchase on account.

Klarna Pay Now (payment by direct debit or instant transfer)

On our website we also use the payment service of Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; hereinafter: Klarna) to offer you payment by direct debit and instant bank transfer (Klarna Pay Now). If you select and use Klarna Pay Now as a payment method, the data required for payment processing will be transmitted to Klarna in order to conclude the contract with you in accordance with the selected payment method. This data processing is carried out in accordance with Article 6 paragraph 1 letter b UK GDPR.

Cookies may be set to recognize your browser. This data processing is carried out in accordance with Article 6 Paragraph 1 Letter f of UK GDPR on the basis of our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to the processing of your personal data at any time for reasons arising from your particular situation.

When using Pay Now, Klarna reserves the right to obtain a credit report if necessary. For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address and order data, to a credit agency. This data is used for identity and credit checks in order to make an informed decision about the establishment, implementation or termination of the contractual relationship. The credit report may contain score values that are based on scientifically recognized, mathematical-statistical procedures and take address data and other relevant information into account. Your legitimate interests are taken into account in accordance with the applicable legal provisions. The data processing serves the purpose of the credit check for the initiation of the contract and is carried out on the basis of Art. 6 Para. 1 lit. f UK GDPR in order to minimize the risk of payment default if Klarna makes advance payments. You have the right to object to the processing of your personal data based on Art. 6 (1) (f) UK GDPR at any time for reasons related to your particular situation by contacting Klarna. The provision of the data is necessary for the conclusion of the contract with the selected payment method. If you do not provide the data, the contract cannot be concluded with the payment method you have chosen. Further information about which credit agencies Klarna passes on your personal data to can be found at https://www.klarna.com/uk/privacy/

For general information about Klarna, visit: https://www.klarna.co.uk. Klarna treats your personal data in accordance with the applicable data protection regulations and as set out in the Klarna privacy policy at https://www.klarna.com/uk/terms-and-conditions/

Mollie

For the payment methods of Klarna payment processing is carried out via the payment service provider Mollie BV Keizersgracht 126, 1015CW Amsterdam, Netherlands (hereinafter "Mollie"), to whom we pass on the data you provided during the ordering process exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b UK GDPR. The data is only passed on if it is actually necessary for payment processing. Mollie transmits your data to Mollie BV, Keizersgracht 126, 1015CW Amsterdam, Netherlands, in order to carry out the payment - if necessary for this purpose - in accordance with Art. 6 Para. 1 lit. b UK GDPR.

The operator of the payment service Mollie is

Mollie BV
Mollie HQ.
Keizersgracht 126
1015CW Amsterdam
Netherlands
Email: info@mollie.com

You can object to this processing of your data at any time by sending a message to the data controller or to Mollie. However, Mollie may still be entitled to process your personal data if this is necessary for the contractual payment processing.

More information about Mollie's privacy policy: https://www.mollie.com/gb/privacy

Legal Enforcement/ Address Determination / Debt Collection

In the event of non-payment, we reserve the right to pass on the data provided during the order to a lawyer and/or to external companies for the purposes of address determination and/or legal enforcement. The legal basis for the processing is Art. 6 Paragraph 1 Clause 1 Letter f) UK GDPR. Our legitimate interests lie in the prevention of fraud and the avoidance of default risks. In addition, we will pass on your data if necessary to ensure the exercise of our rights as well as the rights of our affiliated companies, our cooperation partners, our employees and/or the users of our website and if processing is necessary. Under no circumstances will we sell or rent your data to third parties. The legal basis for the processing is Art. 6 Paragraph 1 Clause 1 Letter f) UK GDPR. We have a legitimate interest in processing for legal enforcement purposes. We delete the data once storage is no longer required or restrict processing if there are statutory retention periods.

Hosting

We use hosting services from the provider “Shopify” (Shopify International Ltd. Attn: Data Protection Officer c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32. Ireland and Shopify Inc. ATTN: Chief Privacy Officer, 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada), which serve to provide the following services: infrastructure and platform services, computing capacity as well as storage resources and database services. For these purposes, all data - including the access data mentioned under the point “Use of our website” - that is necessary for the operation and use of our website is processed. The legal basis for the processing is Art. 6 Para. 1 Clause 1 Letter f) of UK GDPR. By using external hosting services, we aim to provide our website efficiently and securely. "Shopify" also processes your data in Canada and - depending on the service provider used - also in the USA. The legal basis for the transfer to Canada is the adequacy decision of the EU Commission. We will be happy to provide you with a copy of the clauses on request. Further information on the purpose, scope of processing and data transfer to third countries by "Shopify" can be found at https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

Content Delivery Network

Amazon Cloudfront

We use the services of the content delivery network "Cloudfront" from Amazon Web Services, Inc. (440 Terry Ave N, Seattle, WA 98109, USA; hereinafter "Cloudfront") to make our online offer more accessible. When you visit our website, a library is loaded and cached on your device to avoid reloading the content. Your IP address is processed by the provider. "Cloudfront" processes some of your data in the USA. The USA guarantees an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 on the adequacy of secure and trustworthy data traffic between the EU and the USA. However, in the event of improper processing of your data, you are guaranteed all legal remedies, including free, independent dispute resolution by arbitration.

The legal basis for data processing is Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. By using “Cloudfront” we pursue the legitimate interest of faster retrieval and a more effective and improved presentation of our online offering.

