Data protection

1. General information and principles of data processing

We are pleased that you are visiting our website. Protecting your privacy and the protection of your personal data, known as personal information, when using our website is important to us.

According to Art. 4 No. 1 GDPR, personal data is all information relating to an identified or identifiable natural person. This includes, for example, information such as their first and last name, address, telephone number, email address, and IP address.

Data that cannot be linked to you personally, for example, through anonymization, is not personal data. Processing (e.g., collection, storage, retrieval, querying, use, transmission, deletion, or destruction) pursuant to Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention periods.

Here you will find information about how we handle your personal data when you visit our website. In order to provide the features and services of our website, we need to collect personal data about you.

We will also explain to you the type and scope of the respective data processing, the purpose and the corresponding legal basis and the respective storage period.

This privacy policy applies only to this website. It does not apply to other websites to which we merely refer via hyperlink. We cannot accept any responsibility for the confidential treatment of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself about how these companies handle your personal data directly on these websites.

2. Responsible body

Responsible for the processing of personal data on this website is (see imprint):

Happiness & Shine CGN GmbH
Pfeilstraße 31-35
50672 Cologne
Represented by: Phillis Maaß, Mirko Biendara
Contact:
Phone: 0221 67 77 94 22
Email: info@glueckund Glanz.de

3. Provision and use of the website/server log files

a) Type and scope of data processing
If you use this website without otherwise transmitting data to us (e.g. by registering or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, including:

• IP address

• Date and time of the request

• Name and URL of the retrieved file

• Website from which access is made (referrer URL)

• Access status/HTTP status code

• Browser type

• Language and version of the browser software

• Operating system

b) Purpose and legal basis
This processing is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 (1) (f) GDPR. The processing of this data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

c) Storage period
As soon as the aforementioned personal data is no longer required to display the website, it will be deleted. The collection of data to provide the website and the storage of data in log files is essential for the operation of the website. Therefore, the user has no right to object to this aspect. Further storage may occur in individual cases if required by law.

4. Use of cookies

a) Type, scope and purpose of data processing
We use cookies. Cookies are small files that we send to your device's browser and store when you visit our website.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses. For example, some cookies can recognize the browser you use when you visit our website again and transmit various information to us. We use cookies to make our website easier and to improve it. Among other things, cookies enable us to make our internet offering more user-friendly and effective for you by, for example, tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly from your browser. However, cookies do not cause any damage to your device. They cannot run programs and do not contain viruses. Our website uses various types of cookies; their type and function are explained below.

Temporary cookies/session cookies

Our website uses so-called temporary cookies, or session cookies , which are automatically deleted as soon as you close your browser. These cookies make it possible to record your session ID. This allows various browser requests to be assigned to a common session, making it possible to recognize your device on subsequent website visits.

Persistent cookies

Our website uses so-called permanent cookies. Persistent cookies are cookies that are stored in your browser for an extended period of time and can transmit information. The storage period varies depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Third-party cookies

We use analytical cookies to monitor anonymized user behavior on our website.

We also use advertising cookies. These cookies allow us to track user behavior for advertising and targeted marketing purposes.

Social media cookies allow you to connect to your social networks and share content from our website within your networks.

Configuring browser settings

Most web browsers are preset to automatically accept cookies. However, you can configure your browser to accept only certain cookies or even prevent them altogether. Please note, however, that if you do this, you may not be able to use all the features of our website.

You can also delete cookies already stored in your browser via your browser settings. Furthermore, you can set your browser to notify you before cookies are stored. Since different browsers may operate differently, please refer to your browser's Help menu for the relevant configuration options.

Disabling cookies may require a permanent cookie to be stored on your computer. If you subsequently delete that cookie, you will need to disable it again.

b) Legal basis
Due to the purposes described, the legal basis for processing personal data using cookies is Art. 6 (1) (f) GDPR. If you have given us your consent to use cookies based on a notice we provided on the website ("cookie banner"), the legal basis is also Art. 6 (1) (a) GDPR.

c) Storage period
As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may occur in individual cases if required by law.

5. Data collection for the implementation of pre-contractual measures and for the performance of the contract

a) Type and scope of data processing
We collect personal data about you during the pre-contractual process and upon conclusion of the contract. This includes, for example, your first and last name, address, email address, telephone number, and bank details.

b) Purpose and legal basis of data processing
We collect and process this data exclusively for the purpose of executing the contract or fulfilling pre-contractual obligations

The legal basis for this is Art. 6 (1) (b) GDPR. If you have also given your consent, the additional legal basis is Art. 6 (1) (a ) GDPR.

c) Storage period
The data will be deleted as soon as it is no longer required for the purpose for which it was processed.

