Questions about Data Protection and Exercising Your Rights
For questions about data protection or to exercise your data protection rights, please contact us at the above contact information.
Orders
When placing an order, we process the data you provide to complete and fulfill the contract. The legal basis for processing is Article 6 (1) b GDPR.
Due to legal requirements, if you place an order through our website, we are obligated to process your email address to send an electronic order confirmation. The legal basis for this is Article 6 (1) c) GDPR. If legal record-keeping and retention obligations exist due to the execution of a purchase contract (e.g., retention of invoices under tax law), the legal basis for processing is Article 6 (1) c) GDPR.
We store your data for the duration of the statutory retention periods.
Your data will only be shared with third parties if necessary to fulfill the contract with you (e.g., delivery of the order) or for billing purposes.
Visiting Our Website
When you visit our website, the following data is collected from your device or browser and stored in a log file:
- IP address of the device
- Date and time of access
- Name and URL of the accessed file
- Website from which access is made (referrer URL)
- Browser used, and device’s operating system
We initially use this data for technical purposes, to deliver the content you access on our website and ensure the secure operation of our services. We also use this data in a non-personalized way for statistical purposes to understand which devices with certain features and settings are used to visit our website, allowing us to optimize it as necessary. These statistics contain no personal data. The legal basis for data usage to create these statistics is Article 6 (1) f) GDPR.
The IP address of your device is anonymized when full storage for your technical purposes is no longer required. Therefore, full storage for non-technical purposes is not conducted unless necessary to detect and prevent attacks (e.g., preventing access, data espionage, malware dissemination like viruses, or other unlawful purposes) against the systems used for our website. Such attacks could impair the intended functionality, usage, and security of our website and its visitors. By this means, we pursue the legitimate interest of ensuring the functionality of our website and defending against unlawful attacks. The legal basis for processing is Article 6 (1) f) GDPR. In this case, the stored IP data (through anonymization) will be deleted when they are no longer needed for attack detection or prevention.
Your Rights
In connection with your personal data under the GDPR, you have the following rights. For details, please refer to the statutory provisions.
- Right of Access
Under Article 15 GDPR, you have the right to request confirmation of whether your personal data is processed by us. If so, you have the right to access this personal data and additional information listed in Article 15 GDPR. - Right to Rectification
Under Article 16 GDPR, you have the right to request the immediate correction of inaccurate personal data concerning you. Considering the purposes of processing, you also have the right to request the completion of incomplete personal data, including through a supplementary statement. - Right to Erasure
You have the right to request the immediate deletion of your personal data. We are obligated to delete personal data without delay if the conditions outlined in Article 17 GDPR are met. For details, please refer to Article 17 GDPR. - Right to Restrict Processing
Under Article 18 GDPR, you have the right, under certain conditions, to request the restriction of processing your personal data. - Right to Data Portability
Under Article 20 GDPR, you have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used, and machine-readable format, and to transfer this data to another controller without interference from us, provided the processing is based on consent under Article 6 (1) a) GDPR or Article 9 (2) a) GDPR or on a contract under Article 6 (1) b) GDPR and the processing is carried out by automated means. - Right to Lodge a Complaint with a Supervisory Authority
Under Article 77 GDPR, you have the right, without prejudice to any other administrative or judicial remedy, to lodge a complaint with a supervisory authority. This right applies particularly in the Member State of your habitual residence, place of work, or place of the alleged infringement if you believe that the processing of your personal data violates the GDPR. - Right to Object
Under Article 21 GDPR, you have the right to object to the processing of your personal data based on Article 6 (1) e) or f) GDPR; this also applies to profiling based on these provisions.
If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such advertising; this also applies to profiling, to the extent it is related to such direct advertising.

