Privacy policy

–––––––––––––––
Privacy Policy
–––––––––––––––

1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Rolf Beck, Rolf Beck E-Commerce, Feldbergstraße 17, 65760 Eschborn, Germany, e-mail: Rolf.business02@web.de. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website
When merely using our website for informational purposes, i.e., when you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the site server (so-called "server log files"). When you access our website, we collect the following data that is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are concrete indications of illegal use.

3) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device for a longer period and enable the saving of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.
If personal data are also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the execution of the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of consent given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.

4) Contact
4.1 In the context of contact with us (e.g., via contact form or e-mail), personal data are processed - exclusively for the purpose of processing and answering your request and only to the extent necessary for this.
The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, then the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been finally clarified and provided that no statutory retention obligations conflict with this.
4.2 - Klaviyo
For the sending of transactional e-mails, i.e., occasion-related messages that are triggered by a specific user interaction (such as: conclusion of a contract, registration, or password reset), we use this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA
On the basis of our legitimate interest in effective and user-friendly e-mail communication, we pass on the data provided by you when performing such a user action to this provider in accordance with Art. 6 (1) lit. f GDPR, so that the provider handles the mail dispatch on our behalf.
We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

5) Data Processing When Opening a Customer Account
In accordance with Art. 6 (1) lit. b GDPR, personal data will continue to be collected and processed to the extent required if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.
Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the controller. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been completely processed, no statutory retention periods conflict with this, and there is no legitimate interest on our part in further storage.

6) Use of Customer Data for Direct Marketing
Shopping cart reminders by e-mail
In the event that you cancel your purchase with us before completing the order, you have the option of being reminded of the contents of your virtual shopping cart once by e-mail.
The only mandatory information for sending this reminder is your e-mail address. The provision of further data is voluntary and may be used to address you personally. For sending mails, we use the so-called double opt-in procedure, which ensures that you only receive a notification once you have expressly confirmed your consent to this by clicking on a verification link sent to the specified e-mail address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) lit. a GDPR for sending a shopping cart reminder. We store your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later date. The data collected by us when registering for our e-mail notification service will be used strictly for the intended purpose.
You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be immediately deleted from our distribution list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is legally permitted and about which we inform you in this statement.