In addition, statutory retention obligations may apply, for example, retention obligations under commercial or tax law pursuant to the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

6. Order form

There is an order form on our website that can be used for electronic pre-orders.

a) Type and scope of data processing
Our data collection is limited to the following data:

• First and Last Name

• Address

• Telephone number

• E-mail address

• Account details

• Name of the product

b) Purpose and legal basis
The purpose of data processing is to enable us to process your order properly.

The legal basis for this is Art. 6 (1) (b) GDPR. The processing of data serves to fulfill a contract or is necessary for the implementation of pre-contractual measures taken at the request of the data subject.

c) Storage period
The data will be deleted as soon as it is no longer required to achieve the purpose of processing.

7. Registration option

a) Type and scope of data processing
You can register on our website. When you register, we collect and store the data you enter in the input form (e.g., last name, first name, email address). This data will not be shared with third parties.

b) Purpose and legal basis of data processing
Your registration is required for the use of certain content and services on our website, for the fulfillment of a contract, or to carry out pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or to have it completely deleted from the data records of the data controller.

In the case of consent, the legal basis for processing is Art. 6 (1) (a)
GDPR. If your registration serves to prepare for the conclusion of a contract, Art. 6 (1) (b) GDPR provides an additional legal basis.

c) Storage period
The data collected during registration will be stored by us for as long as you are registered on our website and will be deleted thereafter. Statutory retention periods remain unaffected.

8. Data transmission

We will only share your personal information with third parties if:

a) You have given your express consent in accordance with Art. 6 (1) (a) GDPR.

b) this is legally permissible and is necessary according to Art. 6 (1) (b) GDPR to fulfil a contractual relationship with you or to carry out pre-contractual measures.

c) there is a legal obligation to transfer the data pursuant to Art. 6 (1) (c) GDPR.

We are legally obliged to transmit data to government authorities, e.g. tax authorities, social security institutions, health insurance companies, supervisory authorities and law enforcement authorities.

d) the transfer is necessary in accordance with Art. 6 (1) (f) GDPR to safeguard legitimate company interests, as well as to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing your data.

e) in accordance with Art. 28 GDPR, we use external service providers, so-called processors, for processing, who are obliged to handle your data with care.

We use such service providers in the following areas:

• IT

• Logistics

• Telecommunications

When transferring data to external entities in third countries, i.e., outside the EU or EEA, we ensure that these entities treat your personal data with the same level of care as within the EU or EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or if we ensure the careful handling of personal data through contractual agreements or other appropriate safeguards.

9. Application opportunity
a) Type and scope of data processing
You can apply on our website or by email. When you apply, we collect and store the data you enter in the application form or send us via email.

b) Purpose and legal basis
We process your data only for the purpose of processing your application.
No data will be passed on to third parties. The legal basis for processing is Art. 88 (1) GDPR in conjunction with Section 26 of the German Federal Data Protection Act (BDSG) and, in addition, Art. 6 (1) (b) GDPR.

If you give us your consent to be included in our applicant pool, the legal basis is Art. 6 (1) (a) GDPR.

c) Storage period
If we are unable to offer you a position, we will retain your data for a maximum of six months after the end of the application process, taking into account Section 61b Paragraph 1 of the ArbGG in conjunction with Section 15 of the AGG. The period begins upon receipt of the rejection letter.

If you have given us your consent to be included in our applicant pool, we will store your data for a maximum of two years.

d) Data transfer
Your data will only be received by those departments involved in the decision (responsible HR or specialist departments, management, works council).

We are also obliged to transmit your data to public bodies and institutions (e.g. public prosecutors, police, supervisory authorities, tax authorities, social security institutions, etc.).

Other data recipients may be those entities for which you have given us your consent to transmit data.

10. Comment function

a) Type and scope of data processing
You can comment on posts on our website. When you comment on a post, we collect and store the data you enter into the input form. In addition to the comments you leave, information about the time the comment was submitted and, if applicable, the username (pseudonym) you choose will be stored and published. Furthermore, the IP address assigned to the data subject by the Internet service provider (ISP) will be stored. This data will not be passed on to third parties.

b) Purpose and legal basis
The data you transmit (e.g. IP address) is stored for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content through a comment.

The personal data collected will not be passed on to third parties unless such a transfer is required by law or serves the legal defense of the controller.

