Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when you use our website. Personal data refers to all data with which you can be personally identified.

1.2 The controller for data processing on this website in terms of the General Data Protection Regulation (GDPR) is Oliver Szabo, Schlüssel 106, 42329 Wuppertal, Germany, Tel.: +491784578973, E-Mail: oliverszabo@gmx.de. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection when Visiting our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the page server (so-called "server log files"). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

  • Our visited website

  • Date and time of access

  • Amount of data sent in bytes

  • Source/reference from which you reached the page

  • Browser used

  • Operating system used

  • IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No disclosure or other use of the data takes place. However, we reserve the right to retrospectively check the server log files if there are concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Contacting Us

When you contact us (e.g., via contact form or email), personal data is processed exclusively for the purpose of handling and responding to your request and only to the extent necessary for this purpose.
The legal basis for the processing of this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no legal retention obligations to the contrary.

4) Data Processing for Order Fulfillment

4.1 Transmission of image files for order processing via email
On our website, we offer customers the option to commission the personalization of products by transmitting image files via email. The submitted image motif is used as a template for the personalization of the selected product.
Customers can send one or more image files from the storage of their device to us via the email address provided on the website. We then collect, store, and use the files transmitted in this way exclusively for the creation of the personalized product in accordance with the respective service description on our website. If the transmitted image files are passed on to special service providers for the creation and processing of the order, you will be explicitly informed about this in the following paragraphs. No further disclosure takes place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all processing operations mentioned above are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 para. 1 lit. b GDPR.
After final processing of the order, the transmitted image files will be automatically and completely deleted.

4.2 If required for the fulfillment of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided when ordering to inform you personally within the framework of our legal information obligations in accordance with Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the specific purpose of communicating updates owed by us and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s) who support us fully or partially in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

4.3 Use of Payment Service Providers

Paypal

One or more online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method from this provider that requires advance payment, your payment data (including name, address, bank and credit card information, currency, and transaction number) communicated during the ordering process, as well as information about the content of your order, will be transmitted to this provider in accordance with Art. 6 para. 1 lit. b GDPR. The transmission of your data in this case is solely for the purpose of payment processing with the provider and only to the extent necessary for this purpose.
If you select a payment method where we make advance payment, you will also be asked during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and possibly data for an alternative payment method).
In such cases, to safeguard our legitimate interest in assessing your creditworthiness, this data will be transmitted by us to the provider for the purpose of a credit check in accordance with Art. 6 para. 1 lit. f GDPR. The provider checks, based on the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you have chosen can be granted with regard to payment and/or default risks.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of the score values.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.- PayPal Checkout
This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local third-party payment methods.
If you pay via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to carry out a credit check for credit card payments via PayPal, direct debits via PayPal, or – if offered – "Pay Later" via PayPal. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 para. 1 lit. f GDPR, based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things but not exclusively, are included in the calculation of the score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
If the PayPal payment method "Invoice Purchase" is available and selected, your payment data will first be transmitted to PayPal for payment preparation, after which PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for payment processing. The legal basis in each case is Art. 6 para. 1 lit. b GDPR. In this case, RatePay performs an identity and credit check on its own behalf to determine creditworthiness according to the principle already mentioned above and transfers your payment data to credit agencies based on its legitimate interest in determining creditworthiness in accordance with Art. 6 para. 1 lit. f GDPR. A list of credit agencies that Ratepay can use can be found here: https://www.ratepay.com/legal-payment-creditagencies/
When using a local third-party payment method, your payment data will first be transmitted to PayPal in accordance with Art. 6 para. 1 lit. b GDPR for payment preparation. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the corresponding provider for payment processing in accordance with Art. 6 para. 1 lit. b GDPR:
- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- Blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- EPS (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
Further data protection information can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

5) Web Analytics Services

Google Tag Manager
This website uses "Google Tag Manager", a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling, and linking them to conditions via a uniform user interface. Google Tag Manager itself does not store information on user devices or read it out. Nor does the service carry out independent data analyses. However, Google Tag Manager transmits your IP address to Google when a page is called up, and it may be stored there. A transfer to servers of Google LLC. in the USA is also possible.
This processing is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your page visit. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.
Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

6) Page functionalities

Youtube
This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the content, at the latest at the time of video playback. In doing so, certain information, including your IP address, is transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, generate playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider during your page visit, your data will be directly assigned to your account when you click on a video. If you do not wish for this assignment to your account, you must log out before clicking the playback button.
All the aforementioned processing, in particular the setting of cookies for reading out information on the device used, only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision of the European Commission.

7) Rights of the Data Subject

7.1 The applicable data protection law grants you, as the data subject, the following rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, with reference to the legal basis cited for the respective exercise conditions:

  • Right of access in accordance with Art. 15 GDPR;

  • Right to rectification in accordance with Art. 16 GDPR;

  • Right to erasure in accordance with Art. 17 GDPR;

  • Right to restriction of processing in accordance with Art. 18 GDPR;

  • Right to notification in accordance with Art. 19 GDPR;

  • Right to data portability in accordance with Art. 20 GDPR;

  • Right to withdraw consent in accordance with Art. 7 para. 3 GDPR;

  • Right to lodge a complaint in accordance with Art. 77 GDPR.

7.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

8) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).
When processing personal data based on explicit consent according to Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.
If there are statutory retention periods for data processed within the framework of legal or quasi-legal obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided it is no longer necessary for the fulfillment or initiation of a contract and/or we no longer have a legitimate interest in further storage.
When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object according to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object according to Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information of this declaration about specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.