Privacy policy

1) Introduction and contact details of the controller

1.1 We are delighted that you are visiting our website and thank you for your interest. Below we inform you about how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Arbaz Mohammad, BulkShopForAll, Kreuzbergstraße 6, 66333 Völklingen, Germany, Tel.: +49 179 1655296, e-mail: info@bulkshopforall.com. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

2) Data collection when visiting our website

2.1 When you use our website purely for informational purposes, i.e. when you do not register or otherwise provide us with information, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The website visited
Date and time of access
Amount of data sent, in bytes
Source/reference from which you arrived at the page
Browser used
Operating system used
IP address used (if applicable, in anonymised form)

This processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. Your data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there is concrete evidence of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

3) Hosting & content delivery network

3.1 Shopify

For hosting our website and displaying its content, we use the services of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify")

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Fastly

We use a content delivery network provided by the following provider: Fastly Inc., 475 Brannan St. #300, San Francisco, CA 94107, USA

This service enables us to deliver large media files, such as graphics, page content or scripts, more quickly via a network of regionally distributed servers. This processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6(1)(f) GDPR. We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which, on the basis of an adequacy decision of the European Commission, ensures compliance with the European level of data protection.

4) Cookies

To make visiting our website appealing and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain on your device for a longer period of time and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of your web browser's cookie settings.

Insofar as personal data is also processed by individual cookies we use, the processing takes place in accordance with Art. 6(1)(b) GDPR to perform the contract, in accordance with Art. 6(1)(a) GDPR where consent has been given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective website experience.

You can set your browser so that you are informed when cookies are set and decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting us

5.1 Shopify Inbox

This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Personal data transmitted via the chat is processed either in accordance with Art. 6(1)(b) GDPR, because it is necessary for entering into or performing a contract, or in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing effective support to our website visitors.
The data transmitted in this way will be deleted, subject to any conflicting statutory retention periods, once the matter concerned has been finally resolved.

In addition, further information may be collected and evaluated using cookies for the purpose of creating pseudonymised usage profiles; this information does not, however, serve to identify you personally and is not merged with other data sets. Insofar as this information relates to a person, the processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.

The setting of cookies can be prevented by means of appropriate browser settings. In this case, however, the functionality of our website may be limited.
You may object to the collection and storage of data for the purpose of creating a pseudonymised usage profile at any time, with effect for the future.

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

5.2 Trustpilot

For review reminders, we use the services of the following provider: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark

Solely on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, we transmit your e-mail address and, where applicable, further customer data to the provider so that it can contact you with a review reminder by e-mail.

You may withdraw your consent at any time, with effect for the future, by notifying us or the provider.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

5.3 WhatsApp Business

You have the option of contacting us via the WhatsApp messaging service operated by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose we use the so-called "Business" version of WhatsApp.

If you contact us via WhatsApp in connection with a specific transaction (for example, an order you have placed), we store and use the mobile phone number you use for WhatsApp and, if provided, your first and last name in accordance with Art. 6(1)(b) GDPR in order to process and respond to your query. On the same legal basis, we may also ask you via WhatsApp to provide further information (order number, customer number, address or e-mail address) so that we can assign your enquiry to a specific matter.

If you use our WhatsApp contact for general enquiries (for example, regarding our range of services, availability or our website), we store and use the mobile phone number you use for WhatsApp and, if provided, your first and last name in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in providing the requested information efficiently and promptly.

Your data is only ever used to respond to your query via WhatsApp. It is not passed on to third parties.

Please note that WhatsApp Business is given access to the address book of the mobile device we use for this purpose and automatically transmits telephone numbers stored in the address book to a server of the parent company, Meta Platforms Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact details of users who have themselves been in contact with us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already, upon first using the app on their device, consented in accordance with Art. 6(1)(a) GDPR to the transmission of their WhatsApp phone number from the address books of their chat contacts by accepting WhatsApp's terms of use. A transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

Please refer to WhatsApp's privacy notice for information on the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and settings options for protecting your privacy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

In connection with the processing described above, data may be transferred to servers of Meta Platforms Inc. in the USA.