The legal basis for the processing of personal data transmitted when using the comment function, if and to the extent that you have given your consent, is Article 6 (1) (a) GDPR. You can revoke this consent at any time. The legality of the data processing operations already carried out remains unaffected by the revocation.

The further legal basis is Art. 6 (1) (f) GDPR.

We have a legitimate interest in processing data if third-party rights are violated or illegal content is posted. This serves as a security measure in case someone posts illegal content (insults, prohibited political propaganda, etc.)

c) Storage period
The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons.

11. Contact form

a) Type and scope of data processing
On our website, we offer you the opportunity to contact us using a form provided. When submitting your request via the contact form, reference will be made to this privacy policy to obtain your consent.

If you use the contact form, the following personal data will be processed:

- Salutation

- First name

- Last name

- Title

- Company

- Industry

- Function

- Street

- Street number

- Postal code

- Location

- Country

- E-mail address

- Telephone number

- Reference

- Content of the message

b) Purpose and legal basis
The purpose of providing your email address is to send you an answer to your inquiry by email. When you use the contact form, your personal data will not be passed on to third parties.

The legal basis for the processing is consent in accordance with Art. 6 (1) (a) GDPR based on the declaration of consent you have voluntarily given below and which can be revoked at any time in the future:

c) Storage period
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for storing the data no longer applies (e.g. after your request has been processed).

Mandatory legal provisions – in particular retention periods according to the German Commercial Code (HGB) or the German Tax Code (AO) – remain unaffected.

12. Contact options via email

You can contact us via email on our website.

a) Type and scope of data processing
You can contact us by email. Our data collection is limited to the email address of the email account you used to contact us, as well as any personal data you provide when contacting us.

b) Purpose and legal basis
The purpose of data processing is to enable us to respond to your request appropriately. The legal basis for this is Art. 6 (1) (f) GDPR. We have a legitimate interest in processing the above-mentioned personal data in order to process your request appropriately.

c) Storage period
The length of time the above-mentioned data is stored depends on the reason for your contact. Your personal data will be deleted regularly if the purpose of the communication no longer applies and storage is no longer necessary. This may, for example, result from processing your request.

13. Newsletter
a) Type and scope of data processing
On our website you have the option of subscribing to a free regular email newsletter. In order to send you the newsletter regularly, we need your email address.

We use the so-called double opt-in procedure to send newsletters. This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm that you wish to receive future newsletters from us by clicking on a corresponding link.

This ensures that only you, as the owner of the specified email address, can subscribe to the newsletter. Your confirmation must be made promptly after receiving the confirmation email, otherwise your newsletter subscription will be automatically deleted from our database.

If you subscribe to the newsletter, we collect and store the data you enter in the input mask (e.g. last name, first name, email address).

When you register for the newsletter, we also save your IP address entered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any possible misuse of your email address at a later date. In the confirmation email sent for control purposes (double opt-in in the
E-mail) we also save the date and time of clicking on the confirmation link and the IP address entered by the Internet Service Provider (ISP).

b) Purpose and legal basis
The data we collect when you register for the newsletter will be used exclusively for the purposes of advertising via the newsletter.

The processing of your e-mail address for sending the newsletter is based on Art. 6 (1) (a) GDPR and Section 7 (2) No. 3 UWG on the declaration of consent you voluntarily provide below and which can be revoked at any time in the future.

In addition, the processing is based on Art. 6 (1) (f) GDPR due to our legitimate interest in documenting the proof of the required consent.

c) Storage period
Your email address will be stored for as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, your email address will be deleted unless you have expressly consented to further use of your data.

MAILCHIMP

This website uses the services of MailChimp to send newsletters. The provider is Rocket Science Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

MailChimp is a service that, among other things, can be used to organize and analyze the distribution of newsletters. If you enter data for the purpose of subscribing to the newsletter (e.g., email address), this data will be stored on MailChimp's servers in the USA.

MailChimp is certified under the EU-US Privacy Shield. The Privacy Shield is an agreement between the European Union (EU) and the United States designed to ensure compliance with European data protection standards in the United States.

With the help of MailChimp, we can analyze our newsletter campaigns. When you open an email sent with MailChimp, a file contained in the email (a so-called web beacon) connects to MailChimp's servers in the USA. This makes it possible to determine whether a newsletter message has been opened and, if so, which links have been clicked. Technical information is also recorded (e.g., time of retrieval, IP address, browser type, and operating system). This information cannot be assigned to the respective newsletter recipient. It is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients.

