Privacy policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means all data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Laverana Digital GmbH & Co. KG, Am Weingarten 4, 30974 Wennigsen, Germany, Tel.: +49 511-67541-100, Fax: +49 5103-93918070, E-mail: [email protected]. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3 The controller has appointed a data protection officer, who can be contacted as follows: "Data Protection Officer, Lavesstraße 65, 30159, Hannover, + 49 511-67541-100, [email protected]"

2) Data collection when visiting our website

2.1 When using our website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the page server (so-called “server log files”). When you access our website, we collect the following data that is technically necessary for us to display the website to you:

Our website visited
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or otherwise used. However, we reserve the right to subsequently review the server log files if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries addressed to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the padlock symbol in your browser’s address bar.

3) Hosting & Content Delivery Network

3.1 Shopify
We use the system of the following provider to host our website and display its content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.
Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Bunny
We use a content delivery network provided by: BUNNYWAY d.o.o., Dunajska c. 165, 1000 Ljubljana, Slovenia

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR.
We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

3.3 Cloudflare
We use a content delivery network provided by: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

3.4 Shopify
We use a content delivery network provided by: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)

Data may also be transferred to:

Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.

Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
For data transfers to the USA, the data recipient has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

4) Cookies

To make visiting our website attractive and enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device for longer and enable page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.

If personal data is also processed through individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the event of consent having been granted, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and in a customer-friendly and effective design of the visit to the website.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contact

5.1 Melibo
On this website, we have integrated a software solution using artificial intelligence from the following provider to provide autonomous customer support: ThinkingTech GmbH, Darmstädter Str. 5, 64625 Bensheim, Germany

Through an API-based integration, visitors can submit text-based requests regarding offers, website functionalities, orders placed and the exercise of contractual rights; these requests are then answered and processed by the provider's language models.

For this purpose, the provider's software may collect personal data of the person making the request in order to compare it with the order history, assign the input to a specific order, automatically review the request and then resolve it by autonomously initiating processing procedures.

The collection and further processing of personal data is carried out exclusively to process the specific request. The processing of input from the visitor to the website for the purposes of training and further developing the provider's AI language models is expressly prohibited.

The data processing is carried out on the basis of our legitimate interest in effectively supporting visitors to our pages, optimally marketing our offering and automating customer support to reduce the operational burden, in accordance with Art. 6 para. 1 lit. f GDPR.

The personal data collected shall be deleted, subject to any conflicting statutory retention obligations, once the provider's software has determined that the matter has been conclusively resolved in accordance with automated mathematical-statistical procedures.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.2 Bazaarvoice
For review reminders, we use the services of the following provider: Bazaarvoice Inc., 10901 Stonelake Blvd, Austin, Tx 78759, USA

Exclusively on the basis of your express consent pursuant to Art. 6 para. 1 lit. a GDPR, we transmit your email address and, where applicable, other customer data to the provider so that the provider can contact you by email with a review reminder.
You may withdraw your consent from us or the provider at any time with effect for the future.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.3 Klaviyo
For review reminders, we use the services of the following provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.4 Reviews.io
For review reminders, we use the services of the following provider: REVIEWS.io 2020 GmbH, Skalitzer Str. 104, 10997 Berlin, Germany

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.5 Trusted Shops
For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany

We are jointly responsible with the provider for the processing activities described above in accordance with Art. 26 GDPR. The agreement on joint controllership can be viewed here: https://help.etrusted.com/hc/de/articles/4402587369105-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

5.5 Zendesk
To process customer inquiries, we use the email ticketing system of the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland

If you send contact requests by email via our website, these are stored and organized in the ticketing system to enable processing in chronological order and improve the service experience. You can always view the current status of the processing of your request using the individually assigned ticket number. Personal data is collected, transmitted to the provider, stored and read there for the organization and processing of requests, depending on the scope of the data provided, but in any event including your surname, first name and email address.
The legal basis for processing this data is our legitimate interest in efficiently organizing our customer service, responding to your request as quickly as possible and optimizing our range of services in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

5.7 In the course of contacting us (e.g. via the contact form or by email), personal data is processed - exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your enquiry pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that no statutory retention obligations prevent this.

6) Data processing when opening a customer account

Pursuant to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. You can find out which data is required to open the account in the input form of the relevant form on our website.

You may delete your customer account at any time by sending a message to the above-mentioned address of the controller. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully performed, no statutory retention periods prevent this, and we no longer have a legitimate interest in retaining the data.

7) Use of customer data for direct advertising

7.1 Registration for our email newsletter
When you register for our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you do not receive newsletters until you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In this context, we store the IP address assigned by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter is used strictly for the specified purpose.

You may unsubscribe from the newsletter at any time using the link provided for this purpose in the newsletter or by sending an appropriate message to the controller named at the beginning. Following unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where legally permitted and have informed you of this in this statement.

7.2 Klaviyo
Our email newsletters and other promotional email communications are sent via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA

On the basis of our legitimate interest in effective and user-friendly email marketing, we disclose the data you provided when registering to this provider pursuant to Article 6(1)(f) GDPR, so that the provider can handle email distribution on our behalf.

Subject to your express consent pursuant to Article 6(1)(a) GDPR, the provider also conducts a statistical evaluation of the success of email campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. In this process, device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but is not combined with other data sets.

You may withdraw your consent to email tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects our site visitors’ data and prohibits its disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

7.3 Product availability notification by email
You can register to receive email product availability notifications for items that are temporarily unavailable. In this case, we will send you a one-time email notifying you that the item you selected is available. The only mandatory information required to send this notification is your email address. Providing additional data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you will only receive a notification once you have expressly confirmed your consent in this regard by clicking a verification link sent to the email address provided.

By activating the confirmation link, you consent to our use of your personal data pursuant to Article 6(1)(a) GDPR. In this context, we store the IP address registered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for our email notification service regarding product availability is used strictly for the specified purpose.

You may unsubscribe from availability notifications at any time by sending an appropriate message to the controller named above. Once you have unsubscribed, your email address will be deleted without delay from the distribution list we have established for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where such use is legally permitted and we inform you of it in this statement.

7.4 Email notification of product availability
If you abandon your purchase with us before completing the order, you have the option of receiving a one-time email reminder of the contents of your virtual shopping cart.

The only mandatory information required to send this reminder is your email address. Providing additional data is voluntary and may be used to address you personally. For sending emails, we use the so-called double opt-in procedure, which ensures that you receive a notification only after you have expressly confirmed your consent in this regard by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to use your personal data pursuant to Art. 6(1)(a) GDPR to send a shopping cart reminder. In this process, we store the IP address registered by your Internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for our email notification service is used strictly for the specified purpose.

