Privacy policy

Privacy Policy

Last updated: 14 September 2026

1. Information about the collection of personal data and contact details of the person responsible

We are pleased that you are visiting our website and thank you for your interest. In the following we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.The person responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Dr. Bianca Bajmel, Boxhagener Str. 67, 10245 Berlin. The person responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the character string “https://” and the lock symbol in your browser line.

2. Data collection when you visit our website

If you use our website only for informational purposes, i.e. if you do not register or otherwise provide us with information, we collect only the data that your browser transmits to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you: the website you visit; the date and time of access; the amount of data sent in bytes; the source/reference from which you came to the page; the browser used; the operating system used; and your IP address (where applicable, in anonymous form).

Processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3. Hosting – Hosted by Shopify

We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”) for the purpose of hosting and displaying the online shop, on the basis of processing on our behalf. All data collected on our website is processed on Shopify’s servers. As part of the aforementioned Shopify services, data can also be processed in the context of further processing on behalf of Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc.

In the event that data is transmitted to Shopify Inc. in Canada, the European Commission’s adequacy decision guarantees an appropriate level of data protection. For transfers to Shopify’s entities in the USA, the appropriate safeguard is the EU–U.S. Data Privacy Framework, under which Shopify is certified, with the European Commission’s standard contractual clauses as a fallback.

Further information on data protection from Shopify can be found at: https://www.shopify.com/legal/privacy. Further processing on servers other than those mentioned above by Shopify only takes place within the framework specified below.

4. Cookies

In order to make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (session cookies). Other cookies remain on your device and enable your browser to be recognised on your next visit (persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data as well as IP address values on an individual basis. Persistent cookies are automatically deleted after a specified period, which can differ depending on the cookie.

If personal data is also processed by individual cookies we use, processing takes place in accordance with Art. 6 Para. 1 lit. b GDPR for the execution of the contract, in accordance with Art. 6 Para. 1 lit. a GDPR in the case of a given consent, or in accordance with Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.

Necessary cookies do not require consent. They are required in accordance with § 25 Para. 2 No. 2 TDDDG in order to make the website (the telemedia service) available to you in a functional and legally compliant manner. Analysis and statistics cookies, functional cookies, advertising cookies and social-media cookies are only set with your consent in accordance with § 25 Para. 1 Sentence 1 TDDDG.

The consent tool used on this website is Consentmo (GDPR/CCPA Compliance). Through this tool you can give, refuse and revoke your consent for analysis, marketing and functional cookies at any time with effect for the future. Necessary cookies are always active.

Cookies necessary for the functioning of the store

Name	Provider	Purpose	Storage period
_ab	Shopify	Used in connection with access to admin.	Persistent
_secure_session_id	Shopify	Used in connection with navigation through a storefront.	24 hours
cart	Shopify	Used in connection with the shopping cart.	2 weeks
cart_sig	Shopify	Used in connection with checkout.	2 weeks
cart_ts	Shopify	Used in connection with checkout.	2 weeks
checkout_token	Shopify	Used in connection with checkout.	1 year
secret	Shopify	Used in connection with checkout.	1 year
secure_customer_sig	Shopify	Used in connection with customer login.	1 year
storefront_digest	Shopify	Used in connection with customer login.	1 year
_shopify_u	Shopify	Used to facilitate updating customer account information.	1 year
_tracking_consent	Shopify / Consentmo	Stores your cookie consent preferences.	1 year
_shopify_essential	Shopify	Used to maintain essential store functions and your session.	Session

Analytics and statistics

Name	Provider	Purpose	Storage period
_landing_page	Shopify	Tracks landing pages.	2 weeks
_orig_referrer	Shopify	Tracks landing pages.	2 weeks
_s	Shopify	Shopify analytics (session).	30 minutes
_shopify_s	Shopify	Shopify analytics (session).	30 minutes
_shopify_sa_p	Shopify	Shopify analytics relating to marketing & referrals.	30 minutes
_shopify_sa_t	Shopify	Shopify analytics relating to marketing & referrals.	30 minutes
_shopify_y	Shopify	Shopify analytics (long-term).	1 year
_y	Shopify	Shopify analytics (long-term).	1 year
_ga	Google	Google Analytics 4 – distinguishes users.	2 years
_ga_G-976LG9Y48V	Google	Google Analytics 4 – persists session state.	2 years
_gid	Google	Google Analytics – distinguishes users.	24 hours

