NANDOO Premium Hundefutter

Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when using our website. Personal data in this context means any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is NANDOO Premium Hundefutter GmbH, Sonsbecker Straße 40-44, 46509 Xanten, Germany, phone: 028019883033, email: c.hackl@nandoo-shop.de. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 In the case of merely informational use of our website, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited
Date and time at the moment of access
Amount of data sent in bytes
Source/reference from which you came to the page
Browser used
Operating system used
IP address used (where applicable, in anonymized form)

Processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to review the server log files retrospectively if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock symbol in your browser bar.

3) Hosting & Content Delivery Network

Shopify

For the hosting of our website and the display of its content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the event of a data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

4) Cookies

In order to make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted after the browser is closed (so called "session cookies"), while others remain on your device for longer and enable page settings to be stored (so called "persistent cookies"). In the latter case, you can find out the storage period from the overview in your web browser's cookie settings.

If personal data is also processed through individual cookies used by us, the processing takes place in accordance with Art. 6(1)(b) GDPR for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the website visit.

You can set your browser so that you are informed when cookies are set and decide individually whether to accept them, or exclude the acceptance of cookies for certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Getting in Touch

5.1 Shopify Inbox

This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

The processing of personal data transmitted via the chat takes place either in accordance with Art. 6(1)(b) GDPR, because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the effective support of our website visitors.
Subject to any statutory retention periods to the contrary, your data transmitted in this way will be deleted once the matter concerned has been finally resolved.

In addition, further information may be collected and evaluated with the help of cookies for the purpose of creating pseudonymized usage profiles, which however are not used for your personal identification and are not combined with other data sets. Insofar as this information relates to a person, the processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization purposes.

The setting of cookies can be prevented by appropriate browser settings. In this case, the functionality of our website may be limited.
You may object to us at any time, with effect for the future, to the collection and storage of data for the purpose of creating a pseudonymized usage profile.

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the event of a data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.2 Judge.me

For review reminders, we use the services of the following provider: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

Only on the basis of your express consent in accordance with Art. 6(1)(a) GDPR do we transmit your email address and, if applicable, further customer data to the provider, so that it can contact you by email with a review reminder.

You can revoke your consent at any time with effect for the future, either to us or to the provider.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the event of a data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.3 WhatsApp Business

You have the option of contacting us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so called "Business version" of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (for example, an order placed), we store and use the mobile phone number you use with WhatsApp and, if provided, your first and last name in accordance with Art. 6(1)(b) GDPR in order to process and respond to your request. On the basis of the same legal ground, we may ask you via WhatsApp to provide further data (order number, customer number, address or email address) in order to be able to assign your inquiry to a specific matter.

If you use our WhatsApp contact for general inquiries (for example, regarding our range of services, availability, or our website), we store and use the mobile phone number you use with WhatsApp and, if provided, your first and last name in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the efficient and timely provision of the information you requested.

Your data will only ever be used to respond to your inquiry via WhatsApp. It will not be passed on to third parties.

Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transmits phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have also been in contact with us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, in accordance with Art. 6(1)(a) GDPR, when first using the app on their device by accepting WhatsApp's terms of use, to the transmission of their WhatsApp phone number from the address books of their chat contacts. A transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your related rights and settings options to protect your privacy, please refer to WhatsApp's privacy notice: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have entered into a data processing agreement with the provider, which protects our website visitors' data and prohibits disclosure to third parties.

In the course of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

5.4 In connection with contacting us (e.g. via a contact form or email), personal data is processed exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at the conclusion of a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter concerned has been finally clarified and provided that there are no statutory retention obligations to the contrary.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this data when opening a customer account. Please refer to the input form of the respective form on our website to find out which data is required to open an account.

Your customer account can be deleted at any time by sending a message to the above address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods are in conflict, and we no longer have a legitimate interest in further storage.

