Privacy Policy
Privacy Policy
-
Information about the collection of personal data and contact details of the responsible person
1.1 We are glad that you visit our website and thank you for your interest. Below we inform you about how we handle your personal data when using our website. Personal data means any information that can be used to personally identify you.
1.2 The entity responsible for data processing on this website, as defined by the General Data Protection Regulation (GDPR), is Cushie Cloud. The responsible person for processing personal data is a natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3 These websites use SSL or TLS encryption for security purposes and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the responsible person). You can recognize the encrypted connection by the prefix "https://" and the lock icon in your browser’s address bar.
2) Data collection when visiting our website
If you visit our website solely for the purpose of obtaining information, meaning you do not register or provide us with any information, we only collect the data that your browser transmits to our server (so-called "server logs"). When accessing our website, we collect the following data that are technically necessary to display the website:
Visited webpage
Date and time of access
Amount of data sent in bytes
Source/referring page from which you accessed the page
Browser used
Operating system used
IP address used (possibly anonymized)
Processing is carried out in accordance with Article 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is neither shared nor otherwise used. However, we reserve the right to review server logs retrospectively if there are specific indications of illegal use.
3) Cookies
To make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted at the end of the browser session, i.e., when you close the browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data, as well as IP address values. Persistent cookies are automatically deleted after a predetermined period, which may vary depending on the cookie.
Some cookies are used to simplify the ordering process by storing settings (e.g., remembering the contents of the virtual shopping cart for a later visit to the website). If personal data is also processed through individual cookies we implement, the processing is carried out in accordance with Article 6(1)(b) GDPR either to fulfill a contract or in accordance with Article 6(1)(f) GDPR to ensure our legitimate interests in the best functionality of the website, as well as a user-friendly and efficient design of the website visit.
We may cooperate with advertising partners who help us make our online offer more interesting for you. For this purpose, cookies from partner companies (third-party cookies) may be stored on your hard drive during your visit to our website. If we cooperate with such advertising partners, you will be informed about the use of these cookies and the scope of the collected information in the following sections.
Please note that you can set your browser to notify you about cookie settings and you can individually decide whether to accept them or exclude the acceptance of cookies for certain cases or generally. Each browser differs in how it manages cookie settings. This is described in the help section of each browser, which explains how to change cookie settings. This information is available for the respective browsers at the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/kb/ph21411?locale=de_DE
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.
4) Contacting us
When you contact us (e.g., via the contact form or email), personal data is collected. The data collected through the contact form is visible in the respective form. This data is used exclusively for the purpose of responding to your inquiry or for contacting you and related technical administration. The legal basis for processing the data is our legitimate interest in responding to your inquiry according to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, another legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed, unless the circumstances indicate that the matter has been resolved and that there are no legal retention obligations.
5) Data processing when opening a customer account and for contract fulfillment
According to Article 6(1)(b) GDPR, personal data is further collected and processed when you provide it to us for the fulfillment of a contract or when opening a customer account. The collected data can be seen in the respective input forms. Cancellation of your customer account is possible at any time and can be done by sending a message to the address of the responsible party mentioned above. We store and use the data you provide for contract fulfillment. After full contract fulfillment or cancellation of your customer account, your data will be blocked due to tax and commercial legal retention periods and will be deleted after these periods expire, unless you have expressly consented to further use of your data or if we have legally permissible further use of your data, about which we will inform you below.
6) Use of your data for direct marketing
6.1 Subscription to our email newsletter
When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing additional data is optional and helps us address you personally. We use a so-called double opt-in process for sending newsletters. This means we will send you the newsletter only after your explicit confirmation that you agree to receive newsletters. We will send you a confirmation email asking you to confirm your subscription by clicking on the corresponding link.
