Privacy Policy

Data Controller #

You are welcome to contact us at any time. The controller responsible for data processing is:

Hosting and Server Log Files #

Legal basis: Art. 6(1)(f) GDPR

Hosting by Squarespace

Our website is created and hosted using Squarespace, a service provided by Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, D08 N12C, Ireland (“Squarespace”). Squarespace processes the data described in this section, as well as data you enter on our website (for example in forms or when placing an order), on our behalf. Squarespace's data processing addendum, which forms part of its terms of service, applies to this processing in accordance with Art. 28 GDPR.

Data may also be transferred to Squarespace's parent company, Squarespace, Inc., in the USA. Such transfers are based on the European Commission's adequacy decision (Trans-Atlantic Data Privacy Framework, TADPF) or on EU standard contractual clauses.

The processing is based on Art. 6(1)(f) GDPR, on the basis of our legitimate interest in the secure, reliable and efficient provision of our website. For more information, see the Squarespace Privacy Policy.

Server log files

You can visit our website without providing any personal information.

Each time you access our website, your browser transmits usage data to us or to our web host Squarespace, which is stored in log files (server log files). This stored data includes, for example:

• Name of the page accessed
• Date and time of access
• IP address
• Amount of data transferred
• Requesting provider

The data is processed on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our services.

Contacting Us #

Legal basis: Art. 6(1)(b) or (f) GDPR

Contact by email

If you contact us by email on your own initiative with a business enquiry, we collect your personal data (name, email address, message text) only to the extent you provide it. The data is processed to handle and respond to your enquiry.

If you contact us in order to take pre-contractual steps (e.g. advice on a potential purchase, preparing a quote) or in connection with a contract already concluded between us, the processing is based on Art. 6(1)(b) GDPR.

If you contact us for other reasons, the processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR.

We use your email address only to handle your enquiry. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Contact form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent you provide it. The data is processed for the purpose of getting in touch with you.

If you contact us in order to take pre-contractual steps (e.g. advice on a potential purchase, preparing a quote) or in connection with a contract already concluded between us, the processing is based on Art. 6(1)(b) GDPR.

If you contact us for other reasons, the processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR.

We use your email address only to handle your enquiry. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Reporting Illegal Content (TCO Regulation and Digital Services Act) #

Legal basis: Art. 6(1)(c) GDPR in conjunction with Art. 15 TCO Regulation and Arts. 11, 12, 16 DSA

If you send us information about suspected terrorist content or other illegal content by email, via the contact form or through any other electronic means of communication we provide, we collect your personal data (email address, name, message text) only to the extent you provide it. The data is processed in order to carry out a reporting procedure in accordance with Regulation (EU) 2021/784 (TCO Regulation) and Regulation (EU) 2022/2065 (Digital Services Act).

The processing is carried out to comply with a legal obligation on the basis of Art. 6(1)(c) GDPR in conjunction with Art. 15 of the TCO Regulation, and Art. 6(1)(c) GDPR in conjunction with Arts. 11, 12 and 16 of the Digital Services Act.

Your data is then deleted in compliance with statutory retention periods.

WhatsApp Business #

Legal basis: Art. 6(1)(b) or (f) GDPR

If you contact us via WhatsApp for business purposes, we use WhatsApp Business, provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, the service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).

The data is processed to handle and respond to your enquiry. For this purpose, we collect and process the mobile number stored with WhatsApp, your name if provided, and any other data to the extent you provide it. We use a mobile device for this service whose address book contains only data of users who have contacted us via WhatsApp. Personal data is therefore not passed on to WhatsApp unless you have already consented to this with WhatsApp.

WhatsApp transfers your data to servers of Meta Platforms Inc. in the USA. An adequacy decision of the European Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. is certified under the TADPF and has thereby committed to complying with European data protection principles.

If you contact us in order to take pre-contractual steps (e.g. advice on a potential purchase, preparing a quote) or in connection with a contract already concluded between us, the processing is based on Art. 6(1)(b) GDPR.

If you contact us for other reasons, the processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in providing a quick and easy way to contact us and in responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data based on Art. 6(1)(f) GDPR.

We use your personal data only to handle your enquiry. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

For more information on WhatsApp's terms of use and privacy, see the WhatsApp Terms of Service and the WhatsApp Privacy Policy.

Cancellation Button #

Legal basis: Art. 6(1)(b) or (c) GDPR

If you cancel a subscription contract concluded through our website using the legally required cancellation button, we process the data you enter in the confirmation form. We collect your personal data (name, email address, your phone number if applicable, details identifying the contract you wish to cancel, and the date and time your notice of cancellation was sent) only to the extent you provide it. The data is processed to give you the legally required option to terminate your continuing contract and to process your cancellation properly.

Where this concerns a contract already concluded between us, the processing is based on Art. 6(1)(b) GDPR. Otherwise, it is based on Art. 6(1)(c) GDPR, as we are legally required to provide a cancellation button on our website.

