Privacy Policy

Thank you for your interest in our online shop. Protecting your privacy is very important to us. Please find more information on how we treat your data below.

1. Access Data and Hosting

You can visit our web pages without providing us with information about your identity. Every time you access a website, the web server automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of access, the data volume transferred and the requesting provider (access data), and which documents the retrieval.

This access data is analysed exclusively for the purposes of guaranteeing a disruption-free operation of the site, as well as the improvement of our offer. According to Art. 6(1) sentence 1 point (f) GDPR, this serves to safeguard our major legitimate interests in the correct representation of our offer. All access data will be erased seven days after you have finished visiting our site at the latest.

Hosting services by a third-party provider

As part of processing carried out on our behalf, a third-party provider carries out services for the hosting and display of the website. This serves to safeguard our major legitimate interests in the correct representation of our offer. All data which is collected as part of the use of this website, or in forms intended for this purpose on the online shop as described below, will be processed on their servers. Processing on other servers only occurs within the scope outlined here.

This service provider resides within a country belonging to the European Union or the European Economic Area.

2. Data Collection and Use for Contract Processing and upon Opening of a Customer Account

We collect personal data if you disclose them voluntarily as part of your order, while contacting us (e.g. by contact form or e-mail) or when opening a customer account. Obligatory fields are marked as such, as; in these cases, we urgently require this data for contract processing or for the processing of your contact request or opening the customer account, and you will be unable to complete the order and/or the account opening or send off your contact request without supplying them. Which data is collected is apparent from the corresponding input form. In accordance with Art. 6(1) sentence 1 point (b) GDPR, we use the data with which you have provided us for contract processing and the processing of your queries. After the successful completion of the contract or deletion of your customer account, your data will be limited for its further processing and, after the expiry of the retention periods stipulated by fiscal and commercial law, erased, insofar as you have not expressly consented to the further use of your data or insofar as we are subject to a legally permissible use of data which extends beyond this, of which we inform you in this policy. Erasure of your customer account is possible at any time and may either be completed by sending a message to the contact option specified below or by an intended function in the customer account.

3. Data Sharing

For the contract performance according to Art. 6(1) sentence 1 point (b) GDPR, we will forward your data to the shipping company commissioned with the delivery if this is necessary for the delivery of the ordered goods. Depending on the payment service provider that you choose in the order process, we will, for the processing of payments, forward the payment data collected for this purpose to the credit institution commissioned with the payment and payment service providers commissioned by us, if applicable, and/or to the selected payment service. The selected payment service providers will partly also collect these data themselves, if you create an account there. In this case, you will have to log on to the payment service provider with your access data during the order process. In this connection, the privacy policy of the relevant payment service provider applies.

We make use of payment service providers and shipping providers having their registered office in a country outside the European Union. Personal data are only transferred to these companies when this is necessary to fulfil the contract.

Data Sharing with Shipping Providers

Where you have given your explicit consent during or after your ordering process, we will – based on this consent according to Art. 6(1) sentence 1 point (a) GDPR – share your e-mail address and telephone number with the selected shipping provider to enable the latter to contact you in order to announce and/or coordinate the delivery with you before its service.

The consent may be withdrawn at any time by sending a message to the contact option described below or directly vis-à-vis the shipping provider using the contact address specified below. After withdrawal, we will delete your data specified for this purpose unless you have explicitly consented to the further use of your data or we reserve the more far-reaching use of the data which is legally permitted and of which we inform you in this declaration.

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Neuss

4. E-mail Newsletter E-mail Advertisement with Subscription of the Newsletter

If you subscribe to our newsletter, we will use the data necessary in this connection and separately provided by you in order to send you our e-mail newsletter based on your consent according to Art. 6(1) sentence 1 point (a) GDPR. You can unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or using the intended link in the newsletter. After unsubscription, we will delete your e-mail address unless you have explicitly consented to the further use of your data or we reserve the more far-reaching use of the data which is legally permitted and of which we inform you in this declaration.

5. Use of Data in the Payment Processing Identity and Credit Check upon Selection of Klarna Payment Services

When you choose Klarna payment services, we ask for your consent according to Art. 6(1) sentence 1 point (a) GDPR to the transfer of the data necessary for the processing of the payment and an identity and credit check to Klarna. In Germany, the credit agencies specified in Klarna’s Privacy Policy may be used for the identity and credit check.
Klarna will use the information received with regard to the statistical probability of payment default for a balanced decision on the justification, performance or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the contact below. As a consequence, we may no longer be able to offer you certain payment options. You can also withdraw your consent to this use of the personal data at any time, also vis-à-vis Klarna.

6. Integration of the Trusted Shops Trust Badge

The Trusted Shops trust badge is incorporated into this website to display our Trusted Shops quality label and the reviews collected and to offer Trusted Shops products to buyers after placing an order.