“Amazon” may also process your data in the USA. The USA ensures an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Amazon, you are guaranteed all legal remedies, including free, independent dispute resolution through arbitration.

Further information, in particular on the storage period, can be found at: AWS Privacy

You can object to the processing if it is based on Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. You have the right to object for reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Responsible Person" section.

Cloudflare

In addition, we use the services of the Content Delivery Network (hereinafter: "CDN") from "Cloudflare" (Cloudflare Germany GmbH, Rosental 7, 80144 Munich and Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA; hereinafter: "Cloudflare") on our website for the purpose of faster retrieval of our online offer. When you visit the website, a library is cached by the "CDN" on your device to avoid reloading the content. Your IP address is transmitted to the provider in the USA. "Cloudflare" processes some of your data in the USA. The USA guarantees an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 on the adequacy of secure and trustworthy data traffic between the EU and the USA. However, in the event of improper processing of your data by Cloudflare, you are guaranteed all legal remedies, including free, independent dispute resolution through arbitration.

The legal basis for processing is Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. By using “Cloudflare” we pursue the legitimate interest of faster retrieval and a more effective and improved presentation of our online offering. Further information on data protection and the storage period at “Cloudflare” can be found at: Cloudflare's Privacy Policy | Cloudflare.

Shopify CDN

In addition, we use the services of the Content Delivery Network (hereinafter: "CDN") from "Shopify" of the provider "Shopify" (Shopify International Ltd. c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32. Ireland and Shopify, Inc., 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada; hereinafter: "Shopify") on our website for the purpose of faster retrieval of our online offering. When you visit the website, a library is temporarily stored by the "CDN" on your device to avoid reloading the content. The legal basis for the processing is Art. 6 Para. 1 S. 1 lit. f) UK GDPR. By using "Shopify", we pursue the legitimate interest of faster retrieval and a more effective and improved presentation of our online offering"Shopify" also processes your data in Canada and - depending on the service provider used - also in the USA. The legal basis for the transfer to Canada is the adequacy decision of the EU Commission. We will be happy to provide you with a copy of the clauses on request. Further information on the purpose, scope of processing and data transfer to third countries by "Shopify" can be found at https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

You can object to the processing if the processing is based on Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. You have the right to object for reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Responsible Person" section.

integration of third-party content

The website includes third-party content from other websites. This integration always requires that the providers of this content ("third-party providers") perceive the IP addresses of the users. Without the IP address, they cannot send the content to the browser of the respective user. The IP address is therefore required to display this content. We will inform you below about the services of external providers currently used on our website, as well as about the respective processing in individual cases and about your existing objection or revocation options:

Google Tag Manager

We use the “Google Tag Manager” from “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Tag Manager”) on our website. “Google Tag Manager” is a solution that allows website tags and other third-party elements to be managed via one interface.

On the one hand, when you access the website with Google Tag Manager, an http request is sent to "Google". This transmits end device information and personal data such as your IP address and information about your browser settings to Google. We use the "Google Tag Manager" for the purpose of facilitating electronic communication by passing information on to third parties via programming interfaces, among other things. The respective tracking codes of the third-party providers are implemented in the "Google Tag Manager" without us having to laboriously change the source code of the website ourselves. Instead, the integration is done using a container that places a so-called "placeholder" code in the source code. In addition, the "Google Tag Manager" allows users' data parameters to be exchanged in a specific order, in particular by ordering and systematizing the data packets. Your data will also be transmitted to the USA in isolated cases. The USA guarantees an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Google Tag Manager, you are guaranteed all legal remedies, including free, independent dispute resolution through arbitration.

The legal basis for data processing is Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. Our legitimate interests in the processing lie in facilitating and carrying out electronic communication by identifying communication endpoints, control options, exchanging data elements in a specified order, and by identifying transmission errors. The "Google Tag Manager" does not initiate any data storage. Further information on data protection at "Google" can be found at: Privacy Policy – Privacy & Terms – Google.

You can prevent processing by deleting the history and website data in the settings of your browser software or by opening the browser you are using in “private mode”.

On the other hand, the “Google Tag Manager” integrates third-party tags such as tracking codes or tracking pixels on our website. The tool triggers other tags, which in turn collect your data; we will explain this to you separately in this data protection declaration. The “Google Tag Manager” itself does not evaluate the end device information and personal data of users collected by the tags. Rather, your data is forwarded to the respective third-party service for the purposes stated in our consent management tool. We have coordinated the “Google Tag Manager” with our consent management tool in such a way that the triggering of certain third-party services in the “Google Tag Manager” is made dependent on your selection in our consent management tool, so that only those third-party tags for which you have given consent trigger data processing. The use of the “Google Tag Manager” is covered by the consent for the respective third-party service. The legal basis for the processing is your consent in accordance with Art. 6 Para. 1 Clause 1 Letter a) of UK GDPR. “Google” also processes some of the data in the USA. The USA ensures an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Google, you are guaranteed all legal remedies, including free, independent dispute resolution through arbitration.

You can find out how long your data will be stored in the following descriptions of the individual third-party services. You can find more information about data protection at “Google” at: Privacy Policy – Privacy & Terms – Google.

You can revoke your consent to the processing at any time by moving the slider in the "Cookie Settings" of the consent tool for the respective third-party provider. The legality of the processing remains unaffected until the revocation is exercised.

