Data protection

Unless otherwise specified below, the provision of your personal data is not required by law or contract, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide has no consequences. This only applies if no other information is given in the subsequent processing operations.
"Personal data" is all information that relates to an identified or identifiable natural person.

Server log files
You can visit our website without giving any personal information.
Every time our website is accessed, usage data is transmitted to us or our web host / IT service provider via your Internet browser and stored in log data (so-called server log files). These stored data include, for example, the name of the page called up, the date and time of the call, the IP address, the amount of data transferred and the requesting provider. Processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR out of our predominant legitimate interest in ensuring the trouble-free operation of our website and improving our offer.

Contact

Responsible person/ Data protection officer
Contact us on request. The contact details of the person responsible for data processing can be found in our imprint.

You can contact our data protection officer directly at: Email: datenschutz@ndbh.de or by phone: +49 (0) 170 5007825

Initiative contact by email
If you initiate business contact with us by e-mail, we will only collect your personal data (name, e-mail address, message text) to the extent that you have provided. The data processing serves to process and answer your contact request.
If the establishment of contact serves to carry out pre-contractual measures (e.g. advice on purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.
If contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our predominant legitimate interest in processing and answering your request. In this case, you have the right, for reasons that arise from your particular situation, at any time to refer to Art. 6 Para. 1 lit. f GDPR-based processing of your personal data.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form
When you use the contact form, we only collect your personal data (name, email address, message text) to the extent that you have provided. The data processing serves the purpose of establishing contact. By sending your message, you consent to the processing of the transmitted data. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent.
You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation. We only use your email address to process your request. Your data will then be deleted unless you have consented to further processing and use.

Customer account orders      

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation. Your customer account will then be deleted.

Collection, processing and transfer of personal data for orders
When you place an order, we only collect and process your personal data insofar as this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. Processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR and is necessary for the performance of a contract with you.
Your data will be passed on, for example, to the shipping companies and dropshipping providers, payment service providers, service providers for order processing and IT service providers selected by you. In all cases, we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.

Reviews       Advertising      

Data collection when writing a comment
When you comment on an article or a contribution, we collect your personal data (name, email address, comment text) only to the extent that you have made available. The processing serves the purpose of enabling comments and displaying comments. By sending the comment, you consent to the processing of the transmitted data. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation. Your personal data will then be deleted.

When your comment is published, the name and email address you provided will be published.

In addition, when you submit the comment, your IP address is stored for the purpose of preventing misuse of the comment function and ensuring the security of our information technology systems. By sending the comment, you consent to the processing of the transmitted data. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation. Your IP address will then be deleted.

Use of the email address for sending newsletters
We use your e-mail address, regardless of the contract processing, exclusively for our own advertising purposes for sending the newsletter, provided you have expressly consented to this. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the mailing list.

Your data will be passed on to a service provider for email marketing as part of order processing. It will not be passed on to other third parties.

Shipping service provider      

Passing on the e-mail address to shipping companies for information about the shipping status
We pass on your e-mail address to the transport company as part of the contract processing, provided you have expressly agreed to this in the order process. The purpose of the transfer is to inform you about the dispatch status by email. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company without affecting the legality of the processing carried out on the basis of the consent until the revocation.

Payment service provider credit report      

Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find this under https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Express
We use the PayPal Express payment service from PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies can also be used for this purpose. The cookies enable your browser to be recognized.
This data processing, in particular the setting of cookies, takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our predominant legitimate interest in a customer-oriented offer of different payment methods. For reasons that arise from your particular situation, you have the right to refer to Art. 6 Para. 1 lit. f GDPR-based processing of your personal data.
When you select and use PayPal Express, the data required for payment processing will be transmitted to PayPal in order to be able to fulfill the contract with you with the selected payment method. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. You can find more detailed information on data processing when using the PayPal Express payment service in the associated data protection declaration here.

Use of personal data when choosing Klarna as the payment method
If you have opted for Klarna's payment services Klarna invoice and / or Klarna installment purchase as a payment option, you have consented to us providing the following personal data such as first and last name, address, date of birth necessary for processing the purchase on account and an identity and credit check , Gender, e-mail address, IP address, telephone number and the data necessary for processing the purchase on account that are related to the order, such as the number of items, item number, invoice amount and taxes in percent, collected and sent to Klarna have submitted. The data processing serves the purpose of offering the payment methods purchase on account and purchase in installments as well as the necessary credit check. Processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation.
This data is transmitted so that Klarna can create an invoice and carry out an identity and credit check to process your purchase with the invoice processing you want. Klarna needs the personal data of the buyer in order to obtain information from credit agencies for the purpose of identity and credit checks. In Germany, these can be the following credit reporting agencies:
- Schufa Holding AG, Kormoranweg 5, 65203 Wiesbaden
- Bürgel Wirtschaftsinformationen GmbH & Co. KG, PO Box 5001 66, 22701 Hamburg
- Creditreform Bremen Seddig KG, Contrescarpe 17, 28203 Bremen
- infoscore Consumer Data GmbH, Rheinstrasse 99, 76532 Baden-Baden.
As part of the decision on the establishment, implementation or termination of the contractual relationship, apart from an address check, Klarna also collects and uses information on the previous payment behavior of the buyer as well as probability values for this behavior in the future. The calculation of these score values by Klarna is carried out on the basis of a scientifically recognized mathematical-statistical procedure. Klarna will also use your address data. If this calculation shows that your creditworthiness is not given, Klarna will inform you of this immediately.

