Privacy policy

1) Introduction and contact details of the controller

1.1 We're glad you're visiting our website and appreciate your interest. Below, we'll tell you how we handle your personal data when you use our website. Personal data refers to any information that can identify you personally.

1.2The data controller for this website, as defined by the General Data Protection Regulation (GDPR), is RUWI , Obercarsdorfer Strasse 10, 78737 Fluorn-Winzeln, Germany, Tel.: +49 7402 8414, Email:ruwi. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when you visit our website

2.1 If you're just browsing our website for information, meaning you're not registering or sending us any other details, we only collect data that your browser transmits to the page server (these are called 'server log files'). When you access our website, we collect the following data; it's technically necessary for us to display the site to you:

The website you visited
Date and time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing happens according to Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in improving our website's stability and functionality. We don't share or use this data for any other purpose. However, we do reserve the right to review server log files later if there's specific evidence of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (like orders or inquiries to the responsible party), this website uses SSL or TLS encryption. You can spot an encrypted connection by the 'https://' string and the padlock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 For hosting our website and displaying its content, we use a provider who delivers their services, either directly or through selected subcontractors, exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We've signed a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized sharing with third parties.

3.2 Shopify

We use a Content Delivery Network from the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ('Shopify')

Data may also be transferred to:

Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service lets us deliver large media files like graphics, page content, or scripts faster via a network of regionally distributed servers. Processing happens to protect our legitimate interest in improving our website's stability and functionality, according to Art. 6 para. 1 lit. f GDPR. We've signed a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized sharing with third parties.

When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision from the European Commission.

For data transfers to the USA, the data recipient has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision from the European Commission.

4) Cookies

To make your visit to our website appealing and to enable certain features, we use cookies. These are small text files stored on your device. Some of these cookies are automatically deleted after you close your browser (these are "session cookies"), while others remain on your device longer to save page settings (these are "persistent cookies"). For persistent cookies, you can check your web browser's cookie settings overview to see how long they're stored.

If individual cookies we use also process personal data, this processing happens according to Art. 6 para. 1 lit. b GDPR for contract performance, Art. 6 para. 1 lit. a GDPR if you've given consent, or Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in ensuring the best possible website functionality and a customer-friendly, effective browsing experience.

You can set your browser to inform you about cookie placement, allowing you to decide on their acceptance individually, or to exclude the acceptance of cookies for specific cases or generally.

Please note that if you don't accept cookies, our website's functionality might be limited.

5) Contact

5.1 Shopify Inbox

This website uses the live chat system from the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Personal data transmitted via chat is processed either according to Art. 6 para. 1 lit. b GDPR, because it's necessary for contract initiation or performance, or according to Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in providing effective support to our website visitors.
Subject to any conflicting statutory retention periods, your data transmitted this way will be deleted once the relevant matter is definitively resolved.

Additionally, for the purpose of creating pseudonymized usage profiles with the help of cookies, further information may be collected and evaluated. However, this information doesn't serve to personally identify you and isn't merged with other datasets. If this information has a personal reference, processing occurs according to Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.

You can prevent cookies from being set by adjusting your browser settings. However, this might limit the functionality of our website.
You can object to the collection and storage of data for the purpose of creating a pseudonymized usage profile at any time with future effect.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

We've signed a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized sharing with third parties.

When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision from the European Commission.

5.2 Loox

For review reminders, we use the services of the following provider: Loox Online Ltd., Rehov Har Sinai 2, 6581602 Tel Aviv-Yafo, Israel.

Solely based on your explicit consent according to Art. 6 para. 1 lit. a GDPR, we transmit your email address and potentially other customer data to the provider so they can contact you with a review reminder via email.

You can revoke your consent at any time with future effect, either to us or to the provider.

We've signed a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized sharing with third parties.

When data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision from the European Commission.

5.3 WhatsApp Business

You can contact us via the WhatsApp messaging service, provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the 'Business version' of WhatsApp for this.

