Privacy Policy

In this privacy policy we explain the nature, scope and purpose of the processing of personal data (hereinafter briefly referred to as “data”) within our website, functions and content (hereinafter collectively referred to as the “online offering”). Definitions of terms such as “processing” or “controller” can be found in Art. 4 GDPR.

“Personal data” means any information relating to an identified or identifiable natural person (hereinafter “data subject”); an identifiable natural person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier (e.g. cookie) or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person.

“Processing” means any operation or set of operations, whether or not carried out by automated means, performed on personal data. The term is broad and covers practically any handling of data.

“Controller” means the natural or legal person, public authority, agency or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data.

Controller

Schmid Gartenpflanzen e.K.
Mathias Schmid
Allgäuer Str. 15
87700 Memmingen
Germany

Email address: info@schmid-gartenpflanzen.de
Link to the legal notice: https://www.schmid-gartenpflanzen.de/impressum.php

Categories of data subjects

• Visitors to the online offering

• Customers, prospective customers and business partners

(The data subjects are hereinafter also collectively referred to as “users”)

Types of data processed:

• Usage data (e.g. websites visited, interest in content, access times).

• Meta/communication data (e.g. device information, IP addresses).

• Content data (e.g. text entries, photographs, videos).

Purpose of processing

• Operation of the online offering

• Security measures

• Marketing/statistics

Processing of business-related data

From our customers, prospective customers and business partners we additionally process

• Master data (e.g. names, addresses).

• Contact data (e.g. email, telephone numbers).

• Contract data (e.g. subject matter of the contract, term, customer category).

• Payment data (e.g. bank details, payment history).

for the following purpose

• Provision of contractual services

• Service and customer care

• Marketing, advertising and market research

SSL encryption

To protect the security of your data during transmission, we use encryption methods that correspond to the current state of the art (e.g. SSL) via HTTPS.

Relevant legal bases under Art. 13 GDPR for our data processing

Unless stated otherwise below, the following legal bases apply:

• for obtaining consent: Art. 6(1)(a) and Art. 7 GDPR

• for processing to perform our services and carry out contractual measures as well as to respond to enquiries: Art. 6(1)(b) GDPR

• for processing to comply with our legal obligations: Art. 6(1)(c) GDPR

• for processing to safeguard our legitimate interests: Art. 6(1)(f) GDPR

Cooperation with processors and third parties

Where, in the course of our processing, we disclose data to other persons and companies (processors or third parties), transmit it to them or otherwise grant them access to the data, this only takes place on the basis of a statutory permission (e.g. if a transmission of the data to third parties, such as payment service providers, is necessary for the performance of a contract pursuant to Art. 6(1)(b) GDPR), where you have consented, where a legal obligation provides for it, or on the basis of our legitimate interests (e.g. when using agents, domain registrars, etc.).

Where we commission third parties to process data on the basis of a so-called “data processing agreement”, this is done on the basis of Art. 28 GDPR.

Data transfers to third countries

A transfer of data to a third country (outside the European Union or the European Economic Area) or the processing of data by a service we use takes place only if the special requirements under Art. 44 GDPR et seq. are met. This means that it is based on special guarantees by which a level of data protection corresponding to that of the EU is officially to have been established (e.g. “Privacy Shield” for the USA) or on compliance with officially recognised special contractual obligations (standard contractual clauses). The legal basis is the performance of our contractual obligations, the user’s consent or our legitimate interests. 

Data subject rights

You have the right to request confirmation as to whether data concerning you is being processed, and to obtain access to this data as well as further information and a copy of the data in accordance with Art. 15 GDPR.

In accordance with Art. 16 GDPR, you have the right to request the completion of data concerning you or the rectification of inaccurate data concerning you.

In accordance with Art. 17 GDPR, you have the right to request that data concerning you be erased without undue delay or, alternatively, in accordance with Art. 18 GDPR, to request restriction of the processing of the data.

You have the right to receive the data concerning you that you have provided to us in accordance with Art. 20 GDPR and to request its transmission to other controllers.