Klaviyo

We have integrated components from Klaviyo on our website. Klaviyo is a service of Klaviyo, Inc. and offers marketing automation software for marketing services and products, including SEO and content creation, lead management, newsletters, email and SMS marketing, and web analytics. Klaviyo uses cookies and other browser technologies to evaluate user behavior and recognize users. This information is used, among other things, to compile reports on website activity. Klaviyo is also used to store and transmit data entered in forms using cookies, including your IP address. In this case, your data will be passed on to the operator of Klaviyo, Klaviyo, Inc., 125 Summer Street, Boston, Massachusetts 02111, USA.

We process your data with the help of Klaviyo for the purpose of optimizing our website and for marketing purposes based on your consent in accordance with Art. 6 Para. 1 lit. a) UK GDPR.

If personal data is transmitted to servers in the USA when using Google Analytics, this is done on the basis of the EU Commission's adequacy decision on the Data Privacy Framework and the UK Extension to the EU-U.S. Data Privacy Framework in accordance with Art. 45 Para. 1 UK GDPR. If necessary, we will also ask for your consent in accordance with Art. 49 Para. 1 lit. a) UK GDPR.

The specific storage period of the processed data cannot be influenced by us, but is determined by Klaviyo, Inc. Further information can be found in the privacy policy for Klaviyo: https://www.klaviyo.com/privacy/policy .

Reviews with Reviews.io

On our website you have the opportunity to write reviews of our products. We use the Reviews.io service for this purpose. The provider is REVIEWS.io 2020 GMBH, Stralauer Allee 6, 10245 Berlin, Germany. Reviews.io enables us to collect customer reviews and publish them on our website and on other marketing materials where applicable. In order for you to write a review, Reviews.io requires your name or a pseudonym and your e-mail address. Your email address will not be published. Reviews.io will automatically create an account for you as soon as you create a review.

The aforementioned personal data is processed on the basis of your consent in accordance with Art. 6 Paragraph 1 Letter a) of UK GDPR. You can revoke your consent at any time with effect for the future. All you need to do is send us an informal email. If you revoke your consent, we will delete or anonymize your review.

Please note that reviews can be submitted in such a way that other website users cannot identify you. It is your free decision whether you want to provide information about yourself beyond the mandatory information. Please keep this in mind when choosing your pseudonym, within the free text fields and when uploading photos. We recommend that you write your review text without providing any personal data and design photos accordingly. We reserve the right not to publish reviews that contain personal data or to (partially) anonymize them.

Reviews.io also processes the following information on our behalf: Identification as a reviewer when you log in to our website and visit the website again;
Verification of the authenticity of your reviews; Answering your questions and providing appropriate customer service; Forwarding our messages when we have responded to your review.

We have concluded a data processing agreement with Reviews.io in accordance with Art. 28 UK GDPR to ensure that our customers' data is adequately protected and is not passed on to third parties. Further information about data processing by Reviews.io can be found in the terms of use and the privacy policy at https://www.reviews.io/front/data-protection .

Services for statistical, analytical and marketing purposes

We use third-party services for statistical, analytical and marketing purposes. This enables us to provide you with a user-friendly, optimized use of the website. The third-party providers use cookies, pixels, browser fingerprinting or other tracking technologies to control their services. We will inform you below about the external services currently used on our website, as well as about the respective processing in individual cases and about your existing revocation options.

Shopify

We also use tools from “Shopify” (Shopify International Ltd. Attn: Data Protection Officer c/o Intertrust Ireland, 2nd Floor 1-2 Victoria Buildings, Haddington Road, Dublin 4, D04 XN32. Ireland and Shopify Inc. ATTN: Chief Privacy Officer, 151 O'Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada), which use so-called “cookies” or other tracking technologies that are stored on your device. With the help of cookies, “Shopify” processes the information generated about the use of our website by your device - e.g. that you have accessed a certain website - and processes, among other things, the data mentioned in the “Use of our website” section, in particular your IP address, browser information, the previously visited website and the date and time of the server request, for the purposes of statistical analysis of the website and product recommendations, use for troubleshooting and to improve our shop. For this purpose, it can also be determined whether different devices belong to you or your household. "Shopify" will process this information to evaluate your use of the website, compile reports on website activities for us and - if we indicate this separately - to provide us with other services related to website usage. The legal basis for the processing is your consent in accordance with Art. 6 Paragraph 1 Clause 1 Letter a) of UK GDPR. "Shopify" also processes your data in Canada and - depending on the service provider used - also in the USA. The legal basis for the transfer to Canada is the adequacy decision of the EU Commission. We will be happy to provide you with a copy of the clauses on request. Further information on the purpose, scope of processing and data transfer to third countries by "Shopify" can be found at https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

https://www.shopify.com/legal/privacy and https://help.shopify.com/en/manual/privacy-and-security/privacy/gdpr.

You can object to the processing if the processing is based on Art. 6 Paragraph 1 Clause 1 Letter f) of UK GDPR. You have the right to object for reasons arising from your particular situation. You can send us your objection using the contact details provided in the "Responsible Person" section.

Google Analytics 4

In order to be able to tailor our website optimally to user interests, we use “Google Analytics”, a web analysis service from “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Analytics 4”). “Google Analytics 4” uses so-called “cookies”, which are stored on your device for recognition, as well as similar tracking methods for recognizing devices such as tracking pixels, device fingerprinting and programming interfaces (e.g. APIs and SDKs) to process information from your device. For this purpose, your device is assigned a randomly generated identification number (cookie ID/device ID).