If you do not want MailChimp to analyze your data, you must unsubscribe from the newsletter. We provide a link for this in every newsletter message. You can also unsubscribe directly from the newsletter on the website.

Data processing is based on your consent (Art. 6 (1) (a) GDPR). You can revoke this consent at any time by unsubscribing from the newsletter. The legality of the data processing operations already carried out remains unaffected by the revocation.

The data you provide us with for the purpose of subscribing to the newsletter will be stored by us until you unsubscribe from the newsletter. After you unsubscribe from the newsletter, the data will be deleted from both our servers and the MailChimp servers. Data stored by us for other purposes (e.g., email addresses for the members' area) will remain unaffected.

For more information, please see MailChimp’s privacy policy at: https://mailchimp.com/legal/terms/ .

Conclusion of a data processing agreement

We have entered into a so-called "Data Processing Agreement" with MailChimp, in which we obligate MailChimp to protect our customers' data and not to share it with third parties. This agreement can be viewed at the following link: https://mailchimp.com/legal/forms/data-processing-agreement/sample-agreement/ .

14. Tracking and analysis tools

A detailed overview of the web analysis and social media tools we use can be found below:

GOOGLE ANALYTICS

This website uses features of the web analysis service Google Analytics, provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website is typically transferred to a Google server in the United States and stored there.

Google Analytics cookies are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization function on this website. This means that your IP address will be shortened by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Browser plug-in

You can prevent cookies from being saved by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de .

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking the following link. This will set an opt-out cookie that prevents the collection of your data on future visits to this website: Disable Google Analytics.

For more information about how Google Analytics handles user data, please see Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de .

Contract data processing

We have concluded a contract for order data processing with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Demographic characteristics in Google Analytics

This website uses the "demographics" feature of Google Analytics. This allows reports to be created that contain information about the age, gender, and interests of site visitors. This data comes from interest-based advertising from Google as well as visitor data from third-party providers. This data cannot be assigned to a specific individual. You can deactivate this feature at any time via the ad settings in your Google Account or generally prohibit the collection of your data by Google Analytics as described in the "Objection to data collection" section.

GOOGLE ANALYTICS REMARKETING

Our websites use Google Analytics Remarketing in conjunction with the cross-device features of Google AdWords and Google DoubleClick. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

This feature allows you to link the advertising target groups created with Google Analytics Remarketing with the cross-device features of Google AdWords and Google DoubleClick. This allows interest-based, personalized advertising messages tailored to you based on your previous usage and browsing behavior on one device (e.g., mobile phone) to also be displayed on another of your devices (e.g., tablet or PC).

If you have given your consent, Google will link your web and app browsing history to your Google Account. This allows the same personalized advertising messages to be displayed on every device on which you log in with your Google Account.

To support this feature, Google Analytics collects Google-authenticated user IDs, which are temporarily linked to our Google Analytics data to define and create audiences for cross-device ad delivery.

You can permanently opt out of cross-device remarketing/targeting by deactivating personalized advertising in your Google Account; to do so, follow this link: https://www.google.com/settings/ads/onweb/ .

The collected data is aggregated in your Google Account solely on the basis of your consent, which you can give or withdraw to Google (Art. 6 (1) (a) GDPR). For data collection processes that are not aggregated in your Google Account (e.g., because you do not have a Google Account or have objected to the aggregation), the data is collected on the basis of Art. 6 (1) (f) GDPR. The legitimate interest arises from the website operator's interest in the anonymized analysis of website visitors for advertising purposes.

Further information and the data protection provisions can be found in Google's privacy policy at: https://www.google.com/policies/technologies/ads/ .

GOOGLE ADWORDS AND GOOGLE CONVERSION TRACKING

This website uses Google AdWords. AdWords is an online advertising program from Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

As part of Google AdWords, we use so-called conversion tracking. When you click on an ad placed by Google, a cookie is set for conversion tracking. Cookies are small text files that the Internet browser stores on the user's computer. These cookies expire after 30 days and are not used to personally identify users. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers' websites. The information collected using the conversion cookie is used to compile conversion statistics for AdWords customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you do not wish to participate in tracking, you can object to this use by easily deactivating the Google Conversion Tracking cookie in your internet browser under user settings. You will then not be included in the conversion tracking statistics.

Conversion cookies are stored on the basis of Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

For more information about Google AdWords and Google Conversion Tracking, please see Google’s privacy policy: https://www.google.de/policies/privacy/ .