You also have the right, pursuant to Art. 77 GDPR, to lodge a complaint with the competent supervisory authority.

Right of withdrawal

You have the right to withdraw consent given, in accordance with Art. 7(3) GDPR, with effect for the future.

Right to object

You may object to the future processing of data concerning you at any time in accordance with Art. 21 GDPR. The objection may be made in particular against processing for direct marketing purposes.

Cookies and options to disable them

Through “cookies”, online offerings can store data in the browser and thus on the user’s computer. This enables the online offering to recognise the user for the duration of a visit or across several visits. “Cookies” have a period of validity after which they are no longer active and can no longer be used by the online offering.

Session cookies, also called temporary cookies, are stored only for the duration of the current visit. They are deleted when the browser is closed. For example, shopping basket contents or information about a user’s login status are stored here. These are usually necessary for the functioning of an online offering.

Persistent cookies remain valid even after the browser is closed and expire only after their period of validity has elapsed. Here too, the user’s login status can be stored if this is desired across several visits. They are more often used for analysis purposes, such as usage statistics of the online offering. 

Third-party cookies are cookies that are placed and evaluated not directly by the provider of the online offering but by a third party. They are generally used by service providers for web analytics, the embedding of videos, maps, fonts and other services or content. As a rule these are persistent cookies, which can also have a very long period of validity. The service provider often uses and processes these cookies across several websites as well, with the aim of pursuing its economic interests, for example building user profiles in order to display targeted advertising. The actual operator of the online offering often has no influence on, and no insight into, where, how and for how long these are used for which purpose or combined with further information. For many services that use cookies mainly for online marketing or tracking purposes, the following pages offer options to object: http://www.aboutads.info/choices/ and http://www.youronlinechoices.com/. Another way to prevent tracking is to send the DNT header (Do Not Track) with every request, which can be set via the browser settings. Many tracking service providers and advertising networks respect the wish expressed in this way, although there is no obligation to do so. 

Our online offering may use both session cookies and persistent cookies; this privacy policy provides corresponding information about them.

If, as a user, you generally do not want cookies to be stored, you can prevent this in your browser settings. You can also delete cookies that have already been stored there. In addition, some browsers offer the option of deleting all cookies, including persistent ones, after each closing, or of setting fine-grained permissions for cookies per domain / online service. Disabling cookies altogether, in particular session cookies, may mean that not all functions of this online offering can be used.

 

All cookies set by us, their purpose and period of validity:

Cookie	Period of validity	Description
PHPSESSID	Session	Session cookie of the web server, technically necessary to provide general functions of the online offering.
uvuid	365 days	Used to record website visitors statistically in an internal analytics tool
vid	1 hour	Used to record data on individual visits/sessions statistically in an internal analytics tool
statsDisabled	365 days	Opt-out cookie for the internal analytics tool
acceptCookies	permanent	Used so that the cookie banner is no longer shown on every page view
fud_session_xxx	7 days	Required by the forum software for user management (login/logout/permissions).
upAvMode	Session	stores various preferences of the user, e.g. the visibility of products that are in stock / available to pre-order
googltrans	Session	stores any language selected into which the page is to be translated

If the user deletes their cookies in the browser settings, settings and preferences managed via cookies may have to be made again. Parts of the functionality of the online offering (currently logged-in user, shopping basket contents and the like) are also reset in this case.

Deletion of data

The data processed by us are deleted or their processing is restricted in accordance with Art. 17 and 18 GDPR. Unless expressly stated within this privacy policy, the data stored by us are deleted as soon as they are no longer required for their intended purpose and no statutory retention obligations preclude deletion. Where data are not deleted because they are required for other, legally permissible purposes, their processing is restricted. This means the data are blocked and not processed for other purposes. This applies, for example, to data that must be retained for commercial or tax-law reasons.

Under statutory requirements in Germany, retention is in particular for 6 years pursuant to § 257(1) HGB (German Commercial Code) (commercial books, inventories, opening balance sheets, annual financial statements, commercial letters, accounting vouchers, etc.) and for 10 years pursuant to § 147(1) AO (German Fiscal Code) (books, records, management reports, accounting vouchers, commercial and business letters, documents relevant for taxation, etc.).