Using these technologies, "Google" processes the information generated about the use of our website by your device as well as access data for the purpose of statistical analysis - e.g. access to a specific web page, number of unique visitors, entry and exit pages, length of stay, click, swipe and scroll behavior, button activation, newsletter registration, bounce rate and similar user interactions. For this purpose, it can also be determined whether different devices belong to you or to your household. The access data includes in particular the IP address, browser and device information, cookie ID/device ID, the previously visited website and the date and time of the server request.

No individual IP addresses are logged or stored in “Google Analytics 4” systems. At the moment the IP address is recorded by Google in special local data centers in the EU, your IP address is used to determine location information. The IP address is then deleted before the access data is stored in a data center or on a server for “Google Analytics”. “Google Analytics 4” does not provide precise data on the geographical location, but only general location information such as the region and city of the location of the end device, which is derived from the IP address. “Google” will process this information to evaluate your use of the website, compile reports on website activity for us and – if we specifically indicate this – to provide us with other services related to website usage. If you are registered with a Google service, “Google” can assign the website visit to your user account and create and evaluate user profiles across applications.

In addition, a cross-platform analysis of usage behaviour is carried out on websites and apps that use "Google Analytics 4" technologies. This allows usage behaviour to be recorded, measured and compared in different environments. For example, the user's scrolling events are automatically recorded to enable a better understanding of the use of websites and apps. Different cookie IDs/device IDs are used for different devices for this purpose. We are then provided with anonymized statistics on the use of the different platforms, created according to selected criteria.

With the help of “Google Analytics 4”, target groups are automatically created for specific cookie IDs/device IDs or mobile advertising IDs, which are later used for individualized advertising. The following can be considered as target group criteria: users who have viewed products but have not added them to a shopping cart, or who have added them to a shopping cart but have not completed the purchase, OR users who have purchased certain items. A target group comprises at least 100 users. The “Google Ads” tool can then be used to display interest-based advertisements in search results. Likewise, website users can be recognized on other websites within the “Google” advertising network (in Google Search, on “YouTube”, so-called “Google Ads” or on other websites) and presented with advertisements tailored to their needs based on the defined target group criteria.

With regard to the storage of and access to information on your device, the legal basis is Art. 6 (1) sentence 1 lit. a) UK GDPR. "Google" also processes some of the data in the USA. The USA guarantees an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Google, you are guaranteed all legal remedies, including free, independent dispute resolution by arbitration.

Your data in connection with "Google Analytics 4" will be deleted after 26 months at the latest. Further information on data protection at "Google" can be found at: Shopify Privacy Policy - Shopify UK.

You can revoke your consent to processing at any time by moving the slider in the "Cookie Settings" of the consent tool. The legality of the processing carried out on the basis of the consent until the revocation is not affected by the revocation.

Google Ads Remarketing

We use the “Google Ads” tool with the “Dynamic Remarketing” function from “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Ads”). With the “Dynamic Remarketing” function, we can recognize users of our website on other websites within the “Google” advertising network (in “Google” search or on “YouTube”, so-called “Google Ads” or on other websites) and present advertisements tailored to their interests. The advertisements may also relate to products and services that you have already viewed on our website. For this purpose, the interaction of users on our website is analyzed, e.g. which offers the user was interested in, in order to be able to show users targeted advertising on other sites even after they have visited our website. If you visit our website, “Google Ads” will store a cookie on your device. Using cookies, “Google” processes the information generated by your device about your use of our website and interactions with our website, as well as the data mentioned in the “Use of our website” section, in particular your IP address, browser information, the website you previously visited, and the date and time of the server request, for the purpose of displaying personalized advertisements. For this purpose, it can also be determined whether different devices belong to you or your household. If users are registered with a “Google” service, “Google” can assign the visit to the user account and create and evaluate user profiles across applications. The legal basis for further processing is Art. 6 (1) S. 1 lit. a) UK GDPR. “Google” also processes some of the data in the USA. The United States ensures an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the United States. However, in the event of improper processing of your data by Google, you are guaranteed all legal remedies, including free, independent dispute resolution through arbitration.

The storage period at “Google” is a maximum of 3 months. Further information on data protection and the storage period at “Google” can be found at: https://policies.google.com/privacy .

You can revoke your consent to the processing at any time by moving the slider in the "Cookie Settings" of the consent tool. The legality of the processing remains unaffected until the revocation is exercised.

Google Ads Conversion

We use the “Google Ads” service from “Google” (Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland and Google, LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA; hereinafter: “Google” and “Google Ads”) to draw attention to our attractive offers on external websites using advertising materials (formerly so-called “Google AdWords”). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. These advertising materials are delivered by “Google” via so-called “ad servers”. For this purpose, we use “ad server” cookies, which can be used to measure certain parameters for measuring reach, such as the display of ads or clicks by users. If you access our website via a “Google” ad, “Google Ads” will store a cookie on your device. Using cookies, “Google” processes the information generated by your device about interactions with our advertising materials (calling up a specific website or clicking on an advertising material), the data mentioned in the “Use of our website” section, in particular your IP address, browser information, the previously visited website and the date and time of the server request, for the purpose of analyzing and visualizing the reach measurement of our advertisements. For this purpose, it can also be determined whether different devices belong to you or to your household. Due to the marketing tools used, your browser automatically establishes a direct connection to the “Google” server. If you are registered with a “Google” service, “Google” can assign the visit to your account. Even if you are not registered with “Google” or have not logged in, there is a possibility that the provider will find out and process your IP address. We only receive statistical evaluations from “Google” to measure the success of our advertising materials. The legal basis for further processing is Art. 6 Paragraph 1 Clause 1 Letter a) of UK GDPR. "Google" also processes some of the data in the USA. The USA ensures an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Google, you are guaranteed all legal remedies, including free, independent dispute resolution by arbitration.