Marketing and advertising

Name	Provider	Purpose	Storage period
_gcl_au	Google	Google Ads – stores and reports ad-click information (Conversion Linker).	90 days
IDE	Google (doubleclick.net)	Ad targeting and measurement.	up to 13 months
test_cookie	Google (doubleclick.net)	Checks whether the browser supports cookies.	15 minutes
NID	Google	Ad personalisation.	6 months
_fbp	Meta	Meta Pixel – identifies browsers for ad delivery and measurement.	90 days
_fbc	Meta	Meta Pixel – stores the ad-click ID for attribution.	90 days
fr	Meta (facebook.com)	Meta – ad delivery and measurement.	90 days

The length of time a cookie remains on your device depends on whether it is a persistent or a session cookie. Session cookies last until you stop browsing; persistent cookies last until they expire or are deleted. You can control and manage cookies through your browser controls (usually in the “Tools” or “Preferences” menu) and through the consent tool on this website. Please note that removing or blocking cookies can negatively impact your user experience and that parts of our website may no longer be fully accessible. Further general information is available at www.allaboutcookies.org.

5. Contact

When you contact us (e.g. using the contact form or by email), personal data is collected. Which data is collected can be seen from the respective contact form. These data are stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6 Para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted after your request has been processed, provided there are no statutory retention requirements.

6. Data processing when opening a customer account and for contract processing

In accordance with Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. You can delete your customer account at any time by sending a message to the address of the person responsible. We store and use the data you provide to process the contract. After the contract has been fully processed or your customer account has been deleted, your data will be blocked with due regard to tax and commercial retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we are legally entitled to further use it.

7. Use of customer data for direct mail

Registration for our e-mail newsletter

If you register for our e-mail newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. We use the double opt-in procedure to send the newsletter: we will only send you a newsletter after you have expressly confirmed that you consent to receiving it, by clicking a link in a confirmation email. By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. When you register, we store your IP address as well as the date and time of registration in order to trace any possible misuse of your e-mail address at a later point. You can unsubscribe from the newsletter at any time via the link provided in every newsletter or by sending a message to the person responsible. After you unsubscribe, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use.

Sending newsletters via Shopify

Our e-mail newsletters are sent using the e-mail marketing function of our shop system provider Shopify (Shopify International Limited, address as in section 3). The data you provide when registering for the newsletter is processed on Shopify’s servers for the sole purpose of sending the newsletter, on the basis of your consent (Art. 6 Para. 1 lit. a GDPR) and our legitimate interest in an effective, secure and user-friendly newsletter system (Art. 6 Para. 1 lit. f GDPR). Data may be transferred to Shopify entities in the USA; the safeguard for these transfers is the EU–U.S. Data Privacy Framework, with the European Commission’s standard contractual clauses as a fallback. We have concluded a data processing agreement with Shopify. Shopify does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties.

Advertising by mail

On the basis of our legitimate interest in personalised direct mail, we reserve the right to store your first and last name, your postal address and – if we have received this additional information from you as part of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 Para. 1 lit. f GDPR, and to use it for sending interesting offers and information about our products by post. You can object to the storage and use of your data for this purpose at any time by sending a message to the person responsible.

Goods availability notification by e-mail

If we offer the option of informing you by e-mail about the availability of selected, temporarily unavailable articles, you can register for our e-mail notification service. The only mandatory information is your e-mail address; the provision of further data is voluntary. We use the double opt-in procedure: we will only send the notification after you have expressly confirmed your consent by clicking a link in a confirmation email. By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6 Para. 1 lit. a GDPR. We store your IP address as well as the date and time of registration in order to trace any possible misuse. The data is used exclusively to inform you about the availability of a specific article. You can unsubscribe at any time by sending a message to the person responsible, after which your e-mail address is deleted from the mailing list set up for this purpose.