You may unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your email address will be immediately deleted from the distribution list established for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where legally permitted and have informed you of this in this statement.

8) Data processing for order processing

8.1 Where necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be disclosed, pursuant to Art. 6(1)(b) GDPR, to the commissioned transport company and the commissioned credit institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order in order to inform you personally as part of our statutory information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of notifying you about updates owed by us and are processed by us for this purpose only to the extent necessary for the respective information.

8.2 Post & DHL Versand (offiziell)
We use the services of the following provider to prepare shipments: Deutsche Post DHL Research And Innovation GmbH, Kurt-Schumacher-Str. 1, 53113 Bonn

Pursuant to Art. 6 para. 1 lit. b GDPR, we transmit digital shipping labels containing your delivery information exclusively for the purpose of processing your online order from our order processing system to the provider, which then sends them to our local printers to enable printing. The data will be disclosed only to the extent actually necessary for processing.

8.3 Xentral
We use the following provider for order processing: Xentral ERP Software GmbH, Fuggerstraße 11, 86150 Augsburg, Germany

Pursuant to Art. 6 para. 1 lit. b GDPR, the name, address and, where applicable, other personal data will be disclosed to the provider for the purpose of processing the online order. Your data will be disclosed only to the extent actually necessary for processing the order. The provider is also used for accounting purposes. The provider processes incoming and outgoing invoices and, where applicable, our company's bank transactions in order to record invoices automatically, match them with the transactions and use this to prepare the financial accounting in a partially automated process. If personal data is also processed in this context, the processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions.

8.4 Disclosure of personal data to shipping service providers

We use the following provider as our transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

Pursuant to Art. 6 para. 1 lit. a GDPR, before the goods are delivered, we will forward your email address and/or telephone number to the provider for the purpose of coordinating a delivery date or announcing the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, pursuant to Art. 6 para. 1 lit. b GDPR, we will forward only the recipient's name and delivery address to the provider for the purpose of delivery. The data will be disclosed only to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider in advance or to announce the delivery.
Consent may be revoked at any time with effect for the future by contacting the controller named above or the provider.

Österreichische Post

We use the following provider as our transport service provider: Österreichische Post Aktiengesellschaft, Rochusplatz 1, 1030 Vienna, Austria
Pursuant to Art. 6 para. 1 lit. a GDPR, before the goods are delivered, we will forward your email address and/or telephone number to the provider for the purpose of coordinating a delivery date or announcing the delivery, provided that you have given your express consent to this during the ordering process. Otherwise, pursuant to Art. 6 para. 1 lit. b GDPR, we will forward only the recipient's name and delivery address to the provider for the purpose of delivery. The data will be disclosed only to the extent necessary for the delivery of the goods. In this case, it is not possible to coordinate the delivery date with the provider in advance or to announce the delivery.
Consent may be revoked at any time with effect for the future by contacting the controller named above or the provider.

8.5 Use of payment service providers (payment services)

Apple Pay

If you choose the “Apple Pay” payment method of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing takes place via the “Apple Pay” function of your device running iOS, watchOS or macOS by charging a payment card stored in “Apple Pay”. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. Authorising a payment therefore requires you to enter a code previously defined by you and to verify your identity using the “Face ID” or “Touch ID” function of your device.

For payment processing purposes, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm that the payment was successful.

If personal data is processed in the transfers described, the processing shall be carried out exclusively for the purpose of processing payments pursuant to Art. 6 para. 1 lit. b GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymisation completely precludes any association with an individual. Apple uses the anonymised data to improve “Apple Pay” and other Apple products and services.
If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, the Mac and the authorisation device communicate via an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that could identify you. You can disable the option to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.
Further information on data protection regarding Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027

BLIK

One or more online payment methods provided by the following provider are available on this website: Polski Standard Płatności Sp. z o.o., Czerniakowska 87a, 00-718 Warsaw, Poland

For the processing of your payment, the payment data provided during the ordering process (including name, address, bank and payment card details, currency and transaction number) and information about the contents of your order will be transmitted to the provider pursuant to Art. 6 para. 1 lit. b GDPR. In this case, your data will be transmitted exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

Google Pay

If you choose the payment method “Google Pay” provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment processing will take place via the “Google Pay” application on your mobile device running at least Android 4.4 (“KitKat”) and equipped with an NFC function, by debiting a payment card stored in Google Pay or a payment system verified there (e.g. PayPal). To authorise a payment via Google Pay of more than €25, you must first unlock your mobile device using the verification method configured for it (such as facial recognition, a password, fingerprint or pattern).

For the purpose of processing payments, the information you provided during the ordering process, together with information about your order, will be transmitted to Google. Google then transmits the payment information stored in your Google Pay account to the originating website in the form of a one-time transaction number, which is used to verify that payment has been made. This transaction number contains no information whatsoever about the actual payment details of the payment methods stored in your Google Pay account; instead, it is generated and transmitted as a numerical token valid only once. In all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction is carried out exclusively between the user and the originating website by debiting the payment method stored in Google Pay.

If personal data is processed in the transfers described, the processing shall be carried out exclusively for the purpose of processing payments pursuant to Art. 6 para. 1 lit. b GDPR.

Google reserves the right to collect, store and evaluate certain transaction-specific information for every transaction made via Google Pay. This includes the date, time and amount of the transaction, the merchant's location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verifying transaction data, and optimising and maintaining the functionality of the Google Pay service.

Google also reserves the right to combine the processed transaction data with additional information collected and stored by Google when using other Google services.

The Google Pay Terms of Service can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection for Google Pay can be found at the following web address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

Klarna

One or more online payment methods provided by the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden
If you select a payment method offered by the provider that requires you to make an advance payment (such as payment by credit card), the payment data you provided during the ordering process (including your name, address, bank and payment card details, currency and transaction number) and information about the contents of your order will be transmitted to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only insofar as it is necessary for this purpose.
When selecting a payment method for which the provider makes advance payment (such as payment by invoice or instalments, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

In order to safeguard our legitimate interest in establishing our customers' ability to pay, we will transmit this data to the provider for the purpose of a credit assessment in accordance with Art. 6 para. 1 lit. f GDPR. On the basis of the personal data you provide and additional data (such as shopping cart contents, invoice amount, order history and payment experiences), the provider checks whether the payment method you have selected can be granted with regard to the risk of payment default and/or non-payment of claims.

For the decision as part of the application review, identity and creditworthiness information from the following credit agencies may also be taken into account in addition to provider-specific criteria pursuant to Art. 6 para. 1 lit. f GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit assessment may contain probability values (so-called score values). Where score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

You may object to this processing of your data at any time by sending us or the provider a message. However, the provider may continue to be entitled to process your personal data if this is necessary for payment processing in accordance with the contract.

