Privacy Policy

1. An overview of data protection

General information

The following information will provide you with an easy-to-navigate overview of what will happen to your personal data when you visit this website. The term “personal data” refers to any data that can be used to personally identify you. For detailed information on how we protect your data, please read our Privacy Policy below.

Data collection on this website

Who is responsible for data collection on this website?

The data collected on this website is processed by the operator of the website. You can find their contact details in the imprint of this website.

How do we collect your data?

We collect your personal data when you share it with us. This may, for example, be information you enter into our contact form.

Other data is also collected automatically or with your consent by our IT systems when you visit our website. This data comprises primarily technical information (e.g. web browser, operating system and time the site was accessed). This data is collected automatically as soon as you access this website.

What do we use your data for?

Some of the data we collect ensures the smooth and error-free functioning of the website. Other data may be used to analyse your user behaviour.

What rights do you have regarding your personal data?

You have the right to receive information about the source, recipients and purposes of data stored on your person at any time, free of charge. You also have the right to demand the rectification or erasure of this data. If you have given your consent to data processing, you can revoke this consent at any time subsequently. You also have the right to demand that we restrict the processing of your personal data in certain circumstances. Furthermore, you have a right to lodge a complaint with your local regulatory authority about our processing of your personal data.

If you have any questions about data protection, please contact us via the address given in the imprint above.

Analytics tools and third-party tools

When you visit our website, your surfing behaviour may be statistically evaluated. This is carried out primarily using cookies and so-called analytics programs.

Detailed information about these analytics programs can be found below.

2. Hosting and Content Delivery Networks (CDN)

Cloudflare

We use the service Cloudflare. The provider is Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA (hereinafter referred to as “Cloudflare”).

Cloudflare provides a global Content Delivery Network with DNS. The transfer of information between your browser and our website is routed via the Cloudflare network. This enables Cloudflare to analyse the traffic between your browser and our website and to act as a filter between our servers and potentially malicious traffic from the internet. Cloudflare may also use cookies, but these are used solely for the purpose described here.

We have concluded a data processing agreement with Cloudflare. Cloudflare is also a certified participant in the EU-US Privacy Shield Framework. Cloudflare is committed to handling all personal data received from member states of the European Union (EU) in accordance with the Privacy Shield Framework.

The use of Cloudflare is based on our legitimate interest in providing a website for our customers that is as error-free and secure as possible (Art. 6 para. 1 letter f GDPR).

For more information about how Cloudflare handles personal data, please visit: https://www.cloudflare.com/privacypolicy/.

3. General and mandatory information

Data protection

The operator of this website takes the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this Privacy Policy.

Whenever you use this website, various personal data will be collected. Personal data is data with which you can be personally identified. This Privacy Policy explains what data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission via the internet (e.g. when communicating by email) may be subject to security vulnerabilities. It is not possible to completely protect data against third-party access.

Information about the data controller

The controller responsible for data processing on this website is:

hyggbo GmbH
Karl-Ferdinand-Braun Str. 18
21423 Winsen Luhe

Tel: 04171 66 962 0
Email: kontakt@hyggbo.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g. names, email addresses, etc.).

Revocation of your consent to data processing

Many data processing operations are only possible with your express consent. You can withdraw your consent at any time. For this, all you need to do is send us an informal request via email. This shall be without prejudice to the lawfulness of any data collection that occurred prior to your revocation.

Right to object to the collection of data in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 PARA 1 LETTER (E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA AT ANY TIME ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION. THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH ANY PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS OR SHOW THAT THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS (OBJECTION ACCORDING TO ART. 21 PARA. 1 GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSON DATA FOR THE PURPOSE OF SUCH MARKETING. THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. SHOULD YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSES OF DIRECT MARKETING (OBJECTION ACCORDING TO ART. 21 PARA. 2 GDPR).

Right to lodge a complaint with your local regulatory authority

In the event of a breach of the GDPR, data subjects have the right to lodge a complaint with their local regulatory authority, in particular in the member state where they have their habitual residence, place of work or where the alleged breach occurred. The right to lodge a complaint is without prejudice to other administrative or judicial remedies.

Right to data portability

You have the right to demand that we hand over data that we process automatically on the basis of your consent or for the purpose of fulfilling an order in a common, machine-readable format, either to you directly or to a third party of your choice. If you request to have your personal data transferred directly to another controller, this will only be done to the extent that is technically feasible.

SSL or TLS encryption

This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or enquiries that you send to us as the site operator. You can recognise an encrypted connection by the fact that the beginning of the URL in your browser switches from “http://” to “https://” and also by the appearance of the lock icon in the address bar.

