Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies insofar as no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
You can visit our websites without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or to our web host / IT service provider by your internet browser and stored in log data, so-called server log files. This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
Processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offering.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the European Commission exists for Canada. An adequacy decision by the European Commission also exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to the standard contractual clauses of the European Commission.
Controller
You may contact us if you wish. The controller responsible for data processing is: Daniel Holtwiesche, Häselstr. 57, 88422 Bad Buchau, Germany, 075829399935, cordula@danholt.de
Customer contact by e-mail on their own initiative
If you contact us by e-mail on your own initiative for business purposes, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of handling and responding to your contact request.
If the contact serves the implementation of pre-contractual measures, for example advice in the case of purchase interest or preparation of an offer, or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your e-mail address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you.
If the contact serves the implementation of pre-contractual measures, for example advice in the case of purchase interest or preparation of an offer, or relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your e-mail address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the withdrawal button
If you have concluded a contract via our online presence, we provide you with a withdrawal function (withdrawal button) through which you can submit your withdrawal declaration directly.
When using the withdrawal function, we collect your personal data (name, e-mail address, information for identifying the contract or part of the contract you wish to withdraw from, as well as the time (date and time) of submission of the withdrawal declaration) only to the extent provided by you. The data processing serves the purpose of providing you with the legally required option to withdraw from your contract and of properly processing your withdrawal.
If the contact relates to a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Otherwise, the data processing is carried out on the basis of Art. 6 para. 1 lit. c GDPR in order to fulfil a legal obligation to provide you with a withdrawal function on our online presence.
We use your e-mail address only to process your withdrawal declaration. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Disclosure to third-party providers (use of plug-ins)
For the technical provision and management of the withdrawal function on our online presence, we use a software solution from the third-party provider Shopify as part of commissioned processing. Your collected personal data will be transmitted to the servers of the above-mentioned third-party provider when the withdrawal function is used.
The processing of your personal data serves the purpose of fulfilling the legal requirements for the design of the withdrawal function in a legally compliant manner and is carried out on the basis of Art. 6 para. 1 lit. c GDPR. This data processing is also carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in being able to provide you with a user-friendly withdrawal option. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent up to the time of withdrawal. Your customer account will then be deleted.
Collection, processing and use of personal data for orders
When placing an order, we collect and process your personal data only insofar as this is necessary to fulfil and process your order and to handle your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the performance of a contract with you.
Your data may be passed on, for example, to the shipping companies and dropshipping providers selected by you, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to the minimum necessary.
Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision by the European Commission exists for Canada. An adequacy decision by the European Commission also exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is carried out on the basis of contractual obligations comparable to the standard contractual clauses of the European Commission.
Use of an external inventory management system
We use an inventory management system for contract processing as part of commissioned processing. For this purpose, your personal data collected as part of the order will be transmitted to
Billbee GmbH, Arolser Str. 10, 34477 Twistetal.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.
You can find information on how to manage cookies in the most important browsers, including how to disable them, under the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=en
Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/en-US/kb/clear-cookies-and-site-data-firefox
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Unless otherwise stated below in this privacy policy, we use only technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these functions, it is necessary for the browser to be recognized even after a page change.
The use of cookies or comparable technologies is carried out on the basis of § 25 para. 2 TDDDG. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and the user-friendly and effective design of our offering.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.
We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
The function displays videos stored on YouTube in an iFrame on the website. The “enhanced privacy mode” option is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information about this transmitted to YouTube and stored there. Your data may be transferred to the USA. An adequacy decision by the European Commission exists for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has therefore undertaken to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of § 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent up to the time of withdrawal.
Further information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy can be found in YouTube’s privacy policy at
(https://www.youtube.com/t/privacy).
Integration of the Händlerbund member logo
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated on our website. When our website is accessed, the browser used on your end device automatically sends information to the server of Händlerbund e.V. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until automatic deletion:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the accessed file,
- website from which access was made (referrer URL),
- browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must remain stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
Integration of the logo of the “FairCommerce” initiative
The logo of the “FairCommerce” initiative (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated on our website. When our website is accessed, the browser used on your end device automatically sends information to the server of Händlerbund e.V. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until automatic deletion:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the accessed file,
- website from which access was made (referrer URL),
- browser used and, if applicable, the operating system of your computer as well as the name of your access provider. The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must remain stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
Integration of the Käufersiegel logo
The Käufersiegel logo (Händlerbund Management AG, Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated on our website. When our website is accessed, the browser used on your end device automatically sends information to the server of Händlerbund Management AG. This information is temporarily stored in a so-called server log file for 7 days. The following information is collected without any action on your part and stored until automatic deletion:
- IP address of the requesting computer,
- date and time of access,
- name and URL of the accessed file,
- website from which access was made (referrer URL),
- browser used, protocol and, if applicable, the operating system of your computer as well as the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable delivery of the website. For this purpose, the IP address must remain stored for the duration of the session. Storage in log files is carried out to ensure the functionality of the website. In addition, the data is used to optimize the website and to ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
After full completion of the contract, the data will first be stored for the duration of the warranty period, thereafter in compliance with statutory retention periods, in particular under tax and commercial law, and then deleted after expiry of the period, unless you have consented to further processing and use.
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, under Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 lit. f GDPR, as well as to processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
Under Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You may lodge a complaint, among others, with the supervisory authority responsible for us, which you can contact using the following details:
Landesbeauftragte für den Datenschutz und die Informationsfreiheit Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Tel.: +49 711 6155410
Fax: +49 711 61554115
E-mail: poststelle@lfdi.bwl.de
If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right, for reasons arising from your particular situation, to object to this processing at any time with effect for the future.
Once an objection has been made, processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.
last updated: 19/06/2026