Access data and log files

On the basis of our legitimate interests within the meaning of Art. 6(1)(f) GDPR, we collect data on every access to the server(s) providing this service or parts of it (server log files). These include the URL accessed, date, time, the amount of data transferred, the transfer status (response code), information on the user’s browser and operating system (UA string, usually type and version), the previously visited page (referrer), the IP address used by the user and the requesting provider.

For security reasons (e.g. protection against misuse, investigation of fraudulent intentions) the log files are kept for a maximum of 7 days and then deleted. Should longer storage be necessary for evidentiary purposes, we exclude them from deletion until the matter has been clarified.

Provision of contractual services

From customers, business partners and users we process master data (e.g. names and addresses as well as contact data) and contract data (e.g. services used, names of contact persons, payment information) in order to fulfil our contractual obligations and services pursuant to Art. 6(1)(b) GDPR. Fields marked as required in forms must be completed to conclude the contract.

When contractual services are used or enquiries are made, we store the IP address and the time of the respective action. This is done both on the basis of our legitimate interests and in the interest of users in protection against misuse and unauthorised use. This data is in principle not passed on to third parties unless passing it on is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6(1)(c) GDPR.

In a user profile we process data on usage (e.g. websites visited, interest in products and services) as well as content data (e.g. data entered in the customer account, entries in forms, products in the shopping basket, order history). We use these to give the user, for advertising purposes, e.g. recommendations based on services previously used.

The data are deleted after the expiry of statutory warranty and comparable obligations; the necessity of retaining the data is reviewed every three years; if the data are subject to statutory archiving obligations, they are deleted after these expire. Information provided in the customer account remains until the account is deleted.

User account and registration

A user account is required to use products and services via the online offering. The mandatory information needed for registration is shown in the respective forms. The registration data entered are used for the purpose of using the offering and making use of products and services. Registered users may be informed by email about changes to services they use as well as technical changes. When the user account is deleted or cancelled, the user’s data are deleted, unless retention is necessary for commercial or tax-law reasons pursuant to Art. 6(1)(c) GDPR. Backing up data before the end of the contract following termination is the user’s responsibility. We are entitled to irrevocably delete all user data stored over the duration of the contract.

When using the registration and login functions and when otherwise using the user account, we store the IP address and time for each user action. This is done both on the basis of our legitimate interests and in the interest of users in protection against misuse and unauthorised use. This data is in principle not passed on to third parties unless passing it on is necessary to pursue our claims or there is a legal obligation to do so pursuant to Art. 6(1)(c) GDPR.

IP addresses and other data that are not necessary for the further provision of the service are anonymised or deleted after 7 days at the latest.

Contact

If a user contacts us (e.g. by email, telephone or in another way), their details are processed for handling and processing the enquiry pursuant to Art. 6(1)(b) GDPR. 

We delete or anonymise the data resulting from enquiries as soon as they are no longer required to provide services to the user and no statutory archiving obligations (e.g. for emails) apply to them.

Newsletter

Below we inform you about the content, the subscription and unsubscription procedures, the dispatch and evaluation procedures, and your rights of objection in connection with our newsletter.

By subscribing to our newsletter you agree to its receipt and to the procedures described.

Content of the newsletter:

Newsletters sent by us by email contain information about our services and about us, with an advertising character. They are sent only with the recipients’ consent or a statutory permission. If the type of content of a newsletter is specifically described at registration (product categories/sections, types of services), this is decisive for the consent given by the users.

Registration via “double opt-in” and logging:

For registration to our newsletter, the so-called “double opt-in procedure” is used. After registering you will receive an email with a confirmation link and a request to complete the registration by clicking on it. This ensures that the person who made the registration in our online offering also has access to the email address given. Registration with other people’s email addresses is not possible. In order to document the registration process in accordance with the legal requirements and to be able to prove it, user actions and data (time of registration and confirmation, IP address used) are logged in connection with it.