By activating the confirmation link, you give us consent to use your personal data in accordance with Article 6(1)(a) GDPR. When subscribing to the newsletter, we also store the IP address registered by your internet service provider (ISP), as well as the date and time of your subscription, to monitor possible misuse of your email address in the future. The data collected during newsletter registration will be used exclusively for advertising purposes through the newsletter. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending an appropriate message to the responsible party mentioned above. After unsubscribing, your email address will be immediately removed from our newsletter recipient list, unless you have expressly consented to further use of your data or if we have legally permissible further use of your data, which we inform you about in this statement.
6.2 Sending email newsletters to existing customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range by email. No special consent is required for this.
No special consent is required. The processing of data is based solely on our legitimate interest in personalized direct advertising according to Article 6(1)(f) GDPR. If you originally objected to the use of your email address for this purpose, no emails will be sent to you. You have the right to object to the use of your email address for the stated advertising purpose at any time with effect for the future by informing the responsible party listed at the beginning. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.
7) Data processing for order fulfillment
7.1 Personal data we collect is shared with the shipping company assigned to deliver the goods, if necessary for delivery. Your payment details are passed to the assigned financial institution for payment processing, if necessary. If payment service providers are used, we will explicitly inform you about this below. The legal basis for data transfer is Article 6(1)(b) GDPR.
7.2 Use of payment service providers
PayPal
When paying via PayPal, credit card through PayPal, direct debit through PayPal, or—if offered—“Pay Later” or “Installment Payment” via PayPal, we transmit your payment details to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) for payment processing. This transfer is in accordance with Article 6(1)(b) GDPR and only to the extent necessary for processing the payment.
PayPal reserves the right to perform a creditworthiness check for payment methods such as credit card via PayPal, direct debit via PayPal, or—if offered—“Pay Later” or “Installment Payment” via PayPal. For this purpose, your payment data may be shared with credit agencies based on PayPal’s legitimate interest to determine your creditworthiness according to Article 6(1)(f) GDPR. The result of the creditworthiness check concerning the statistical probability of default is used by PayPal to decide whether to offer the respective payment method. The credit report may contain probabilistic values (so-called scoring values). If scoring values are included, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of scoring values includes, among other things, address data. For more information about data protection, including details of the credit agencies used, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full. You may object to this data processing at any time by sending a message to PayPal. However, PayPal may still have the right to process your personal data if necessary for contractually required payment processing.
SOFORT
If you choose the payment method “SOFORT,” the payment processing is carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter “SOFORT”), to whom we transmit the information you provided during the ordering process, including details of your order, in accordance with Article 6(1)(b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The data transfer is exclusively for the purpose of payment processing by the payment service provider SOFORT and only to the extent necessary for this purpose. For more information about SOFORT’s data protection regulations, please visit: https://www.klarna.com/sofort/datenschutz.
8) Contacts for Review Reminders
Own review reminders (not sent via the customer review system)
We use your email address to send a one-time reminder to submit a review of your order for the review system we use, if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR during or after your order. You can revoke your consent at any time by sending a message to the data controller.
9) Use of Social Media: Social Plugins
9.1 Facebook plugins with Shariff solution
Our website uses so-called social plugins ("plugins") from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").
To enhance the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins but are embedded via an HTML link. This method ensures that when you visit a page on our website containing such buttons, no connection is made to Facebook's servers. If you click the button, a new browser window will open, displaying the Facebook page where you can interact with the plugins (possibly after entering your login credentials).
Facebook Inc., based in the USA, is certified under the Privacy Shield framework between the USA and the EU, which ensures compliance with data protection according to applicable European standards.
For information on the purpose and scope of data collection, as well as further processing and use of data by Facebook, and on your rights and options for protecting your privacy, please see Facebook’s privacy policy: https://www.facebook.com/policy.php.
9.2 Google+ plugins with Shariff solution
Our website uses so-called social plugins (“plugins”) from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).
To enhance the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins but are embedded via an HTML link. This method ensures that when you visit a page on our website containing such buttons, no connection is made to the Google+ servers. If you click the button, a new browser window will open, displaying the Google+ page where you can interact with the plugins (possibly after entering your login credentials).
Google LLC, based in the USA, is certified under the Privacy Shield framework between the USA and the EU, which ensures compliance with data protection according to applicable European standards.