If SSL or TLS encryption is activated, data you transmit to us cannot be read by third parties.

Encrypted payment transactions on this website

When placing an order with us that requires payment for a product or service, you are obliged to provide us with your payment details (e.g. account number for direct debit authorisation), as this data will be required to process your payment.

Payment transactions using standard payment methods (Visa, Mastercard, direct debit) are processed solely via an encrypted SSL or TLS connection. You can recognise an encrypted connection by the fact that the beginning of the URL in your browser switches from “http://” to “https://” and also by the appearance of the lock icon in the address bar.

The encrypted communication ensures that any payment details you submit to us cannot be read by a third party.

Access, erasure and rectification

To the extent permitted by law, you have the right at any time to demand access to information stored on your person, as well as to information about the source and recipients and the purpose for which your data is being processed. Where applicable, you may also have the right to have your personal data rectified or erased. If you have any questions relating to privacy and data protection, please contact us via the address given in the imprint above.

Right to restrict processing

You have the right to demand the restriction of the processing of your personal data. You can contact us at any time to do this via the address given in the imprint above. The right to restrict processing applies in the following cases:

If you dispute the accuracy of your personal data stored by us. We usually need some time to verify this claim. For the duration of the review, you have the right to request that the processing of your personal data be restricted.
If the processing of your personal data was/is carried out unlawfully, you can request that the data processing be restricted instead of erased.
If we no longer need your personal data, but you require it to exercise, defend or assert legal claims, you have the right to demand that we restrict the processing of your personal data instead of erasing it
If you have lodged an objection pursuant to Art. 21 para. 1 GDPR, a balance must be struck between your interests and ours. As long as it has not been determined whose interests prevail, you have the right to demand the restriction of the processing of your personal data.

If you have restricted the processing of your personal data, this data – with the exception of storage – may only be processed with your consent or for the assertion, exercise or defence of legal claims, or to protect the rights of another natural or legal person, or for reasons of important public interest of the European Union or a member state.

Objection to advertising emails

We hereby expressly prohibit the use of the contact details published in our imprint for the purpose of sending unsolicited advertising and information material. The operator of this website expressly reserves the right to take legal action in the event unsolicited advertising material, such as spam emails, is received.

4. Data collection on this website

Cookies

Our website uses cookies. Cookies are small text files stored on your device that do not cause any damage. They are stored on your device either temporarily for the duration of a session (session cookies) or for a long period of up to 12 months (persistent cookies). Session cookies are automatically deleted once you end the session by closing your browser. Persistent cookies remain in your device’s memory until you actively delete them or until they are automatically deleted by your web browser upon reaching their expiration date.

In some cases, cookies from third-party providers may also be stored on your device when you visit our website (third-party cookies). These cookies enable you or us to take advantage of certain services offered by a third party provider (e.g. payment processing cookies).

Cookies perform a variety of functions. Many cookies are technically necessary as certain website features would not function properly without them (e.g. shopping cart or video playback). Other cookies are used to evaluate user behaviour or display advertising.

Cookies that are required to enable electronic communications (strictly necessary cookies) or to provide specific functions you need to use our online service (functional cookies, e.g. for the shopping cart) or to optimise the website (e.g. performance cookies for measuring user behaviour) are stored on the basis of Art. 6 para. 1 letter f GDPR, unless another legal basis is cited. The website operator has a legitimate interest in storing cookies to ensure an optimised service provided free of technical errors. If your consent to the storage of cookies has been requested, the respective cookies will be stored solely on the basis of this consent (Art. 6 para. 1 letter a GDPR). You may revoke your consent at any time.

You can configure your browser so that you will be notified about any placement of cookies. This will enable you to decide whether to generally allow cookies, or only allow them in certain cases, or to generally deny cookies, or only deny them in certain cases, or to activate the automatic deletion function for clearing cookies whenever the browser closes. Please note that if you choose to deactivate cookies this may limit your access to all the functions available on our website.

In cases where third-party cookies or analytics cookies are used, we will inform you about this separately in this Privacy Policy and, if applicable, ask for your consent.

Server log files

The website provider automatically collects and stores information that your browser automatically transmits to us in so-called server log files. These are:

Browser type and version
Operating system used
Referrer URL
Host name of accessing computer
Time of server request
IP address

This data will not be merged with data from other sources.

This data is collected on the basis of Art. 6 para. 1 letter f GDPR. The website operator has a legitimate interest in optimising its website and ensuring a technically error-free online service – the server log files must be recorded for this purpose.

Contact form

Should you send us an enquiry via the contact form, the data entered on the form, including the contact details you provide, will be stored by us for the purpose of processing your enquiry and responding to any follow-up questions. We will not share this information without your consent.