8. Data processing for order processing

To process your order, we work together with the following service providers who support us in the execution of concluded contracts. Certain personal data is transmitted to these service providers as set out below. The personal data collected by us is passed on to the transport company commissioned with the delivery, insofar as this is necessary for the delivery of the goods. Your payment data is passed on to the commissioned payment service provider as part of payment processing, insofar as this is necessary. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR.

Shopify

Orders are processed by the service provider Shopify (Shopify International Limited, address as in section 3). Name, address and any other personal data are passed on to Shopify in accordance with Art. 6 Para. 1 lit. b GDPR exclusively for processing the online order, and only where this is actually necessary. Details on data protection from Shopify can be viewed at https://www.shopify.com/legal/privacy.

DHL

Dispatch takes place via DHL (Deutsche Post AG / DHL Group, Bonn, Germany). In accordance with Art. 6 Para. 1 lit. b GDPR, we pass on your data (name, delivery address and, where you have provided it, your e-mail address or telephone number for shipment notifications) to DHL solely for the delivery of your order. The data is only passed on where this is actually necessary for delivery. Details on data protection at DHL can be viewed at www.dhl.de.

9. Use of social media and tracking pixels

Meta Pixel (Facebook and Instagram)

Our website uses the “Meta Pixel” of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). With the help of the Meta Pixel, Meta is able to determine visitors to our website as a target group for the display of ads (“Meta Ads”). Accordingly, we use the Meta Pixel to display our Meta Ads only to Meta users who have shown an interest in our online offer or who have certain characteristics (e.g. interests) that we transmit to Meta (“custom audiences”). We also use the Meta Pixel to ensure that our Meta Ads correspond to the potential interest of users, and to measure their effectiveness for statistical and market-research purposes by seeing whether users were redirected to our website after clicking on a Meta Ad (“conversion”).

When the Meta Pixel is used, personal data may also be transmitted to the servers of Meta Platforms, Inc. in the USA; for these transfers Meta relies on the EU–U.S. Data Privacy Framework, under which it is certified. The Meta Pixel is only used with your consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future via the consent tool on this website. Further information can be found in Meta’s data protection information: https://www.facebook.com/privacy/policy.

Pinterest and TikTok (links only)

Our website contains links to our profiles on the social networks Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) and TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin 2, D02 T380, Ireland). These are integrated only as simple HTML links; a connection to the servers of the respective provider is only established when you actively click a link, after which you can interact with the content there (if necessary after entering your login data). We do not use a Pinterest or TikTok tracking pixel on our website. Information on the handling of your personal data by these providers can be found in their respective data protection information.

10. Online marketing – Google Ads

This website uses the online advertising program Google Ads and, as part of Google Ads, conversion tracking from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our offers with the help of advertising material on external websites and to measure how successful individual advertising measures are. These tags are deployed via Google Tag Manager.

The conversion-tracking cookie is set when you click on an ad placed by Google. It is used to generate conversion statistics and does not personally identify you. We use Google Ads on the basis of your consent where required (Art. 6 Para. 1 lit. a GDPR) and otherwise on the basis of our legitimate interest in targeted advertising (Art. 6 Para. 1 lit. f GDPR). When using Google Ads, personal data may also be transmitted to Google LLC in the USA; for these transfers Google relies on the EU–U.S. Data Privacy Framework, under which it is certified, with the European Commission’s standard contractual clauses as a fallback. You can revoke your consent at any time with effect for the future via the consent tool on this website. Further information: https://policies.google.com/privacy.

11. Web analytics – Google Analytics 4

This website uses Google Analytics 4 (GA4), a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). GA4 uses cookies that enable an analysis of your use of the website. GA4 is designed not to log or store full IP addresses: IP addresses are shortened within the EU/EEA and are not stored by Google in full. The information generated about your use of the website is transmitted to Google and may be transferred to Google LLC in the USA, where Google uses it on our behalf to evaluate your use of the website and to compile reports on website activity.