For information on the purpose and scope of data collection, as well as further processing and use of data by Google, and on your rights and options for protecting your privacy, please see Google’s privacy policy: https://www.google.com/intl/de/policies/privacy/.
9.3 Instagram Plugin as a Shariff Solution
10) Online Marketing
10.1 DoubleClick by Google
This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“DoubleClick”).
DoubleClick uses cookies to display relevant ads to users, improve campaign performance reports, or prevent users from seeing the same ads repeatedly. Google tracks which ads are displayed in which browser via a cookie ID and can thus prevent duplicate ad display. This processing is based on our legitimate interest in optimal marketing of our website pursuant to Article 6(1)(f) of the GDPR.
Furthermore, DoubleClick may use cookie IDs to track so-called conversions related to ad requests. This applies when a user sees a DoubleClick ad and later visits the advertiser’s website in the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain any personal information.
Due to the use of marketing tools, your browser automatically establishes a direct connection to Google’s servers. We have no influence on the scope and further use of data collected by Google through this tool, and we therefore inform you according to our current knowledge: Through the integration of DoubleClick, Google receives the information that you have visited the relevant part of our online presence or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered or logged in, there is a possibility that the provider will identify and store your IP address.
If you do not wish to participate in this tracking, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com (https://www.google.de/settings/ads); note that this setting will be deleted if you delete your cookies. Alternatively, you can find information about cookies and adjust your settings on the Digital Advertising Alliance website at www.aboutads.info. Finally, you can configure your browser to notify you when cookies are being set and decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or generally. Please note that rejecting cookies may limit the functionality of our website.
Google LLC, based in the USA, is certified under the EU-U.S. Privacy Shield Framework, which ensures compliance with European data protection standards.
For more information about the DoubleClick by Google privacy policy, please visit: https://www.google.de/policies/privacy/.
10.2 Use of Google AdWords Conversion Tracking
This website uses the online advertising program "Google AdWords" and, as part of Google AdWords, the conversion tracking feature provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). We use Google AdWords to draw attention to our attractive offers through advertising media (known as Google AdWords) on external websites. Based on the data from the advertising campaigns, we can determine how successful each advertising measure is. Our goal is to show you ads that are of interest to you, make our website more appealing to you, and achieve a fair calculation of advertising costs.
Conversion tracking cookies are set when a user clicks on an ad delivered by Google AdWords. Cookies are small text files stored on your computer. These cookies typically expire after 30 days and are not used to personally identify users. If a user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across websites of AdWords customers. The information collected using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers are informed about the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag.
11) Web Analysis Tools
Google (Universal) Analytics
Google Universal Analytics
This website uses Google Analytics, a web analysis service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Analytics uses "cookies," text files stored on your computer, to analyze your use of the website. Information generated by the cookie about your use of this website (including your shortened IP address) is usually transferred to a Google server in the USA where it is stored.
This website uses Google Analytics exclusively with the "_anonymizeIp()" extension, which ensures the anonymization of IP addresses by shortening them and excludes direct personal identification. With this extension, your IP address is shortened by Google within member states of the European Union or other contracting states of the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there. In these exceptional cases, this processing is done in accordance with Article 6(1)(f) GDPR based on our legitimate interest in the statistical analysis of user behavior for purposes of optimization and marketing.
Google uses this information on our behalf to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser within Google Analytics will not be associated with other Google data.
You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case, you may not be able to use all the features of this website to their full extent. Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing a browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.
Alternatively, click on the following link to set an opt-out cookie that prevents the future collection of Google Analytics data on this website (this opt-out cookie only works in this browser and for this domain; if you delete cookies in this browser, you will have to click the link again):
https://tools.google.com/dlpage/gaoptout?hl=de
Further information on Universal Analytics can be found here:
https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376
-
Retargeting/Remarketing/Referral Advertising
-
Facebook Custom Audience via Pixel Method
This website uses "Facebook Pixel", provided by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With your explicit consent, this tool allows tracking user behavior after viewing or clicking on an advertisement on Facebook. This process is used to evaluate the effectiveness of Facebook ads for statistical and marketing purposes and can help optimize future advertising measures.