Mollie

One or more online payment methods provided by the following provider are available on this website: Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands

If you select a payment method offered by the provider that requires you to make an advance payment (such as payment by credit card), the payment data you provided during the ordering process (including your name, address, bank and payment card details, currency and transaction number) and information about the contents of your order will be transmitted to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only insofar as it is necessary for this purpose.

PayPal

One or more online payment methods provided by the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

When selecting a payment method provided by the provider under which you make advance payment, your payment data communicated during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order will be forwarded to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data will be transferred exclusively for the purpose of payment processing with the provider and only insofar as this is necessary for that purpose.

When selecting a payment method under which we make advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, town/city, date of birth, email address, telephone number and, if applicable, data relating to an alternative payment method).

In order to safeguard our legitimate interest in determining your ability to pay in such cases, we will forward this data to the provider for the purpose of a credit assessment in accordance with Art. 6 para. 1 lit. f GDPR. Based on the personal data you provide and other data (such as shopping basket, invoice amount, order history and payment experience), the provider checks whether the payment method you have selected can be granted with regard to the risks of payment default and/or non-payment of claims.

The credit assessment may contain probability values (so-called score values). Where score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data.

PayPal Checkout

This website uses PayPal Checkout, an online payment system provided by PayPal that consists of PayPal’s own payment methods and local payment methods provided by third parties.

When paying via PayPal, by credit card via PayPal, by direct debit via PayPal or, if offered, using “Pay Later” via PayPal, we will forward your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of payment processing. The data is transferred in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as this is necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or – if offered - “Pay later” via PayPal, PayPal reserves the right to obtain a credit report. For this purpose, your payment data may be disclosed to credit reference agencies in accordance with Art. 6 para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in determining your ability to pay. PayPal uses the result of the credit assessment regarding the statistical probability of payment default to decide whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may nevertheless remain entitled to process your personal data where this is necessary for payment processing in accordance with the contract.

If the PayPal payment method “Pay by invoice” is available and selected, your payment data is initially transmitted to PayPal for payment preparation, whereupon PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (“Ratepay”) for payment processing. The legal basis in each case is Art. 6 para. 1 lit. b GDPR. In this case, Ratepay conducts an identity and credit assessment in its own name to determine your ability to pay in accordance with the principle already stated above and, on the basis of its legitimate interest in determining your ability to pay pursuant to Art. 6 para. 1 lit. f GDPR, discloses your payment data to credit reference agencies. A list of the credit reference agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment data is initially disclosed to PayPal for payment preparation in accordance with Art. 6 para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal then transmits your payment data to the relevant provider for payment processing in accordance with Art. 6 para. 1 lit. b GDPR:

Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further data protection information, please refer to PayPal's Privacy Statement: https://www.paypal.com/de/legalhub/paypal/privacy-full

Shopify Payment

One or more online payment methods provided by the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
If you select a payment method offered by the provider that requires you to make an advance payment (such as payment by credit card), the payment data you provided during the ordering process (including your name, address, bank and payment card details, currency and transaction number) and information about the contents of your order will be transmitted to the provider in accordance with Art. 6 para. 1 lit. b GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only insofar as it is necessary for this purpose.

Sofort bank transfer

One or more online payment methods provided by the following provider are available on this website: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden

8.6 Electronic revocation function for distance contracts
Consumers who enter into contracts on this website for which a statutory right of revocation exists have the option of declaring their revocation via an electronic revocation function in accordance with the applicable revocation provisions.
When using the revocation function, in addition to information identifying the contract to be revoked, further personal information such as the consumer's first and last name and email address must be provided or confirmed.

The collection of this information and its transmission to us is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only insofar as it is necessary for the proper processing of the revocation. The personal data provided are also used on the basis of Art. 6 para. 1 lit. b GDPR to confirm by email that the revocation notice has been received. An additional legal basis for the processing is Art. 6 para. 1 lit. c GDPR. We are legally obliged to provide an electronic revocation function for distance contracts with consumers that are subject to payment.

9) Online Marketing

Sovendus Sales

We use the services of the following provider for our voucher offers: Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe, Germany

The provider operates a voucher network through which participating partner shops can create vouchers and distribute them to their customers. For this purpose, we transmit your data required to issue your voucher to the provider in encrypted form. The data is transmitted to the provider only if you have completed your purchase and clicked on the voucher banner. The transfer of this data serves exclusively to pre-fill the fields for issuing the voucher.

The described data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in advertising communications directed at you by third-party advertisers, whose benefits you may enjoy by redeeming the vouchers.

10) Web analytics services

10.1 Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are small text files stored on your terminal device that collect certain information. This information also includes your IP address, although Google truncates the last digits to prevent direct identification of individuals.

The information is transferred to Google servers and further processed there. This may also involve transfers to Google LLC, based in the USA.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide further services related to website use and Internet use. The truncated IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the terminal device used, takes place only if you have expressly consented to this pursuant to Art. 6 para. 1 lit. a GDPR.

Google Analytics 4 will not be used during your visit to the website without your consent. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service via the “cookie consent tool” provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors’ data and prohibits its unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy/ and under https://policies.google.com/technologies/partner-sites

Demographic characteristics

Google Analytics 4 uses the special “demographic characteristics” function and can use it to create statistics that provide information about the age, gender and interests of visitors to the website. This is done by analysing advertising and information from third parties. This makes it possible to identify target groups for marketing activities. However, the collected data cannot be attributed to a specific person and is deleted after being stored for a period of two months.

Google Signals

As an extension of Google Analytics 4, this website may use Google Signals to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including models relating to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized advertising” feature in your Google Account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764

Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985

If you have consented to the use of Google Analytics and Google Signals is activated for your region, Google Analytics may use the data collected during your visit for additional, aggregated reports. If you are signed in to Google and have enabled ad personalization in your Google Account, this may include, for example, information on demographic and interest characteristics as well as interactions across devices or platforms. The collection of Google Signals data can be enabled or disabled for individual regions in Google Analytics. According to Google, the collection and use of Google Ads cookies and IDs from Google Analytics has no longer been controlled by the “Google Signals” setting since June 15, 2026, but by the relevant consent signals of Consent Mode and the associated Google Ads configuration. The separate information in the corresponding sections of this Privacy Policy applies to Google Ads and personalized advertising. You can change or withdraw your consent at any time with effect for the future via the .

UserIDs

As an extension of Google Analytics 4, this website may use the “UserIDs” feature. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, have created an account on this website, and log in to this account on different devices, your activities, including conversions, may be analyzed across devices.

