1. Data Collection When Visiting Our Website

​

When you use our website for information purposes only, i.e. without registering or otherwise providing us with information, we only collect the data that your browser transmits to our server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• The website visited

• Date and time of access

• Amount of data transmitted in bytes

• Source/referrer from which you accessed the website

• Browser used

• Operating system used

• IP address used (where applicable, in anonymised form)

The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed to third parties or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

​

 

2. Cookies

​

To make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files stored on your device.

Some of the cookies we use are deleted after the browser session ends, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable your browser to be recognised on your next visit (so-called persistent cookies).

When cookies are set, they collect and process certain user information to varying degrees, such as browser and location data and IP address information. Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the cookie. You can find the storage period for each cookie in your web browser’s cookie settings overview.

Some cookies are used to simplify the ordering process by storing settings, for example by remembering the contents of a virtual shopping basket for a subsequent visit to the website.

Where individual cookies used by us also process personal data, such processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, Article 6(1)(a) GDPR where consent has been given, or Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and providing a customer-friendly and efficient website experience.

Please note that you can configure your browser to notify you when cookies are being set, allowing you to decide individually whether to accept them, or to exclude the acceptance of cookies in certain cases or altogether. Each browser manages cookie settings differently. Instructions on how to change these settings can be found in the help menu of your browser. Information for the respective browsers is available at the following links:

• Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

• Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

• Chrome: https://support.google.com/chrome/answer/95647

• Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac

• Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that refusing cookies may limit the functionality of our website.

​

3. Contact, Hosting and Content Delivery Network

​

Wix

We use the system of the following provider to host our website and display its content:

Wix HQ
6350671, Nemal Tel Aviv St 40
Tel Aviv-Yafo, Israel

Data is also transferred to:

Wix Inc.
500 Terry A. Francois Boulevard
San Francisco, California 94158
USA

All data collected on our website is processed on the provider’s servers. We have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorised disclosure to third parties.

Where data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, is intended to ensure compliance with European data protection standards.

When you contact us, for example through a contact form or withdrawal form, personal data is collected. The information collected when using a contact form can be seen in the respective form.

This data is stored and used exclusively for the purpose of responding to your enquiry, contacting you and carrying out the associated technical administration.

The legal basis for processing this data is Article 6(1)(b) GDPR, as processing is necessary for the implementation of pre-contractual measures.

Your data will be deleted three years after your enquiry has been fully processed.

​

4. Data Processing for Contractual Purposes

Contract Processing

In accordance with Article 6(1)(b) GDPR, personal data is collected and processed when you provide it to us for the purpose of performing a contract.

The data collected is specified in the respective order or booking form. We store and use the information you provide to process the contract.

After the contract has been fully performed or your customer account has been deleted, your data will be deleted, subject to statutory retention periods under tax and commercial law, which currently amount to seven years.

​

5. Data Processing for Order Fulfilment​

​

5.1 Disclosure of Data for Payment Processing

​

Where necessary for the performance of a contract and for payment purposes, the personal data we collect will be disclosed to the financial institution commissioned to process the payment, in accordance with Article 6(1)(b) GDPR.

To process your order, we work with the service providers listed below, who assist us in whole or in part with the fulfilment of contracts. Certain personal data is transferred to these service providers in accordance with the information set out below.

​

5.2 Disclosure of Personal Data to Shipping Service Providers

​

We use the following transport service provider:

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

We disclose your email address and/or telephone number, the recipient’s name and the delivery address to this provider. This disclosure takes place insofar as it is necessary for the delivery of the goods and is based on our legitimate interest in ensuring smooth delivery.

We also use the following transport service provider:

Österreichische Post Aktiengesellschaft
Rochusplatz 1
1030 Vienna
Austria

We disclose your email address and/or telephone number, the recipient’s name and the delivery address to this provider. This disclosure takes place insofar as it is necessary for the delivery of the goods and is based on our legitimate interest in ensuring smooth delivery.