5.4 When you contact us (e.g. via a contact form or e-mail), personal data is processed exclusively for the purpose of handling and responding to your enquiry, and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at entering into a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention obligations apply.

6) Comment function

When you use the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you have chosen will be stored and published on this website. Your IP address is also logged and stored. This storage of the IP address takes place for security reasons and in case the person concerned violates the rights of third parties or posts unlawful content through a comment they have made. We need your e-mail address to contact you if a third party objects to your published content as being unlawful.

The legal bases for storing your data are Art. 6(1)(b) and (f) GDPR. We reserve the right to delete comments that are objected to by third parties as unlawful.

7) Data processing when opening a customer account

In accordance with Art. 6(1)(b) GDPR, personal data continues to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. Please refer to the input mask of the relevant form on our website for details of which data is required to open an account.

Your customer account can be deleted at any time by sending a message to the controller's address given above. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, no statutory retention periods conflict with this, and we no longer have a legitimate interest in retaining it.

8) Use of customer data for direct marketing purposes

8.1 Sign-up for our e-mail newsletter

If you sign up for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information required to send you the newsletter is your e-mail address. Providing any further information is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which ensures that you will only receive the newsletter once you have expressly confirmed your consent to receiving it by clicking on a verification link sent to the e-mail address provided.

By clicking the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you sign up for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending an appropriate message to the controller named at the outset. After you unsubscribe, your e-mail address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data further to an extent permitted by law and about which we inform you in this policy.

8.2 Shopify Email

Our e-mail newsletters are sent via the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provide when signing up for the newsletter to this provider in accordance with Art. 6(1)(f) GDPR, so that it can carry out the newsletter distribution on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels embedded in the e-mails sent, which can measure open rates and specific interactions with the newsletter content. In doing so, device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but is not merged with other data sets.
You can withdraw your consent to newsletter tracking at any time, with effect for the future.

We have concluded a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

Where data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

8.3 Product availability notification by e-mail

For temporarily unavailable items, you can sign up to receive e-mail notifications when the item becomes available again. In this case, we will send you a one-off e-mail notifying you of the availability of the item you selected. The only mandatory information required to send you this notification is your e-mail address. Providing any further information is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending these e-mails, which ensures that you will only receive a notification once you have expressly confirmed your consent by clicking on a verification link sent to the e-mail address provided.

By clicking the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you sign up for our e-mail product availability notification service is used strictly for the intended purpose.

You can unsubscribe from the availability notifications at any time by sending an appropriate message to the controller named at the outset. After you unsubscribe, your e-mail address will be deleted from our distribution list set up for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data further to an extent permitted by law and about which we inform you in this policy.

8.4 Shopping cart reminders by e-mail

If you abandon your purchase with us before completing an order, you have the option of receiving a one-off e-mail reminder about the contents of your virtual shopping cart.

The only mandatory information required to send you this reminder is your e-mail address. Providing any further information is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending these e-mails, which ensures that you will only receive a notification once you have expressly confirmed your consent by clicking on a verification link sent to the e-mail address provided.

By clicking the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR for the purpose of sending a shopping cart reminder. In doing so, we store the IP address assigned by your internet service provider (ISP) as well as the date and time of registration, in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you sign up for our e-mail notification service is used strictly for the intended purpose.

You can unsubscribe from the shopping cart reminders at any time by sending an appropriate message to the controller named at the outset. After you unsubscribe, your e-mail address will be deleted from our distribution list set up for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data further to an extent permitted by law and about which we inform you in this policy.

9) Data processing for order fulfilment

9.1 Insofar as necessary for the performance of the contract for delivery and payment purposes, the personal data we collect is passed on in accordance with Art. 6(1)(b) GDPR to the shipping company and the credit institution engaged.

If, under a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order in order to inform you personally as part of our statutory information obligations in accordance with Art. 6(1)(c) GDPR. Your contact details are used strictly for the purpose of notifying you of updates we owe you and are only processed by us to the extent necessary for the respective notification.