User-provided Data Collection

To improve the analysis results for users whose contact details we have received in the context of business or business-like relationships, we use the “User-provided Data Collection” function.
Subject to your express consent pursuant to Art. 6 para. 1 lit. a GDPR, as part of this function we transmit one or more files containing customer data aggregated in relation to you, primarily your email address and telephone number, electronically to Google. Google does not gain access to data in plain text; instead, during the transmission process, it automatically encrypts the information in the customer files using a special algorithm. Google may then use the encrypted information solely to assign it to existing Google accounts that the data subjects have created.

The processing serves to refine measurement data, improves cross-device user tracking and enables the integration of analysis results into the ad personalization and conversion tracking functions of Google Ads.

You may withdraw your consent granted to us at any time with effect for the future. Further information on Google’s data protection measures regarding the transfer of customer data can be found here: https://support.google.com/google-ads/answer/6334160?ref_topic=10550182

10.2 Google Tag Manager
This website uses “Google Tag Manager”, a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides the technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling and making them conditional via a uniform user interface. Google Tag Manager itself does not store any information on or read any information from users’ end devices. The service also does not carry out any independent data analyses. However, when a page is accessed, Google Tag Manager transmits your IP address to Google, where it may be stored. Transmission to servers of Google LLC in the USA is also possible.

This processing is only carried out if you have given us your express consent for this purpose in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, Google Tag Manager will not be used during your visit to the website. You may withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information on Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy.

10.3 Hotjar
This website uses the web analytics service of the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and create pseudonymized usage profiles. This enables, among other things, the analysis of movement patterns (so-called heatmaps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymization generally rules out the direct identification of individuals. No merging with clear data about you collected in any other way takes place.

All processing described above, in particular the reading or storage of information on the device used, is carried out only if you have given us your express consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

10.4 Klar!
This website uses the web analytics service of the following provider: Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

10.5 Microsoft Clarity
This website uses the web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

10.6 Shopify Analytics
This website uses the web analytics service of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used, such as the IP address and browser information, in order to evaluate it for statistical analyses of user behavior on our website and create pseudonymized usage profiles. Pseudonymization generally rules out the direct identification of individuals. No merging with clear data about you collected in any other way takes place.

We have concluded a data processing agreement with the provider that protects our site visitors’ data and prohibits its disclosure to third parties.
Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

11) Retargeting/ Remarketing and conversion tracking

11.1 Meta Pixel with advanced matching
Within our online offering, we use the "Meta Pixel" service in advanced matching mode provided by the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")

If a user clicks on an advertisement placed by us on Facebook or Instagram, "Meta Pixel" is used to add a parameter to the URL of our linked page. After the redirection, this URL parameter is then entered into the user's browser by a cookie set by the linked page itself. In addition, this cookie collects specific customer data, such as the email address, which we collect on our website linked to the Facebook or Instagram advertisement during processes such as completing purchases, registering accounts or signing up (advanced matching). The cookie is then read and enables the data, including the specific customer data, to be transmitted to Meta.

We use "Meta Pixel" with advanced matching to make our advertisements (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to users' interests or have certain characteristics (e.g. interests in specific topics or products determined on the basis of the websites visited) that we transmit to Meta (so-called "Custom Audiences").

In addition, we analyse the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared with the standard version of "Meta Pixel", the advanced matching feature helps us measure the effectiveness of our advertising campaigns more accurately by recording more attributed conversions.

All data transmitted is stored and processed by Meta, making it possible to assign it to the respective user profile, and Meta may use the data for its own advertising purposes in accordance with Meta's data usage policies (https://www.facebook.com/about/privacy/) can use. The data may enable Meta and its partners to display advertisements on and outside Facebook.

All processing described above, in particular the setting of cookies to read information on the device used, is carried out only if you have given us your express consent to do so pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

The information generated by Meta is generally transmitted to and stored on a Meta server; in this context, it may also be transmitted to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

11.2 Criteo
This website uses retargeting technology from the following provider: Criteo SA, 32 Rue Blanche, 75009 Paris, France

This enables us to target visitors to our websites who have already shown an interest in our shop and products with personalised, interest-based advertising. The advertising materials are displayed on the basis of a cookie-based analysis of previous and current usage behaviour.
In cases involving retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests and thereby tailor advertising individually to the information stored. These cookies are small text files stored on your computer or mobile device. This allows us to display advertising that is highly likely to correspond to your product and information interests.
All processing described above, in particular the setting of cookies to read information on the device used, is carried out only if you have given us your express consent to do so in accordance with Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.

11.3 Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

For this purpose, Google places a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and based on the pages you have visited. The information collected in this context generally also includes your IP address.

Any further processing of data takes place only if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalize ads that you view on the Web. If you are logged in to Google while visiting our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google to Google Analytics data in order to create audiences. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.

All processing described above, in particular the setting of cookies to read information on the device used, is carried out only if you have given us your express consent to do so in accordance with Art. 6(1)(a) GDPR. Without this consent, retargeting technology will not be used during your visit to the website.

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.

Details of the processing initiated by Google and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

Further information on Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.4 OptiMonk
This website uses retargeting technology from the following provider: WebShop Marketing Ltd., 129 Kassai Street, Debrecen 4028, Hungary

You may withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.

11.5 Elevar
This website uses the conversion tracking technology of the following provider: Elevar LLC, 520 Folly Road, Ste 25 #140, Charleston, SC 29412, USA

If you reached our website from an advertisement on the provider's domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain device and browser information, including, where applicable, your IP address, is read out using tracking technology in order to record and evaluate user actions predefined by us (e.g. completed transactions, leads, searches on the website, visits to product pages). This enables the creation of statistics on user behaviour on our website after being redirected from an advertisement, which serve to optimise our offer.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider relies on the European Commission’s standard contractual clauses, which are intended to ensure compliance with the European level of data protection.

11.6 Google Ads Conversion Tracking
This website uses the online advertising programme "Google Ads" and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google")

We use Google Ads to draw attention to our offers on external websites with the help of advertising materials (so-called Google Ads). In relation to the data from the advertising campaigns, we can determine how successful the individual advertising measures are. Our aim is to display advertising that is of interest to you, make our website more appealing to you and achieve fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information collected using the conversion cookie, which also includes your IP address, is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details of the processing initiated by Google Ads conversion tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the browser plug-in provided by Google, available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656

To target users whose data we have received in the context of business or business-like relationships with advertising that is even more relevant to their interests, we use a customer match function as part of Google Ads. For this purpose, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and telephone numbers) to Google. Google does not gain access to unencrypted data; instead, during the transmission process, it automatically encrypts the information in the customer files using a special algorithm. Google can then use the encrypted information solely to match it with existing Google accounts set up by the data subjects. This enables personalized advertising to be displayed across all Google services linked to the respective Google account.

