Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary to enter into a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided in relation to the processing operations described below.

“Personal data” means any information relating to an identified or identifiable natural person.

Server log files

You can visit our website without providing information about yourself.

Whenever you access our website, your internet browser transmits usage data to us or to our web hosting provider / IT service provider, and this data is stored in log records known as server log files. The stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.

Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. The European Commission has adopted an adequacy decision for Canada. An adequacy decision also exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those contained in the European Commission's standard contractual clauses.

Contact

Controller

Please contact us if you wish. The controller responsible for data processing is: trends4cents Groß- und Einzelhandels-GmbH, Brückenstr. 22, 90768 Fürth, Germany, 0911/92330780, service@trends4cents.de.

Contact initiated by the customer by email

If you initiate business contact with us by email, we collect your personal data (name, email address and message text) only to the extent that you provide it. The purpose of processing this data is to handle and respond to your enquiry.

If you contact us in order to take steps prior to entering into a contract (e.g. advice regarding a potential purchase or the preparation of a quotation), or if your enquiry relates to a contract already concluded between you and us, this data is processed on the basis of Article 6(1)(b) GDPR.

If you contact us for other reasons, this data is processed on the basis of Article 6(1)(f) GDPR and our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Article 6(1)(f) GDPR.

We use your email address only to handle your enquiry. Your data will subsequently be deleted, subject to statutory retention periods, unless you have consented to further processing and use.

Collection and processing of data when using the contact form

When you use the contact form, we collect your personal data (name, email address and message text) only to the extent that you provide it. The purpose of processing this data is to facilitate contact.

If you contact us in order to take steps prior to entering into a contract (e.g. advice regarding a potential purchase or the preparation of a quotation), or if your enquiry relates to a contract already concluded between you and us, this data is processed on the basis of Article 6(1)(b) GDPR.

If you contact us for other reasons, this data is processed on the basis of Article 6(1)(f) GDPR and our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Article 6(1)(f) GDPR.

We use your email address only to handle your enquiry. Your data will subsequently be deleted, subject to statutory retention periods, unless you have consented to further processing and use.

Customer Account and Orders

Customer account

When you open a customer account, we collect your personal data to the extent specified during registration. The purpose of processing this data is to improve your shopping experience and simplify order processing. Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data when placing orders

When you place an order, we collect and process your personal data only insofar as necessary to fulfil and process your order and handle your enquiries. The provision of this data is necessary to conclude the contract. If you do not provide the data, no contract can be concluded. Processing is based on Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers involved in order processing and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of data transferred is limited to the minimum necessary.

Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. The European Commission has adopted an adequacy decision for Canada. An adequacy decision also exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those contained in the European Commission's standard contractual clauses.

Reviews and Advertising

Data collection when submitting a comment or review

When you comment on or review a product or a post, we collect your personal data (name, email address and comment text) only to the extent that you provide it. The purpose of processing this data is to enable comments and reviews to be submitted and displayed.

By submitting your comment or review, you consent to the processing of the data you have provided. Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal. Your personal data will then be deleted.

When your comment or review is published, the only name published will be the name you have provided.

Shopauskunft customer reviews

We use the “shopauskunft.de” review tool provided by Händlerbund Management AG (Kohlgartenstraße 11–13, 04315 Leipzig; “Shopauskunft”) on our website.

After you place an order, we would like to ask you to rate and comment on your purchase from us. For this purpose, we will contact you by email using the technical system “Rechtssichere Bewertungsanfrage (RBA)” (“Legally compliant review request”). In doing so, we process your order data (order number / invoice number, purchase value and shipping costs) and your email address. We may also use this data to verify your review.

Processing is based on Article 6(1)(a) GDPR with your consent, provided that you have expressly agreed to the disclosure of your data and to receiving the review request.

You may withdraw your consent at any time using the corresponding link in the email or by notifying us, without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on data protection when using Shopauskunft is available at:
https://www.shopauskunft.de/datenschutz.