If you contact us via WhatsApp regarding a specific transaction (for example, an order you've placed), we store and use the mobile number you use on WhatsApp, as well as – if provided – your first and last name, in accordance with Art. 6 para. 1 lit. b. GDPR, to process and respond to your request. Based on the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) to assign your inquiry to a specific process.

If you use our WhatsApp contact for general inquiries (e.g., about our range of services, availabilities, or our website), we store and use the mobile number you use on WhatsApp, as well as – if provided – your first and last name, in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in efficiently and promptly providing the requested information.

Your data is always used only to respond to your inquiry via WhatsApp. It is not shared with third parties.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book exclusively stores the WhatsApp contact data of users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts, in accordance with Art. 6 para. 1 lit. a GDPR, by accepting the WhatsApp Terms of Use when first using the app on their device. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.

For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and settings options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its transfer to third parties.

As part of the processing mentioned above, data transfers to servers of Meta Platforms Inc. in the USA may occur.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

5.4 When you contact us (e.g., via contact form or email), personal data is processed – exclusively for the purpose of processing and responding to your request and only to the extent necessary for that.

The legal basis for processing this data is our legitimate interest in answering your request according to Art. 6 para. 1 lit. f GDPR. If your contact aims at a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when circumstances indicate that the matter is definitively resolved and provided no statutory retention obligations prevent it.

6) Data Processing When Opening a Customer Account

According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the necessary extent if you provide it to us when opening a customer account. You can find which data is required for account opening in the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the above-mentioned address of the controller. After your customer account is deleted, your data will be erased, provided all contracts concluded through it have been fully processed, no statutory retention periods prevent it, and we no longer have a legitimate interest in further storage.

7) Use of Customer Data for Direct Marketing

7.1 Subscribing to Our Email Newsletter

If you subscribe to our email newsletter, we'll regularly send you information about our offers. Your email address is the only mandatory field for sending the newsletter. Providing additional data is voluntary and is used to address you personally. For newsletter delivery, we use the double opt-in procedure, which ensures you only receive newsletters after explicitly confirming your consent to receive them by clicking a verification link sent to the provided email address.

By activating the confirmation link, you give us your consent for the use of your personal data according to Art. 6 para. 1 lit. a GDPR. In this process, we store your IP address registered by your Internet Service Provider (ISP), as well as the date and time of registration, to be able to trace any potential misuse of your email address at a later point. The data we collect when you subscribe to the newsletter is used strictly for its intended purpose.

You can unsubscribe from the newsletter at any time using the dedicated link in the newsletter or by sending a message to the controller mentioned at the beginning. Once you've unsubscribed, your email address will be immediately deleted from our newsletter distribution list, unless you've explicitly consented to further use of your data, or if we reserve the right to use your data beyond that, which is legally permitted and about which we inform you in this statement.

7.2 Klaviyo

Our email newsletters and other promotional email communications are sent via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

Based on our legitimate interest in effective and user-friendly email marketing, we share the data you provided during registration with this provider, in accordance with Art. 6 para. 1 lit. f GDPR, so that they can handle the email dispatch on our behalf.

Subject to your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the provider also conducts a statistical success evaluation of email campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated, but not merged with other data sets.

You can revoke your consent to email tracking at any time with future effect.

We have concluded a data processing agreement with the provider, which protects the data of our website visitors and prohibits its transfer to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework. This framework, based on an adequacy decision by the European Commission, ensures compliance with European data protection standards.

7.3 Product availability notification via email

For items that are temporarily out of stock, you can sign up to receive email notifications when they become available. We'll send you a one-time email notification about the availability of the specific item you've selected. Your email address is the only mandatory piece of information needed for this notification. Providing additional data is optional and may be used to address you personally. For sending these emails, we use the double opt-in procedure, which ensures you only receive a notification once you've explicitly confirmed your consent by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We'll store your IP address (registered by your Internet Service Provider (ISP)) along with the date and time of registration, so we can trace any potential misuse of your email address later on. The data we collect when you sign up for our email notification service for product availability is used strictly for its intended purpose.

You can unsubscribe from availability notifications at any time by sending a message to the controller mentioned at the beginning. Once you've unsubscribed, your email address will be immediately deleted from our dedicated distribution list, unless you've explicitly consented to further use of your data, or if we reserve the right to use your data beyond that, which is legally permitted and about which we inform you in this statement.

7.4 Shopping cart reminders via email

If you abandon your purchase with us before completing the order, you have the option to receive a one-time email reminder about the contents of your virtual shopping cart.

Your email address is the only mandatory piece of information needed for this reminder. Providing additional data is optional and may be used to address you personally. For sending these emails, we use the double opt-in procedure, which ensures you only receive a notification once you've explicitly confirmed your consent by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for sending a shopping cart reminder. We'll store your IP address (registered by your Internet Service Provider (ISP)) along with the date and time of registration, so we can trace any potential misuse of your email address later on. The data we collect when you sign up for our email notification service is used strictly for its intended purpose.

You can unsubscribe from shopping cart reminders at any time by sending a message to the controller mentioned at the beginning. Once you've unsubscribed, your email address will be immediately deleted from our dedicated distribution list, unless you've explicitly consented to further use of your data, or if we reserve the right to use your data beyond that, which is legally permitted and about which we inform you in this statement.

8) Data Processing for Order Fulfillment

8.1 As far as it's necessary for contract fulfillment for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If, based on a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided during the order to inform you personally within the scope of our legal information obligations in accordance with Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of communicating updates that we owe you and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s) who assist us fully or partially in fulfilling concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

8.2 Sharing Personal Data with Shipping Service Providers

- DHL

We use the following provider as our transport service: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We pass on your email address and/or phone number to the provider in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods, for the purpose of coordinating a delivery date or announcing the delivery, provided you have given your explicit consent for this during the order process. Otherwise, for delivery purposes, we only pass on the recipient's name and delivery address to the provider in accordance with Art. 6 para. 1 lit. b GDPR. This data is only shared to the extent necessary for the delivery of the goods. In this case, it's not possible to coordinate the delivery date with the provider or receive a delivery announcement beforehand.

You can revoke your consent at any time with future effect, either to the controller mentioned above or to the provider.
- DPD

We use the following provider as our transport service: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany

You can revoke your consent at any time with future effect, either to the controller mentioned above or to the provider.

8.3 Use of Payment Service Providers

- Shopify Payments

One or more online payment methods from the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

If you choose a payment method from the provider where you pay in advance (e.g., credit card payment), your payment data shared during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data is shared exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this.

9) Web analytics services

9.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which lets us analyze how you use our site.

When you visit the website, Google Analytics 4 usually sets cookies. These are small text files stored on your device that collect specific information, including your IP address. However, Google shortens the last digits of your IP address to prevent direct personal identification.

The information gets transferred to Google's servers for processing. This can also include transfers to Google LLC, which is based in the USA.

Google uses the collected information for us to evaluate how you use the website, put together reports on website activities, and offer other services related to website and internet usage. The truncated IP address your browser sends via Google Analytics isn't combined with other Google data. Any data collected when using Google Analytics 4 is stored for two months and then deleted.

All the processing we've described, especially placing cookies on your device, only happens if you've given us your explicit consent as per Art. 6 para. 1 lit. a GDPR.
If you don't consent, Google Analytics 4 won't be used during your visit. You can revoke your consent at any time for future effect. To do this, just disable the service using the "Cookie Consent Tool" available on the website.

We've signed a data processing agreement with Google. This ensures your data as a site visitor is protected and prevents any unauthorized sharing with third parties.

You can find more legal information about Google Analytics 4 here: https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites

Demographic Features
Google Analytics 4 uses a special "demographic features" function to generate statistics about the age, gender, and interests of website visitors. It does this by analyzing advertising and third-party data, which helps identify target audiences for marketing. However, the collected data can't be linked to any specific person and is deleted after two months of storage.

Google Signals
As an extension to Google Analytics 4, this website can use Google Signals to generate cross-device reports. If you've enabled personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including for cross-device conversions, provided you've consented to Google Analytics use as per Art. 6 para. 1 lit. a DSGVO. We only get statistics from Google, not personal data. If you want to stop cross-device analysis, you can disable the "Personalized advertising" feature in your Google account settings. Just follow the instructions here: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
For more info on Google Signals, check this link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, this website can use the "UserIDs" function. If you've consented to Google Analytics 4 use as per Art. 6 para. 1 lit. a GDPR, created an account on this website, and log in to that account on various devices, your activities, including conversions, can be analyzed across all your devices.

9.2 Plausible

This website uses "Plausible," a web analytics tool from Plausible Insights OÜ, Västriku tn 2, 50403, Tartu, Estonia.

It anonymously records and evaluates how randomly selected individual visitors interact with the website. This helps us gather information about site usage, like visitor numbers, page views, bounce rates, and how long people stay on a page.

We never process personal data here. When you use this website, Plausible only collects non-personal data, like browser and user agent info. This data is stored in a non-personally identifiable format and used for statistical analysis. It's deleted as soon as we no longer need it for our evaluation purposes.

If, in specific cases, personal data does get processed, it's based on our legitimate interest in statistically evaluating user behavior for optimization purposes, as per Art. 6 para. 1 lit. f GDPR.

10) Retargeting/ Remarketing and Conversion Tracking

Meta Pixel

On our website, we use the "Meta Pixel" service from Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").

If you click on an ad we've placed on Facebook and/or Instagram, "Meta Pixel" adds a parameter to the URL of our linked page. After redirection, a cookie set by our linked page then places this URL parameter into your browser.

This allows Meta to identify visitors to our online offering as a target audience for showing ads. So, we use this service to display our Facebook and/or Instagram ads only to users who've shown interest in our online content or who have specific characteristics (like interests in certain topics or products, determined by the websites they've visited) that we send to Meta (these are called "Custom Audiences").

On the other hand, the "Meta Pixel" helps us track whether users were redirected to our website after clicking an ad and what actions they take there (this is called "conversion tracking").

The data collected is anonymous for us, meaning we can't identify users from it. However, Meta stores and processes this data, which allows for a connection to the respective user profile, and Meta can use the data for its own advertising purposes.

All the processing described above, especially setting cookies to read information on your device, only happens if you've given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We've signed a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized sharing with third parties.

Information generated by Meta is usually transferred to a Meta server and stored there; this can also involve transferring data to servers of Meta Platforms Inc. in the USA.

11) Page functionalities

11.1 Youtube

This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data can also be transferred to: Google LLC., USA

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the content, at the latest when the video starts playing. During this process, certain information, including your IP address, is transmitted to the provider.

If embedded videos are started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics, and prevent abusive behavior.

If you're logged into a user account with the provider during your visit, your data will be directly linked to your account when you click on a video. If you don't want your data linked to your account, you need to log out before pressing the play button.

All the aforementioned processing operations, especially setting cookies to read information on your device, only happen if you've given us your explicit consent according to Art. 6 (1) (a) GDPR. You can withdraw your consent at any time with future effect by deactivating this service via the 'Cookie Consent Tool' provided on the website.

11.2 Google Maps

This website uses an online map service from the following provider: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Google Maps is a web service that displays interactive maps to visualize geographical information. Using this service shows you our location and makes it easier to plan your route.

As soon as you access subpages where the Google Maps map is embedded, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also involve data transfer to Google LLC servers in the USA. This happens regardless of whether Google provides a user account you're logged into or if a user account exists. If you're logged into Google, your data is directly associated with your account. If you don't want your data associated with your Google profile, you need to log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them.

The collection, storage, and evaluation are carried out in accordance with Art. 6 (1) (f) GDPR, based on Google's legitimate interest in displaying personalized advertising, market research, and/or tailoring Google websites to user needs. You have a right to object to the creation of these user profiles, for which you must contact Google. If you don't agree with the future transmission of your data to Google when using Google Maps, you can also completely deactivate the Google Maps web service by turning off JavaScript in your browser. Google Maps, and therefore the map display on this website, cannot then be used.

Where legally required, we have obtained your consent for the data processing described above, in accordance with Art. 6 (1) (a) GDPR. You can withdraw your given consent at any time with future effect. To exercise your withdrawal, please follow the objection option described above.