7) Data Processing for Order Processing
7.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) lit. b GDPR.
Insofar as we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data (name, address, e-mail address) transmitted by you when ordering in order to personally inform you within the scope of our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR by suitable means of communication (e.g., by post or e-mail) about upcoming updates within the statutorily provided period. Your contact data will be used strictly for the intended purpose for notifications about updates owed by us and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. In accordance with the following information, certain personal data are transferred to these service providers.
7.2 To fulfill our contractual obligations to you, we work with external shipping partners. We pass on your name and delivery address and, insofar as necessary for delivery, your telephone number exclusively for the purpose of delivering the goods pursuant to Art. 6 (1) lit. b GDPR to a shipping partner selected by us.
7.3 - Anthropic Claude
To provide our services, we use artificial intelligence software from the following provider: Anthropic Ireland Limited, 6th Floor, South Bank House, Barrow Street, Dublin 4, D04 TR29, Ireland.
Information provided by you within the framework of a contractual relationship may be fed into the provider's software in order to organize, analyze, aggregate, modify, evaluate, or process it for the provision of our service.
Information may also be transmitted to: Anthropic PBC, USA.
The collection and further processing of this information is carried out strictly for the intended purpose of contract fulfillment. Processing for the purposes of training and further development of the provider's AI language models is expressly prohibited.
Insofar as the processing also concerns personal data, this is carried out on the basis of our legitimate interest in the efficient design of our services and the optimal use of available resources and technologies in accordance with Art. 6 (1) lit. f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of personal data processed by the provider and prohibits unauthorized disclosure to third parties.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
- Google Cloud AI
To provide our services, we use artificial intelligence software from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Information provided by you within the framework of a contractual relationship may be fed into the provider's software in order to organize, analyze, aggregate, modify, evaluate, or process it for the provision of our service.
Information may also be transmitted to: Google LLC, USA
The collection and further processing of this information is carried out strictly for the intended purpose of contract fulfillment. Processing for the purposes of training and further development of the provider's AI language models is expressly prohibited.
Insofar as the processing also concerns personal data, this is carried out on the basis of our legitimate interest in the efficient design of our services and the optimal use of available resources and technologies in accordance with Art. 6 (1) lit. f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of personal data processed by the provider and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.
Further legal information and the data protection provisions of Google can be found at https://cloud.google.com/privacy?hl=de
- Google Gemini
To provide our services, we use artificial intelligence software from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.
Information provided by you within the framework of a contractual relationship may be fed into the provider's software in order to organize, analyze, aggregate, modify, evaluate, or process it for the provision of our service.
Information may also be transmitted to: Google LLC, USA.
The collection and further processing of this information is carried out strictly for the intended purpose of contract fulfillment. Processing for the purposes of training and further development of the provider's AI language models is expressly prohibited.
Insofar as the processing also concerns personal data, this is carried out on the basis of our legitimate interest in the efficient design of our services and the optimal use of available resources and technologies in accordance with Art. 6 (1) lit. f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of personal data processed by the provider and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.
Further legal information and the data protection provisions of Google can be found at https://support.google.com/gemini/answer/13594961?hl=de
- To provide our services, we use artificial intelligence software from the following provider: OpenAI Ireland Limited, 1st Floor, The Liffey Trust Centre, 117-126 Sheriff Street Upper, Dublin 1, D01 YC43, Ireland.
Information provided by you within the framework of a contractual relationship may be fed into the provider's software in order to organize, analyze, aggregate, modify, evaluate, or process it for the provision of our service. Information may also be transmitted to: OpenAI OpCo, LLC, USA.
The collection and further processing of this information is carried out strictly for the intended purpose of contract fulfillment. Processing for the purposes of training and further development of the provider's AI language models is expressly prohibited.
Insofar as the processing also concerns personal data, this is carried out on the basis of our legitimate interest in the efficient design of our services and the optimal use of available resources and technologies in accordance with Art. 6 (1) lit. f GDPR.
We have concluded a data processing agreement with the provider, which ensures the protection of personal data processed by the provider and prohibits unauthorized disclosure to third parties.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
7.4 Use of Payment Service Providers (Payment Services)
- Apple Pay
If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the "Apple Pay" function of your device running iOS, watchOS, or macOS by debiting a payment card stored with "Apple Pay". Apple Pay uses security functions integrated in the hardware and software of your device to protect your transactions. Thus, to authorize a payment, it is necessary to enter a code you previously defined and to verify it using the "Face ID" or "Touch ID" function of your device.
For the purpose of payment processing, your information provided in the course of the ordering process together with information about your order will be passed on to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to process the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number as well as a transaction-specific, dynamic security code to the source website to confirm the payment's success.
Insofar as personal data are processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and information about whether the transaction was successfully completed. Anonymization completely excludes any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, your Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".
Further information on data protection at Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027
- Google Pay
If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is carried out via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function by debiting a payment card stored with Google Pay or a payment system verified there (e.g., PayPal). To authorize a payment via Google Pay in excess of €25, the prior unlocking of your mobile device by the respectively established verification method (such as facial recognition, password, fingerprint, or pattern) is required.
For the purpose of payment processing, your information provided in the course of the ordering process together with information about your order will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a one-time transaction number to the source website, with which a completed payment is verified. This transaction number does not contain any information about the actual payment data of your payment means stored in Google Pay, but is created and transmitted as a one-time valid numerical token. For all transactions via Google Pay, Google merely acts as an intermediary to process the payment. The execution of the transaction takes place exclusively in the relationship between you and the source website by debiting the payment means stored in Google Pay.
Insofar as personal data are processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.
Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description provided by the merchant of the purchased goods or services, photos you attached to the transaction, the name and e-mail address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively pursuant to Art. 6 (1) lit. f GDPR on the basis of the legitimate interest in proper invoicing, verification of transaction data, and optimization and function maintenance of the Google Pay service.
Google also reserves the right to merge the processed transaction data with further information collected and stored by Google when using other Google services.
The terms of use of Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- Paypal
On this website, one or more online payment methods of the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you choose a payment method of the provider that requires you to pay in advance, your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
If you choose a payment method in which we pay in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and, if applicable, data on an alternative payment means).
To safeguard our legitimate interest in determining your ability to pay in such cases, this data will be forwarded by us to the provider for the purpose of a credit check in accordance with Art. 6 (1) lit. f GDPR. On the basis of the personal data you provide and further data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option you have selected can be granted with regard to payment and/or default risks.
The credit information may contain probability values (so-called score values). Insofar as score values are incorporated into the result of the credit information, they are based on a scientifically recognized mathematical-statistical procedure. Among other things, but not exclusively, address data are included in the calculation of the score values.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be authorized to process your personal data insofar as this is necessary for contractual payment processing.
- Shopify Payments
On this website, one or more online payment methods of the following provider are available: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
If you choose a payment method of the provider that requires you to pay in advance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) lit. b GDPR. In this case, your data will be passed on exclusively for the purpose of payment processing with the provider and only to the extent necessary for this.
7.5 Electronic Cancellation Function for Distance Contracts
Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of declaring the cancellation via an electronic cancellation function in accordance with the applicable cancellation provisions.
When using the cancellation function, in addition to information for identifying the contract to be cancelled, further personal information such as the first and last name and the e-mail address of the consumer must be provided or confirmed.
The collection of this information and its transmission to us is carried out in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for the proper processing of the cancellation. Also on the basis of Art. 6 (1) lit. b GDPR, the personal data provided are used to confirm receipt of the declaration of cancellation by e-mail. A further legal basis for the processing is Art. 6 (1) lit. c GDPR. We are legally obliged to provide an electronic cancellation function for chargeable consumer distance contracts.

