Privacy Policy

Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about the handling of your personal data when using our website. Personal data refers to any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ZHIVOX. The controller for processing personal data is the natural or legal person who determines, alone or jointly with others, the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the padlock icon in your browser bar.

2) Data Collection When Visiting Our Website

If you use our website purely for informational purposes, meaning you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary to display the website:

  • The visited website
  • Date and time of access
  • Amount of data sent (in bytes)
  • Source or reference from which you accessed the site
  • Browser used
  • Operating system used
  • IP address (if applicable: in anonymized form)

The processing is carried out pursuant to Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. This data is not shared or otherwise used. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

3) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies on various pages. Cookies are small text files stored on your device. Some of the cookies we use are deleted after your browser session ends (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie.

In some cases, cookies simplify the order process by saving settings (e.g., remembering the contents of a virtual shopping cart for later visits). If personal data is also processed by individual cookies we use, the processing is carried out pursuant to Article 6(1)(b) GDPR to fulfill the contract or pursuant to Article 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly experience.

We may collaborate with advertising partners who help make our website more interesting. In this case, cookies from partner companies may also be stored on your device (third-party cookies). If we cooperate with such advertising partners, you will be individually informed about the use of these cookies and the extent of the data collected below.

Please note that you can configure your browser to inform you about cookies being set and decide on their acceptance individually or exclude cookies for specific cases or in general. Each browser manages cookie settings differently. These are described in the help menu of each browser, which explains how to change your cookie settings. You can find the settings for the most common browsers via the following links:

Please note that disabling cookies may limit the functionality of our website.

4) Contacting Us

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of a contact form is evident from the respective contact form. This data is stored and used solely for the purpose of responding to your inquiry or for contact purposes and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Article 6(1)(f) GDPR. If your contact aims to conclude a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted once your inquiry has been conclusively resolved, provided there are no legal retention obligations to the contrary.

5) Data Processing for Account Creation and Contract Execution

Pursuant to Article 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us to execute a contract or open a customer account. The specific data collected can be seen in the respective input forms. You may delete your customer account at any time by sending a message to the address of the data controller mentioned above.

We store and use the data you provide to fulfill the contract. Once the contract has been fully executed or your customer account deleted, your data will be locked in consideration of retention periods under tax and commercial law. After these periods expire, the data will be deleted unless you have expressly consented to further use of your data or we are legally permitted to use the data for other purposes, which we will inform you about below.

6) Use of Your Data for Direct Advertising

6.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for receiving the newsletter is your email address. Providing further data is optional and allows us to address you personally.

We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an email newsletter once you have explicitly confirmed that you agree to the receipt of newsletters. We will then send you a confirmation email asking you to confirm your intent by clicking a designated link.

By activating the confirmation link, you give us your consent to use your personal data pursuant to Article 6(1)(a) GDPR. When registering for the newsletter, we store your IP address as entered by your Internet Service Provider (ISP), as well as the date and time of registration. This storage serves to trace any possible misuse of your email address at a later date.

The data we collect when you register for the newsletter will be used exclusively for advertising purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller mentioned above. After unsubscribing, your email address will be deleted immediately from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data for legally permitted purposes, which we inform you of in this declaration.

6.2 Sending Email Newsletters to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. For this, we do not need to obtain separate consent from you under Section 7(3) of the German Unfair Competition Act (UWG).

The data processing is based solely on our legitimate interest in personalized direct advertising pursuant to Article 6(1)(f) GDPR. You can object to the use of your email address for this purpose at any time by sending a message to the controller mentioned above or using the unsubscribe link in the promotional email. You will incur no costs other than the transmission fees at basic rates.

After receiving your objection, the use of your email address for advertising purposes will cease immediately.

7) Data Processing for Order Handling

7.1 Transfer of Personal Data to Shipping Service Providers
To fulfill the contract, we pass on personal data collected in the course of the order to the shipping company responsible for delivery, as far as this is necessary for delivering the goods.

7.2 Transfer of Personal Data to Payment Providers
For payment processing, we pass your payment data to the authorized credit institution or selected payment service provider, as necessary. If payment service providers are used, we will inform you explicitly below. The legal basis for this transfer is Article 6(1)(b) GDPR.

  • PayPal
    If you select payment via PayPal, credit card via PayPal, direct debit via PayPal, or “purchase on account”/“installment payment” via PayPal, your payment data will be forwarded to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, for payment processing. The transfer of data occurs pursuant to Article 6(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for certain payment methods, such as credit card payments via PayPal, direct debit via PayPal, or “purchase on account”/“installment payment” via PayPal. For this purpose, your payment data may be forwarded to credit agencies in accordance with Article 6(1)(f) GDPR based on PayPal’s legitimate interest in determining your creditworthiness.

PayPal uses the results of the credit check to decide on the provision of the respective payment method. The credit check may include probability values (score values), which are calculated using scientifically recognized statistical methods. Address data is among the factors considered.

Further information on data protection, including information on the credit agencies used, can be found in PayPal’s privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full.