We use your email address only to process your notice of cancellation. Your data is then deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Job Applications #

Legal basis: Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG; Art. 6(1)(a) GDPR; Art. 9(2)(b) GDPR

Visitors interested in vacancies advertised on our website can apply by email or using our application form. In both cases, we collect your personal data only to the extent you provide it. This includes your contact details (e.g. name, email address, phone number), information on your professional qualifications and education, further training, and performance-related certificates.

The data is processed for the purpose of contacting you and deciding whether to enter into an employment relationship with you. Providing the data is necessary to carry out the application process. Your personal data is processed on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG in order to take pre-contractual steps (the application process as the initiation of an employment contract).

Where you have given us consent to process your personal data for inclusion in our applicant pool, e.g. by ticking a checkbox, the processing is based on Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Where special categories of personal data within the meaning of Art. 9(1) GDPR are requested from applicants during the application process, such as information on the degree of a severe disability, this is done on the basis of Art. 9(2)(b) GDPR so that we can exercise the rights and fulfil the obligations arising from employment law and social security and social protection law.

We store your personal data for as long as is necessary to decide on your application. Your data is then deleted no later than six months afterwards, unless you have consented to further processing and use. If the application process leads to an employment relationship, the data provided will be further processed on the basis of Art. 6(1)(b) GDPR in conjunction with Section 26(1) BDSG for the purpose of carrying out the employment relationship and then transferred to your personnel file.

Advertising #

Postal advertising

Legal basis: Art. 6(1)(f) GDPR

We use your personal data (name, address) that we receive in connection with the sale of goods or services to send you postal advertising, unless you have objected to this use. Providing this data is required to conclude the contract; if it is not provided, no contract can be concluded.

The processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in direct marketing. You can object to this use of your address data at any time by notifying us. The contact details for exercising your objection can be found in our Legal Notice.

Newsletter

Legal basis: Art. 6(1)(a) GDPR

We use your email address to send you information and offers by newsletter if you have expressly consented to this. The data is processed solely for advertising purposes. For this, we process your email address and any other data you voluntarily provide when subscribing to our newsletter.

The processing is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

You can unsubscribe from the newsletter at any time using the link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Even after removal, we may keep your email address on a so-called blacklist to ensure that you do not receive newsletter emails from us in the future. This storage is based on Art. 6(1)(f) GDPR, on the basis of our and your legitimate interest in preventing your email address from being used again to send our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.

Direct advertising by email

Legal basis: Art. 6(1)(f) GDPR

We use the email address we receive in connection with the sale of goods or services to send you electronic advertising for our own goods or services similar to those you have already purchased from us, unless you have objected to this use. Providing the email address is required to conclude the contract; if it is not provided, no contract can be concluded.

The processing is based on Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in direct marketing. You can object to this use of your email address at any time by notifying us. The contact details for exercising your objection can be found in our Legal Notice. You can also use the link provided for this purpose in each advertising email. This does not incur any costs other than transmission costs at basic rates.

Back-in-stock notifications

Legal basis: Art. 6(1)(a) GDPR

We offer a back-in-stock notification service on our website. If an item is temporarily unavailable, you can enter your email address on the item page and, if you have consented, we will notify you by email once it is available again. You will receive a single email notification when the item becomes available.

The processing is based on your consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal. You can cancel the notification at any time by notifying us. Your email address will then be removed from the mailing list.

Cookies #

Our website uses cookies. Cookies are small text files that are stored in or by the web browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.

Cookies are stored on your computer, so you have full control over their use. By choosing the appropriate technical settings in your web browser, you can be notified before cookies are set, decide individually whether to accept them, and prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website to their full extent.

The following links explain how to manage (and disable) cookies in the most common browsers:

• Chrome
• Microsoft Edge
• Mozilla Firefox
• Safari

A detailed list of the cookies we use can be found in our Cookie Policy.

Technically necessary cookies

Legal basis: Section 25(2) TDDDG, Art. 6(1)(f) GDPR

Unless otherwise stated in this privacy policy, we only use these technically necessary cookies, to make our services more user-friendly, effective and secure. Cookies also allow our systems to recognise your browser after you change pages and to offer you services. Some functions of our website cannot be provided without cookies; for these, the browser must be recognised even after a page change.

These include the functional and required cookies set by Squarespace, for example to protect the website against attacks, to store your shopping cart and checkout status, and to remember your choice in the cookie banner.

Cookies or similar technologies are used on the basis of Section 25(2) TDDDG. Your personal data is processed on the basis of Art. 6(1)(f) GDPR, on the basis of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.

Cookie banner

Legal basis: Art. 6(1)(c) GDPR in conjunction with Section 25(1) TDDDG

We use the cookie banner built into Squarespace to obtain your consent to cookies and similar technologies that are not strictly necessary, and to allow you to withdraw consent you have already given. Your choice is stored in a cookie so that the banner does not reappear on every page and your decision can be respected.

The processing is carried out to comply with our legal obligation to obtain and document consent. You can change your choice at any time using the “Cookie preferences” button displayed on our website.