Customer data is transmitted to Google only if you have given us your explicit consent to do so pursuant to Art. 6(1)(a) GDPR. You may withdraw this consent from us at any time with effect for the future. Further information on Google's data protection measures regarding the customer match function can be found here: https://support.google.com/google-ads/answer/6334160?ref_topic=10550182

Google's privacy policy is available here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.7 Google Ads conversion tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data from the advertising campaigns. We pursue the aim of displaying advertising that is of interest to you, making our website more attractive to you, and achieving fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad served by Google. Cookies are small text files that are stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie, which also includes your IP address, is used to compile conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details of the processing initiated by Google Ads conversion tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have disabled the use of cookies.

Google's privacy policy is available here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

11.8 Pinterest tag conversion tracking
This website uses the conversion tracking technology of the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
If you reached our website from an advertisement on the provider's domain, the success of the advertisement can be tracked using cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain device and browser information, including, where applicable, your IP address, is read using tracking technology in order to record and evaluate user actions predefined by us (e.g. completed transactions, leads, search queries on the website, visits to product pages). This enables the creation of statistics on user behavior on our website following redirection from an advertisement, which serve to optimize our offering.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

12) Website functionalities

12.1 Bunny
This website uses plugins to display and play videos from the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers in order to load the plugin. In this process, certain information, including your IP address, is transmitted to the provider.

When playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.
All of the aforementioned processing, in particular the placement of cookies to read information on the device used, is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.

12.2 YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA

When you access a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers at the latest when video playback begins in order to load the content. In this process, certain information, including your IP address, is transmitted to the provider.
When playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.
If you are logged into a user account with the provider while visiting our website, your data will be directly assigned to your account when you click on a video. If you do not want your data to be assigned to your account, you must log out before pressing the play button.

All of the aforementioned processing, in particular the placement of cookies to read information on the device used, is carried out only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website.

12.3 Trusted Shops Trustbadge
Our website incorporates graphic elements from the following provider to display external customer reviews and/or an externally awarded quality seal: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany

When you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements properly. In this process, certain browser information, including your IP address, is transmitted to the provider.

If personal data are also processed in this context, this is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the optimal marketing of our offering and the appealing design of our website.

Further processing may take place if you place an online order with us.
Thus, subject to your express consent pursuant to Art. 6(1)(a) GDPR, after completion of an order your order information (order total, order number, purchased product, if applicable) and your email address will be transmitted to the provider in encrypted form via the Trustbadge in order to check whether you are already registered for the provider's services (in particular "buyer protection") and, where applicable, to enable a new registration.

If an existing registration with the provider is identified or if you register with the provider for its services (in particular buyer protection), your order information (order total, order number, purchased product) and your email address will be transmitted to the provider and further processed by the provider on the basis of the contractual agreement with the provider pursuant to Art. 6(1)(b) GDPR in order to provide the services (in particular buyer protection).
We are jointly responsible with the provider for the processing described above in accordance with Art. 26 GDPR. The agreement on joint controllership can be viewed here: https://help.etrusted.com/hc/de/articles/23970817960082-Vertrag-%C3%BCber-die-gemeinsame-Verantwortlichkeit-nach-DSGVO

12.4 TrustedSite Badge
Our website incorporates graphic elements from the following provider to display external customer reviews and/or an externally awarded quality seal: TrustedSite, LLC, 16 Maiden Lane, 4th floor, San Francisco, California, 94108, USA

12.5 Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA.

For the visual design of the CAPTCHA window, the provider uses “Google Fonts”, i.e. fonts downloaded from the internet by Google. This does not involve the processing of any information beyond that specified above, which is already transmitted to Google through the functionality of reCAPTCHA.
The service checks whether an input is made by a natural person or abusively through machine-based and automated processing, and blocks spam, DDoS attacks and similar automated malicious access attempts. To ensure that an action is performed by a human and not by an automated bot, the provider collects the IP address of the end device used, identification data of the browser and operating system type used, as well as the date and duration of the visit, and transmits these to the provider’s servers for evaluation. Cookies may be used in this process, i.e. small text files that are stored in the browser of the end device.

If the processing operations described above are carried out on the basis of cookies, these are only set if you have given us your express consent pursuant to Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

If the processing operations described above are carried out without the use of cookies, the legal basis is our legitimate interest in establishing individual accountability on the internet and preventing misuse and spam pursuant to Art. 6 para. 1 lit. f GDPR.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits any unauthorized disclosure to third parties.

12.6 Google Translate
This website uses the “Google Translate” translation service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) via an API integration. In order for the translation into a national language of your choice to be displayed automatically, the browser you use connects to Google's servers. In this process, certain browser information, including your IP address, is transmitted to Google.

Google may use so-called “cookies” to store language settings, i.e. small text files that are stored on your terminal device. The information generated by the cookie about your use of this website (including the truncated IP address) is generally transferred to a Google server and stored there.

The processing described above may also involve the transfer of data to the servers of Google LLC. in the USA.

If cookies are also set when using Google Translate, the processing described above will only be carried out if you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
If no cookies are set, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in optimally marketing our offering and designing our website to achieve broad reach.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further information on Google's data protection provisions can be found here: https://business.safety.google/intl/de/privacy/

12.7 Microsoft Power BI
For the integration and synchronisation of databases and web applications, we use the services of the following provider: ProductImpulse BV, Kromme Nieuwegracht 66, 3512 HL Utrecht, Netherlands

In this context, our processing operations are automated and various workflows are established in order to manage and execute internal processes in our processing system efficiently. If personal data is also processed in this context, this is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in optimising our internal organisation.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

12.8 Microsoft Power BI
For the internal visualisation of business transactions and customised analyses of business processes, we use the “Microsoft Power BI” service provided by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

Where applicable, customer personal data may be subject to visualisation and analysis processes and may be prepared for this purpose by Microsoft BI. In this case, Microsoft processes personal data as a processor acting on instructions pursuant to Art. 28 GDPR and has contractually undertaken towards us to protect this data in accordance with the statutory requirements.

For this purpose, Microsoft uses state-of-the-art encryption methods and ensures that data processing procedures are carried out exclusively in data centres within the EU.

12.9 Applications for job advertisements by email
On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply by email to the contact address provided.

Applicants must provide all personal data required for a well-founded assessment, including general information such as their name, address and contact details, as well as performance-related evidence and, where applicable, health-related information. Details of the application can be found in the job advertisement.

After receipt of the application by email, the data is stored and evaluated exclusively for the purpose of processing applications. For any queries, we use either the applicant's email address or telephone number. Processing is based on Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), under which participation in the application process is deemed to constitute the initiation of an employment contract.
If, as part of the application process, applicants are asked to provide special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data such as information regarding severe disability status), the processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR so that we can exercise the rights arising from employment law and the law on social security and social protection and fulfil our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 para. 1 lit. h GDPR if it is carried out for the purposes of preventive or occupational medicine, the assessment of the applicant’s working capacity, medical diagnosis, the provision of health or social care or treatment, or the management of health or social care systems and services.