This serves to safeguard our major legitimate interests in the optimal marketing of our offer according to Art.6(1) sentence 1 point (f) GDPR. The trust badge and the services promoted with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When accessing the trust badge, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of access, the data volume transferred and the requesting provider (access data) and documents the retrieval. Such access data is not evaluated and is automatically overwritten at the latest seven days after you have visited the site.
Other personal data is only transferred to Trusted Shops if you have agreed to use Trusted Shops products after placing an order or have already registered for the use of these. In this case, the contractual agreement made between you and Trusted Shops applies.

7. Cookies and Web Analysis

To make the visit to our website more interesting, to allow the use of specific functions, to display appropriate products or for market research purposes, we use what are referred to as Cookies on various sites. This serves to safeguard our major legitimate interests in an optimised presentation of our offer according to Art. 6(1) sentence 1, point (f) GDPR. Cookies are small text files that are automatically saved on your terminal device. Some of the cookies that we use will be deleted again following the end of the browser session, i.e. after you close the browser (commonly known as session cookies). Other cookies stay on your terminal device and allow us to recognise your browser when you next visit our website (persistent cookies). For the duration of storage, please see the overview of cookie settings of your web browser. You can adjust your browser settings so that you are informed when cookies are being placed and so that you can decide individually for each cookie, for cookies for certain cases or in general if you want to accept them or not. Each browser differs in how it manages the cookie settings. How you can change your cookie settings is explained in each browser’s help menu. This information for the respective browsers can be found at the following links:
Internet Explorer™: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Safari™: https://support.apple.com/kb/ph21411?locale=de_DE
Chrome™: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Firefox™ https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Opera™: http://help.opera.com/Windows/10.20/de/cookies.html If cookies are not accepted, the functionality of our website may be limited.

Use of Google (Universal) Analytics for Web Analysis

This website makes use of Google (Universal) Analytics, a web analysis service provided by Google LLC (www.google.de). This serves to safeguard our legitimate interests in an optimised presentation of our offer according to Art. 6(1) sentence 1, point (f) GDPR. Google (Universal) Analytics uses methods which enable them to analyse your use of our website such as, for example, cookies. The information which is automatically collected about your use of this website is usually transmitted to a Google server in the USA and stored there. Upon activating IP anonymisation on this Website, your IP address is abbreviated before being transmitted within European Union member states or other states which are part of the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Anonymised IP addresses which Google Analytics transmits from your browser will fundamentally not be combined with other data from Google. After the purpose no longer applies and after we cease to use Google Analytics, the data collected in this connection will be erased. Google LLC has its headquarters in the USA and is certified under the EU/US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for those companies which are certified under the Privacy Shield.

You may prevent any data created by the cookie and relating to website usage on your part (including your IP address) from being transmitted to and being processed by Google by downloading and installing the browser plug-in available at the link below: http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively to the browser plug-in, you can click on this link in order to prevent the recording by Google Analytics on this website in the future. In this case, an opt-out cookie will be installed on your access device. If you delete your cookies, you must click the link again.

Advertising via Marketing Networks Google AdWords Remarketing

We promote this website in the Google search results and on third-party websites using Google AdWords. To do so, we set the so-called remarketing cookie of Google when you visit our website; by means of a pseudonym CookieID and on the basis of the websites visited by you, this cookie will automatically allow for interest-based advertisement. This serves to safeguard our legitimate interests in the optimal marketing of our website according to Art. 6(1) sentence 1 point (f ) GDPR. After the purpose no longer applies and after we cease to use Google AdWords, the data collected in this connection will be erased. There will only be more far-reaching data processing if you have granted Google your consent to the linking of your web and app browser history of Google with your Google account and to the use of information from your Google account for the personalization of advertisements that you see on the Internet. If in this case, you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data in order to create and define target group lists for device-spanning remarketing. To this end, Google will temporarily link your personal data with Google Analytics data in order to create target groups. Google AdWords Remarketing is an offer of Google LLC (www.google.de). Google LLC has its company headquarters in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here. Based on this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for those companies which are certified under the Privacy Shield. You can deactivate the remarketing cookie using this link. Apart from that, you can obtain information on the setting of cookies from the Digital Advertising Allianceand make corresponding settings.

9. Social Media Plug-ins Use of Social Plug-ins of Facebook, Google using the Shariff solution.

Our website uses Social Buttons of social networks.

This serves to safeguard our legitimate interests in the optimal marketing of our offer according to Art. 6(1) sentence 1 point (f) GDPR. In order to increase the protection of your data when you visit our website, these buttons are not integrated into the website without restrictions, as plug-in, but only using an HTML link. This integration ensures that where any page of our online presence is accessed which contains such buttons, no connection will be established with the servers of the relevant social network provider yet.