Registration data:

An email address is sufficient for registration. For a personalised greeting we ask you to provide a name and gender.

Legal bases:

The dispatch of the newsletter and the associated collection of statistics (success measurement) is based on the consent of the recipients pursuant to Art. 6(1)(a), Art. 7 GDPR in conjunction with § 7(2) no. 3 UWG (German Unfair Competition Act), or on the basis of the statutory permission pursuant to § 7(3) UWG.

The logging of the registration procedure is based on our legitimate interests pursuant to Art. 6(1)(f) GDPR. These consist in operating a secure and user-friendly newsletter system that, in addition to our business interests, also meets user expectations and makes it possible to prove consents.

Cancellation / withdrawal / unsubscription:

You can end the receipt of the newsletter (cancel) at any time by withdrawing your consent.

The withdrawal can be made by clicking on a link included at the end of every newsletter sent.

A further way to exercise the withdrawal is to enter your email address in the registration form. If consent already exists for the email address entered, instead of an email for confirmation you will receive an email with a link through which you can withdraw consent (unsubscribe).

We may store the email addresses of unsubscribed users for up to 3 years on the basis of our legitimate interests in order to be able to prove consent previously given. You can individually request immediate deletion, provided that a confirmation of previously given consent is available.

Dispatch service provider

The technical dispatch is carried out by us / our own newsletter software. The technical infrastructure used for dispatch is operated at our locations in Germany; no data transfer to third parties takes place.

Our newsletter software uses data in pseudonymised form for improvement and optimisation, for improving deliverability and presentation, and for statistical purposes, i.e. these cannot be assigned to any user. These data are not passed on to third parties.

Success measurement

Newsletters sent by us contain a tracking pixel, i.e. a pixel-sized embedded graphic that is retrieved from our server when the newsletter (the email) is opened. In the process, information about the browser/email client as well as the IP address and the time of retrieval are transmitted and recorded. The URL (address) of the tracking pixel additionally contains a pseudonymised user identifier and an encoded reference to the newsletter mailing.

These data are used for statistical recording to improve the quality and relevance of our mailings. With them we record the number and timing of openings, unsubscriptions and clicks on links contained in the newsletter.

“Profiling”, i.e. for example recording your personal reading habits / preferences or a geographical assignment of your openings, does not take place. Assigning this information to individual newsletter recipients is technically possible neither for us nor for the dispatch service provider. The aim of the recording is not to “observe” individual users but the purely quantitative and temporal recording of actions in connection with the emails sent on the part of all users.

Furthermore, when the tracking pixel is retrieved and when links contained in the newsletter are clicked, subsequent actions of the user within our online offering are associated with the opening of the newsletter. This takes place under the domain of our online offering; these data are not passed to our newsletter software. This is done on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. The purpose is to measure the success of our newsletter mailings (conversion rate) by recording the frequency of actions (online purchases, visits to advertised offers, use of services) that are connected with the content of the newsletter and the reaction to it (opening, click).

Data on undeliverable emails (bounces) are recorded and stored permanently; for each email address these include the time and reason (e.g. mailbox full, mail server not responding, address does not exist) as well as the number and the mailing concerned, but not other information provided such as name or salutation. If the entries for an email address exceed defined values, the address is excluded from future dispatch. This is done on the basis of our legitimate interests pursuant to Art. 6(1)(f) GDPR. This ensures that the systems used for dispatch are not unnecessarily burdened by a large number of emails that in all likelihood cannot be delivered, or blocked by the detection systems of individual providers with very many mailboxes because of a large number of undeliverable emails.

gTranslate and Google Translate

This website uses gTranslate, which is based on Google Translate, to offer the option of having the page translated into other languages.

For this purpose the browser you use must connect to the servers of gTranslate.io and Google. As a result, gTranslate.io and Google learn that our website was accessed via your IP address. 

The legal basis is Art. 6(1)(f) GDPR.