Shopauskunft widget

The Shopauskunft widget is embedded on our website. Its purpose is to display the number and results of the reviews we have received through Shopauskunft and to use them for advertising.

To display the widget, it is technically necessary for your internet browser to transmit usage data to the Shopauskunft server and for this data to be stored in server log files for 7 days. The stored data includes the name and URL of the file accessed, the date and time of access, the IP address of the requesting computer, the website from which access originates (referrer URL), the browser used and, where applicable, your computer's operating system and the name of your internet access provider.

Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in promoting our offerings by displaying customer reviews already received. This data is not stored together with other personal data.

Use of your email address to send newsletters

We use your email address to send you information and offers by newsletter, provided that you have expressly consented to this. The sole purpose of processing this data is to send you marketing communications. For this purpose, we process your email address and, where applicable, other data you voluntarily provided when subscribing to our newsletter.

Processing is based on Article 6(1)(a) GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Even after removal from the mailing list, we may continue to store your email address on a suppression list to prevent you from receiving newsletter emails from us in the future. This storage is based on Article 6(1)(f) GDPR and our and your legitimate interest in preventing your email address from being used again to send our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Inventory Management

Use of an external inventory management system

We use an inventory management system for contract processing under a data processing arrangement. For this purpose, the personal data collected when you place your order is transferred to:

JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven.

Your personal data is processed for the purpose of performing the contract concluded with you, on the basis of Article 6(1)(b) GDPR.

Payment Service Providers and Credit Checks

Use of PayPal Checkout

We use the PayPal Checkout payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22–24 Boulevard Royal, L-2449 Luxembourg; “PayPal”) on our website. The purpose of processing this data is to enable us to offer payment through this payment service.

When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, the data necessary to process the payment is transferred to PayPal so that the contract with you can be performed using your selected payment method. This processing is based on Article 6(1)(b) GDPR.

Cookies may be stored in this context to enable your browser to be recognised. The resulting data processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Credit card via PayPal, direct debit via PayPal and “Pay Later” via PayPal

For certain payment methods, such as credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit report based on mathematical and statistical procedures using credit reference agencies.

For this purpose, PayPal transfers the personal data required for a credit check to a credit reference agency and uses the information received about the statistical probability of payment default to make a considered decision on establishing, performing or terminating the contractual relationship.

The credit report may contain probability values (credit scores) calculated using scientifically recognised mathematical and statistical procedures, which take address data into account, among other information. Your interests warranting protection are taken into account in accordance with the statutory provisions.

The purpose of processing this data is to assess creditworthiness in preparation for entering into a contract. Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in protection against payment default where PayPal provides payment in advance.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying PayPal. The provision of this data is necessary to conclude the contract using your preferred payment method. If you do not provide the data, the contract cannot be concluded using your chosen payment method.

Third-party providers

When you pay using a third-party provider's payment method, the data required to process the payment is transferred to PayPal. This processing is based on Article 6(1)(b) GDPR. To carry out this payment method, PayPal may then transfer the data to the relevant provider. This processing is based on Article 6(1)(b) GDPR.

Local third-party providers may include, for example:

– Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
– Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on account via PayPal

When you pay by invoice, the data required to process the payment is first transferred to PayPal. To carry out this payment method, PayPal then transfers the data to Ratepay GmbH (Franklinstraße 28–29, 10587 Berlin; “Ratepay”) so that the contract with you can be performed using your selected payment method. This processing is based on Article 6(1)(b) GDPR.

Ratepay may conduct a credit check based on mathematical and statistical procedures (probability values or credit scores), using credit reference agencies in accordance with the procedure described above. The purpose of processing this data is to assess creditworthiness in preparation for entering into a contract. Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in protection against payment default where Ratepay provides payment in advance.

Further information on data protection and the credit reference agencies used by Ratepay is available at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the relevant privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna payment options

We use the payment service provided by Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; “Klarna”) on our website. When you select and use payment via Klarna, the data required to process the payment is transferred to Klarna so that the contract with you can be performed using your selected payment method. This processing is based on Article 6(1)(b) GDPR.