​

5.3 Use of Payment Service Providers

​

Wix Payments

One or more online payment methods provided by the following provider are available on this website:

Wix HQ
6350671, Nemal Tel Aviv St 40
Tel Aviv-Yafo, Israel

If you select a payment method provided by this service provider that requires you to make payment in advance, such as payment by credit card, the payment data you provide during the ordering process—including your name, address, bank and payment card details, currency and transaction number—as well as information about the contents of your order, will be transferred to the provider in accordance with Article 6(1)(b) GDPR.

Your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

As part of the services described above, data may also be transferred to Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA, for further processing on our behalf.

Where data is transferred to the provider’s location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For data transfers to the USA, the provider relies on the European Commission’s Standard Contractual Clauses, which are intended to ensure compliance with European data protection standards.

PayPal

One or more online payment methods provided by the following service provider are available on this website:

PayPal (Europe) S.à r.l. et Cie, S.C.A.
22–24 Boulevard Royal
L-2449 Luxembourg

If you select a payment method provided by this service provider that requires you to make payment in advance, the payment data you provide during the ordering process—including your name, address, bank and payment card details, currency and transaction number—as well as information about the contents of your order, will be transferred to the provider in accordance with Article 6(1)(b) GDPR.

Your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

If you select a payment method under which we advance the payment, you will also be asked during the ordering process to provide certain personal data, including your first and last name, street, house number, postcode, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.

To safeguard our legitimate interest in assessing your creditworthiness in such cases, we may forward this data to the provider for a credit check in accordance with Article 6(1)(f) GDPR.

On the basis of the personal data you provide and additional information, such as your shopping basket, invoice amount, order history and payment experience, the provider assesses whether the selected payment method can be offered in view of the risks of non-payment and/or default.

The credit report may contain probability values, known as score values. Where such scores are included in the credit report, they are based on a scientifically recognised mathematical-statistical method. Factors used to calculate the scores include, but are not limited to, address data.

You may object to this processing of your data at any time by notifying us or the provider. However, the provider may remain entitled to process your personal data insofar as this is necessary to process payments in accordance with the contract.

PayPal Checkout

This website uses PayPal Checkout, an online payment system provided by PayPal that combines PayPal’s own payment methods with local payment methods offered by third-party providers.

If you pay using PayPal, credit card via PayPal, direct debit via PayPal or, where available, “Pay Later” via PayPal, we transfer your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing.

The transfer is carried out in accordance with Article 6(1)(b) GDPR and only to the extent necessary to process the payment.

For the payment methods credit card via PayPal, direct debit via PayPal or, where available, “Pay Later” via PayPal, PayPal reserves the right to conduct a credit check.

For this purpose, your payment data may be transferred to credit reference agencies in accordance with Article 6(1)(f) GDPR, based on PayPal’s legitimate interest in assessing your creditworthiness.

PayPal uses the result of the credit check, which relates to the statistical probability of payment default, to decide whether to make the respective payment method available.

The credit report may contain probability values, known as score values. Where such scores are included in the credit report, they are based on a scientifically recognised mathematical-statistical method. Factors used to calculate the scores include, but are not limited to, address data.

You may object to this processing of your data at any time by notifying PayPal. However, PayPal may remain entitled to process your personal data insofar as this is necessary to process payments in accordance with the contract.

If the PayPal payment method “Purchase on Invoice” is available and selected, your payment data will initially be transferred to PayPal to prepare the payment. PayPal will then forward it to Ratepay GmbH, Franklinstraße 28–29, 10587 Berlin, Germany (“Ratepay”), to process the payment.

The legal basis for each transfer is Article 6(1)(b) GDPR.

In this case, Ratepay carries out an identity and credit check in its own name to assess your creditworthiness, following the principles described above. Ratepay also transfers your payment data to credit reference agencies on the basis of its legitimate interest in assessing your creditworthiness, in accordance with Article 6(1)(f) GDPR.

A list of the credit reference agencies that Ratepay may consult is available here:

https://www.ratepay.com/legal-payment-creditagencies/

​

6. Comment Function

When you use the comment function on this website, your comment, the date and time it was created and the username you selected are stored and published on this website.

Your IP address is also logged and stored. This storage takes place for security reasons and in case the person concerned infringes the rights of third parties through a comment or posts unlawful content.