You can find more information on the handling of user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/, as well as in the privacy policy of gtranslate.io https://de.gtranslate.io/Bedingungen

Google Analytics

We use Google Analytics on the basis of our legitimate interests in the analysis, optimisation and economic operation of our online offering pursuant to Art. 6(1)(f) GDPR. The web analytics service Google Analytics uses cookies and is operated by Google LLC (“Google”). Information generated by the cookie is transmitted to Google servers, which are generally operated in the USA, and stored there.

Google offers, through certification under the Privacy Shield agreement, a guarantee that it complies with European data protection law (https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active).

This information is used by Google to evaluate the use of our online offering by users. Reports on activities related to our online offering are compiled. Further services connected with the use of the online offering are provided. Pseudonymous usage profiles of the users will in all likelihood be created from the data.

When using Google Analytics we activate IP anonymisation, whereby the user’s IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. In exceptional cases it may also be transmitted to a server in the USA and truncated there.

The transmitted IP address is not merged by Google with other data. By setting your browser accordingly, users can prevent the storage of cookies. In addition, you can prevent the collection by Google of the data generated by the cookie and relating to your use of the online offering, and the processing of these data by Google. This can be done by downloading and installing this browser plug-in: http://tools.google.com/dlpage/gaoptout?hl=de

These Google websites provide you with further information on how Google uses data as well as on setting and objection options: https://www.google.com/intl/de/policies/privacy/partners (“Data use by Google when you use websites or apps of our partners”), http://www.google.com/policies/technologies/ads (“Data use for advertising purposes”), http://www.google.de/settings/ads (“Managing the information Google uses to show you advertising”).

Google Ads Remarketing

Via Google Ads we advertise this website in Google search results and on third-party websites. For this purpose, when you visit our website the so-called remarketing cookie from Google is set, which enables interest-based advertising automatically by means of a pseudonymous cookie ID and on the basis of the pages you have visited. This only happens if you have consented to the “Marketing” category in the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG). You can withdraw your consent at any time with effect for the future under “Cookie settings” at the bottom of every page. Once the purpose has ceased and we have stopped using Google Ads remarketing, the data collected in this connection will be deleted.

Any further data processing takes place only if you have agreed towards Google that your web and app browsing history be linked by Google to your Google account and that information from your Google account be used to personalise ads you see on the web. If, in this case, you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data are temporarily linked by Google with Google Analytics data in order to form audiences.
 

Google Ads: conversion measurement and enhanced conversions

If you come to us via a Google ad, the address accessed contains a click identifier (gclid, gbraid or wbraid) as well as identifiers of the campaign, ad group and advertised item. If you order during this visit, we store this information and the time of the click with your order in our own system in order to evaluate which advertising leads to orders. Without your consent we store nothing on your device for this purpose and read nothing from it; the information comes solely from the address accessed. The legal basis is our legitimate interest in the cost-effectiveness of our advertising (Art. 6(1)(f) GDPR). The data do not leave our company. We delete them as soon as they are no longer required for the evaluation, after 24 months at the latest. You can object to this processing at any time (Art. 21 GDPR), for example by email to us.

Only if you consent to the “Marketing” category in the cookie banner (Art. 6(1)(a) GDPR, § 25(1) TDDDG) do we additionally store the click identifier for 90 days in a cookie and transmit your order (order number, time, value of goods, click identifier) to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. With this consent we also use the “Enhanced conversions” function: your email address and, where available, first and last name, postcode and country are converted into a hash value using the SHA-256 procedure before transmission. Google compares this value with Google accounts in order to attribute an order to an ad, and provides us only with aggregated evaluations. A transfer to the USA cannot be ruled out in this process; Google is certified under the EU-US Data Privacy Framework (Art. 45 GDPR). You can withdraw your consent at any time with effect for the future under “Cookie settings” at the bottom of every page.