Cookies may be stored in this context to enable your browser to be recognised. The resulting data processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in offering a customer-oriented selection of payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

“Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card or instant bank transfer), “Financing” (instalment purchase)

For certain payment methods, such as “Pay Later” (invoice), “Pay Now” (payment by direct debit, credit card or instant bank transfer) and “Financing” (instalment purchase), Klarna reserves the right to obtain a credit report based on mathematical and statistical procedures using credit reference agencies.

For this purpose, Klarna transfers the personal data required for a credit check, such as your first and last name, address, gender, email address, IP address and order-related data, to a credit reference agency for identity and creditworthiness checks. Klarna uses the information received about the statistical probability of payment default to make a considered decision on establishing, performing or terminating the contractual relationship.

The credit report may contain probability values (credit scores) calculated using scientifically recognised mathematical and statistical procedures, which take address data into account, among other information. Your interests warranting protection are taken into account in accordance with the statutory provisions.

The purpose of processing this data is to assess creditworthiness in preparation for entering into a contract. Processing is based on Article 6(1)(f) GDPR and our overriding legitimate interest in protection against payment default where Klarna provides payment in advance.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying Klarna. The provision of this data is necessary to conclude the contract using your preferred payment method. If you do not provide the data, the contract cannot be concluded using your chosen payment method.

Further information, particularly on the credit reference agencies to which Klarna transfers your personal data, is available for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies.

General information about Klarna is available for Germany at https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/.

Klarna handles your personal information in accordance with the applicable data protection provisions and the information provided in Klarna's privacy policy for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

Cookies

Our website uses cookies. Cookies are small text files stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a distinctive sequence of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over their use. By selecting the appropriate technical settings in your internet browser, you can receive notification before cookies are set, decide individually whether to accept them, and prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then be unable to use all the functions of this website to their full extent.

The links below provide information on how to manage cookies, including how to disable them, in the main browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated below in this Privacy Policy, we use only technically necessary cookies to make our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after you move from one page to another and to offer you services. Some functions of our website cannot be provided without cookies. These functions require the browser to be recognised after you move from one page to another.

Cookies or comparable technologies are used on the basis of section 25(2) of the German Telecommunications Digital Services Data Protection Act (TDDDG). Your personal data is processed on the basis of Article 6(1)(f) GDPR and our overriding legitimate interest in ensuring the optimal functionality of our website and designing our services in a user-friendly and effective manner.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.

Use of the Shopify consent tool (Shopify Privacy & Compliance)

We use the “Shopify Privacy & Compliance” consent tool provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website. Shopify is affiliated with Shopify Inc. (151 O'Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The tool enables you to consent to data processing through the website, particularly the setting of cookies, and to exercise your right to withdraw consent previously given. The purpose of processing this data is to obtain and document the necessary consent to data processing and thereby comply with legal obligations. Cookies may be used for this purpose. User information, including your IP address, is collected and transferred to Shopify.

Your data may be transferred to and processed in third countries outside the EU, particularly Canada and the USA. The European Commission has adopted an adequacy decision for Canada. An adequacy decision also exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to those contained in the European Commission's standard contractual clauses.

Data processing is carried out to comply with a legal obligation on the basis of Article 6(1)(c) GDPR.

Further information on data protection at Shopify is available at https://www.shopify.com/de/legal/datenschutz.

Plug-ins and Other Features

Use of social plug-ins via “Shariff”

We use social network plug-ins on our website. To ensure that you retain control over your data, we use the privacy-friendly “Shariff” buttons.

No connections to the servers of the social networks are established, and consequently no data is transmitted, without your express consent.

“Shariff” was developed by specialists at the computer magazine c't. It provides greater privacy online and replaces the usual social network “Share” buttons. Further information about the Shariff project is available at https://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.

When you click the buttons, a pop-up window appears in which you can log in to the relevant provider using your login details. A direct connection to the social networks is established only after you actively log in.