We require your email address so that we can contact you if a third party alleges that your published content is unlawful.

The legal bases for storing your data are Articles 6(1)(b) and 6(1)(f) GDPR.

We reserve the right to delete comments if third parties report them as unlawful.

​

7. Online Marketing

Google AdSense

This website uses Google AdSense, an online advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (“Google”).

Google AdSense uses cookies, which are text files stored on your computer that enable analysis of your use of the website. Google also uses so-called web beacons (small, invisible graphics) to collect information. These enable simple actions, such as website traffic, to be recorded, collected and evaluated.

The information generated by cookies and/or web beacons concerning your use of this website, including your IP address, is generally transmitted to and stored on a Google server. This information may also be transferred to servers operated by Google LLC in the USA.

Google uses the information obtained to analyse your usage behaviour in relation to AdSense advertisements. The IP address transmitted by your browser in connection with Google AdSense is not combined with other Google data.

The information collected by Google may be transferred to third parties where required by law and/or where third parties process the data on Google’s behalf.

All processing described above, in particular the reading of information from your device through cookies and/or web beacons, takes place only if you have given your explicit consent in accordance with Article 6(1)(a) GDPR. If you do not give your consent, Google AdSense will not be used during your visit to our website.

You may withdraw your consent at any time with effect for the future by deactivating this service through the “Cookie Consent Tool” provided on our website.

For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, is intended to ensure compliance with European data protection standards.

Further information about Google’s privacy practices is available at:

https://business.safety.google/intl/de/privacy/

https://www.google.de/policies/privacy/

​

8. Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (“Google”), which enables us to analyse your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your device that collect certain information. This information includes your IP address, which Google truncates by removing the final digits to prevent direct personal identification.

The information is transmitted to Google servers and processed there. Transfers to Google LLC, based in the USA, are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services related to website and internet usage.

The truncated IP address transmitted by your browser in connection with Google Analytics is not combined with other Google data.

Data collected through Google Analytics 4 is stored for two months and then deleted.

All processing described above, in particular the setting of cookies on your device, takes place only if you have given your explicit consent in accordance with Article 6(1)(a) GDPR.

If you do not give your consent, Google Analytics 4 will not be used during your visit to our website.

You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the “Cookie Consent Tool” provided on our website.

We have entered into a data processing agreement with Google to ensure the protection of our website visitors’ data and to prohibit unauthorised disclosure to third parties.

Further legal information about Google Analytics 4 is available at:

https://business.safety.google/intl/de/privacy/

https://policies.google.com/privacy

https://policies.google.com/technologies/partner-sites

Demographic Characteristics

Google Analytics 4 uses the special feature “demographic characteristics” to generate statistics about website visitors’ age, gender and interests. This is done by analysing advertising data and information from third parties.

This information can be used to identify target groups for marketing activities. However, the data collected cannot be attributed to any specific individual and is deleted after a storage period of two months.

Google Signals

Google Signals may be used on this website as an extension of Google Analytics 4 to generate cross-device reports.

If you have enabled personalised advertising and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics under Article 6(1)(a) GDPR, analyse your usage behaviour across devices and create data models, including models relating to cross-device conversions.

We do not receive personal data from Google, only statistics.

If you wish to stop cross-device analysis, you can disable the “Personalised advertising” feature in your Google account settings. Please follow the instructions available here:

https://support.google.com/My-Ad-Center-Help/answer/12155764

Further information about Google Signals is available here:

https://support.google.com/analytics/answer/7532985

User IDs

As an extension of Google Analytics 4, this website may use the “User IDs” feature.

If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) GDPR, have created an account on this website and log in to that account on different devices, your activities, including conversions, may be analysed across devices.

For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, is intended to ensure compliance with European data protection standards.

​

9. Retargeting, Remarketing and Conversion Tracking​

​

9.1 Google Ads Remarketing

This website uses retargeting technology provided by:

Google Ireland Limited
Gordon House, 4 Barrow Street
Dublin, D04 E5W5
Ireland

For this purpose, Google places a cookie in the browser on your device. Based on a pseudonymous cookie ID and the pages you have visited, this enables interest-based advertising.