7) Use of Customer Data for Direct Marketing

7.1 Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. The provision of any further data is voluntary and is used to address you personally. For sending the newsletter, we use the so called double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receiving it by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when registering for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending an appropriate message to the controller named at the beginning. After unsubscribing, your email address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

7.2 Shopify Email

Our email newsletters are sent via the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when subscribing to the newsletter to this provider in accordance with Art. 6(1)(f) GDPR, so that it can carry out the newsletter dispatch on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter content. In doing so, device information (e.g. time of access, IP address, browser type, and operating system) is also collected and evaluated, but not combined with other data sets.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider, which protects our website visitors' data and prohibits disclosure to third parties.

In the event of a data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

7.3 WhatsApp Newsletter

If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information required for sending the newsletter is your mobile phone number.

To receive the newsletter, you save our provided mobile phone number in your mobile device's contacts and send us the message "Start" via WhatsApp. By sending this WhatsApp message, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR for the purpose of sending the newsletter. We will then add you to our newsletter distribution list.

The data collected by us when subscribing to the newsletter is processed exclusively for the purpose of advertising by way of the newsletter. You can unsubscribe from the newsletter at any time by sending us the message "Stop" via WhatsApp. After unsubscribing, your mobile phone number will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

For sending our WhatsApp newsletter, we therefore use a mobile device whose address book contains only the WhatsApp contact details of our newsletter recipients. This ensures that every person whose WhatsApp contact details are stored in our address book has already consented, in accordance with Art. 6(1)(a) GDPR, when first using the app on their device by accepting WhatsApp's terms of use, to the transmission of their WhatsApp phone number from the address books of their chat contacts. A transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

We have entered into a data processing agreement with WhatsApp, which protects our newsletter recipients' data and prohibits disclosure to third parties.

In the course of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.

7.4 Product availability notification by email

For temporarily unavailable items, you can sign up to receive email notifications of product availability. We will send you a one-time email message about the availability of the item you selected. The only mandatory information required for sending this notification is your email address. The provision of any further data is voluntary and may be used to address you personally. For sending the email, we use the so called double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when registering for our email notification service for product availability is used strictly for the intended purpose.

You can unsubscribe from the availability notifications at any time by sending an appropriate message to the controller named at the beginning. After unsubscribing, your email address will be deleted from the distribution list set up for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

7.5 Shopping cart reminders by email

If you abandon your purchase with us before completing the order, you have the option of being reminded once by email of the contents of your virtual shopping cart.

The only mandatory information required for sending this reminder is your email address. The provision of any further data is voluntary and may be used to address you personally. For sending the email, we use the so called double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR for sending a shopping cart reminder. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when registering for our email notification service is used strictly for the intended purpose.

You can unsubscribe from the shopping cart reminders at any time by sending an appropriate message to the controller named at the beginning. After unsubscribing, your email address will be deleted from the distribution list set up for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond this, which is permitted by law and about which we inform you in this policy.

8) Data Processing for Order Processing

8.1 To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us is passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data you provided when ordering in order to inform you personally within the scope of our statutory information obligations in accordance with Art. 6(1)(c) GDPR. Your contact data is used strictly for the intended purpose of notifications about updates owed by us, and is processed by us for this purpose only to the extent necessary for the respective information.

To process your order, we also work together with the following service provider(s), who assist us in whole or in part in the performance of contracts concluded. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Disclosure of personal data to shipping service providers

- Deutsche Post

As a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We pass on your email address and/or phone number to the provider prior to delivery of the goods for the purpose of coordinating a delivery date or delivery notification, in accordance with Art. 6(1)(a) GDPR, provided that you have given your express consent to this during the ordering process. Otherwise, for the purpose of delivery, we only pass on the recipient's name and delivery address to the provider in accordance with Art. 6(1)(b) GDPR. Disclosure only takes place insofar as this is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery notification is not possible.