The storage period at “Google” is a maximum of 3 months. Further information on data protection and the storage period at “Google” can be found at: https://policies.google.com/privacy .
https://business.safety.google/privacy/

TikTok Pixel

This website uses the TikTok Pixel, a conversion tracking tool for advertisers. The service provider is the advertising company TikTok. The company "TikTok Technology Limited" (10 Earlsfort Terrace, Dublin, D02 T380 in Ireland) is responsible for use in Europe.

TikTok processes your data in the USA, among other places. This can involve various risks for the legality and security of data processing.

TikTok uses so-called standard contractual clauses ( Art. 46. Para. 2 and 3 UK GDPR) as the basis for data processing for recipients based in third countries (outside the European Union, Iceland, Liechtenstein, Norway, i.e. in particular in the USA) or for data transfer there. Standard contractual clauses (SCC) are templates provided by the EU Commission to ensure that your data complies with European data protection standards even if it is transferred to and stored in third countries (such as the USA) and require the addition of the UK Addendum for transfers from the UK. With these clauses, TikTok undertakes to comply with the European and UK data protection level when processing your relevant data, even if the data is stored, processed and managed in the USA. These clauses are based on an implementing decision of the European Commission. The decision and the corresponding standard contractual clauses can be found here, among other places: https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj?locale=de

You can find out more about the standard contractual clauses and the data processed through the use of TikTok Pixel in the Privacy Policy at https://www.tiktok.com/legal/page/eea/privacy-policy/de-DE or at https://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Using Kameleoon for A/B testing and personalisation

Our website uses Kameleoon, a tool for conducting A/B testing and personalizing content. Kameleoon allows us to test different variations of our website and make data-driven optimizations to improve usability and functionality.

Kameleoon uses cookies and similar technologies to collect information about the behavior of website visitors, such as the length of time spent on pages, the use of certain functions or interaction with content. This data helps us to optimize the user experience in a targeted manner. The data is collected solely on the basis of our legitimate interest in an attractive and functional design of our website in accordance with Art. 6 (1) (f) UK GDPR. You have the right to object to the processing, for example by adjusting the cookie settings in your browser.

For further information on data processing by Kameleoon, please see Kameleoon’s privacy policy: Privacy Policy | Kameleoon .

Facebook Analytics

We use the “Facebook Analytics” tool from “Facebook” (provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, and Meta Platforms Inc. 1601 Willow Rd, Menlo Park, California, USA; hereinafter: “Facebook” and “Facebook Analytics”). To use “Facebook Analytics” we use the so-called “Facebook pixel” to analyze the use of our website and internet presence, e.g. in social networks such as “Facebook” and “Instagram”, the interactions made by users on our website and internet presence, and to measure the reach of our advertisements. With the help of the “Facebook pixel” – small graphics that are integrated into our website, are automatically loaded when our website is accessed and enable user behavior to be tracked – your browser automatically establishes a direct connection to the “Facebook” server. By integrating the “Facebook pixel”, “Facebook” processes information generated by cookies about the use of our website by your device – e.g. that you have accessed a certain web page – and processes, among other things, the data specified in the “Use of our website” section, in particular your IP address, browser information, the previously visited website, the “Facebook ID” and the date and time of the server request, for the purposes of analyzing our website and internet presence, analyzing user interactions and measuring the reach of our advertisements. For these purposes, it can also be determined whether different devices belong to you or to your household. The information obtained using the “Facebook pixel” is used solely for statistical purposes, is transmitted to us anonymously by “Facebook” as statistics and does not provide any information about the person of the user. If you are registered with a “Facebook” service, “Facebook” can assign the information collected to your account. Even if a user is not registered with “Facebook” or is not logged in, there is a possibility that “Facebook” will find out and process the IP address and other identification features. For further processing, the legal basis is Art. 6 Paragraph 1 Clause 1 Letter a) of UK GDPR. “Facebook” also processes some of the data in the USA. The USA guarantees an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Facebook, you are guaranteed all legal remedies, including free, independent dispute resolution by the arbitration tribunal.

The storage period for information in Facebook cookies is 90 days. Further information on data protection and the storage period at “Facebook” can be found at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/ .