The collected data is anonymized for us, which means we cannot identify individual users. However, this data is stored and processed by Facebook, which may link it to the relevant user profile, and Facebook may use this data for its own advertising purposes in accordance with Facebook’s privacy policy:
https://www.facebook.com/about/privacy/
Facebook and its partners may display ads on Facebook and beyond. A cookie may be stored on your computer for this purpose. This process takes place only with your explicit consent in accordance with Art. 6(1)(a) GDPR.
Consent to the use of Facebook Pixel can only be given by users older than 13 years. If you are younger, please ask your legal guardians for consent.
Facebook Inc., based in the USA, is certified under the US-EU Privacy Shield framework, which ensures compliance with the protective standards applicable in the EU.
To disable cookies on your computer, you can configure your internet browser so that cookies are not stored in the future or delete already stored cookies. Disabling all cookies may result in some features on our website no longer working. You can also opt out of the use of cookies by third parties, such as Facebook, via the Digital Advertising Alliance website:
https://www.aboutads.info/choices/
Google AdWords Remarketing
Our website uses Google AdWords Remarketing features, which allow us to advertise this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google stores a cookie in your browser
Rights of the Data Subject
13.1 Applicable data protection laws provide you with extensive rights regarding the processing of your personal data, as listed below:
Right of access (Art. 15 GDPR): You have the right to obtain information about the personal data we process about you, including the purpose of processing, categories of personal data, recipients or categories of recipients to whom your data has been or will be disclosed, the planned retention period or criteria for determining the retention period, the existence of the right to rectification, erasure or restriction of processing, objection to processing, filing a complaint with a supervisory authority, the source of your data if not collected from you, and information about automated decision-making including profiling and its consequences.
Right to rectification (Art. 16 GDPR): You have the right to immediate correction of inaccurate data concerning you and/or completion of incomplete data we hold about you.
Right to erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data if the conditions of Art. 17(1) GDPR are met. This right does not apply if processing is necessary for exercising the right to freedom of expression and information, compliance with a legal obligation, reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Right to restriction of processing (Art. 18 GDPR): You have the right to request the restriction of processing of your personal data if the accuracy of the data is being verified, if you object to its deletion and instead request restriction of processing, if you need the data for the establishment, exercise, or defense of legal claims, or if you have objected to processing based on your specific situation until it is verified whether our legitimate interests override yours.
Right to notification (Art. 19 GDPR): If you have exercised the right to rectification, erasure, or restriction of processing, we are obliged to inform all recipients to whom your data was disclosed about these changes, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to data portability (Art. 20 GDPR): You have the right to receive your personal data that you have provided to us in a structured, commonly used, and machine-readable format or to request its transfer to another controller if technically feasible.
Right to withdraw consent (Art. 7(3) GDPR): You have the right to withdraw your consent to the processing of your data at any time with effect for the future. Upon withdrawal, we will immediately delete the relevant data unless further processing is based on another legal basis. Withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates the GDPR, you have the right to file a complaint with a supervisory authority, especially in the state of your residence, place of work, or where the alleged violation occurred, without prejudice to any other administrative or judicial remedy.
13.2 Right to object
If we process your personal data based on legitimate interest, you have the right to object to such processing at any time for reasons related to your particular situation.
If you exercise your right to object, we will stop processing the affected data. Further processing may be carried out if we demonstrate overriding legitimate grounds for processing which outweigh your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims.
If your personal data is processed for direct marketing purposes, you have the right to object to such processing at any time. In this case, we will stop processing your personal data for these marketing purposes.
Retention period of personal data
The retention period for personal data is determined by applicable statutory retention periods (e.g., commercial and tax retention periods). After these periods expire, the respective data will routinely be deleted unless it is still required for the performance or initiation of a contract and/or if there is a legitimate interest in further retention.