To process your order, we also work with the service provider(s) listed below, who support us fully or in part in performing concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

9.2 Shopify Digital Download

For order processing, we use the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Your name, address and, where applicable, other personal data are passed on to the provider in accordance with Art. 6(1)(b) GDPR solely for the purpose of processing your online order. Your data is only passed on to the extent actually necessary to process the order.

9.3 Shopify Order Printer

For order processing, we use the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

Your name, address and, where applicable, other personal data are passed on to the provider in accordance with Art. 6(1)(b) GDPR for the purpose of processing your online order. Your data is only passed on to the extent actually necessary to process the order. The provider is also used for accounting purposes. It processes incoming and outgoing invoices as well as, where applicable, our company's bank transactions in order to automatically record invoices, match them to transactions and, through a partially automated process, generate our financial accounts.

Insofar as personal data is also processed in this context, the processing takes place in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business operations.

9.4 Use of payment service providers

- Amazon Pay

One or more online payment methods offered by the following provider are available on this website: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg

If you select a payment method from this provider for which you make an advance payment (such as credit card payment), the payment data you provide during the ordering process (including name, address, banking and card details, currency and transaction number), as well as information about the content of your order, will be passed on to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is only passed on for the purpose of processing payment with the provider and only to the extent necessary for that purpose.
- Apple Pay

If you choose the "Apple Pay" payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the "Apple Pay" function of your device running iOS, watchOS or macOS, by charging a payment card stored in "Apple Pay". Apple Pay uses security features built into your device's hardware and software to protect your transactions. To authorise a payment, you must therefore enter a code you have previously set, and verify it via your device's "Face ID" or "Touch ID" function.

For the purpose of processing payment, the information you provide during the ordering process, together with information about your order, is passed on to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before it is transmitted to the payment service provider of the payment card stored in Apple Pay in order to carry out the payment. This encryption ensures that only the website through which the purchase was made can access the payment data. Once payment has been made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm that payment was successful.

Insofar as personal data is processed in the course of the transmissions described, this is done exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.

Apple retains anonymised transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. This anonymisation completely rules out any connection to a specific person. Apple uses the anonymised data to improve "Apple Pay" and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made via Safari on your Mac, your Mac and the authorisation device communicate over an encrypted channel via Apple's servers. Apple does not process or store any of this information in a format that could be used to identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone's settings. To do so, go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".

Further information on data protection with Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027
- Bancontact

One or more online payment methods offered by the following provider are available on this website: Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium

If you select the "Cash Payment" payment method, we pass on your personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address and, if applicable, telephone number) for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR to the payment service provider Cash Payment Solutions GmbH, Dircksenstr. 40, 10178 Berlin, so that Cash Payment Solutions GmbH can provide you with an individually generated number or barcode (so-called "payment slip") for the respective transaction. This data is only passed on to the extent necessary to carry out the "Cash Payment" payment method. Using the payment slip, you can pay the respective transaction amount in cash at the business premises of partner companies of Cash Payment Solutions GmbH. The cash-payment partner company transmits the payment confirmation in real time, whereupon the shipping process can begin immediately, provided the goods are immediately available.

To carry out the "Cash Payment" payment method, Cash Payment Solutions GmbH uses the credit institution NordFinanz Bank Aktiengesellschaft, Martinistraße 48, 28195 Bremen (hereinafter "NordFinanz") and passes on your payment data to it, in accordance with Art. 6(1)(b) GDPR, insofar as this is necessary to carry out the cash payment.

Both Cash Payment Solutions GmbH and NordFinanz use your personal data exclusively for the purposes of implementing the "Cash Payment" payment method and complying with anti-money-laundering regulations.
- giropay

One or more online payment methods offered by the following provider are available on this website: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany

One or more online payment methods offered by the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you select a payment method for which the provider makes an advance payment (such as purchase on account, instalment purchase or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number and, where applicable, details of an alternative payment method).