Facebook Custom Audiences

The website also uses the “Website Custom Audiences” function from “Facebook” (provider is Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, and Meta Platforms Inc. 1601 Willow Rd, Menlo Park, California, USA; hereinafter: “Facebook”). So-called web beacons, such as the “Facebook pixel”, are used to collect information about your usage behaviour on our website, which is then processed by “Facebook”. This enables website users and users of “Facebook” who belong to a similar target group to be shown interest-based advertisements (“Facebook ads”) when they visit the social network “Facebook”. Using the “Facebook pixel” (small graphics that are also integrated into our website and that are automatically loaded when you visit our website and enable user behaviour to be tracked), your browser automatically establishes a direct connection to the “Facebook” server. By integrating the “Facebook pixel”, “Facebook” processes the information generated with the help of cookies about the use of our website by your device – e.g. that you have accessed a certain web page – and processes, among other things, the data mentioned in the “Use of our website” section, in particular your IP address, browser information, the previously visited website, the “Facebook ID” and the date and time of the server request, for the purpose of displaying personalized advertisements. For this purpose, it can also be determined whether different devices belong to you or to your household. If you are registered with a “Facebook” service, “Facebook” can assign the collected information to your account. Even if you are not registered with “Facebook” or have not logged in, there is a possibility that the provider will find out about and process your IP address and other identification features. The legal basis for further processing is Art. 6 Paragraph 1 Clause 1 Letter a) of UK GDPR. "Facebook" also processes some of the data in the USA. The USA ensures an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Facebook, you are guaranteed all legal remedies, including free, independent dispute resolution by arbitration.

The storage period for the information in the Facebook cookies is up to 3 years. Further information on data protection and the storage period at “Facebook” can be found at: https://www.facebook.com/privacy/explanation and https://www.facebook.com/policies/cookies/ .

Microsoft Ads (formerly Bing Ads)

We use the tracking functions of “Bing Ads” from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA; hereinafter: “Microsoft” and “Microsoft Ads”) on our website. “Microsoft” stores a cookie on the user’s device in order to measure the reach of our advertisements and to enable the assignment of the success of an advertising medium. The online advertising service “Microsoft Ads” uses technologies such as “cookies”, “tracking pixels” and “device fingerprinting” to display advertisements that are relevant to users and to improve reports on the effectiveness of campaigns. Information that is stored on users’ devices is also processed. With the help of “Microsoft Ads”, users can be shown interest-based advertisements in relation to search results in “Bing” and “Yahoo” search engines. The advertisements can also relate to products and services that users have already viewed on our website. For this purpose, the interaction of users on our website is analyzed beforehand, e.g. which offers users are interested in, in order to be able to show users targeted advertising on other sites even after they have visited our website. When users visit our website, “Microsoft Ads” stores a “cookie” on the user’s device. With the help of “cookies” and “tracking pixels”, “Microsoft” processes the information generated by users’ devices about the use of our website and interactions with our website as well as access data, in particular the IP address, browser information, the previously visited website and the date and time of the server request, across all devices for the purpose of displaying and analyzing personalized advertisements. For this purpose, it can also be determined whether different devices belong to you or to your household. In addition, the online advertising service “Microsoft Ads” makes it possible to measure the reach of our advertisements and to assign the success of an advertising medium. For this purpose, "ad server cookies" are used, through which certain parameters for measuring reach, such as the display of ads, duration of viewing or clicks by users, can be measured. The legal basis is Art. 6 Para. 1 S. 1 lit. a) UK GDPR. The storage period is twelve months. "Microsoft" also processes some of the data in the USA. The USA guarantees an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Microsoft, you are guaranteed all legal remedies, including free, independent dispute resolution through arbitration.

The storage period for the information in the Microsoft Ads cookies is twelve months. Further information on data protection and the storage period within the framework of “Microsoft Ads” can be found at: Microsoft – AI, Cloud, Productivity, Computing, Gaming & Apps & Microsoft Terms of Use | Microsoft Legal.

Outbrain

We use the analysis and tracking functions of “Outbrain Amplify” (Outbrain UK Limited, 175 HIGH HOLBORN LONDON, WC1V 7AA, United Kingdom and Outbrain, Inc., 111 West 19th Street, third floor, New York, NY 10011, USA; hereinafter: “Outbrain”) on our website. The online advertising service “Outbrain” uses technologies such as “cookies”, “tracking pixels” (“Outbrain pixels”) and “device fingerprinting” to analyze the use of our website and our advertisements on Internet sites, e.g. on Outbrain partner websites, the interactions made by users on our website and Internet sites, and to measure the reach of our advertisements. With the help of the "pixels" - small graphics that are also integrated into our website, are automatically loaded when our website is accessed and enable user behaviour to be tracked - the user's browser automatically establishes a direct connection to the "Outbrain" server. If you access our website via one of our advertisements that is displayed using a widget on an Outbrain partner website, "Outbrain" will store a cookie on your device. With the help of the cookies, "Outbrain" processes the information generated by your device about interactions with our advertising materials (accessing a specific website, clicking on an advertising material) access data, in particular the IP address, for the purpose of analyzing the reach measurement of our advertisements and in order to display target group-specific advertisements to the respective user across all end devices when visiting another "Outbrain" partner website. In addition, by analyzing the click rates of our advertisements, we can measure the rate of users who have carried out a specific action on our website, e.g. ordering goods. If no cookie from "Outbrain" was previously set on your device (e.g. when visiting our website directly without first using an Outbrain partner website), the "Outbrain pixel" does not process any data about you as a visitor to our website. The legal basis is Art. 6 Para. 1 S. 1 lit. a) UK GDPR. "Outbrain" also processes your data in the USA. The USA guarantees an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Outbrain, you are guaranteed all legal remedies, including free, independent dispute resolution by the arbitration tribunal.

The storage period at “Outbrain” is 13 months. Further information on data protection and the storage period at “Outbrain” can be found at: https://www.outbrain.com/legal/privacy#privacy-policy and https://www.outbrain.com/legal/privacy#cookies .

Microsoft Clarity

In order to be able to tailor our WebApp more optimally to user interests, we also use the analysis service “Microsoft Clarity” from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA; hereinafter: “Microsoft” and “Microsoft Clarity”). “Microsoft Clarity” records movements on our website in so-called heat maps. This enables us to understand how users perceive our website and how they interact with it, e.g. through mouse movements, clicks and scrolling. This enables us to make our website better and more customer-friendly by knowing which areas have been clicked on particularly often. To analyze usage and click behaviour, “Microsoft Clarity” uses so-called “cookies” and other tracking technologies that are stored on your device and that technically enable an analysis of the use of the website by your device. The information generated by the “cookie” about your visit to our website is also transmitted to the “Microsoft” servers and stored there. In particular, information about your device is also processed, such as the IP address, device type and browser information, geographical location (country code only), preferred language, pages visited, date and time of access. "Microsoft" will use this information to statistically evaluate the use of our website and to create usage reports. The legal basis is Art. 6 Para. 1 S. 1 lit. a) UK GDPR. "Microsoft" also processes some of the data in the USA. The USA guarantees an adequate level of protection for personal data in accordance with the European Commission Decision of July 10, 2023 and the UK Extension to the EU-U.S. Data Privacy Framework for personal data transfers between the UK and the USA. However, in the event of improper processing of your data by Microsoft, you are guaranteed all legal remedies, including free, independent dispute resolution by arbitration.

The storage period is twelve months. Further information on data protection and the storage period within the framework of “Microsoft Ads” can be found at: https://clarity.microsoft.com/privacy

Easybill

We use the service easybill to handle our invoicing and accounting processes. easybill is software provided by easybill GmbH, Düsselstraße 21, 41564 Kaarst, Germany, which offers functions for creating, managing and archiving invoices, quotes and other billing-related documents. When using easybill, personal data necessary for contract processing are processed, in particular names, address details, contact information and billing- and payment-related data.

This data is processed solely for the purposes described above, for the proper fulfilment of statutory retention obligations and to ensure the functionality and security of the service. The use of easybill is carried out for the performance of a contract or to take steps prior to entering into a contract in accordance with Article 6(1)(b) of the EU GDPR and — to the extent statutory retention obligations exist — on the basis of Article 6(1)(c) EU GDPR. In addition, processing may be based on our legitimate interests pursuant to Article 6(1)(f) EU GDPR, in particular in ensuring efficient and legally compliant handling of our accounting and billing processes.

easybill generally processes personal data within the European Union. According to the provider, transfers to third countries outside the European Economic Area occur only if necessary to provide the services and appropriate safeguards within the meaning of Articles 44 et seq. EU GDPR are in place.

The specific retention period for the processed data is determined by statutory retention periods and, otherwise, by easybill. Further information on data processing by easybill can be found in the provider’s privacy policy at: https://www.easybill.de/en/

Influence.io

We use services from influence.io on our website. Influence.io is provided by Influence.io, Inc., Irvine, California 92618, USA, and offers functions to analyse, manage and optimise marketing and sales processes. Influence.io enables the capture of user interactions, evaluation of marketing activities and efficient lead management. When you visit our website or interact with the relevant features, a connection to Influence.io, Inc. servers may be established, during which your IP address and, where applicable, further browser and usage data (e.g. user agent, referrer URL, timestamp) may be transmitted.

The processing of these data is carried out solely for the purposes described above and to ensure the functionality and security of influence.io’s services. The use of influence.io is based on your voluntary consent via our cookie consent banner in accordance with Article 6(1)(a) of the EU GDPR. You may withdraw your consent at any time by adjusting your cookie settings.

Influence.io may transfer personal data to third countries outside the European Economic Area, in particular the United States. We have agreed appropriate safeguards with Influence.io within the meaning of Articles 44 et seq. of GDPR to ensure an adequate level of protection in third countries. These safeguards include — unless otherwise stated — the EU Commission’s Standard Contractual Clauses under Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these Standard Contractual Clauses at: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914 Where necessary, we will obtain your consent prior to such a transfer under Article 49(1) sentence 1(a) of the GDPR, which you may give via our consent manager. Please note that transfers to third countries may carry risks, in particular the possibility of access by public authorities, over which we have no control.

The specific retention period for the processed data is determined by Influence.io and is outside our control. Further information on data processing can be found in Influence.io’s privacy policy at: https://www.influence.io/privacy-policy

Subscription Payments with Recharge

We use the Recharge service on our website to manage and process recurring orders and subscriptions. Recharge is provided by Recharge Payments, Inc., 1507 20th St., Santa Monica, CA 90404, USA, and offers functions for managing subscription agreements, recurring payments and customer communications related to subscriptions. When using Recharge, personal data necessary for the performance of subscription agreements are processed, in particular name, address, email address, order and contract details and payment information.

If you create or manage a subscription through our website, the data you enter will be transmitted to and processed on Recharge’s servers. Technical data such as your IP address, browser information (e.g. user agent), referrer URL and timestamps may also be processed. Processing is carried out solely for the performance of the subscription agreement, payment processing, customer support and to ensure the functionality and security of the service.

The use of Recharge is for the performance of a contract or to take steps prior to entering into a contract in accordance with Article 6(1)(b) of the EU GDPR. Where further processing is carried out for analysis and optimisation purposes, this is based on our legitimate interests pursuant to Article 6(1)(f) of the EU GDPR, in particular in ensuring efficient and customer‑friendly management of our subscription offerings.

Recharge Payments, Inc. is a company based in the United States. Personal data may therefore be transferred to a third country outside the European Economic Area. Transfers to the USA are, where applicable, carried out on the basis of an adequacy decision of the European Commission under Article 45(1) of the GDPR (EU–US Data Privacy Framework), provided the company is certified under the EU–US Data Privacy Framework.

In cases where no adequacy decision of the European Commission applies or where the EU–US Data Privacy Framework certification is not in place, Recharge has agreed appropriate safeguards within the meaning of Articles 44 et seq. of the EU GDPR. These safeguards comprise — unless otherwise stated — the EU Commission’s Standard Contractual Clauses under Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these Standard Contractual Clauses at: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914

Where necessary, we will obtain your consent prior to such transfers under Article 49(1) sentence 1(a) of the EU GDPR via our consent manager. Please note that transfers to third countries may carry risks, particularly the possibility of access by public authorities, over which we have no control.

The specific retention period for the processed data is determined by Recharge and is otherwise subject to statutory retention obligations. Further information on data processing by Recharge can be found in the provider’s privacy policy at: https://getrecharge.com/privacy-policy/

Returns with SendCloud

We use the SendCloud service on our website to manage and optimise returns processes. SendCloud is provided Sendcloud Global, Insulindelaan 115, 5642 CV Eindhoven, The Netherlands, and enables returns to be recorded, managed and processed in a structured and automated manner. When using SendCloud, personal data necessary for handling returns are processed, in particular name, address, contact details, order information and, where applicable, payment and refund data.

If you make a return using the relevant features on our website, the data you enter will be transmitted to and processed on SendCloud’s servers. Technical data such as your IP address, browser information (e.g. user agent), referrer URL and timestamps may also be processed. Processing is carried out solely for the purpose of performing and optimising the returns process and to ensure the functionality and security of the service.

The use of SendCloud is for the performance of a contract or to take steps prior to entering into a contract in accordance with Article 6(1)(b) of the EU GDPR. Where further processing is carried out for analysis and optimisation purposes, this is based on our legitimate interests pursuant to Article 6(1)(f) of the EU GDPR, in particular in ensuring an efficient and customer‑friendly returns management.

SendCloud primarily processes personal data in the Netherlands. In exceptional cases, transfers to third countries outside the European Economic Area may occur, in particular to the United Kingdom or the United States. Transfers to the United Kingdom are based on the European Commission’s adequacy decision pursuant to Article 45(1) of the EU GDPR. Transfers to the USA are, where applicable, carried out on the basis of an adequacy decision under Article 45(1) of the EU GDPR (EU–US Data Privacy Framework), provided the relevant company is certified under the EU–US Data Privacy Framework. In cases where no adequacy decision applies or where certification under the EU–US Data Privacy Framework is not in place, SendCloud has agreed appropriate safeguards within the meaning of Articles 44 et seq. of the EU GDPR. These safeguards comprise — unless otherwise stated — the EU Commission’s Standard Contractual Clauses under Implementing Decision (EU) 2021/914 of 4 June 2021. You can view a copy of these Standard Contractual Clauses at: https://eur-lex.europa.eu/legal-content/EN/TXT/HTML/?uri=CELEX:32021D0914

The specific retention period for the processed data is determined by SendCloud and is otherwise subject to statutory retention obligations. Further information on data processing by 8returns can be found in the provider’s privacy policy at: https://www.sendcloud.com/en_uk/privacy-policy/

Track and trace with AfterShip

We use the AfterShip service on our website to enable you to conveniently track your order. The provider of this service is Automizely Pte Ltd, 71 Ayer Rajah Crescent, #06-11/12, Singapore 139951, Singapore. When using AfterShip, information such as order number, shipping service provider, shipment history and, if applicable, your e-mail address or telephone number will be processed in order to provide you with up-to-date information on the shipping status of your order. The data is either transmitted by us to AfterShip or automatically retrieved by AfterShip from shipping service providers. Personal data is not stored on your end device.

The purpose of using AfterShip is to provide you with transparent, user-friendly tracking of your order and to improve customer satisfaction after the purchase. The legal basis for the processing is Art. 6 para. 1 lit. b GDPR, insofar as the processing is necessary for the fulfilment of the contract (delivery of your goods), as well as Art. 6 para. 1 lit. f GDPR, as we have a legitimate interest in an efficient and customer-oriented shipping service.

AfterShip is a provider based in Singapore, a third country outside the EU. In addition, data may also be processed on servers in the USA or other countries. The transfer takes place on the basis of standard contractual clauses in accordance with Art. 46 para. 2 lit. c GDPR, which have been approved by the European Commission. AfterShip thereby undertakes to comply with a level of data protection comparable to that in the EU. Further information can be found in AfterShip's privacy policy.

The data processed by AfterShip is only stored for as long as is necessary to track the shipment or as long as there are legal obligations to retain it. Further information on data processing by AfterShip can be found in the privacy policy at https://www.aftership.com/privacy

Your cart is empty

Privacy Policy

Customer Reviews

Kijimea

Secure Payment Options

Sustainable Delivery

Free shipping from £25

30-day money-back guarantee

Directly from the manufacturer

Country/region

Language

Privacy Policy