Further information on Google's data protection policies can be found here: https://business.safety.google/intl/de/privacy/

11.3 Google Web Fonts

This page uses so-called Web Fonts from the following provider for a consistent display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the necessary Web Fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

The processing of personal data during the connection with the font provider only occurs if you have given us your explicit consent in accordance with Art. 6 (1) (a) GDPR. You can withdraw your given consent at any time with future effect by deactivating this service via the 'Cookie Consent Tool' provided on the website. If your browser doesn't support Web Fonts, a standard font from your computer will be used.

Further information on Google's data protection policies can be found here: https://business.safety.google/intl/de/privacy/

11.4 Weglot

This website uses the translation service of the following provider via an API integration: Weglot SAS, 7 cité Paradis, 75010 Paris, France

For the translation to be displayed automatically based on your chosen language, your browser connects to the provider's servers. The provider uses "cookies", which are text files stored on your computer that allow an analysis of your website usage. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transferred to a provider's server and stored there.

We've signed a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized sharing with third parties.

12) Tools and Miscellaneous

12.1 weclapp

For our accounting, we use the service of the cloud-based accounting software from the following provider: weclapp GmbH, Friedrich-Ebert-Straße 28, 97318 Kitzingen

The provider processes incoming and outgoing invoices, and potentially also our company's bank movements, to automatically record invoices, match them to transactions, and then generate financial accounting in a semi-automated process.

If personal data is processed in this context, this processing is based on our legitimate interest in efficient organization and documentation of our business processes in accordance with Art. 6 para. 1 lit. f GDPR.

12.2 Cookie Consent Tool

This website uses a "Cookie Consent Tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "Cookie Consent Tool" is displayed to users as an interactive interface when they visit a page, allowing them to give consent for specific cookies and/or cookie-based applications by checking a box. When using this tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by checking the box. This ensures that such cookies are only placed on your device if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies, and thus in a legally compliant design of our website.

Additionally, Art. 6 para. 1 lit. c GDPR serves as another legal basis for processing. As data controllers, we're legally obliged to ensure that technically non-essential cookies are only used with your consent.

Where necessary, we've signed a data processing agreement with the provider. This ensures your data as a site visitor is protected and prevents any unauthorized sharing with third parties.

You'll find more info about the operator and the settings for the cookie consent tool directly on our website's interface.

13) Data Subject Rights

13.1 Current data protection law gives you, as the data subject, the following rights (rights to information and intervention) against the controller regarding the processing of your personal data. For the specific conditions to exercise these rights, please refer to the mentioned legal basis:

Right to access information as per Art. 15 GDPR;
Right to rectification as per Art. 16 GDPR;
Right to erasure as per Art. 17 GDPR;
Right to restriction of processing as per Art. 18 GDPR;
Right to notification as per Art. 19 GDPR;
Right to data portability as per Art. 20 GDPR;
Right to withdraw granted consents as per Art. 7 para. 3 GDPR;
Right to lodge a complaint in accordance with Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTERESTS AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration of personal data storage is determined by the respective legal basis, the processing purpose and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax law retention periods).

When processing personal data based on explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you withdraw your consent.

If statutory retention periods exist for data processed within the scope of legal or quasi-legal obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods expire, provided it is no longer necessary for contract fulfillment or initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

When processing personal data for direct marketing purposes based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object under Art. 21 para. 2 GDPR.

Unless other information in this declaration regarding specific processing situations states otherwise, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

As of July 24, 2026, 11:22:04 a.m.

Privacy policy

1) Introduction and contact details of the controller

2) Data collection when you visit our website

3) Hosting & Content Delivery Network

4) Cookies

5) Contact

6) Data Processing When Opening a Customer Account

7) Use of Customer Data for Direct Marketing

8) Data Processing for Order Fulfillment

9) Web analytics services

10) Retargeting/ Remarketing and Conversion Tracking

11) Page functionalities

12) Tools and Miscellaneous

13) Data Subject Rights

14) Duration of storage of personal data

Innovative power

Craftsmanship

Development