Overview of Data Protection
We place great importance on the security and protection of your personal data. We process your information in accordance with the EU General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).
This Privacy Policy explains what personal information we collect, how we use it, and what rights you have regarding your personal data.
What Data We Collect
- Identity and Contact Information: This may include your name, shipping address, billing address, email address, and telephone number.
- Account Information: This may include your username, encrypted password, and order history.
- Required Age Verification Information: To comply with applicable legal requirements, we are required to verify that customers meet the minimum legal age. This process may involve the partial collection of identification information or information provided by specialized third-party age verification services.
- Payment Information: Payment information is transmitted to payment service providers through encrypted channels. We do not store complete credit card information on our own servers.
- Technical Information: This may include your IP address, browser type, and cookie data used to improve and optimize your shopping experience.
Why We Process Your Data
- Contract Fulfillment: We process information as necessary to manage orders, arrange shipment of purchased products, and provide customer service.
- Legal Obligations: We may process personal information when necessary to comply with legal requirements, including applicable age verification and youth protection regulations.
- User Experience: Cookies and similar technologies may be used to remember the contents of your shopping cart and provide a more relevant shopping experience.
- Marketing: If you have provided your explicit consent, we may send you promotional offers, coupons, product updates, or other news. You may withdraw your consent and unsubscribe from marketing communications at any time.
Data Sharing and Security
Third-Party Service Providers: We only share personal information when necessary with service providers involved in fulfilling your order or meeting legal requirements. These may include logistics providers, payment processors, and authorized age verification service providers.
Data Security: Our website uses SSL/TLS encryption to help protect your personal information against unauthorized access while it is being transmitted.
Data Retention: We retain personal information only for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required by applicable law. Certain records, such as accounting documents, may be subject to statutory retention periods of up to 10 years.
Your Rights
Under the GDPR, you may have the following rights regarding your personal information:
- Right of Access: You may request information about the personal data we hold about you.
- Right to Rectification and Erasure: You may request the correction of inaccurate personal information or the deletion of your personal data where legally permitted.
- Right to Withdraw Consent: Where processing is based on your consent, such as newsletter subscriptions, you may withdraw that consent at any time.
- Right to Lodge a Complaint: You have the right to submit a complaint to an appropriate data protection supervisory authority if you believe that the processing of your personal information violates applicable data protection laws.
Data Protection Contact
If you have any questions regarding this Privacy Policy, the processing of your personal information, or your data protection rights, please contact our customer support or designated data protection contact.