In order to safeguard our legitimate interest in establishing our customers' ability to pay, this data is forwarded by us to the provider in accordance with Art. 6(1)(f) GDPR for the purpose of a credit check. Based on the personal data you have provided, as well as other data (such as shopping cart, invoice amount, order history, payment experience), the provider assesses whether the payment method you have selected can be granted in view of the risk of non-payment and/or default.

For the purposes of this credit assessment, in addition to the provider's own internal criteria, identity and credit information from the following credit reporting agencies may also be taken into account in accordance with Art. 6(1)(f) GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, though not exclusively, address data is included in the calculation of the score values.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data insofar as this is necessary for payment processing in accordance with the contract.
- PayPal

One or more online payment methods offered by the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method from this provider for which you make an advance payment, the payment data you provide during the ordering process (including name, address, banking and card details, currency and transaction number), as well as information about the content of your order, will be passed on to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is only passed on for the purpose of processing payment with the provider and only to the extent necessary for that purpose.

If you select a payment method for which we make an advance payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number and, where applicable, details of an alternative payment method).

In such cases, in order to safeguard our legitimate interest in establishing your ability to pay, this data is forwarded by us to the provider in accordance with Art. 6(1)(f) GDPR for the purpose of a credit check. Based on the personal data you have provided, as well as other data (such as shopping cart, invoice amount, order history, payment experience), the provider assesses whether the payment method you have selected can be granted in view of the risk of non-payment and/or default.

This website uses PayPal Checkout, an online payment system offered by PayPal that combines PayPal's own payment methods with local third-party payment methods.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay Later" via PayPal, we pass on your payment data as part of payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). This disclosure is made in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay Later" via PayPal. For this purpose, your payment data may be passed on to credit reporting agencies in accordance with Art. 6(1)(f) GDPR on the basis of PayPal's legitimate interest in establishing your ability to pay. PayPal uses the result of the credit check regarding the statistical probability of non-payment to decide whether to offer the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Among other things, though not exclusively, address data is included in the calculation of the score values. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may remain entitled to process your personal data insofar as this is necessary for payment processing in accordance with the contract.

If the PayPal payment method "Purchase on account" is available and selected, your payment data is initially transmitted to PayPal to prepare the payment, whereupon PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay"), to carry out the payment. The legal basis in each case is Art. 6(1)(b) GDPR. In this case, Ratepay carries out, in its own name, an identity and credit check to establish your ability to pay, following the principle already described above, and passes on your payment data to credit reporting agencies on the basis of its legitimate interest in establishing your ability to pay in accordance with Art. 6(1)(f) GDPR. A list of the credit reporting agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/

If you use a local third-party payment method, your payment data is initially passed on to PayPal to prepare the payment in accordance with Art. 6(1)(b) GDPR. Depending on your choice of an available local payment method, PayPal then transmits your payment data to the relevant provider to carry out the payment, in accordance with Art. 6(1)(b) GDPR:

- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDEAL (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- BLIK (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- EPS (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments

One or more online payment methods offered by the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland

One or more online payment methods offered by the following provider are available on this website: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

10) Web analytics services

10.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google (Universal) Analytics sets cookies, which are small text files stored on your device and which collect certain information. This information also includes your IP address, which is, however, shortened by Google by the last digits to rule out any direct link to a specific person.

The information is transmitted to Google's servers and processed there. This may also involve transfers to Google LLC, based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide further services related to the use of the website and the internet. The abbreviated IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google. Data collected in connection with the use of Google (Universal) Analytics is stored for a period of two months and then deleted.

All the processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can withdraw your consent at any time, with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information on Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google (Universal) Analytics uses the special "demographic characteristics" function and can use it to create statistics that provide information about the age, gender and interests of website visitors. This is done through the analysis of advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after a storage period of two months.

Google Signals
As an extension of Google (Universal) Analytics, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including on cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalised advertising" feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

User IDs
As an extension of Google (Universal) Analytics, the "User IDs" function may be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6(1)(a) GDPR, have set up an account on this website, and log in with this account on various devices, your activities, including conversions, can be analysed across devices.