If the applicant is not selected or withdraws their application prematurely, their submitted data and all electronic correspondence, including the application email, will be deleted no later than 6 months after the relevant notification. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, where applicable, in fulfilling our obligations to provide evidence under the provisions on the equal treatment of applicants.
In the event of a successful application, the data provided is processed on the basis of Art. 6 para. 1 lit. b GDPR (in conjunction with Section 26 para. 1 BDSG where processing takes place in Germany) for the purpose of carrying out the employment relationship.

12.10 Online applications via a form
On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply using the relevant form.
Applicants must provide all personal data required for a well-founded assessment, including general information such as their name, address and contact details, as well as performance-related evidence and, where applicable, health-related information. Details of the application can be found in the job advertisement.

When the form is submitted, the applicants' data is transmitted to us in encrypted form using state-of-the-art technology, stored by us, and evaluated exclusively for the purpose of processing applications. Processing is based on Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), under which participation in the application process is deemed to constitute the initiation of an employment contract.
If, as part of the application process, applicants are asked to provide special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data such as information regarding severe disability status), the processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR so that we can exercise the rights arising from employment law and the law on social security and social protection and fulfil our obligations in this regard.

If the applicant is not selected or withdraws their application prematurely, the data submitted via the form and all electronic correspondence, including the application email, will be deleted no later than 6 months after the applicant has been notified accordingly. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, where applicable, being able to comply with our obligations to provide evidence under the provisions on equal treatment of applicants.
In the event of a successful application, the data provided is processed on the basis of Art. 6 para. 1 lit. b GDPR (in conjunction with Section 26 para. 1 BDSG where processing takes place in Germany) for the purpose of carrying out the employment relationship.

12.11 Personio
For the administration, organization, and processing of online applications, we use the software of the following provider: Personio SE & Co. KG, Seidlstraße 3, 80335 Munich

Based on our legitimate interest in effective and user-friendly applicant management, the data you submit as part of your online application is transmitted to the provider in encrypted form pursuant to Art. 6 para. 1 lit. f GDPR, stored there, and made available to us for processing the application.
We have concluded a data processing agreement with the provider that protects our site visitors’ data and prohibits its disclosure to third parties.

12.11 Fast Bundle
This website uses a service provided by the following provider to organize and manage shopping carts: VConvert Solutions Limited, 13353 Commerce Parkway, Unit 2353, 3rd floor, Richmond, BC, V6V 3A1, Canada

The service enables the linking of related products in the shopping cart, the product-dependent targeting of promotions, and the provision of purchase suggestions for compatible products.

For visitor-specific shopping cart management, the service collects and stores pseudonymized visitor data using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), including information about the device used, such as the IP address and browser information. Pseudonymization generally rules out direct attribution to an individual.

Information is read from or stored on the device used only if you have given us your express consent to do so in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Where data is transferred to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

13) Tools and Other Matters

13.1 Cookie Consent Tool
This website uses a so-called "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications requiring consent. The "cookie consent tool" is displayed to users when they access the website in the form of an interactive user interface, on which consent to specific cookies and/or cookie-based applications can be granted by ticking a checkbox. The tool ensures that all cookies/services requiring consent are loaded only if the respective user has granted the corresponding consent by ticking a checkbox. This ensures that such cookies are set on the respective user's device only if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.
If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning or logging cookie settings, this is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, in designing our website in compliance with the law.

Another legal basis for the processing is also Article 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of cookies that are not technically necessary contingent on the respective user's consent.
Where necessary, we have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further information about the operator and the configuration options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13.2 ScaleCommerce
This website uses a service for the automatic transmission of error reports from the following provider: ScaleCommerce GmbH, Fraunhoferstraße 23A, 10587 Berlin, Germany

In the event of technical complications or functional impairments in connection with the operation of the provider's software, the system automatically sends error reports to the provider containing information about the respective source and origin of the error. The information transmitted includes both server information and usage parameters such as the IP address, the browser used, timestamps and the URL accessed.

Depending on the origin of the error, error reports may also contain further personal customer data that we have collected and stored in the course of concluding contracts (in particular first and last name, address, email address). This may occur whenever the error is related to software-based processing of customer data.
If the information transmitted in this manner also includes personal data, processing is carried out pursuant to Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in efficient analysis of the causes of errors in order to improve the reliability and functionality of our website.

14) Data subject rights

14.1 Applicable data protection law grants you the following data subject rights vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby the relevant legal basis is referred to for the respective requirements for exercising these rights:

Right of access pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to be informed pursuant to Art. 19 GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

14.2 RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSES OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Retention period for personal data

The retention period for personal data is determined on the basis of the respective legal basis, the purpose of processing and - where applicable - the respective statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, unless it is still required for the performance or initiation of the contract and/or we continue to have a legitimate interest in retaining it.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise indicated by the other information in this statement concerning specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

16) Contact Laverana

Our contact form is available to you at any time for your questions and concerns. In order to respond to your questions and concerns promptly and comprehensively, Laverana Digital GmbH & Co. KG also draws on the expertise of the manufacturer of lavera Natural Beauty products. We therefore forward your questions to Laverana GmbH & Co. KG where applicable. You agree and consent to the personal data transmitted in connection with your concern or question being processed for the purpose of handling your concern or question and, where applicable, being disclosed to Laverana GmbH & Co. KG. You consent to the purpose-specific processing of your personal data. The data will not be used for any other purposes, in particular advertising purposes. The legal basis for the processing is your consent (Art. 6(1)(1)(a) GDPR) or our legitimate interest in addressing questions from customers and interested parties regarding our products or the company (Art. 6(1)(1)(f) GDPR). With regard to the handling of health data and reports of adverse effects of products, please note the additional information on this page. You may withdraw your consent at any time with effect for the future. Withdrawal of consent does not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Please send your declaration of withdrawal in writing or in text form to the following address: [email protected].

17) Handling of health data

17.1 Data protection law imposes specific requirements on the processing of health data. Health data means personal data relating to the physical or mental health of an individual, including the provision of healthcare services, from which information about the health status of natural persons can be inferred. As a rule, we may only process this category of data with your explicit consent. If you provide us with health data by email, letter or via a contact form, you give us your explicit consent to process the data provided for the purpose for which you supplied it, for example to contact you or process your request. We delete the data collected in this context once its storage is no longer necessary, or we anonymise the data and store it if it can help us improve our products. The legal basis for the processing is your consent pursuant to Art. 9(2)(a) GDPR.