By logging in, you consent to the transfer of your data to the relevant social media provider. The data transferred includes your IP address and information about which of our pages you have visited. If you are simultaneously logged in to one or more of your social network accounts, the information collected will also be linked to your corresponding profiles. You can prevent this association only by logging out of your social media accounts before visiting our website and before activating the buttons.

The social networks listed below are integrated using the “Shariff” function.

Further information on the scope and purpose of data collection and use, your rights in this regard and the options available to protect your privacy can be found in the providers' linked privacy notices.

Facebook, provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://www.facebook.com/policy.php

Your data may be transferred to the USA. An adequacy decision adopted by the European Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Instagram, provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://help.instagram.com/155833707900388

Your data may be transferred to the USA. An adequacy decision adopted by the European Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Pinterest, provided by Pinterest Inc. (635 High Street, Palo Alto, CA 94301, USA):
https://policy.pinterest.com/de/privacy-policy

Your data may be transferred to the USA. An adequacy decision adopted by the European Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF.

X, formerly known as Twitter (X Corp., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA):
https://twitter.com/privacy
https://twitter.com/personalization

Your data may be transferred to the USA. An adequacy decision adopted by the European Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). X is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Use of YouTube

We use the YouTube video embedding function provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

This function displays videos hosted on YouTube in an iframe on our website. The “Privacy-enhanced mode” option is enabled. This means that YouTube does not store information about visitors to the website. Only when you watch a video is information about this transmitted to YouTube and stored there.

Your data may be transferred to the USA. An adequacy decision adopted by the European Commission exists for the USA: the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Cookies or comparable technologies are used with your consent on the basis of section 25(1), sentence 1, TDDDG in conjunction with Article 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Article 6(1)(a) GDPR. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

Further information on the collection and use of data by YouTube and Google, your rights in this regard and the options available to protect your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.

Integration of the idealo logo

The logo of our partner idealo (idealo internet GmbH, Ritterstraße 11, 10969 Berlin) is embedded on our website. When you access our website, the browser used on your device automatically sends information to the idealo server. This information is temporarily stored in a server log file for 7 days. The following information is collected without any action on your part and stored until it is automatically deleted:

– the IP address of the requesting computer;
– the date and time of access;
– the name and URL of the file accessed;
– the website from which access originates (referrer URL);
– the browser used and, where applicable, your computer's operating system and the name of your internet access provider.

Temporary storage of the IP address by the system is necessary to enable the website to be delivered. The IP address must remain stored for the duration of the session for this purpose. Data is stored in log files to ensure that the website functions properly. The data is also used to optimise the website and ensure the security of the information technology systems. This data is not stored together with other personal data. The legal basis for processing this data is Article 6(1), first sentence, point (f), GDPR.

Data Subject Rights and Retention Periods

Retention period

After the contract has been fully performed, the data is initially stored for the duration of the statutory warranty period and subsequently in accordance with statutory retention periods, particularly those required under tax and commercial law. The data is then deleted after these periods expire, unless you have consented to further processing and use.

Rights of the data subject

Where the statutory requirements are met, you have the following rights under Articles 15 to 20 GDPR: the right of access, the right to rectification, the right to erasure, the right to restriction of processing and the right to data portability.

You also have the right under Article 21(1) GDPR to object to processing based on Article 6(1)(f) GDPR, as well as the right to object to processing for direct marketing purposes.

Right to lodge a complaint with a supervisory authority

Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that your personal data is not being processed lawfully.

You may lodge a complaint, for example, with the supervisory authority responsible for us, which can be contacted using the following details:

Bayerisches Landesamt für Datenschutzaufsicht (BayLDA)
Promenade 18
91522 Ansbach
Telephone: +49 981 1800930
Fax: +49 981 180093800
Email: poststelle@lda.bayern.de

Right to object

Where the processing of personal data described here is based on our legitimate interests under Article 6(1)(f) GDPR, you have the right to object to that processing at any time, on grounds relating to your particular situation, with effect for the future.

Following an objection, processing of the personal data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or unless the processing is necessary for the establishment, exercise or defence of legal claims.