The processing of this data is based on Art. 6 para. 1 letter b GDPR, provided that your enquiry is related to the fulfilment of a contract or is necessary to carry out pre-contractual measures. In all other cases, the processing is based on our legitimate interest in the effective processing of enquiries addressed to us (Art. 6 para. 1 letter f GDPR) or on your consent (Art. 6 para. 1 letter a GDPR), if this was requested.

The data you enter in the contact form will be retained by us until you request its deletion, revoke your consent to its storage or the purpose for its storage no longer applies (e.g. after your request has been processed). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Email, phone and fax enquiries

If you contact us via email, phone or fax, your request, including all personal data resulting from it (name, request), will be stored and processed by us for the purpose of processing your enquiry. We will not share this information without your consent.

The data you provide us as part of your enquiry will be retained by us until you request its deletion, revoke your consent to its storage or the purpose for its storage no longer applies (e.g. after your request has been processed). Any mandatory statutory provisions, especially those regarding mandatory data retention periods, remain unaffected by this provision.

Registration on this website

You can register on our website in order to access additional functions offered here. The data you enter will only be used for the purpose of providing the respective offer or service for which you have registered. The mandatory information requested during registration must be provided in full. Otherwise we will reject the registration.

In the event of significant changes to our service, such as changes to the scope of our portfolio or in the event of technical modifications, we will use the email address you provided during registration to notify you of any such changes.

The data entered during registration is processed for the purpose of maintaining the user relationship established by the registration and, where applicable, for initiating further contracts (Art. 6 para. 1 letter b GDPR).

The data collected during registration will be stored by us as long as you are registered on this website. Subsequently, such data shall be deleted. Statutory retention periods remain unaffected.

5. Social media

Instagram plug-in

We have integrated functions of the social media platform Instagram into this website. These functions are offered by Instagram Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

If you are logged into your Instagram account, you can click the Instagram button to link the contents of this website to your Instagram profile. This allows Instagram to allocate your visit to this website with your user account. We have to point out that we, as the provider of this website, have no knowledge of the content of the data transferred or its use by Instagram.

The storage and analysis of the data is based on Art. 6 para. 1 letter f GDPR. The website operator has a legitimate interest in the best possible visibility on social media. If consent has been requested, processing will be carried out exclusively on the basis of Art. 6 para. 1 letter a GDPR. You can revoke your consent at any time.

For more information, please see Instagram’s privacy policy https://instagram.com/about/legal/privacy/.

Pinterest plug-in

This website uses social plug-ins from the social media platform Pinterest, which is operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA 94103-490, USA (“Pinterest”).

If you access a webpage that contains such a plug-in, your browser will establish a direct connection to Pinterest’s servers. The plug-in transmits log data to Pinterest’s server in the USA. This log data may include your IP address, the address of the webpages you have visited that contain Pinterest functions, the browser type and settings, the date and time of the request, as well as how you use Pinterest, and cookies.

For more information on the purpose, scope, processing and use of your personal data by Pinterest as well as your rights and options for protecting your privacy, please see Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy.

6. Analytics tools and advertising

Google Analytics

This website uses the web analysis service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses cookies. These are text files that are stored on your computer and that enable the analysis of your use of our website. The information generated by the cookies about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage by Google Analytics cookies and its use as an analysis tool are based on Art. 6 para. 1 letter f GDPR. The website operator has a legitimate interest in analysing user behaviour in order to optimise both its website and its advertising. If the relevant consent has been requested (e.g. consent to the storage of cookies), the processing will be carried out solely on the basis of Art. 6 para. 1 letter a GDPR. You can revoke your consent at any time.

IP anonymisation

We have activated the IP anonymisation function on this website. As a result, your IP address will be truncated by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

Browser plug-in

You may prevent cookies from being stored on your device by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to access all the functions available on this website. You can also prevent Google from collecting the data generated by the cookie and data relating to your use of this website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on subsequent visits to this website: deactivate Google Analytics.

For more information about how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order processing

We have concluded a data processing agreement with Google and comply in full with the strict requirements of the German data protection authorities when using Google Analytics.

Demographics function in Google Analytics

This website uses the demographics function in Google Analytics. This makes it possible to obtain reports that contain information about the age, gender and interests of site visitors. This data comes from interest-based advertising from Google as well as from visitor data from third parties. This data cannot be assigned to a specific person. You can deactivate this function at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the section Objection to Data Collection.