Revocation of the use of personal data by Klarna
1. You can revoke your consent to the use of personal data by Klarna at any time. However, Klarna may still be entitled to process, use and transmit the personal data insofar as this is necessary for contractual payment processing by Klarna's services, is legally required, or is required by a court or an authority.
2. You can of course receive information about the personal data stored by Klarna at any time. This right is guaranteed by the Federal Data Protection Act. If you, as a buyer, wish to do so, or if you want to notify Klarna of changes to the stored data, you can contact datenschutz@klarna.de.

Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user calls up a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be clearly identified when the website is accessed again.
Cookies are saved on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and individually decide whether to accept them and prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.
Under the following links you can find out how you can manage cookies in the most important browsers (including deactivating them):
Technically necessary cookies
Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, more effective and safer. Cookies also enable our systems to recognize your browser after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after changing pages.
Processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR out of our predominant legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
For reasons that arise from your particular situation, you have the right to refer to Art. 6 Para. 1 lit. f GDPR-based processing of your personal data.

analysis      

Use of Google Analytics
We use the web analysis service Google Analytics from Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google"). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and for compliance with the applicable data protection laws.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The following information can be collected: IP address, date and time of the page view, click path, information about the browser you are using and the device you are using, pages visited, referrer URL (website through which you can find our Website), location data, purchase activities. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
Google Analytics uses technologies such as cookies, web memory in the browser and tracking pixels, which enable your use of the website to be analyzed. The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. IP anonymization is activated on this website. This means that your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases.
Google has certified itself under the US-EU data protection agreement “Privacy Shield” and is thus obliged to comply with European data protection guidelines.
The data processing, in particular the setting of cookies, takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation. For more information on terms of use and data protection, see https://www.google.com/analytics/terms/de.html or under https://www.google.de/intl/de/policies/ as well as under https://policies.google.com/technologies/cookies?hl=de.

Plug-ins and miscellaneous

Use of social plug-ins
We use social network plug-ins on our website. The integration of social plug-ins and the data processing that takes place serves the purpose of optimizing the advertising for our products.
When integrating social plug-ins, a link is established between your computer and the servers of the social network provider and the plug-in is displayed on the page by notifying your browser, provided you have expressly consented to this. Both your IP address and the information about which of our pages you have visited are transmitted to the provider's server. This applies regardless of whether you are registered or logged in to the social network. A transmission takes place even with unregistered or not logged in users. If you are connected to one or more of your social network accounts at the same time, the information collected can also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons.
The data processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation.
The social networks named below are integrated into our website using social plug-ins. You can find more information on the scope and purpose of the collection and use of the data as well as your rights and options for protecting your privacy in the linked data protection notices of the providers.

AddThis from Oracle America, Inc. (500 Oracle Parkway, Redwood Shores, CA 94065, USA)
https://www.addthis.com/privacy/privacy-policy

Facebook of Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA)
https://www.facebook.com/policy.php

Instagram of Instagram LLC. (1601 Willow Road, Menlo Park, CA 94025, USA)
https://help.instagram.com/155833707900388

LinkedIn of the LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA)
https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

Pinterest from Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)
https://about.pinterest.com/de/privacy-policy

Twitter de Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94107, EE. UU.)
https://twitter.com/privacy

Use of social plug-ins via "Shariff"
We use social network plug-ins on our website. We use the data protection-safe "Shariff" buttons so that you can keep control of your data.
Without your express consent, no links will be made to the servers of the social networks and consequently no data will be transmitted.
“Shariff” is a development by specialists at the computer magazine c't. It enables more privacy on the net and replaces the usual “Share” buttons on social networks. You can find more information about the Shariff project here https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
When you click the buttons, a pop-up window appears in which you can log in to the respective provider with your data. A direct connection to the social networks is only established after you have actively logged in.
By logging in, you give your consent to the transfer of your data to the respective social media provider. Among other things, both your IP address and the information about which of our pages you have visited are transmitted. If you are connected to one or more of your social network accounts at the same time, the information collected will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. The social networks named below are integrated using the “Shariff” function.
You can find more information on the scope and purpose of the collection and use of the data as well as your rights and options for protecting your privacy in the linked data protection notices of the providers.