17.2 We would also like to inform you that, under the Cosmetics Regulation (Article 23 of Regulation (EC) No. 1223/2009), we are required to report serious undesirable effects of cosmetic products that come to our attention to the competent authorities. The notification primarily serves to protect consumers. If you provide us with personal data in connection with a notification concerning undesirable effects of a cosmetic product, we collect and store the data in order to fulfil our legal obligations and, where applicable, to notify the “Federal Office of Consumer Protection and Food Safety”. Further information on the notification process to the competent authority can be found at: https://www.bvl.bund.de/DE/03_Verbraucherprodukte/03_AntragstellerUnternehmen/02_Kosmetik/02_SUE/bgs_fuerAntragsteller_kosmetik_SUE_node.html

The privacy policy of the “Federal Office of Consumer Protection and Food Safety” can be found at: https://www.bvl.bund.de/DE/Meta/Datenschutz/datenschutz_node.html

If we consider it necessary to notify the competent authority, we will generally contact you. In exceptional cases, we will transmit the data directly to the authority. We transmit the data in “pseudonymised” form. The notification generally contains information about your age, date and year of birth, gender and your initials or a “code” for your name and, where applicable, any health data provided. We store the data you provide in order to respond to queries from the authorities and to fulfil our legal obligations (in particular under Article 11 of Regulation (EC) No. 1223/2009) for a period of up to ten years after the date on which the last batch of the cosmetic product was placed on the market. The legal basis for processing is Article 9(2)(a) or Article 9(2)(g) GDPR. You may withdraw your consent at any time with effect for the future. Withdrawal of consent shall not affect the lawfulness of processing carried out on the basis of consent before its withdrawal. Please send your declaration of withdrawal in writing or in text form to the following address: [email protected]

18) Information on cookies used and other tracking, marketing or personalization technologies

To make the experience on lavera.de even more enjoyable and provide users with personalized content, advertisements or offers, we use cookies and other tracking, marketing or personalization technologies. This enables us, for example, to recommend products suited to the respective user or display topics that are of particular interest to them - from sustainable lifestyles and beauty trends to sale promotions. We have divided the services used for this purpose into different groups. Below, you can see the groups and find information about the services and the information collected or their purpose. You can also activate or deactivate data collection for individual services by checking or unchecking the relevant checkbox. As a customer of Laverana Digital GmbH, we send you a limited number of product recommendations, surveys, and requests for product reviews by email, even if you have not subscribed to a newsletter. When selecting personalized product recommendations, we preferably use data from your previous orders in compliance with statutory provisions. If you do not wish to receive personalized product recommendations from us by email, you can opt out at any time by clicking the unsubscribe link provided in the email or by sending an email to [email protected] send.

Essential

These technologies are required to activate the core functionality of the website.

Cloudflare
Google Tag Manager
Usercentrics Consent Management Platform
reCaptcha v3

Functional

These technologies enable us to analyze website usage in order to measure and improve performance, help us make the website more attractive, or enhance it with useful functions.

Google Analytics
YouTube Video
Reviews.io

Marketing

These technologies are used by advertisers to display advertisements that match your interests or to show personalised content or offers on the website.

Microsoft Advertising
Emarsys
DoubleClick Ad
Facebook Pixel
Google Ads
Pinterest
TradeDesk

20) Accessibility improvements through Eye-Able®

The provision of accessibility improvements through Eye-Able® Access is an offering by Web Inclusion GmbH to ensure better access to information on the Internet for everyone. The files required for this purpose (JavaScript) are loaded from an external server. To defend against attacks and provide our service in near real time, Eye-Able® uses the Content Delivery Network (CDN) of BunnyWay d.o.o. (Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia). The service is used for the purpose of fulfilling the contract with our customers (Art. 6 para. 1 lit. b GDPR) and in the interest of providing our online offering securely, quickly and efficiently through a professional provider (Art. 6 para. 1 lit. f GDPR). All transmitted data and servers remain in the EU at all times to enable data processing in compliance with the GDPR. Web Inclusion GmbH does not collect or analyse personal user behaviour or other personal data at any time (e.g. IP addresses are removed from logs). To ensure data processing in compliance with data protection requirements, Web Inclusion GmbH has concluded data processing agreements with our hosting providers.

21) Privacy provisions for the lavera Baby Club

Protecting your personal data is a particular concern for us at Laverana GmbH & Co. KG. We process your data exclusively in accordance with the applicable data protection laws. Below, we explain how we process your data as part of the lavera Baby Club.

21.1 Name and contact details of the controller and the Data Protection Officer
Controller responsible for data processing: Laverana GmbH & Co. KG, Am Weingarten 4, 30974 Wennigsen, email: [email protected]

The Data Protection Officer of Laverana can be reached at the above-mentioned address or by email at [email protected] available.

21.2 Processing of personal data as part of the lavera Baby Club
Purpose of data processing: As part of registering for the lavera Baby Club, we store your email address. This enables you to receive the emails sent as part of the Baby Club, such as relevant information, special benefits and birthday surprises for your child.

Data collected: For registration and use of the lavera Babyclub, we process the following personal data: your email address (for communication and registration), first and last name (for personal address), your address (for sending benefits and information by post), your date of birth (to verify that you are of legal age), your child's date of birth (to provide age-appropriate content and birthday gifts).

Legal basis: Your data is processed on the basis of Art. 6 para. 1 lit. b GDPR (performance of a contract) and, where required, on the basis of your consent pursuant to Art. 6 para. 1 lit. a GDPR.

21.3 Newsletter and Communication
With your consent, you can subscribe to the Babyclub newsletter to receive regular information about our products and offers. You can withdraw your consent at any time by using the unsubscribe link in the newsletter or by sending us an email to [email protected].

21.4 Disclosure of Data to Third Parties
We use trusted service providers to process certain services (e.g. shipping parcels). They receive only the data required for the respective service and are contractually obliged to use it exclusively for the agreed purpose. Your data will not be used or disclosed beyond this.

21.5 Storage Period
We store the data processed by us as part of the lavera Babyclub for the duration of your participation. After you terminate your subscription to our newsletter, your personal data will be deleted unless statutory retention periods prevent this.

21.6 Your Rights
As a data subject, you have the following rights: access to the data we process (Art. 15 GDPR), rectification of inaccurate data (Art. 16 GDPR), erasure of your data (Art. 17 GDPR), unless statutory obligations prevent this, restriction of processing (Art. 18 GDPR), objection to the processing of your data (Art. 21 GDPR), data portability (Art. 20 GDPR). To exercise your rights, please contact [email protected]. You also have the right to lodge a complaint with a data protection supervisory authority.

21.7 Amendments to the Privacy Policy
We reserve the right to amend this Privacy Policy as necessary, for example in the event of legal changes or new offerings. You can find the current version at any time here on our website.