Consent can be revoked at any time with effect for the future, either against the controller named above or against the provider.
- DHL

As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

Consent can be revoked at any time with effect for the future, either against the controller named above or against the provider.
- DHL Express

As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

Consent can be revoked at any time with effect for the future, either against the controller named above or against the provider.
- DHL Express Austria

As a transport service provider, we use the following provider: DHL Express (Austria) GmbH, Am Europlatz 2 (Objekt G), 1120 Vienna

Consent can be revoked at any time with effect for the future, either against the controller named above or against the provider.
- DHL Freight

As a transport service provider, we use the following provider: DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany

Consent can be revoked at any time with effect for the future, either against the controller named above or against the provider.
- DHL Austria

As a transport service provider, we use the following provider: DHL Paket (Austria) GmbH, Campus 21, Liebermannstrasse F08/401, 2345 Brunn am Gebirge
Austria

Consent can be revoked at any time with effect for the future, either against the controller named above or against the provider.

8.3 Use of payment service providers

- Mollie

This website offers one or more online payment methods provided by the following provider: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands

If you select a payment method from the provider for which you make an advance payment (such as credit card payment), the payment data you provided as part of the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to this provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is passed on exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- PayPal

This website offers one or more online payment methods provided by the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from the provider for which you make an advance payment, the payment data you provided as part of the ordering process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to this provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is passed on exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method for which we make an advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and, if applicable, data on an alternative means of payment).

In such cases, in order to safeguard our legitimate interest in determining your creditworthiness, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. Based on the personal data you provided as well as further data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option you selected can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data if this is necessary for the contractual processing of payment.
- PayPal Checkout

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or, if offered, "Pay Later" via PayPal, we pass on your payment data as part of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). This disclosure takes place in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or, if offered, "Pay Later" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6(1)(f) GDPR on the basis of PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data is included in the calculation of the score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal data if this is necessary for the contractual processing of payment.

If the PayPal payment method "Pay by Invoice" is available and selected, your payment data will first be transmitted to PayPal to prepare the payment, whereupon PayPal will forward it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") to carry out the payment. The legal basis in each case is Art. 6(1)(b) GDPR. In this case, RatePay carries out, in its own name, an identity and credit check to determine creditworthiness in accordance with the principle already mentioned above, and passes on your payment data to credit agencies on the basis of its legitimate interest in determining creditworthiness in accordance with Art. 6(1)(f) GDPR. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

If you use the payment method of a local third-party provider, your payment data will first be passed on to PayPal to prepare the payment in accordance with Art. 6(1)(b) GDPR. Depending on your selection of an available local payment method, PayPal then transmits your payment data to carry out the payment in accordance with Art. 6(1)(b) GDPR to the corresponding provider:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard P&lstrok;atno&sacute;ci sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Pozna&nacute;, Poland)

For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments

This website offers one or more online payment methods provided by the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

9) Online Marketing

Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so called cookies, i.e. text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so called "web beacons" (small, invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to and stored on a Google server. This may also result in a transfer to Google LLC's servers in the USA.

Google uses the information obtained in this way to evaluate your usage behavior with regard to the AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not combined with other data from Google. The information collected by Google may be transmitted to third parties if this is legally required and/or insofar as third parties process this data on behalf of Google.
All processing described above, in particular the reading of information on the device used via cookies and/or web beacons, will only take place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to the website.

You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

Further information on Google's data protection provisions can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

10) Web Analytics Services

10.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, Google (Universal) Analytics sets cookies when you visit the website, which are stored as small text snippets on your device and collect certain information. This information also includes your IP address, which is however shortened by the last digits by Google in order to rule out direct identification of your person.

The information is transmitted to Google's servers and processed further there. This may also involve transfers to Google LLC, based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide further services related to the use of the website and the internet. The shortened IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google. The data collected as part of the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All processing described above, in particular the setting of cookies on the device used, will only take place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google (Universal) Analytics uses the special "demographic characteristics" function and can use it to create statistics that provide information about the age, gender, and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop the cross-device analysis, you can disable the "personalized advertising" feature in your Google account settings. To do this, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" function may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6(1)(a) GDPR, have set up an account on this website, and log in with this account on various devices, your activities, including conversions, can be analyzed across devices.