Further data processing takes place only if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalise advertisements displayed to you on the web.

If you are logged in to Google while visiting our website and have given the relevant consent, Google uses your data together with Google Analytics data to create and define target audience lists for cross-device remarketing.

For this purpose, Google temporarily links your personal data with Google Analytics data to create target audiences.

The use of Google Ads Remarketing may also involve the transfer of personal data to servers operated by Google LLC in the USA.

All processing described above, in particular the setting of cookies to read information from your device, takes place only if you have given your explicit consent in accordance with Article 6(1)(a) GDPR.

If you do not give your consent, retargeting technology will not be used during your visit to our website.

You may withdraw your consent at any time with effect for the future. To do so, please deactivate this service using the “Cookie Consent Tool” provided on our website.

For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, is intended to ensure compliance with European data protection standards.

Details of the processing initiated by Google and how Google handles data from websites are available here:

https://policies.google.com/technologies/partner-sites

Further information about Google’s privacy practices is available at:

https://business.safety.google/intl/de/privacy/

https://www.google.de/policies/privacy/

​

9.2 Google Ads Conversion Tracking

​

This website uses the online advertising programme “Google Ads” and, as part of Google Ads, the conversion tracking service provided by Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland (“Google”).

We use Google Ads to draw attention to our offers on external websites with the help of advertising materials, known as Google Ads. This enables us to measure the effectiveness of individual advertising campaigns.

Our objectives are to show you advertising that may be of interest to you, make our website more attractive to you and ensure fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on a Google Ads advertisement. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification.

If the user visits certain pages on this website while the cookie is still valid, Google and we can recognise that the user clicked on the advertisement and was redirected to this website.

Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of different Google Ads customers.

The information collected using the conversion cookie is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking.

Customers can see the total number of users who clicked on their advertisement and were redirected to a page containing a conversion tracking tag. However, they do not receive information that can personally identify individual users.

The use of Google Ads may also involve the transfer of personal data to servers operated by Google LLC in the USA.

Details of the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites are available here:

https://policies.google.com/technologies/partner-sites

All processing described above, in particular the setting of cookies to read information from your device, takes place only if you have given your explicit consent in accordance with Article 6(1)(a) GDPR.

You may withdraw your consent at any time with effect for the future by deactivating this service through the “Cookie Consent Tool” provided on our website.

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link:

https://support.google.com/My-Ad-Center-Help/answer/12155656

Please note that certain functions of this website may not be available or may be available only to a limited extent if you disable the use of cookies.

Google’s privacy policies are available at:

https://business.safety.google/intl/de/privacy/

https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU–US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, is intended to ensure compliance with European data protection standards.

​

10. Consent Tool

​

This website uses a so-called “Cookie Consent Tool” to obtain valid user consent for cookies and cookie-based applications that require consent.

When users access the website, the tool is displayed as an interactive user interface through which they can consent to specific cookies and/or cookie-based applications by ticking the relevant boxes.

The tool ensures that cookies and services requiring consent are loaded only after the user has provided the relevant consent by ticking the appropriate box. This ensures that such cookies are stored on the user’s device only where consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a general rule, no personal user data is processed for this purpose.

In individual cases, personal data, such as an IP address, may nevertheless be processed to store, assign or record cookie settings. Such processing is carried out in accordance with Article 6(1)(f) GDPR, based on our legitimate interest in ensuring lawful, user-specific and user-friendly cookie consent management and, consequently, ensuring that our website complies with applicable legal requirements.

An additional legal basis for processing is Article 6(1)(c) GDPR. As the controller, we are subject to a legal obligation to make the use of technically unnecessary cookies dependent on the user’s consent.

Where necessary, we have entered into a data processing agreement with the provider to ensure the protection of our website visitors’ data and to prohibit unauthorised disclosure to third parties.

Further information about the operator of the Cookie Consent Tool and the available settings can be found directly in the corresponding user interface on our website.