10.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and which collect certain information. This information also includes your IP address, which is, however, shortened by Google by the last digits to rule out any direct link to a specific person.

The information is transmitted to Google's servers and processed there. This may also involve transfers to Google LLC, based in the USA.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us, and to provide further services related to the use of the website and the internet. The abbreviated IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google. Data collected in connection with the use of Google Analytics 4 is stored for a period of two months and then deleted.

All the processing described above, in particular the setting of cookies on the device used, only takes place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can withdraw your consent at any time, with effect for the future. To exercise your right of withdrawal, please deactivate this service via the "cookie consent tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information on Google Analytics 4 can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special "demographic characteristics" function and can use it to create statistics that provide information about the age, gender and interests of website visitors. This is done through the analysis of advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be assigned to a specific person and is deleted after a storage period of two months.

Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including on cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalised advertising" feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information on Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

User IDs
As an extension of Google Analytics 4, the "User IDs" function may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) GDPR, have set up an account on this website, and log in with this account on various devices, your activities, including conversions, can be analysed across devices.

11) Retargeting/remarketing and conversion tracking

idealo Performance Tracking

We use a tracking technology provided by Ingenious Technologies AG, Französische Straße 48, 10117 Berlin, to establish a connection between a user's click on an advertisement or the display of an advertisement (touch point) and an action taken by you (e.g. a purchase in the online shop or a newsletter registration). At each touch point, your browser sends an HTTP request to Ingenious's server, which transmits certain information.

This information includes the URL of the web page on which the advertisement is placed (referrer URL), the browser identifier (user agent) of the device (including information about the device type and operating system), the IP address of the device (this IP address is anonymised by Ingenious before storage), HTTP headers (a data packet with various technical information automatically transmitted by your browser), the time of the request and, if already stored on the device, the cookie together with its entire content.

A cookie is a small data packet exchanged between your browser and the server. Information relevant to the web application can be stored and transmitted in this data packet, for example the content of a virtual shopping cart.

The tracking technology stores cookies on your device to document actions. The cookie stores information about the most recent touch points (i.e. when a particular advertisement was displayed to or clicked on by a device). The cookie also stores a cookie ID generated by Ingenious. Data on the touch points that have occurred and information about your actions are stored by Ingenious against this cookie ID. The stored touch points can, where applicable, be assembled into a sequence chain (user journey).

In the case of an action request, the order number and the shopping cart value of your order are usually also transmitted and stored by Ingenious. In addition, the following values may be transmitted and stored: your customer number, new-customer indicator, your age and gender, as well as any information you provided in a customer survey.

The information and cookies transmitted to Ingenious are used exclusively for the purpose of correctly attributing the success of an advertisement and the corresponding billing.

All the processing described above, in particular the setting of cookies to read out information on the device used, is only carried out if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can withdraw your consent at any time, with effect for the future, by deactivating this service in the "cookie consent tool" provided on the website.

The collection and processing of tracking data can alternatively be deactivated by visiting the tracking opt-out page named below:

https://marketing.net.idealo-partner.com/ts/I123456/tsv?settrackingoptout

When you visit the tracking opt-out page, a special cookie is written, which disables tracking in the current web browser on the device. However, tracking will be reactivated as soon as you delete the tracking opt-out cookie.

We inform you below of which specific cookies are used by our tracking technology:

The cookie named "tsv" is written when an advertisement is displayed. This cookie contains a cookie ID as well as a list of data on the most recent view touch points, consisting of the time, referrer URL and ad media code (a unique identifier for an advertisement that contains information about the sales channel, publisher, publisher website and advertisement).

The cookie named "tsc" is written when an advertisement is clicked on. This cookie contains a cookie ID and a list of data on the most recent click touch points, consisting of the time, referrer URL, ID of the page in the customer's shop system, and ad media code (a unique identifier for an advertisement that contains information about the sales channel, publisher, publisher website and advertisement).

The cookie named "trackingoptout" is written when the opt-out link is clicked, so that tracking is disabled for the current web browser on this device.