You can object to the processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if it is necessary for contractual payment processing.

  • SOFORT
    If you choose the "SOFORT" payment method, payment processing is carried out via SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (part of Klarna Group). Your payment data will be forwarded to SOFORT for payment processing in accordance with Article 6(1)(b) GDPR.

Further information on SOFORT’s privacy policy is available here: https://www.klarna.com/sofort/datenschutz.

8) Contact Regarding Review Reminders

Own Review Reminder (No Third-Party System)
We use your email address as a one-time reminder to submit a review of your order using our internal review system, provided you have given us your explicit consent during or after placing the order, in accordance with Article 6(1)(a) GDPR.

You can withdraw your consent at any time by sending a message to the controller.

9) Use of Social Media Plugins

9.1 Facebook Plugins with Shariff Solution
We use social plugins (“plugins”) from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

To protect your data when visiting our website, these buttons are not fully integrated as plugins but instead use an HTML link (Shariff solution). This integration ensures that when you visit a page on our site containing such buttons, no connection is made to Facebook's servers. Only when you click on the button does a new browser window open, and Facebook's page is loaded, where you can interact with the plugins (e.g., "Like" or "Share"), provided you are logged into your Facebook account.

For details on how Facebook handles your personal data, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php.

9.2 Google+ Plugins with Shariff Solution
We use plugins from the Google+ social network, operated by Google LLC., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

To protect your data, we integrate the plugins using the Shariff solution, as described above. No connection is established with Google+ servers unless you click the plugin button.

For more information on how Google processes your personal data, see Google's privacy policy: https://www.google.com/intl/en/policies/privacy.

9.3 Instagram Plugins with Shariff Solution
We use plugins from the Instagram platform, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”).

Here too, we use the Shariff solution, ensuring no direct connection to Instagram's servers unless you actively click the plugin.

For Instagram’s privacy policy, visit: https://help.instagram.com/155833707900388.

10) Online Marketing

10.1 DoubleClick by Google
This website uses DoubleClick, an online marketing tool provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

DoubleClick uses cookies to display relevant ads, improve campaign performance, and prevent duplicate ads. Google uses a cookie ID to track which ads are displayed in which browser. Processing is based on our legitimate interest in optimized website marketing under Article 6(1)(f) GDPR.

Further details and the privacy policy for DoubleClick can be found here: https://www.google.com/policies/privacy.

You can deactivate cookies for advertising purposes by visiting:
https://www.google.de/settings/ads or www.aboutads.info.

10.2 Google AdWords Conversion Tracking
We use Google AdWords and Google Conversion Tracking to measure the success of our advertising campaigns. Google sets a cookie when you click on one of our ads. These cookies lose their validity after 30 days and do not identify you personally.

For more details, visit Google’s privacy policy: https://www.google.de/policies/privacy.

You can disable this tracking via your browser settings or using the following plugin:
https://www.google.com/settings/ads/plugin.

11) Web Analytics

Google (Universal) Analytics
We use Google Analytics, a web analytics service provided by Google LLC, to evaluate website usage. Google Analytics uses cookies to analyze user behavior. IP addresses are anonymized within the EU or EEA using the "_anonymizeIp()" function.

Further details can be found in Google’s privacy policy: https://www.google.com/policies/privacy.

To disable Google Analytics tracking, download this browser plugin:
https://tools.google.com/dlpage/gaoptout.

12) Retargeting/Remarketing/Referral Advertising

Facebook Custom Audience via Pixel
We use Facebook Pixel, a tool provided by Facebook Inc., to analyze the effectiveness of our Facebook ads. This data allows us to optimize our advertising strategy.

Details on Facebook's privacy policy can be found here: https://www.facebook.com/about/privacy.

To opt-out of Facebook cookies, visit: https://www.aboutads.info/choices.

Google AdWords Remarketing
We use Google AdWords Remarketing to advertise our services across websites. Google sets cookies that enable interest-based advertising.

For details on Google Ads and privacy, visit: https://www.google.com/policies/technologies/ads.

13) Rights of the Data Subject

You have the following rights under GDPR:

  • Right to Access (Article 15 GDPR)
  • Right to Rectification (Article 16 GDPR)
  • Right to Erasure (Article 17 GDPR)
  • Right to Restriction of Processing (Article 18 GDPR)
  • Right to Data Portability (Article 20 GDPR)
  • Right to Withdraw Consent (Article 7(3) GDPR)
  • Right to Lodge a Complaint with a supervisory authority (Article 77 GDPR).

Right to Object
If we process your personal data based on legitimate interests (Article 6(1)(f) GDPR), you have the right to object at any time. If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds that override your interests or if the processing is for legal claims.

To exercise any of these rights, please contact the controller mentioned above.

14) Duration of Data Storage

We retain personal data for as long as required to fulfill contractual obligations, comply with statutory retention periods, or where we have a legitimate interest in further storage. After this period, the data will be routinely deleted unless you have consented to its further use or such use is legally permitted.