​

11. Data Subject Rights

​

11.1 Your Rights Under Applicable Data Protection Law

Applicable data protection law grants you comprehensive rights in relation to the processing of your personal data by the controller. These rights are set out below:

• Right of access under Article 15 GDPR: You have the right to obtain information about the personal data we process concerning you, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the intended storage period or the criteria used to determine that period, the existence of your rights to rectification, erasure, restriction of processing and objection, your right to lodge a complaint with a supervisory authority, the source of your data where it was not collected directly from you, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and envisaged consequences of such processing for you. You also have the right to be informed of the safeguards in place under Article 46 GDPR where your data is transferred to third countries.

• Right to rectification under Article 16 GDPR: You have the right to obtain without undue delay the rectification of inaccurate personal data concerning you and/or the completion of incomplete personal data stored by us.

• Right to erasure under Article 17 GDPR: You have the right to request the erasure of your personal data where the conditions set out in Article 17(1) GDPR are met. However, this right does not apply in particular where processing is necessary for exercising the right to freedom of expression and information, compliance with a legal obligation, reasons of public interest, or the establishment, exercise or defence of legal claims.

• Right to restriction of processing under Article 18 GDPR: You have the right to request restriction of the processing of your personal data while the accuracy of data you contest is being verified; where you oppose erasure of your data because the processing is unlawful and instead request restriction of its use; where you need the data for the establishment, exercise or defence of legal claims even though we no longer need it for the purposes of processing; or where you have objected to processing on grounds relating to your particular situation and it has not yet been established whether our legitimate grounds override yours.

• Right to notification under Article 19 GDPR: Where you have exercised your right to rectification, erasure or restriction of processing against the controller, the controller must communicate the rectification, erasure or restriction to each recipient to whom the personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.

• Right to data portability under Article 20 GDPR: You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format, or to request that it be transmitted to another controller, insofar as this is technically feasible.

• Right to withdraw consent under Article 7(3) GDPR: You have the right to withdraw consent to the processing of your data at any time, with effect for the future. Following withdrawal, we will erase the data concerned without undue delay unless further processing can be based on a legal ground that does not require consent. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal.

• Right to lodge a complaint under Article 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, without prejudice to any other administrative or judicial remedy. In Austria, the competent authority is the Austrian Data Protection Authority (Datenschutzbehörde).

 

11.2 Right to Object

​

Where your personal data is processed on the basis of our overriding legitimate interests, you have the right to object to such processing at any time, with effect for the future.

We may nevertheless continue processing the data if there are compelling grounds for doing so.

​

12. Storage Period for Personal Data

​

The storage period for personal data is determined by the applicable legal basis, the purpose of processing and, where applicable, any statutory retention period, such as retention periods under company and tax law.

Where personal data is processed on the basis of explicit consent in accordance with Article 6(1)(a) GDPR, it will be stored until the data subject withdraws their consent.

Where statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Article 6(1)(b) GDPR, the data will routinely be deleted after those retention periods expire, provided it is no longer required for the performance or preparation of a contract and we have no legitimate interest in retaining it further.

Where personal data is processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, it will be stored until the data subject exercises their right to object under Article 21(2) GDPR.

Unless otherwise specified in the information provided in this Privacy Policy regarding particular processing activities, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

​

Information on Legal Remedies

​

You have the rights of access, rectification, erasure, restriction of processing, data portability and objection. To exercise these rights, please contact us.

If you believe that the processing of your data infringes data protection law or that your data protection rights have otherwise been violated, you may lodge a complaint with the supervisory authority.
 

In Austria, the competent authority is the Austrian Data Protection Authority
(Österreichische Datenschutzbehörde):

Österreichische Datenschutzbehörde
Barichgasse 40–42
1030 Vienna
Austria

Telephone: +43 1 52 152-0
Email: dsb@dsb.gv.at
Website: http://www.dsb.gv.at/

Last updated: May 2026

​

Disclaimer

​

This is an English translation provided for convenience and informational purposes only. In the event of any discrepancies, inconsistencies, or differences in interpretation between the German and English versions, the German version shall prevail and shall be considered the sole legally binding and authoritative version.