Google Analytics is only used with your express consent in accordance with Art. 6 Para. 1 lit. a GDPR; without this consent, Google Analytics is not activated during your website visit. You can revoke your consent at any time with effect for the future via the consent tool on this website. We have concluded an order-processing agreement with Google. For the transmission of data from the EU to the USA, Google relies on the EU–U.S. Data Privacy Framework, under which Google LLC is certified, with the European Commission’s standard contractual clauses as a fallback. Our GA4 measurement ID is G-976LG9Y48V. Further information: https://policies.google.com/privacy.

12. Retargeting / Remarketing

Our website uses the functions of Google Ads Remarketing (Google Ireland Limited, address as above) to advertise this website in Google search results and on third-party websites. For this purpose, Google places a cookie in the browser of your device which enables interest-based advertising by means of a pseudonymous cookie ID based on the pages you have visited. We use this on the basis of your consent where required (Art. 6 Para. 1 lit. a GDPR) and otherwise on the basis of our legitimate interest in the optimal marketing of our website (Art. 6 Para. 1 lit. f GDPR). When using Google Ads Remarketing, personal data may also be transmitted to Google LLC in the USA; for these transfers Google relies on the EU–U.S. Data Privacy Framework, with the European Commission’s standard contractual clauses as a fallback. You can revoke your consent at any time with effect for the future via the consent tool on this website. Further information: https://policies.google.com/technologies/ads.

13. Tools and miscellaneous – Google Customer Reviews

We work with Google as part of the Google Customer Reviews program (Google Ireland Limited, address as above). This program allows us to obtain customer reviews from users of our website. After making a purchase, you may be asked whether you would like to take part in a Google e-mail survey. If you give your consent in accordance with Art. 6 Para. 1 lit. a GDPR, we transmit your e-mail address to Google, and you receive an e-mail from Google Customer Reviews asking you to rate your buying experience. The rating you submit is summarised with our other ratings and used for our Google seller rating. When using Google Customer Reviews, personal data may also be transmitted to Google LLC in the USA under the EU–U.S. Data Privacy Framework. You can revoke your consent at any time by sending a message to the person responsible or to Google. Further information: https://support.google.com/merchants/answer/7188525.

14. Rights of the data subject

The applicable data protection law grants you comprehensive rights with regard to the processing of your personal data:

Right to information (Art. 15 GDPR): you have the right to information about the personal data we process, the purposes and categories of processing, the recipients, the planned storage period, and the existence of your other data-subject rights.

Right to rectification (Art. 16 GDPR): you have the right to the immediate correction of incorrect data and the completion of incomplete data stored by us.

Right to erasure (Art. 17 GDPR): you have the right to request the deletion of your personal data where the legal requirements are met, unless processing is necessary, for example, to comply with a legal obligation or to assert, exercise or defend legal claims.

Right to restriction of processing (Art. 18 GDPR): you have the right to request the restriction of processing of your data in the cases provided for by law.

Right to notification (Art. 19 GDPR), right to data portability (Art. 20 GDPR), and right to withdraw consent (Art. 7 Para. 3 GDPR): you may withdraw a given consent at any time with effect for the future; the lawfulness of processing carried out before withdrawal remains unaffected.

Right to lodge a complaint (Art. 77 GDPR): if you consider that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, place of work or the place of the alleged infringement.

Right to object

If we process your personal data on the basis of our legitimate interests, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your data. If you object, we will end the processing of the data concerned unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims. If your personal data is processed for direct-advertising purposes, you have the right to object at any time to processing for such purposes; if you object, we will end the processing of your data for direct-advertising purposes.

15. Duration of storage of personal data

The duration of storage of personal data is determined by the respective legal basis, the processing purpose and, where relevant, the applicable statutory retention period (e.g. commercial and tax retention periods). Where personal data is processed on the basis of your express consent in accordance with Art. 6 Para. 1 lit. a GDPR, it is stored until you revoke your consent. Where data is processed to fulfill or initiate a contract on the basis of Art. 6 Para. 1 lit. b GDPR, it is deleted once it is no longer required for these purposes and no statutory retention periods prevent deletion. Where data is processed on the basis of our legitimate interests in accordance with Art. 6 Para. 1 lit. f GDPR, it is stored until you exercise your right to object, unless we can demonstrate compelling legitimate grounds for processing that override your interests, or the processing serves to assert, exercise or defend legal claims. Otherwise, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.