8) Retargeting / Remarketing and Conversion Tracking
Meta Pixel with Extended Data Matching
Within our online offer, we use the service "Meta Pixel" in extended data matching mode from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").
If you click on an advertisement placed by us on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into your browser after the redirection through a cookie set by our linked page itself. In addition, this cookie collects specific customer data such as your e-mail address, which we collect on our website linked to the Facebook or Instagram ad in processes such as purchases, account registrations, or registrations (extended data matching). The cookie is then read out and enables the transmission of the data including your specific customer data to Meta.
We use "Meta Pixel" with extended data matching to make our advertisements (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to your interests or have certain characteristics (e.g., interests in certain topics or products determined based on the websites visited), which we transmit to Meta (so-called "Custom Audiences").
In addition, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared to the standard variant of "Meta Pixel", the extended data matching function helps us to better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data are stored and processed by Meta so that an assignment to the respective user profile is possible and Meta can use the data for its own advertising purposes in accordance with Meta's data usage guidelines (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to place ads on and off Facebook.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
The information generated by Meta is usually transmitted to a Meta server and stored there; in this context, there may also be a transfer to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level on the basis of an adequacy decision of the European Commission.

9) Rights of the Data Subject
9.1 Applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis us as the controller with regard to the processing of your personal data, whereby the respective exercise requirements are referred to in the cited legal basis:
- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to revoke consent given pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
9.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

10) Duration of Storage of Personal Data
The duration of the storage of personal data is measured by the respective legal basis, the purpose of processing, and – if applicable – additionally by the respective statutory retention period (e.g., commercial and tax retention periods).
When processing personal data on the basis of express consent pursuant to Art. 6 (1) lit. a GDPR, the data concerned will be stored until you revoke your consent.
If statutory retention periods exist for data processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 (1) lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part in further storage.
When processing personal data on the basis of Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Copyright notice: This privacy policy was created by the specialist lawyers of IT-Recht Kanzlei and is protected by copyright (https://www.it-recht-kanzlei.de)

Version: 21.07.2026, 16:52:26