Cookie consent

To obtain your consent we use the open-source tool Klaro!, which runs on our own server; no data are transmitted to third parties in the process. Your selection is stored in the cookie “klaro” for 365 days. As proof of your consent (Art. 7(1) GDPR) we additionally record the time, the selection and an irreversible checksum of your session, without IP address. The legal basis is Art. 6(1)(c) GDPR in conjunction with Art. 7(1) GDPR, and for the cookie “klaro” § 25(2) no. 2 TDDDG.

Google Optimize

Our website also uses Google Optimize. Google Optimize analyses the use of different variants of our website and helps us improve usability according to the behaviour of our users on the website. Google Optimize is a tool integrated into Google Analytics. Google Tag Manager is likewise a Google product that allows us to manage website tags via one interface. The Tag Manager is a cookieless domain and does not collect any Privacy Policy Page 4 | 6 personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access these data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager. If you do not wish to receive interest-based advertising, you can deactivate the use of cookies by Google for these purposes by visiting the page www.google.com/settings/ads/plugin .

Google ReCaptcha

To detect bots that, for example, fill out and submit contact forms automatically, we use Google “ReCaptcha”. This ensures that forms protected in this way can only be submitted by humans, not by machines/bots. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

You can find the privacy policy here: https://www.google.com/policies/privacy/, an option to opt out at this link: https://adssettings.google.com/authenticated.

Social media buttons

To share the content of our online offerings via social networks we offer so-called social media buttons. For this we use the solution “c’t Shariff”, which provides privacy-compliant social media buttons. 

The buttons offered directly by the operators of social networks impermissibly transmit personal data such as the IP address or even whole cookies as soon as a website on which they are integrated is loaded, and thus unasked pass on precise information about your browsing behaviour to the social services. For this you need neither be logged in nor be a member of the respective network.

A Shariff button, by contrast, establishes direct contact between the social network and the visitor only when the latter actively clicks on the share button. Shariff thereby prevents you from leaving a digital trail on every page you visit and improves data protection. By using Shariff we can protect your personal data and still integrate buttons for social sharing. You can find further information on c’t Shariff at https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.

Disclosure of data to shipping service providers

In the course of shipping processing, on the basis of the EU General Data Protection Regulation Article 6(1)(f), we transmit your data (name, address and email address, as well as further shipment-related data) to the shipping partner chosen by you.

• Until 09/24: DPD Deutschland GmbH. You can object to the transmission of additional information such as email or mobile phone number directly with DPD at widerspruch_predictbenachrichtigung@dpd.de at any time. 
• From 08/24: GLS General Logistics Systems Germany GmbH & Co. OHG. You can object to the transmission of additional information such as email or mobile phone number directly with GLS at datenschutz@gls-germany.com at any time. 
• From 10/24: DHL Paket GmbH. You can object at any time to the use of your email for the purpose of delivering parcel announcement information by DHL by clicking the unsubscribe link at the end of the DHL email.

Address verification

On our website we offer you the option of having certain entries in address forms of our web shop checked for input errors in real time. This is intended to avoid problems with the delivery of the products you ordered caused by incorrect information.

Furthermore, we want to ensure that your contact details are valid for sending information about your order or for any queries that may be necessary.

To provide these functions we use the service provider Endereco, Balthasar-Neumann-Straße 4b, 97236 Randersacker. The service provider processes the data exclusively on our instructions. The legal basis for the transmission, processing and temporary storage of the data at the service provider is Art. 6(1)(b) GDPR, since it is imperative for the performance of the contract or for the implementation of pre-contractual measures that some of the data you enter in the input form be checked for accuracy. The following data are processed by the service provider:

• Address (country, town, postcode, street, house number where applicable)
• Email address (for payment by invoice)
• Telephone number (for freight forwarding shipments or orders that are passed on to a partner company for fulfilment)

The data are processed separately at the service provider and not merged. The requests are deleted at the service provider as soon as the status of the data entered has been determined and storage in the web shop has been completed, at the latest after 30 days.

Payment methods

If you select a payment provider on our site for payment, this provider also receives your personal data, for example your name, your address and your account details. In addition, our house bank receives your bank details when an electronic payment is received.