22) Privacy Policy for Trade Desk

Service description The Trade Desk is a DSP (Demand-side Platform) that delivers display, video, native, audio, and connected TV campaigns worldwide. The Trade Desk is an IAB-accredited data processor. Data processing company The Trade Desk, Inc. 42 N. Chestnut St, Ventura, CA 93001, United States of America Data protection officer of the data processing company Below you will find the email address of the data protection officer of the data processing company: [email protected] Purposes of data processing This list sets out the purposes of data collection and processing: Advertising Analysis Optimization Personalization Technologies used This list sets out all technologies used by this service for data collection. Typical technologies are cookies and pixels placed in the browser. Cookies Data collected This list sets out all (personal) data collected by or through the use of this service: Cookie ID Mobile Advertising ID Geographic location Browser type Device type Browser version Information from third-party sources Preferences Advertisements viewed Referrer URL Device operating system Click path Usage data Interest information Unique device identifier Timestamp Legal basis Below you will find the legal basis required for data processing: Art. 6 para. 1 lit. a GDPR Location of processing This is the primary location where the collected data is processed. If the data is also processed in other countries, you will be informed separately. European Union Storage period The storage period is the period during which the collected data is stored for processing purposes. The data is deleted as soon as it is no longer required for the specified processing purposes. The data is deleted as soon as it is no longer required for the specified processing purposes. Transfer to third countries This service may transfer the collected data to another country. Please note that this service may transfer the data to a country that does not have the required data protection standards. Below you will find a list of the countries to which the data is transferred. For more information about the safeguards, please refer to the provider's privacy policy or contact the provider directly. United States of America United Kingdom Brazil Canada Australia Japan Hong Kong Singapore Data recipients The following are the recipients of the collected data: The Trade Desk, Inc. Click here to read the data processor's privacy policy: http://www.thetradedesk.com/general/privacy-policy

Stored information Name: TDID; Used to store a unique ID that identifies the device of a returning user. The ID is used for targeted advertising.; Type: Cookie; Duration: 1 year; Name: TTDOptOut; Used to store a unique ID that identifies the device of a returning user. The ID is used for targeted advertising.; Type: Cookie; Duration: Session; Name: TDCPM; Used to store a unique ID that identifies the device of a returning user. The ID is used for targeted advertising.; Type: Cookie; Duration: 1 year;

23) Integration of the Ask Stella AI Widget on third-party websites/in shops

As part of joint processing pursuant to Art. 26 GDPR, we have integrated the Ask Stella AI Widget on our website. To use the widget, you must register in the widget with Woow Club GmbH, Kaiserdamm 87, 14057 Berlin, Germany. In doing so, you enter into a user agreement with Woow Club GmbH. If you use the widget on our website, your data: ▪ First name ▪ Email address ▪ Colour type & Shade Tag (we create these tags using the selfie and the information provided on hair colour, eye colour and skin tone) will be transmitted to us by Woow Club GmbH pursuant to Art. 6(1)(b) GDPR. Our use of the data is based on our legitimate interest in presenting our products in a manner suited to the individual type pursuant to Art. 6(1)(f) GDPR. The personal data is retained for as long as it is required to fulfil the purpose of the processing. The data is deleted as soon as it is no longer required to achieve the purpose. Further information can be found here: https://woowclub.com/de/dse-gemeinsame-verantwortlichkeit/

24) 8returns

For the registration and processing of returns, we use the returns management platform of 8returns GmbH, Pappelallee 78/79, 10437 Berlin, Germany. The returns portal is connected to Shopify and Xentral. DHL is used to create and process return labels. Klaviyo is integrated as an additional connection in the returns process.

As part of the registration and processing of returns, 8returns processes the personal data required for this purpose on our behalf. This includes, in particular, the name, postal address, email address, order and item information, as well as details of the return and the reason for the return. The processing serves, in particular, to register and process the return, verify and allocate the underlying order process, create a return label, and manage and document the processing of returns.

Necessary data is exchanged between 8returns and the connected systems Shopify and Xentral insofar as this is necessary to register the return, assign it to the order and process the return further. The address and contact details required for creating and processing the return label are transmitted to DHL.

In certain cases, submitting product or complaint images is required to register or process a return. Such images may contain information that makes it possible to identify an individual. Please upload only images that are required for the specific return or complaint, and ensure that, wherever possible, no other persons, documents, address details or other unnecessary information are visible in them.

As part of the described return process, we do not use any AI-supported functions of 8returns. Likewise, no 8returns functions for Store Credit, Shop Now or exchanges are currently activated.

Where Klaviyo is used in connection with handling returns, Klaviyo may process necessary status or communication data to provide automated information about the processing status of a return. The specific scope depends on the activated configuration and the Klaviyo processing activities described in Laverana's privacy policy.

The processing of the data required for handling returns is carried out for the performance and processing of the contract and for handling statutory claims and obligations pursuant to Art. 6(1)(b) and, where applicable, point (c) GDPR. Where data is processed to technically ensure the service, prevent misuse or ensure IT security, this is carried out on the basis of our legitimate interest pursuant to Art. 6(1)(f) GDPR.

We have concluded a data processing agreement with 8returns pursuant to Art. 28 GDPR. 8returns may engage suitable sub-processors to provide the services, in particular for hosting, communication, support, logging and error analysis, as well as the creation of shipping labels. If, in an individual case, a transfer to a third country takes place, it must be safeguarded in accordance with the requirements of Art. 44 et seq. GDPR.

The data processed in connection with the return will be deleted as soon as it is no longer required for the stated purposes, unless statutory retention obligations or the need to assert, exercise or defend legal claims prevent deletion.

Calm & Comfort

Oral care

Liquid shampoo

Make-up

Body Lotion

About us

History

Sustainability

Language

Calm & Comfort

Oral care

Liquid shampoo

Make-up

Body Lotion

About us

History

Sustainability

Shopping Cart 0

Sorry, looks like we don't have enough of this product.

Privacy policy

1) Introduction and contact details of the controller

2) Data collection when visiting our website

3) Hosting & Content Delivery Network

4) Cookies

5) Contact

6) Data processing when opening a customer account

7) Use of customer data for direct advertising

8) Data processing for order processing

9) Online Marketing

10) Web analytics services

11) Retargeting/ Remarketing and conversion tracking

12) Website functionalities

13) Tools and Other Matters

14) Data subject rights

15) Retention period for personal data

16) Contact Laverana

17) Handling of health data

18) Information on cookies used and other tracking, marketing or personalization technologies

20) Accessibility improvements through Eye-Able®

21) Privacy provisions for the lavera Baby Club

22) Privacy Policy for Trade Desk

23) Integration of the Ask Stella AI Widget on third-party websites/in shops

24) 8returns

€5 off your first order