AddThis from Oracle America, Inc. (500 Oracle Parkway, Redwood Shores, CA 94065, USA) https://www.addthis.com/privacy/privacy-policy

Facebook of Facebook Inc. (1601 S. California Ave, Palo Alto, CA 94304, USA) https://www.facebook.com/policy.php

Instagram of Instagram LLC. (1601 Willow Road, Menlo Park, CA 94025, USA) https://help.instagram.com/155833707900388

LinkedIn of the LinkedIn Corporation (2029 Stierlin Court, Mountain View, CA 94043, USA)
https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy

Pinterest from Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA) https://about.pinterest.com/de/privacy-policy

Twitter from Twitter Inc. (1355 Market Street, Suite 900, San Francisco, CA 94107, USA) https://twitter.com/privacy

Use of Google reCAPTCHA 
We use the reCAPTCHA service from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) on our website.
If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and for compliance with the applicable data protection laws. The purpose of the query is to distinguish between the input by a person or by automated, machine processing. For this purpose, your input will be transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service will be transmitted to Google. These data are processed by Google within the European Union and, if necessary, also transmitted to the USA. Google has certified itself under the US-EU data protection agreement “Privacy Shield” and is thus obliged to comply with European data protection guidelines.
Processing takes place on the basis of Art. 6 Para. 1 lit. f DSGVO from the legitimate interest of protecting our website from automated spying, abuse and SPAM. For reasons that arise from your particular situation, you have the right to refer to Art. 6 Para. 1 lit. f GDPR-based processing of your personal data.
You can find more information about Google reCAPTCHA and the associated data protection declaration at: https://www.google.com/recaptcha/intro/android.html such as https://www.google.com/privacy.

Use of GoogleMaps
We use the function for embedding GoogleMaps maps from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; "Google") on our website.
If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the person responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and for compliance with the applicable data protection laws.
The function enables the visual display of geographic information and interactive maps. Google also collects, processes and uses data from visitors to the website when the pages in which GoogleMaps maps are integrated are accessed.
Your data may also be transmitted to the USA. Google has certified itself under the US-EU data protection agreement “Privacy Shield” and is thus obliged to comply with European data protection guidelines.
The data processing, in particular the setting of cookies, takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation.
You can find more information on the collection and use of data by Google in Google's data protection information at https://www.google.com/privacypolicy.html. There you can also change your settings in the data protection center so that you can manage and protect the data processed by Google.

Use of YouTube
We use the function of embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is an affiliate of Google LLC (1600 Amphitheater Parkway, Mountain View, CA. 94043, USA; “Google”) affiliated company.
The function shows videos stored on YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transmitted to the USA. Google has certified itself under the US-EU data protection agreement “Privacy Shield” and is thus obliged to comply with European data protection guidelines.
The data processing takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation.
For more information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy, see the YouTube data protection information at https://www.youtube.com/t/privacy.

Use of consent manager
We use the consent management tool Consentmanager from Jaohawi AB (Håltegelvägen 1b, 72348 Västerås, Sweden; "Consentmanager") on our website.
The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to make use of your right of withdrawal for consent that has already been given.
The data processing serves the purpose of obtaining and documenting the necessary consent for data processing and thus complying with legal obligations.
Cookies may be used. Among other things, the following information can be collected and transmitted to the consent manager: Date and time of the page view, information about the browser and device you are using, anonymized IP address, opt-in and opt-out data. This data is not passed on to other third parties.
The data processing is carried out to fulfill a legal obligation on the basis of Art. 6 Para. 1 lit. c GDPR.
You can find more information on data protection at Consentmanager at: https://www.consentmanager.net/privacy.php

Affected rights and storage duration

Duration of storage
After the contract has been fully processed, the data is initially stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial retention periods, and then deleted after the deadline, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights according to Art. 15 to 20 GDPR: Right to information, to correction, to deletion, to restriction of processing, to data portability.
In addition, according to Art. 21 Paragraph 1 GDPR, you have the right to object to processing based on Art. 6 Paragraph 1 f GDPR, as well as against processing for the purpose of direct advertising.

Right of appeal to the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you are of the opinion that the processing of your personal data is not lawful.

Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 Para. 1 lit. f GDPR, you have the right, for reasons that arise from your particular situation, to object to this processing at any time with effect for the future.
After the objection has been made, the processing of the data concerned will be terminated, unless we can prove compelling legitimate reasons for the processing which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If the personal data processing is carried out for the purposes of direct advertising, you can object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for the purpose of direct advertising.

last update: 23.10.2019