10.2 Hotjar

This website uses the web analytics service of the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta

With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information on the device used such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this makes it possible to analyze movement patterns (so called heatmaps), which show the duration of website visits as well as interactions with website content (e.g. text input, scrolling, clicks, and mouse-overs). Pseudonymization generally excludes direct identification of a person. The data is not combined with plain-text data about you collected in any other way.

All processing described above, in particular the reading or storage of information on the device used, will only take place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

11) Website Functionalities

11.1 Integration of the Instagram feed via Flockler

On our website, we use the services of Flockler Oy, Rautatienkatu 21 B, 33100, Tampere, Finland, to display preview images of our Instagram profile. Cookies are used for this purpose, i.e. small text files that are stored locally in your internet browser's cache.

The widget establishes a connection to the servers of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland ("Instagram") when visitors visit our website. As a result, Instagram receives certain browser information, including your IP address. In individual cases, a transfer to servers of Meta Platforms Inc., based in the USA, is also possible.

Data may also be transmitted to: Flockler Commerce, Inc., 1201 W Peachtree St NW Ste 2625 #36051, Atlanta, GA 30309, USA

All processing described above, in particular the setting of cookies to read information on the device used, will only take place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

11.2 Integration of the Instagram feed via Lightwidget

On our website, we use the services of Lightwidget, a widget provided by Black Sail Division, Krystian Żwak, Molczyn 17, Leszna Gorna, 43-445 Dziegielow, Poland (www.lightwidget.com), to display preview images of our Instagram profile. Cookies are used for this purpose, i.e. small text files that are stored locally in your internet browser's cache.

For data transfers to the USA, Meta Platforms Inc. has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

11.3 Integration of the Instagram feed via Mintt Studio

On our website, we use the services of Mintt Studio, Rua Parque da República 116, 4430-164 Vila Nova de Gaia, Portugal, to display preview images of our Instagram profile. Cookies are used for this purpose, i.e. small text files that are stored locally in your internet browser's cache.

11.4 Integration of the Instagram feed via Smash Balloon

On our website, we use the services of Smash Balloon LLC, PO Box 126, Long Lake, Minnesota, 55356, USA, to display preview images of our Instagram profile. Cookies are used for this purpose, i.e. small text files that are stored locally in your internet browser's cache.

11.5 Integration of the Instagram feed via SnapWidget

On our website, we use the services of SnapWidget, a widget provided by SnapWidget (Pty) Ltd., based in Johannesburg, South Africa (www.snapwidget.com), to display preview images of our Instagram profile. Cookies are used for this purpose, i.e. small text files that are stored locally in your internet browser's cache.

11.6 Facebook plugins

Our website uses plugins of the social network provided by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so called "2-click" or "Shariff" solution.

This integration ensures that when a page of our website containing such plugins is accessed, no connection is yet established with the provider's servers.

If you are logged in to an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no effect on the data that has already been transmitted to the provider.

Data may also be transmitted to: Meta Platforms Inc., USA

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

11.7 Instagram plugins

Our website uses plugins of the social network provided by the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so called "2-click" or "Shariff" solution.

This integration ensures that when a page of our website containing such plugins is accessed, no connection is yet established with the provider's servers.

Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection to the provider's servers. In doing so, regardless of whether you are logged in to an existing user profile, information about your device used (including your IP address), your browser, and your browsing history is transmitted to the provider to a certain extent and may be processed further there.

If you are logged in to an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no effect on the data that has already been transmitted to the provider.

Data may also be transmitted to: Meta Platforms Inc., USA

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

11.8 Judge.me

Our website incorporates graphic elements from the following provider in order to display external customer reviews and/or an externally awarded seal of quality: Judge.me Ltd., c/o Buckworths, 2nd Floor, 1-3 Worship Street, London, England, EC2A 2AB, United Kingdom

When you access a page of our website containing such graphic elements, your browser establishes a direct connection to the provider's servers in order to properly load the elements. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Insofar as personal data is also processed in this context, this is done in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the optimal marketing of our offering and the appealing design of our website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the event of a data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

11.9 Google Maps

This website uses an online map service provided by the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Google Maps is a web service for displaying interactive maps in order to visually present geographic information. By using this service, our location is shown to you, making it easier to find directions.

Simply by accessing those subpages into which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to and stored on Google's servers; this may also result in a transfer to the servers of Google LLC in the USA. This takes place regardless of whether Google provides a user account through which you are logged in, or whether a user account exists at all. If you are logged in to Google, your data will be directly assigned to your account. If you do not wish for this assignment to be made with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them.

The collection, storage, and evaluation take place in accordance with Art. 6(1)(f) GDPR on the basis of Google's legitimate interest in displaying personalized advertising, market research, and/or the needs-based design of Google websites. You have the right to object to the creation of these usage profiles, and to exercise this right you must contact Google. If you do not agree to the future transmission of your data to Google in connection with the use of Google Maps, it is also possible to completely deactivate the Google Maps web service by disabling JavaScript in your browser. In this case, Google Maps, and thus the map display on this website, cannot be used.

Insofar as legally required, we have obtained your consent for the above-described processing of your data in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the objection option described above.

Further information on Google's data protection provisions can be found here: https://business.safety.google/intl/de/privacy/

11.10 - Fast Bundle

This website uses a service from the following provider to organize and manage shopping carts: VConvert Solutions Limited, 13353 Commerce Parkway, Unit 2353, 3rd floor, Richmond, BC, V6V 3A1, Canada

The service enables the linking of related products in the shopping cart, the product-dependent display of promotions, and the offering of purchase suggestions for compatible products.

For visitor-specific shopping cart management, the service collects and stores pseudonymized visitor data with the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading device and browser information), including information on the device used such as the IP address and browser information. Pseudonymization generally excludes direct identification of a person.

The reading or storage of information on the device used will only take place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorized disclosure to third parties.

In the event of a data transfer to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

12) Rights of the Data Subject

12.1 Applicable data protection law grants you the following rights as a data subject (rights to information and intervention) with respect to the controller regarding the processing of your personal data, whereby reference is made to the respective legal basis for the applicable requirements for exercising these rights:

Right of access in accordance with Art. 15 GDPR;
Right to rectification in accordance with Art. 16 GDPR;
Right to erasure in accordance with Art. 17 GDPR;
Right to restriction of processing in accordance with Art. 18 GDPR;
Right to notification in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to withdraw consent given in accordance with Art. 7(3) GDPR;
Right to lodge a complaint in accordance with Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE, TO THIS PROCESSING.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

13) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal basis, the processing purpose, and, where applicable, additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).

When processing personal data on the basis of express consent in accordance with Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods exist for data processed as part of contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer required for contract performance or initiation and/or we no longer have a legitimate interest in further storage.

When processing personal data on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data will be stored until you exercise your right to object in accordance with Art. 21(2) GDPR.

Unless otherwise indicated by the other information in this policy regarding specific processing situations, stored personal data will otherwise be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: January 26, 2026, 06:49:19

Privacy Policy

Privacy Policy

1) Introduction and Contact Details of the Controller

2) Data Collection When Visiting Our Website

3) Hosting & Content Delivery Network

4) Cookies

5) Getting in Touch

6) Data Processing When Opening a Customer Account

7) Use of Customer Data for Direct Marketing

8) Data Processing for Order Processing

9) Online Marketing

10) Web Analytics Services

11) Website Functionalities

12) Rights of the Data Subject

13) Duration of Storage of Personal Data

Deine personalisierte Knabberbox

We're here for you 🐾