Advance payment: If you pay by direct debit on our website, our house bank receives your bank details for payment processing.
Invoice: If payment by invoice is offered to you, you will receive the invoice by email at the time the ordered goods are shipped.

 

With the exception of payment by advance payment and invoice, we use the payment service provider Mollie B.V., Keizersgracht 1261015CW, Amsterdam. Mollie receives the following information during payment processing:

• Your payment data (for example bank account number or credit card number)
• Your IP address
• Your internet browser and device type
• In some cases your first and last name
• In some cases your address data
• In some cases information about the product or service you purchased from our customer
• Other personal data that you actively provide, for example by correspondence or by telephone.

You can find data protection information from Mollie at: https://www.mollie.com/de/privacy

You can find payment information from Mollie at: https://help.mollie.com/hc/de/categories/201309549-Zahlungsmethoden

PayPal: If you pay with PayPal on our website (PayPal (Europe) S.à r.l. et Cie, S.C.A. 22-24 Boulevard Royal L-2449 Luxembourg), PayPal receives your payment data for payment processing. You can find information on this at:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#rAnnex

Credit card: If you pay with your credit card on our website, your credit card provider receives the information that you have placed an order with us. Your credit card provider may carry out a credit check. You can find more detailed information on this on the respective website of your credit card provider.

SOFORT banking: You log in with your online banking details. The amount and the beneficiary of the transfer are already pre-filled. When you authorise the payment, our house bank receives your transfer and your bank details.

Klarna Slice it (instalment purchase): If you select Klarna Slice it in the ordering process, you can choose a financing plan with instalments between 3 and 36 months. A credit check is carried out automatically in the background by Klarna (by Klarna and via third parties, cf. https://www.klarna.com/de/datenschutz/ as well as https://help.mollie.com/hc/de/articles/360009858434-Was-ist-Klarna-).

Klarna Pay Later: If you select Klarna Pay Later in the ordering process, you can order first and pay later. A credit check is carried out automatically in the background by Klarna (by Klarna and via third parties, cf. https://www.klarna.com/de/datenschutz/ as well as https://help.mollie.com/hc/de/articles/360009858434-Was-ist-Klarna-).

Giropay: You log in with your online banking details. The amount and the beneficiary of the transfer are already pre-filled. When you authorise the payment, our house bank receives your transfer and, where applicable, your bank details.

EPS: If you pay with the Austrian Electronic Payment Standard (EPS), you log in with your online banking details from the bank participating in EPS. The amount and the beneficiary of the transfer are already pre-filled. When you authorise the payment, our house bank receives your transfer and, where applicable, your bank details.

iDEAL: If you pay with the Dutch iDEAL payment system, you select iDEAL as the payment method and then your house bank. You are then redirected to your bank’s online banking environment and log in. The amount and the beneficiary of the transfer are already pre-filled. When you authorise the payment, our house bank receives your transfer and your bank details.

Belfius Pay Button: If you order with the Belfius Pay Button, you can pay with your Belfius bank account and make a transfer to us directly in the online banking area of Belfius or via the Belfius app. When you authorise the payment, our house bank receives your transfer and your bank details.

ING Home’Pay: If you pay with the Belgian online payment method ING Home’Pay, you can log in to your ING account and then select the right bank account. The amount and the beneficiary of the transfer are already pre-filled. When you authorise the payment, our house bank receives your transfer and your bank details.

KBC/CBC payment button: If you select KBC or CBC as the online payment method, you can pay in your familiar online banking. Here you have the option of paying later (up to a maximum of 2 months). When you authorise the payment, our house bank receives your transfer and, where applicable, your bank details.

Bancontact: If you pay with the Belgian payment method Bancontact, you enter the card number of the Bancontact card linked to your current account. You can then authorise the transaction from your familiar online environment. When you authorise the payment, our house bank receives your transfer and your bank details.

Przelewy24: If you wish to pay with the Polish payment method Przelewy24, you are redirected to the Przelewy24 system and can select your bank. The amount and the beneficiary of the transfer are already pre-filled. When you authorise the payment, our house bank receives your transfer and your bank details.