If you click one of the buttons, a new window of your browser will open and call the page of the relevant service provider on which you may (after entry of your login data, if applicable) for example press the Like or Share button.

For further information on the purpose and the extent of the collection and the further processing and use of data by the providers on their websites as well as a contact option and your associated rights and setting options for the protection of your privacy, please refer to the privacy policy of the provider. http://www.facebook.com/policy.php
http://www.google.com/intl/de/+/policy/+1button.html

Youtube video plug-ins

Contents of third-party providers are integrated into this website. These contents are provided by Google LLC (“Provider”).
Youtube is operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

For videos on Youtube that are integrated onto our website, the extended data protection setting has been enabled. That means that no information on website visits is collected and stored at Youtube unless you play back the video. The integration of the videos serves to safeguard our legitimate interests in the optimal marketing of our offer according to Art. 6(1) sentence 1 point (f) GDPR.
For further information on the purpose and the extent of the collection and the further processing and use of data by the providers and on your related rights and privacy protection settings, please refer to the data protection information of Google http://www.google.com/intl/de/+/policy/+1button.html.

Vimeo video plug-ins

Contents of third-party providers are integrated into this website. These contents are provided by Vimeo LLC (“Provider”). The integration of the videos serves to safeguard our major legitimate interests in the optimal marketing of our offer according to Art. 6(1) sentence 1 point (f) GDPR.
Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York 10011, USA (“Vimeo”).
For videos of Vimeo that are integrated onto our website, the Google Analytics tracking tool is automatically integrated. We don’t have any influence on the tracking settings and the related analysis results that are collected and we cannot inspect them either. Apart from that, web beacons will be set at the website visitors due to the integration of Vimeo videos.

In order to prevent the setting of the Google Analytics tracking cookies, you can prevent the storage of the cookies by setting your browser software accordingly; please note, however, that in this case, you may not be able to use all the functions of this website to their full extent.
You may moreover prevent any data created by the cookie and relating to your usage of the website (including your IP address) from being recorded and processed by Google by downloading and installing the browser plug-in available at the link below:
http://tools.google.com/dlpage/gaoptout?hl=de
Alternatively, you can click on this link to prevent Google Analytics from recording your data from this website in the future. In this case, an opt-out cookie will be installed on your access device. If you delete your cookies, you must click the link again.
For further information on the purpose and the extent of the collection and the further processing and use of data by the providers and on your related rights and privacy protection settings, please refer to the Vimeo data protection information

10. Dispatch of Review Reminders per E-mail Review Reminder by Trusted Shops

If during or after your order, you have given us your explicit consent to do so according to Art. 6(1) sentence 1 point (a) GDPR, we will transmit your e-mail address to Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany, (www.trustedshops.de) in order for the latter to send you a review reminder by e-mail. This consent may be withdrawn at any time by sending a message to the contact option below or directly vis-à-vis Trusted Shops.

11. Contact Options and Your Rights

As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, in the scope indicated therein, the right to request information about your personal data that we process;
  • pursuant to Art. 16 GDPR, the right to request the immediate rectification of inaccurate data or completion of your personal data stored by us;
  • pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is required
    – in order to exercise the right to freedom of expression and information;
    – to comply with a legal obligation;
    – for reasons of public interest or
    – in order to establish, exercise or defend legal claims;
  • pursuant to Art. 18 GDPR, the right to demand the restriction of the processing of your personal data insofar as
    – you contest their accuracy;
    – if processing is unlawful but you object to their erasure;
    – we no longer require the data but you require them to establish, exercise or defend legal claims, or
    – if you have objected to processing pursuant to Art. 21 GDPR;
  • pursuant to Art. 20 GDPR, the right to receive the personal data which you have provided to us in a structured, commonplace and machine-readable format, or to request its transfer to another data controller;
  • pursuant to Art. 77 GDPR, the right to submit a complaint to a supervisory authority. You can generally contact the supervisory authority at your habitual place of residence or work, or the supervisory authority at our place of business, for this purpose.

Should you have any questions on the collection, processing or use of your personal data, for information, rectification, blocking or erasure of data, as well as for withdrawal of consent, if granted, or objection to a specific use of data, please contact:

Phillip Ludwig
Kirschbaumweg 4
50996 Köln
+49 2236 89555-0
ludwig@konorg.com

Right to Object

Insofar as we process personal data for the safeguarding of our legitimate interests as explained above, you can object to this processing with effect for the future. Should the processing be carried out for the purposes of direct marketing, you may exercise this right at any time, as described above. Insofar as the processing is carried out for other purposes, you only have the right to object upon the presentation of reasons which arise from your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we are able to demonstrate compelling legitimate grounds for processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

This does not apply if the processing takes place for the purposes of direct marketing. Should this be the case, we will no longer process your personal data for this purpose.