Analytics #

Squarespace Analytics

Legal basis: Section 25(1) TDDDG, Art. 6(1)(a) GDPR

We use Squarespace Analytics, the analytics function built into Squarespace (Squarespace Ireland Limited, Squarespace House, Ship Street Great, Dublin 8, D08 N12C, Ireland), to evaluate how our website is used, for example traffic sources, page views and the number of unique visitors.

For this purpose, Squarespace sets analytics cookies that identify unique visitors and their sessions. These cookies are stored for between 30 minutes and two years. They are only set if you have given your consent via our cookie banner.

Cookies or similar technologies are used with your consent on the basis of Section 25(1) TDDDG. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Data may be transferred to Squarespace, Inc. in the USA. Such transfers are based on the European Commission's adequacy decision (TADPF) or on EU standard contractual clauses.

Google Analytics 4

Legal basis: Section 25(1) TDDDG, Art. 6(1)(a) GDPR

We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

The data is processed for the purpose of analysing this website and its visitors and for marketing and advertising purposes. On behalf of the operator of this website, Google will use the information obtained to evaluate your use of the website, compile reports on website activity and provide further services related to website and internet use to the website operator.

The following information, among other things, may be collected: IP address, date and time of page view, click path, information about your browser and device, pages visited, referrer URL (the website from which you accessed our website), location data and purchase activity. Google may link your data with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google holds about you.

Your IP address is first shortened by us on our own servers, so Google only receives pseudonymised data.

Google uses technologies such as cookies, browser web storage and tracking pixels that enable an analysis of your use of the website. These cookies or similar technologies are used with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.

Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

Google Signals

In this context, we also use Google Signals, which enables cross-device tracking. Your data can thus be analysed across devices if you have enabled “personalised ads” in your account settings and your devices are linked to your Google account. This makes it possible to recognise on which device you search for products and on which other device, such as a tablet, you later return to complete a purchase.

The cross-device reports created in this context contain only aggregated data, so we only receive statistics generated on the basis of Google Signals. To prevent cross-device data collection and storage by Google Signals, you can deactivate “personalised ads” in your Google account settings. More information is available in Google's help on personalised ads. For more information on data processing and privacy with Google Signals, see Google Signals data collection.

Advanced Consent Mode

We use the advanced implementation of Consent Mode. This means that user data is transmitted to Google in the form of “pings” even if you have not given consent. These pings may include, among other things: IP address to derive the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (the website from which our website was accessed), or information about triggered website events such as a conversion. Based on this information, Google models usage data in order to provide a comprehensive usage analysis despite consent having been refused.

Data transfer to the USA

The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. An adequacy decision of the European Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby committed to complying with European data protection principles. Both Google and US government authorities have access to your data.

For more information on terms of use and privacy, see How Google uses information from partner sites, the Google Privacy Policy and Google Business Data Responsibility.

Plug-ins, Fonts and Other Services #

Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

This application manages JavaScript and HTML tags used in particular to implement tracking and analytics tools. The data is processed for the purpose of designing and optimising our website according to need.

Google Tag Manager itself does not store cookies or process personal data. However, it can trigger other tags that may collect and process personal data.

For more information on terms of use and privacy, see the Google Privacy Policy.

Google Maps

Legal basis: Section 25(1) TDDDG, Art. 6(1)(a) GDPR

We use the Google Maps embedding feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

This feature enables the visual display of geographic information and interactive maps. When pages with embedded Google Maps are accessed, Google also collects, processes and uses data of visitors to these pages.

Your data may also be transferred to the USA. An adequacy decision of the European Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has thereby committed to complying with European data protection principles.

Cookies or similar technologies are used with your consent on the basis of Section 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent before its withdrawal.

For more information on how Google collects and uses data, see the Google Privacy Policy. There, in the privacy centre, you can also change your settings to manage and protect the data Google processes.

Web fonts

Legal basis: Art. 6(1)(f) GDPR

To display text consistently, our website uses web fonts that are provided through Squarespace by Google Fonts (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) and Adobe Fonts (Adobe Systems Software Ireland Limited, 4–6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland).

When you open a page, your browser loads the required fonts directly from the provider's servers. In the process, your IP address, the address of the page accessed and information about your browser are transmitted to the provider. Data may also be transferred to the USA; Google and Adobe are certified under the Trans-Atlantic Data Privacy Framework (TADPF).

The processing is based on Art. 6(1)(f) GDPR, on the basis of our legitimate interest in a uniform and appealing presentation of our website. You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.

For more information, see the Google Privacy Policy and the Adobe Fonts privacy information.

Retention Period #

Your data is stored in compliance with statutory retention periods and deleted once those periods have expired, unless you have consented to further processing and use.

Your Rights #

Rights of the data subject

Where the legal requirements are met, you have the following rights under Arts. 15 to 20 GDPR:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to data portability (Art. 20 GDPR)

In addition, under Art. 21(1) GDPR you have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for direct marketing purposes.

Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

You can, among others, lodge a complaint with the supervisory authority responsible for us: