Skip to Content

Privacy Policy


Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Non-provision has no consequences. This only applies as long as no other information is provided in the subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server log files
You can visit our websites without providing any information about yourself. With each access to our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed page, date and time of access, the IP address, the amount of data transmitted, and the requesting provider.

The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our services. 


Contact

Responsible

Contact us upon request. The responsible party for data processing is: KaufLaune GmbH, Rupertistr. 16, 83451 Piding, Germany 
Phone: +49 1590 4586380, Email: datenschutz@kauflaune.de

Initiative contact by the customer via email

If you initiate contact with us via email, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves to process and respond to your contact request.

If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation in case of purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.

If the contact is for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.

We only use your email address to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.


Collection and processing when using the contact form

When using the contact form, we only collect your personal data (name, email address, message text) to the extent you provide it. The data processing serves the purpose of contacting you.

If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation in case of purchase interest, preparation of offers) or concerns a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.

If the contact is for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.

We only use your email address to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.


WhatsApp Business

If you contact us for business via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”) for this purpose. If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). 

The data processing serves to process and respond to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided, and any other data to the extent you have made available. We use a mobile device for the service, in whose address book only data from users who have contacted us via WhatsApp is stored. There is no transfer of personal data to WhatsApp without your prior consent to WhatsApp.

Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified under the TADPF and thus committed to comply with European data protection principles. If the contact is for the purpose of carrying out pre-contractual measures (e.g., consultation in case of purchase interest, creation of offers) or relates to a contract already concluded between you and us, this data processing is based on Art. 6 para. 1 lit. b GDPR.

If the contact is made for other reasons, this data processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in providing a quick and easy way to contact us as well as in responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR for reasons arising from your particular situation.

We only use your personal data to process your request. Your data will then be deleted in accordance with legal retention periods, unless you have consented to further processing and use.

For more information on terms of use and data protection when using WhatsApp, please visit https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.


Customer account      Orders      

Customer account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing based on the consent until the revocation. Your customer account will then be deleted.


Collection, processing, and transfer of personal data when placing orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order as well as to handle your inquiries. Providing the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you. Your data may be shared, for example, with the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly adhere to the legal requirements. The scope of data transmission is limited to a minimum.


Reviews       Advertising      

Use of the email address for sending newsletters

We use your email address independently of the contract processing exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

Your data will be shared with a service provider for email marketing as part of a contract processing. No sharing with other third parties will occur.


Use of the email address for sending direct advertising

We use your email address, which we received in the context of the sale of a product or service, for the electronic transmission of advertising for our own products or services that are similar to those you have already purchased from us, as long as you have not objected to this use. Providing the email address is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is based on Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. You can find the contact details for exercising the objection in the imprint. You can also use the designated link in the advertising email. There are no costs other than the transmission costs according to the basic rates.


Shipping service provider       Inventory management      

Transfer of the email address to shipping companies to inform about the shipping status

We will pass on your email address to the transport company as part of the contract processing, provided you have expressly consented to this during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is based on Art. 6 para. 1 lit. a GDPR with your consent. You can revoke the consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.


Use of an external inventory management system

We use a merchandise management system for contract processing as part of order processing. For this purpose, your personal data collected during the order will be sent to

plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel
Pickware GmbH, Goebelstr. 21, 64293 Darmstadt
Odoo S.A., Chaussée de Namur, 40, 1367 Grand Rosière, Belgium

transmitted.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is based on Art. 6 para. 1 lit. b GDPR.


Payment service provider      

Use of PayPal

We use the payment service PayPal from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus
We use the payment service PayPal Plus from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. For individual payment methods such as credit card via PayPal, direct debit via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies if necessary. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default for a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) that are calculated based on scientifically recognized mathematical-statistical procedures and in which, among other things, address data is included in the calculation. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing serves the purpose of credit assessment for contract initiation. 

The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our predominant legitimate interest in protection against payment default when PayPal makes an advance payment. You have the right to object at any time to the processing of your personal data concerning you based on Article 6(1)(f) GDPR for reasons arising from your particular situation by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you desire. Failure to provide it will result in the contract not being able to be concluded with the payment method you have chosen.

Use of PayPal Express
We use the payment service PayPal Express from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.

The processing of your personal data is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object at any time to this processing of your personal data concerning you for reasons arising from your particular situation.

By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the payment service PayPal Express can be found in the associated privacy policy under www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Use of PayPal Check-Out
We use the payment service PayPal Check-Out from PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment through the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR.

Cookies may be stored that enable the recognition of your browser. The data processing that takes place as a result is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offering of various payment methods. You have the right to object at any time to the processing of personal data concerning you for reasons arising from your particular situation.


Credit card via PayPal, direct debit via PayPal & “Pay Later” via PayPal 

For individual payment methods such as credit card via PayPal, direct debit via PayPal, or "Pay later" via PayPal, PayPal reserves the right to obtain a credit report based on mathematical-statistical procedures using credit agencies if necessary. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information obtained about the statistical probability of a payment default for a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) that are calculated based on scientifically recognized mathematical-statistical procedures and in whose calculation, among other things, address data is included. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing serves the purpose of credit assessment for a contract initiation. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in protection against payment default when PayPal makes an advance payment. 

You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data concerning you based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have chosen. Failure to provide the data will result in the contract not being able to be concluded with the payment method you have selected.

Third-party providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6 para. 1 lit. b GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Art. 6 para. 1 lit. b GDPR. Local third-party providers may include:

  • Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
  • giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Invoice purchase via PayPal 

When paying via the payment method invoice purchase, the data required for payment processing is initially transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6 para. 1 lit. b GDPR. Ratepay may conduct a credit check based on mathematical-statistical procedures (probability or score values) using credit agencies as described above. The data processing serves the purpose of credit assessment for contract initiation. The processing is based on Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Ratepay advances. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/. 

More information on data processing when using PayPal can be found in the associated privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.


Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that allows for the unique identification of the browser when the website is accessed again. Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on their acceptance, as well as prevent the storage of cookies and the transmission of the data contained. Already stored cookies can be deleted at any time. However, we would like to point out that you may not be able to use all the functions of this website to their full extent then. 
You can find information on how to manage (including disabling) cookies in the most important browsers at the following links:

Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnenSafari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac 

Technically necessary cookies
As long as no other information is provided in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again after a page change. The use of cookies or comparable technologies is based on § 25 Abs. 2 TDDDG. The processing of your personal data is based on Art. 6 Abs. 1 lit. f DSGVO from our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer. You have the right to object at any time to the processing of your personal data concerning you for reasons arising from your particular situation.

 

Analysis      

Use of Google Analytics 4

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.

The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website usage and internet usage to the website operator. 

This may include, among other things, the following information: IP address, date and time of the page view, click path, information about the browser you are using and the device you are using, visited pages, referrer URL (the website through which you accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data that Google has about you.

The IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.

The processing of your personal data is carried out with your consent based on Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time, without affecting the lawfulness of the processing based on the consent until the revocation.

The information generated about your use of this website is usually transmitted to a server of Google in the USA and stored there. There is an adequacy decision of the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has been certified under the TADPF and is therefore committed to adhering to European data protection principles. Both Google and US government authorities have access to your data.

For more information on terms of use and data protection, please visit https://policies.google.com/technologies/partner-sites and at https://policies.google.com/privacy?hl=de&gl=de.


Plug-ins and Others

Use of Google Maps

We use the embedding function of Google Maps from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, "Google") on our website.

The function allows for the visual representation of geographical information and interactive maps. In doing so, Google also collects, processes, and uses data from visitors to the websites where Google Maps are embedded when the pages are accessed.

Your data may also be transmitted to the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified under the TADPF and thus committed to comply with European data protection principles.

The use of cookies or similar technologies is done with your consent based on § 25 Abs. 1 S. 1 TDDDG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data is done with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing based on the consent until the revocation.

For more information on the collection and use of data by Google, please refer to Google's privacy policy at https://www.google.com/privacypolicy.html. There you also have the option in the privacy center to change your settings so that you can manage and protect your data processed by Google.


Use of Google Fonts

We use Google Fonts from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

The data processing serves the purpose of uniform representation of fonts on our website. To load the fonts, a connection to Google servers is established when the page is accessed. Cookies may be used in this process. This includes processing and transmitting your IP address as well as information about the browser you are using to Google. This data is not linked to your Google account.

Your data may be transmitted to the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Google has been certified under the TADPF and has thus committed to comply with European data protection principles.

The use of cookies or similar technologies is done with your consent based on § 25 Abs. 1 S. 1 TDDDG in conjunction with Art. 6 Abs. 1 lit. a GDPR. The processing of your personal data is done with your consent based on Art. 6 Abs. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing based on the consent until the revocation.

Further information on data processing and data protection can be found at https://www.google.de/intl/de/policies/ as well as at https://developers.google.com/fonts/faq.


Rights of the data subjects and storage duration

Duration of storage

After the complete fulfillment of the contract, the data will initially be stored for the duration of the warranty period, and thereafter, taking into account legal, particularly tax and commercial retention periods, and will be deleted after the expiration of the period, unless you have consented to further processing and use.


Rights of the data subject

You have the following rights under Articles 15 to 20 GDPR if the legal requirements are met: right to information, right to rectification, right to deletion, right to restriction of processing, right to data portability.

In addition, you have the right to object under Article 21(1) GDPR against processing based on Article 6(1)(f) GDPR, as well as against processing for the purpose of direct marketing.


Right to lodge a complaint with the supervisory authority

You have the right under Art. 77 GDPR to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can file a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:

Bavarian State Office for Data Protection Supervision (BayLDA)
Promenade 18
91522 Ansbach
Tel.: +49 981 1800930
Fax: +49 981 180093800
E-Mail: poststelle@lda.bayern.de


Right of objection

If the personal data processing listed here is based on our legitimate interest under Art. 6 para. 1 lit. f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.

After an objection has been made, the processing of the affected data will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves the assertion, exercise, or defense of legal claims.


If the processing of personal data is for the purposes of direct marketing, you can object to this processing at any time by notifying us. After an objection has been made, we will cease processing the affected data for the purposes of direct marketing.


last updated: 29.11.2023