You can configure your browser to inform you about the use of cookies and to only accept cookies on a case-by-case basis, to exclude cookies for specific cases or in general, and to automatically delete cookies when you close your browser. Disabling cookies may limit the functionality of this website.

GOOGLE RECAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

reCAPTCHA is designed to verify whether the data entered on our websites (e.g., in a contact form) is entered by a human or by an automated program. To do this, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis begins automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g., IP address, length of time the website visitor spends on the website, or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analysis runs entirely in the background. Website visitors are not notified that an analysis is taking place.

Data processing is based on Art. 6 (1) (f) GDPR. The website operator has a legitimate interest in protecting its web offerings from abusive automated spying and spam.

For more information about Google reCAPTCHA and Google's privacy policy, please visit the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html .

FACEBOOK PIXEL

Our website uses the visitor action pixel from Facebook, Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA (“Facebook”) to measure conversions.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and to optimize future advertising measures.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, allowing a connection to the respective user profile and allowing Facebook to use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. This allows Facebook to enable the placement of advertisements on Facebook pages and outside of Facebook. We, as the website operator, cannot influence this use of the data.

You can find further information on protecting your privacy in Facebook’s privacy policy: https://www.facebook.com/about/privacy/ .

You can also deactivate the "Custom Audiences" remarketing feature in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen . You must be logged in to Facebook to do so.

If you do not have a Facebook account, you can opt out of Facebook's usage-based advertising on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/ .

15. Data security and security measures

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we take extensive technical and organizational security measures, which are regularly reviewed and adapted to technological advances.

This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, data disclosed unencrypted, for example, via unencrypted email, may be read by third parties. We have no control over this. It is the responsibility of the respective user to protect the data they provide against misuse through encryption or other means.

16. Changes to the Privacy Policy

We reserve the right to update this statement at any time as necessary.

17. Your rights

Here you will find your rights regarding your personal data. Details can be found in Articles 7, 15-22, and 77 of the GDPR. You can contact the responsible party (Section 2) regarding this matter.

Right to withdraw your consent to data protection in accordance with Art. 7 (3) (1) GDPR

You can revoke your consent to the processing of your personal data at any time with future effect. However, this will not affect the legality of the processing carried out up to the time of revocation.

• Right to information according to Art. 15 GDPR
You have the right to request confirmation as to whether we process personal data concerning you. If so, you have the right to access this personal data as well as further information, such as the purposes of processing, the categories of personal data processed, the recipients, and the planned storage period or the criteria used to determine that period.

• Right to rectification and completion according to Art. 16 GDPR
You have the right to request the immediate rectification of inaccurate data. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

• Right to erasure (“right to be forgotten”) according to Art. 17 GDPR
You have the right to erasure if processing is not necessary.
This is the case, for example, if your data is no longer necessary for the original purposes, you have revoked your consent under data protection law or the data has been processed unlawfully.

• Right to restriction of processing according to Art. 18 GDPR

You have the right to restrict processing, e.g. if you believe that the personal data is inaccurate.

• Right to data portability according to Art. 20 GDPR
You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

• Right of objection according to Art. 21 GDPR
You have the right to object at any time to the processing of certain personal data concerning you for reasons related to your particular situation.

In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purposes of such advertising; this also applies to profiling insofar as it is related to such direct marketing.

• Automated decision-making in individual cases, including profiling, in accordance with Art. 22 GDPR
You have the right not to be subjected to a decision based solely on automated processing – including profiling – except in the exceptional circumstances mentioned in Article 22 GDPR.

Decision-making based solely on automated processing – including profiling – does not take place.

• Complaint to a data protection supervisory authority according to Art. 77 GDPR
You can also lodge a complaint with a data protection supervisory authority at any time, for example if you believe that the data processing is not in compliance with data protection regulations.

18. Payment providers

Paypal
On our website, we offer payment via PayPal, among other options. This payment service is provided by PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal").

If you choose to pay via PayPal, the payment details you enter will be transmitted to PayPal. Your data will be transferred to PayPal on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. Revoking your consent will not affect the effectiveness of past data processing operations.

Klarna
In order to offer you Klarna's payment options, we will transmit personal data, such as contact details and order data, to Klarna. This allows Klarna to assess whether you are eligible for the payment options offered through Klarna and to tailor the payment options to your needs. General information about Klarna can be found here . Your personal data will be treated by Klarna in accordance with applicable data protection regulations and in accordance with the information in Klarna's privacy policy.

We sell your bag! Get a personalized offer: