5) Contacting Us
When you contact us (e.g., via contact form or email), personal data will be processed solely for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted once it is evident from the circumstances that the relevant matter has been fully resolved, provided that no statutory retention obligations conflict with this.
6) Data Processing When Opening a Customer Account
In accordance with Article 6(1)(b) GDPR, personal data will be collected and processed as necessary when you provide it to us for the purpose of opening a customer account. The specific data required for account creation is outlined in the input form on our website.
You can delete your customer account at any time by sending a message to the aforementioned contact address of the controller. Once your account has been deleted, your data will also be deleted unless all contracts concluded through it have been fully processed, no statutory retention periods apply, and there is no legitimate interest on our part in retaining the data.
7) Use of Customer Data for Direct Marketing
Subscription to Our Email Newsletter
When you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing additional data is voluntary and allows us to address you personally.
We use the double opt-in method to ensure that you only receive newsletters if you have explicitly confirmed your consent to receive them by clicking a verification link sent to your provided email address.
By activating the confirmation link, you give us your consent to process your personal data in accordance with Article 6(1)(a) GDPR. As part of the registration process, we store your IP address as registered by the Internet Service Provider (ISP) and the date and time of your registration to trace potential misuse of your email address at a later date. The data collected when registering for the newsletter is used strictly for this purpose.
You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the aforementioned contact address. After unsubscribing, your email address will be promptly removed from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in a manner permitted by law, as detailed in this declaration.
8) Data Processing for Order Fulfillment
8.1 To the extent necessary for contract execution, personal data collected by us will be shared with the transport company tasked with delivery and the financial institution tasked with processing payments in accordance with Article 6(1)(b) GDPR.
If we are contractually obligated to provide updates for goods with digital elements or digital products, we process your contact data (name, address, email address) provided during the order process to inform you of these updates within the legally mandated period, as required by Article 6(1)(c) GDPR. Your contact data will be strictly used for these update notifications and only processed to the extent necessary for such information.
To process your order, we work with the service providers listed below, who wholly or partially support the execution of contracts. Personal data will be shared with these providers as detailed below.
8.2 Use of Payment Service Providers
-
Apple Pay
If you choose the “Apple Pay” payment method by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing will occur via the "Apple Pay" function of your iOS, watchOS, or macOS device. Payment is made by charging a payment card registered in “Apple Pay.” Security features built into your device's hardware and software are used to protect your transactions. Authorization of a payment requires you to enter a pre-set code and verify via the "Face ID" or "Touch ID" functionality of your device.
To process the payment, the information provided during the order process, along with order details, is transmitted to Apple in encrypted form. Apple re-encrypts this data with a developer-specific key before forwarding it to the payment service provider of the payment card registered in Apple Pay. This encryption ensures that only the website through which the purchase was made can access the payment information.
After the payment is completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the transaction's success.
If personal data is processed as part of these transmissions, it is done exclusively for payment processing in accordance with Article 6(1)(b) GDPR. Apple stores anonymized transaction data, such as approximate purchase amount, date, time, and whether the transaction was successful. These anonymized data are used to improve Apple Pay and other Apple products and services.
More information about Apple Pay's privacy practices can be found at: Apple Pay Privacy.
-
PayPal
Our website offers online payment methods provided by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
When selecting a payment method through PayPal, the payment data you provide during the order process (including name, address, banking/card information, currency, and transaction number) will be shared with PayPal in accordance with Article 6(1)(b) GDPR solely for the purpose of processing your payment.
If you choose a payment method where we provide services in advance, we may also collect personal data (name, address, date of birth, etc.) to conduct a credit check to protect our legitimate interest in determining your creditworthiness. This data is shared with PayPal in accordance with Article 6(1)(f) GDPR.
-
Shopify Payments
Payments made through Shopify Payments are processed by Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, Ireland. For payment methods requiring advance payment, your payment data will be shared with Shopify Payments solely for payment processing in accordance with Article 6(1)(b) GDPR.
9) Web Analytics Services
Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of your use of our website.
By default, Google Analytics 4 sets cookies when you visit the website. These cookies are small text files stored on your device that collect specific information, including your IP address. However, Google truncates the last digits of the IP address to prevent direct identification of individuals.
The information is transmitted to and processed on Google servers. Data transfers to Google LLC in the USA may also occur.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.
All the aforementioned processing, particularly the setting of cookies on your device, only occurs if you have expressly consented to this under Article 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit to our website. You may revoke your consent at any time with future effect by disabling this service through the "cookie consent tool" provided on the website.
We have entered into a data processing agreement with Google to ensure the protection of our site visitors’ data and to prohibit unauthorized data sharing with third parties.
For further legal information about Google Analytics 4, please visit:
Demographic Features
Google Analytics 4 includes the “demographic features” functionality, which can generate statistics on visitors’ age, gender, and interests. This data is derived from advertising and third-party information. It allows for identifying target groups for marketing purposes. However, the collected data cannot be attributed to any specific individual and is deleted after two months.
Google Signals
This website may use Google Signals, an extension of Google Analytics 4, to generate cross-device reports. If you have personalized ads enabled and your devices are linked to your Google account, Google may analyze your usage patterns across devices and create database models, including cross-device conversions, subject to your consent under Article 6(1)(a) GDPR. We do not receive personal data but only aggregated statistics. To stop cross-device analysis, disable the "Personalized Ads" option in your Google Account settings (instructions). More information about Google Signals can be found here.
User IDs
This website may use the "User IDs" feature as an extension of Google Analytics 4. If you consent under Article 6(1)(a) GDPR and have an account on this website that you access across multiple devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider complies with the EU-US Data Privacy Framework, which ensures adherence to European data protection standards based on an adequacy decision by the European Commission.
10) Retargeting/Remarketing and Conversion Tracking
Meta Pixel with Advanced Matching
Our online services use the “Meta Pixel” tool with advanced matching provided by:
Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
When a user clicks on an ad placed by us on Facebook or Instagram, Meta Pixel appends a parameter to the URL of our linked page. This parameter is then stored in a cookie set by our website. Additionally, this cookie collects specific customer data, such as email addresses, obtained through actions on our website (e.g., purchases, account registrations). The cookie is read, and the data, including customer information, is transmitted to Meta.
Meta Pixel with advanced matching helps us tailor our ads on Facebook and Instagram to better align with users' interests or specific characteristics (e.g., preferences for certain topics or products determined by visited pages). We also evaluate the effectiveness of our ads by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard Meta Pixel, advanced matching enables better tracking of attributable conversions, enhancing the evaluation of ad campaigns.
The transmitted data is stored and processed by Meta, allowing it to associate the data with the respective user profile. Meta may use this data for its advertising purposes in accordance with Meta's Data Usage Policy (https://www.facebook.com/about/privacy/). Meta and its partners may display ads on and off Facebook.
All processing described above, particularly the use of cookies, occurs only with your explicit consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service in the "cookie consent tool" provided on the website.
We have entered into a data processing agreement with Meta to ensure the protection of visitor data and to prevent unauthorized sharing. Data generated by Meta is typically transferred to Meta servers, including servers located in the USA.
For data transfers to the USA, Meta complies with the EU-US Data Privacy Framework, ensuring compliance with European data protection standards.
11) Data Subject Rights
11.1 Rights Under GDPR
Under applicable data protection laws, you have the following rights concerning the processing of your personal data:
- Right of access (Article 15 GDPR);
- Right to rectification (Article 16 GDPR);
- Right to erasure (Article 17 GDPR);
- Right to restrict processing (Article 18 GDPR);
- Right to notification (Article 19 GDPR);
- Right to data portability (Article 20 GDPR);
- Right to withdraw consent (Article 7(3) GDPR);
- Right to lodge a complaint (Article 77 GDPR).
11.2 Right to Object
If your data is processed based on our legitimate interests (Article 6(1)(f) GDPR), you may object to this processing for reasons related to your specific situation at any time.
If you object, we will cease processing the relevant data unless we demonstrate compelling legitimate grounds that override your interests, rights, and freedoms or if the processing is required for the establishment, exercise, or defense of legal claims.
If your data is processed for direct marketing purposes, you may object at any time, and we will stop processing it for this purpose.
12) Duration of Data Retention
The duration of data storage depends on the legal basis, purpose of processing, and applicable statutory retention periods (e.g., commercial or tax regulations).
For processing based on consent (Article 6(1)(a) GDPR), data is retained until consent is withdrawn.
For data processed under Article 6(1)(b) GDPR, data is retained until it is no longer necessary for contract fulfillment or pre-contractual measures unless statutory retention periods apply.
For data processed under Article 6(1)(f) GDPR, data is retained until you exercise your right to object under Article 21(1) GDPR unless we demonstrate overriding legitimate grounds.
If no specific retention periods are specified, data is deleted once its processing purpose is fulfilled.