Storage period

Data stored by Google on the user or incident level that is linked to cookies, user IDs or advertising IDs (e.g. DoubleClick cookies, Android advertising ID) will be anonymised or deleted after 14 months. For details please click on the following link: https://support.google.com/analytics/answer/7667196?hl=de

7. Newsletter

Newsletter data

If you would like to subscribe to the newsletter offered on this website, we will need an email address from you as well as information that allows us to verify that you are the owner of the given email address and that you agree to receive the newsletter. No further data shall be collected or shall be collected only on a voluntary basis. We will only use this data to send the information requested and will not share such data with any third parties.

The data entered into our newsletter registration form will be processed solely on the basis of your consent (Art. 6 para. 1 letter a GDPR). You can revoke your consent to the storage of your data, your email address and its use for sending the newsletter at any time, for example by clicking on the Unsubscribe link in the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to the revocation.

The data you provide to us for the purpose of subscribing to the newsletter will be stored by us or the newsletter service provider until you unsubscribe from the newsletter. Once you unsubscribe from our newsletter, your personal data will be deleted from the newsletter distribution list. Data stored by us for other purposes remains unaffected.

Upon unsubscribing from the newsletter distribution list, your email address may be stored in a blacklist by us or the newsletter service provider in order to prevent subsequent mailings. The data from the blacklist will only be used for this purpose and will not be merged with other data. This serves both your interest and our interest in complying with the legal requirements for the distribution of newsletters (legitimate interest pursuant to Art. 6 para. 1 letter f GDPR). The storage of blacklist data is not time-limited. You can object to this storage if your interests outweigh our legitimate interests.

CleverReach

This website uses CleverReach to distribute newsletters. The provider is CleverReach GmbH & Co. KG, Mühlenstr. 43, 26180 Rastede. CleverReach is a service that can be used to organise and analyse newsletter distribution. The data you submit to subscribe to the newsletter (e.g. email address) will be stored on CleverReach’s servers in Germany or Ireland.

Our newsletters distributed through CleverReach enable us to analyse the behaviour of newsletter recipients. It allows us to determine, among other things, how many recipients actually opened the newsletter email and how often which link in the newsletter has been clicked. With the help of a tool called conversion tracking, we can also determine whether a predefined action (e.g. purchase of a product on this website) has taken place after the link in the newsletter was clicked. For more information on CleverReach newsletter data analysis services, please visit: https://www.cleverreach.com/de/funktionen/reporting-und-tracking/.

The data processing is carried out based on your consent (Art. 6 para. 1 letter a GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. This shall be without prejudice to the lawfulness of any data processing transactions that have taken place prior to the revocation.

If you do not want CleverReach to analyse your data, you must unsubscribe from the newsletter. We provide a link for you to do this in every newsletter email. You can also unsubscribe from the newsletter via the website.

For more information, please see CleverReach’s privacy policy at: https://www.cleverreach.com/de/datenschutz/.

Data processing agreement

We have concluded a data processing agreement with CleverReach and comply in full with the strict requirements of the German data protection authorities when using CleverReach.

8. Plug-ins and tools

Google Fonts

This site uses web fonts provided by Google to ensure a uniform display of fonts. When you visit a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

The browser you use must therefore connect to Google’s servers. This tells Google that this website was accessed via your IP address. The use of Google Fonts is based on Art. 6 para. 1 letter f GDPR. The website operator has a legitimate interest in the uniform presentation of the typeface on its website. If the relevant consent has been requested (e.g. consent to the storage of cookies), the processing will be carried out solely on the basis of Art. 6 para. 1 letter a GDPR. You can revoke your consent at any time.

If your browser does not support web fonts, a standard font from your computer will be used.

For more information on Google Fonts see https://developers.google.com/fonts/faq and Google’s privacy policy: https://policies.google.com/privacy?hl=de.

9. Ecommerce and payment providers

Data processing (customer and contract data)

We collect, process and use personal data only to the extent that it is necessary for the conclusion, content or amendment of an agreement between you and ourselves (master data). This is done on the basis of Art. 6 para. 1 letter b GDPR, which permits the processing of data to fulfill a contract or for pre-contractual measures. We collect, process and use personal data about your use of this website (usage data) only to the extent that is necessary to enable the user to use and be invoiced for our services.

The customer data we collect will be deleted upon completion of the order or termination of the business relationship. Statutory retention periods remain unaffected.

Data transmitted when concluding a contract with online shops, retailers and shipping companies

We only transfer personal data to third parties if this is necessary for the fulfilment of an order, for example to the company entrusted with the delivery of the goods or the payment provider commissioned with the processing payments. No other transfer of data shall not take place or will only take place if you have expressly consented to such transfer. Your data will not be passed on to third parties without your express consent, for example for advertising purposes.

The basis for data processing is Art. 6 para. 1 letter b GDPR, which permits the processing of data to fulfill a contract or for pre-contractual measures.

Stripe

This website accepts Stripe as a payment option. The provider for customers within the EU is Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter “Stripe”).

When paying via Stripe, your payment details will be forwarded to Stripe via an interface on our site in order to process the payment. For more information see Stripe’s privacy policy by clicking on the following link: https://stripe.com/de/privacy.

The transfer of your data to Stripe is based on Art. 6 para. 1 letter b GDPR (order processing) and on the basis of our legitimate interest in the use of reliable and secure payment processes (Art. 6 para. 1 letter f GDPR).

PayPal

This website accepts PayPal as a payment option. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”).

If you choose to pay via PayPal, the payment details you enter will be forwarded to PayPal.

The transfer of your data to PayPal is based on Art. 6 para. 1 letter a GDPR (consent) and Art. 6 para. 1 letter b GDPR (processing to fulfil an order). You have the option to revoke your consent to data processing at any time. Any revocation does not affect the lawfulness of data processing transactions that occurred prior to the withdrawal of consent.

Klarna

This website accepts Klarna as a payment option. The provider is Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter “Klarna”).

Klarna offers various payment options (e.g. installment purchase). If you choose to pay with Klarna (Klarna Checkout solution), Klarna will collect various personal data from you. For more information see Klarna’s privacy policy by clicking on the following link: https://www.klarna.com/de/datenschutz/.

Klarna uses cookies to optimise the use of the Klarna Checkout solution. The optimisation of the checkout solution represents a legitimate interest pursuant to Art. 6 para. 1 letter f GDPR. Cookies are small text files stored on your device that do not cause any damage. They remain on your device until you delete them. For more details on how Klarna uses cookies click on following link: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf.

The transfer of your data to Klarna is based on Art. 6 para. 1 letter a GDPR (consent) and Art. 6 para. 1 letter b GDPR (processing to fulfil an order). You have the option to revoke your consent to data processing at any time. Any revocation does not affect the lawfulness of data processing transactions that occurred prior to the withdrawal of consent.

Sofortüberweisung

This website accepts Sofortüberweisung as a payment option. The provider of this payment service is Sofort GmbH, Theresienhöhe 12, 80339 Munich (hereinafter “Sofort GmbH”).

Sofortüberweisung’s instant transfer process allows us to receive payment confirmation from Sofort GmbH in real time and to begin to meet our obligations immediately.

If you chose to pay via Sofortüberweisung, you will send the PIN and a valid TAN to Sofort GmbH, which it can use to log into your online banking account. After logging in, Sofort GmbH automatically checks your account balance and transfers the money to us using the TAN you provided. It will then immediately send us a transaction confirmation. After logging in, your transactions, the credit limit of the overdraft facility and the existence of other accounts and their balances are also checked automatically.

In addition to the PIN and TAN, the payment data you enter and your personal data are also transferred to Sofort GmbH. Your personal data collected includes your first and last name, address, phone number(s), email address, IP address and, if applicable, other data required for payment processing. The transfer of this data is necessary to verify your identity beyond doubt and to prevent fraud.

The transfer of your data to Sofort GmbH is based on Art. 6 para. 1 letter a GDPR (consent) and Art. 6 para. 1 letter b GDPR (processing to fulfil an order). You have the option to revoke your consent to data processing at any time. Any revocation does not affect the lawfulness of data processing transactions that occurred prior to the withdrawal of consent.

For more information on payment with Sofortüberweisung click on the following links: https://www.sofort.de/datenschutz.html and https://www.klarna.com/sofort/.

Paydirekt

This website accepts Paydirekt as a payment option. The provider of this payment service is Paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main, Germany (hereinafter “Paydirekt”).

When you make a payment using Paydirekt, Paydirekt collects various transaction data and forwards it to the bank with which you are registered with Paydirekt. In addition to the data required for payment, Paydirekt may collect additional data as part of the transaction processing, such as the delivery address or individual items in your shopping cart.

Paydirekt then authenticates the transaction using the authentication procedure provided by the bank. The payment amount will then be transferred from your account to our account. Neither we nor any third party have access to your bank account information.

The transfer of your data to Paydirekt is based on Art. 6 para. 1 letter a GDPR (consent) and Art. 6 para. 1 letter b GDPR (processing to fulfil an order). You have the option to revoke your consent to data processing at any time. Any revocation does not affect the lawfulness of data processing transactions that occurred prior to the withdrawal of consent.

For more information on payment with Paydirekt, please see Paydirekt’s terms and conditions and privacy policy at: https://www.paydirekt.de/agb/index.html.