12) Website functionalities

Shopsync for Shopify

This website uses the Shopify app "Shopsync" provided by ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA.
ShopSync is used to synchronise the "Mailchimp" newsletter service with our Shopify account, so that, on the one hand, updates to Mailchimp's e-mail lists (such as a recipient's opt-out from the newsletter) are also automatically recorded in Shopify, and, on the other hand, new contact data generated through transactions concluded on Shopify is automatically transferred to Mailchimp's e-mail lists.

In the first case, data is processed in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in maintaining effective, cross-system records of marketing recipients and efficiently accounting for legally significant status changes.

In the second case, following the conclusion of a transaction on Shopify, the user's first and last name, address and e-mail address, together with transaction-related information (purchase amount, time and date of purchase), are transmitted by ShopSync to Mailchimp for inclusion in the Mailchimp list, solely on the basis of the user's express consent in accordance with Art. 6(1)(a) GDPR.

Data transmitted in this way is not stored or retained by ShopSync after synchronisation. All information synchronised between Shopify and Mailchimp is transmitted using SSL (Secure Socket Layer) technology, and all transmitted information remains encrypted during the synchronisation process.

The synchronisation process requires the transmission of information over a secure connection to servers hosted by Amazon Web Services in the USA.

Further data protection information on ShopSync can be found here: https://www.shop-sync.com/privacy-policy

13) Rights of the data subject

13.1 Applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data; the applicable requirements for exercising these rights are set out in the legal basis referenced in each case:

Right of access in accordance with Art. 15 GDPR;
Right to rectification in accordance with Art. 16 GDPR;
Right to erasure in accordance with Art. 17 GDPR;
Right to restriction of processing in accordance with Art. 18 GDPR;
Right to notification in accordance with Art. 19 GDPR;
Right to data portability in accordance with Art. 20 GDPR;
Right to withdraw consent given, in accordance with Art. 7(3) GDPR;
Right to lodge a complaint in accordance with Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH EFFECT FOR THE FUTURE, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of storage of personal data

The duration for which personal data is stored is determined by the relevant legal basis, the purpose of the processing and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent in accordance with Art. 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

Where statutory retention periods exist for data processed in connection with contractual or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, this data is routinely deleted once the retention periods have expired, provided it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in its continued storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Where personal data is processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data is stored until you exercise your right to object under Art. 21(2) GDPR.

Unless otherwise indicated by the other information in this policy regarding specific processing situations, stored personal data will otherwise be deleted once it is no longer necessary for the purposes for which it was collected or otherwise processed.

As of: 10.07.2026, 20:41:59

Office Packages

Office Packages for Mac

Office Programs

Microsoft Project

Microsoft Visio

Microsoft Visual Studio

Office Packages

Office Packages for Mac

Office Programs

Microsoft Project

Microsoft Visio

Microsoft Visual Studio

Privacy policy

1) Introduction and contact details of the controller

2) Data collection when visiting our website

3) Hosting & content delivery network

4) Cookies

5) Contacting us

6) Comment function

7) Data processing when opening a customer account

8) Use of customer data for direct marketing purposes

9) Data processing for order fulfilment

10) Web analytics services

11) Retargeting/remarketing and conversion tracking

12) Website functionalities

13) Rights of the data subject

14) Duration of storage of personal data

ABOUT US

Products

Information

Shopping Cart

Office Packages

Office Packages for Mac

Office Programs

Microsoft Project

Microsoft Visio

Microsoft Visual Studio

Office Packages

Office Packages for Mac

Office Programs

Microsoft Project

Microsoft Visio

Microsoft Visual Studio

Search our store

Privacy policy

1) Introduction and contact details of the controller

2) Data collection when visiting our website

3) Hosting & content delivery network

4) Cookies

5) Contacting us

6) Comment function

7) Data processing when opening a customer account

8) Use of customer data for direct marketing purposes

9) Data processing for order fulfilment

10) Web analytics services

11) Retargeting/remarketing and conversion tracking

12) Website functionalities

13) Rights of the data subject

14) Duration of storage of personal data

ABOUT US

Products

Information

Sign Up Now

Shopping Cart