Data protection and security

A Information applicable to all sales channel

1. Data controller and content of this Privacy Policy

We, JEANS.CH AG (Bruggacherstrasse 8, 8117 Fällanden, Switzerland) operate the online shop www.mcjeans.ch ("Website") and, unless otherwise indicated, are responsible for the data processing operations set out in this Privacy Policy. 

Please take note of the information below to know what personal data we collect from you and for what purposes we use it. In data protection matters, we are guided primarily by the legal requirements of Swiss data protection law, in particular the Federal Act on Data Protection (FADP) and the EU General Data Protection Regulation (GDPR), the provisions of which may be applicable in individual cases. Furthermore, other companies are responsible under data protection law (or jointly responsible with us) for individual data processing operations listed below, and in these cases you should also take note of the information provided by these other companies is also applicable.

The following information may be amended from time to time. We therefore recommend that you consult this Privacy Policy regularly. 


2. Contact person for data protection

If you have any questions about data protection or wish to exercise your rights, please contact our data protection contact by sending an email to the following address: datenschutz@mcjeans.ch.


3. Your rights

Provided that the relevant legal requirements are met, as a person affected by data processing you have the following rights:

Right of access: You have the right to request access to your personal data stored and processed by us at any time and free of charge. This gives you the opportunity to check what personal data we process about you and that we use it in accordance with applicable data protection regulations. 

Right to rectification: You have the right to have inaccurate or incomplete personal data rectified and to be informed of the rectification. In this case, we will inform the recipients of the data concerned of the adjustments made, unless this is impossible or involves disproportionate effort. 

Right to deletion: You have the right to have your personal data deleted under certain circumstances. In individual cases, especially in the case of legal retention obligations, the right to deletion may be excluded. In this case, we may block your data instead, provided the conditions are met.

Right to restrict processing: You have the right to request that the processing of your personal data be restricted. 

Right to data transfer: You have the right to obtain from us, free of charge, the personal data you have provided to us in a readable format. 

Right to object: You can object to the processing of your data at any time, in particular for data processing in connection with direct advertising (e.g. advertising emails).

Right of withdrawal: In principle, where you have given consent you have the right to withdraw that consent at any time. However, processing activities that have already taken place based on your consent do not become unlawful because of your revocation of consent.

To exercise these rights, please send us an email to the following address: datenschutz@mcjeans.ch

Right of complaint: You have the right to lodge a complaint with a competent supervisory authority, for example against the way your personal data is processed. 


4. Data security 

We use appropriate technical and organisational security measures to protect your personal data stored with us against loss and unlawful processing, namely unauthorised access by third parties. Our employees and the service companies commissioned by us are obliged by us to maintain confidentiality and data protection. Furthermore, these persons are only granted access to the personal data to the extent necessary for the fulfilment of their tasks.

Our security measures are continuously adapted in line with technological developments. However, the transmission of information via the Internet and electronic means of communication always involves certain security risks and we cannot provide an absolute guarantee for the security of information transmitted in this way.


5. Contact us 

If you contact us via our contact addresses and channels (e.g. by e-mail, telephone or contact form), your personal data will be processed. The data you have provided us with, e.g. the name of your company, your name, your function, your e-mail address or telephone number and your request, will be processed. In addition, the time of receipt of the request will be documented. Data that it is mandatory you provide are marked with an asterisk (*) in the relevant contact form. 

We process this data exclusively in order to implement your requests (e.g. providing information about a product, support in the processing of a contract such as the return of products, incorporating your feedback into the improvement of our service, etc.). The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in the implementation of your request or, if your request is directed towards the conclusion or execution of a contract, the necessity for the implementation of the required measures within the meaning of Art. 6 para. 1 lit. b EU-GDPR.


6. Use of your data for marketing purposes

6.1 Central data storage and analysis in our CRM system

If it is possible to clearly identify you, we will store and link the data described in this data protection declaration, in particular your personal details, your contact details, your contract details and your surfing behaviour on our websites, in a central database. This serves the efficient administration of customer data, allows us to adequately respond to your requests and enables the efficient provision of the services you have requested and the processing of the associated contracts. The legal basis for this data processing is our legitimate interest in the efficient management of user data within the meaning of Art. 6 para. 1 lit. f EU-GDPR. 

We evaluate this data in order to further develop our offers in a needs-oriented manner and to display and suggest the most relevant information and offers to you. We also use methods that predict possible interests and potential future orders based on your website use. The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in carrying out marketing measures.


6.2 Email marketing and newsletters

If you register for our e-mail newsletter (e.g. when opening or within your customer account), the following data will be collected. Mandatory data is marked with an asterisk (*) in the registration form:

  • E-mail address
  • Salutation 
  • First and last name

In order to avoid misuse and to ensure that the owner of an e-mail address has actually given their consent, we use a double opt-in procedure for registration. After sending the registration form, you will receive an e-mail from us containing a confirmation link. In order to definitely register for the newsletter, you must click on this link. If you do not click on the confirmation link within the specified period, your data will be deleted again and our newsletter will not be sent to this address.

By registering, you consent to the processing of your data in order to receive messages from us about our company, our offers and related products and services. This may also include invitations to participate in competitions or to evaluate our products and services. The collection of the salutation and name allows us to verify any link between the registration and a possibly already existing customer account and to personalise the content of our messages to you. The link to a customer account helps us to make the offers and content contained in the newsletter more relevant to you and better tailored to your potential needs. 

We will use your data to email you until you revoke your consent. Revocation is possible at any time, in particular via the unsubscribe link in all our marketing emails.

Our marketing emails may contain a so-called web beacon or 1x1 pixel (tracking pixel) or similar technical tools. A web beacon is an invisible graphic that is linked to the user ID of the respective newsletter subscriber. For each marketing email sent, we receive information on which addresses have not yet received the email, to which addresses it was sent and for which addresses the sending failed. We also see which addresses have opened the email, for how long and which links they have clicked on. Finally, we receive information about which addresses have unsubscribed. We use this data for statistical purposes and to optimise our promotional emails in terms of frequency, timing, structure and content. This allows us to better tailor the information and offers in our emails to the individual interests of recipients.

The web beacon is deleted when you delete the email. To prevent the use of the web beacon in our marketing emails, please set the parameters of your email program so that HTML is not displayed in messages if this is not already the case by default. In the help section of your email software you will find information on how to configure this setting, e.g. here for Microsoft Outlook.

By subscribing to the newsletter, you also consent to the statistical evaluation of user behaviour for the purpose of optimising and adapting the newsletter. This consent constitutes our legal basis for the processing of your data within the meaning of Art. 6 para. 1 lit. a EU-GDPR.

We use Benhauers' email marketing software Salesmanago ((Benhauer sp. z o.o. , ul. Grzegórzecka, 21, 31-532 Kraków, Poland) for marketing emails. Your data will be stored in a database of Benhauer sp. z o.o. which allows Benhauer sp. z o.o. to access your data if this is necessary for the provision of the software and for support in the use of the software. The legal basis for this processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in the use of third-party services.


7. Disclosure to and access by third parties 

Without the support of other companies, we would not be able to provide our services in the desired form. In order for us to be able to use the services of these companies, it is also necessary to pass on your personal data to a certain extent. Such a transfer takes place to the extent that it is necessary for the fulfilment of the contract requested by you, for example to the logistics or transport companies that deliver the requested products, or to a manufacturer who is to fulfil your warranty claim. The legal basis for these disclosures is the necessity for the performance of the contract within the meaning of Art. 6 para. 1 lit. b EU-GDPR. 

Furthermore, data is passed on to selected service providers, but only to the extent necessary for the provision of their services. Various third party service providers are explicitly mentioned in this privacy policy, e.g. in the sections on marketing. These are, for example, IT service providers (such as providers of software solutions), advertising agencies and consultancies. Our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in the procurement of third-party services forms the legal basis for this data transfer.

In addition, your data may be disclosed to authorities, legal advisors or debt collection agencies, if we are legally obliged to do so or if this is necessary to protect our rights, in particular to enforce claims arising from our relationship with you. Data may also be disclosed if another company intends to acquire our company or parts thereof and such disclosure is necessary to carry out due diligence or to complete the transaction. The legal basis for this data transfer is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in safeguarding our rights and complying with our obligations or the sale of our company.


8. Transfer of personal data abroad 

We are entitled to transfer your personal data to third parties abroad if this is necessary to carry out the data processing mentioned in this Privacy Policy (see in particular Sections 12-15). In doing so, we will of course comply with the statutory provisions on the disclosure of personal data to third parties. If the country in question does not have an adequate level of data protection, we guarantee through contractual regulations that your data is adequately protected by the recipients. 


9. Retention periods

We only store personal data for as long as is necessary to carry out the processing explained in this Privacy Policy within the scope of our legitimate interest. In the case of contractual data, storage is required by statutory retention obligations. Requirements that oblige us to retain data result from the provisions on accounting and from tax law regulations. According to these regulations, business communications, concluded contracts and accounting vouchers must be stored for up to 10 years. As far as we no longer need this data to perform the services for you, the data will be blocked. This means that the data may then only be used if this is necessary to fulfil the retention obligations or to defend and enforce our legal interests. The data is deleted as soon as there is no longer any obligation to retain it and we no longer have any legitimate interest in retaining it. 


B. Special provisions applicable to use of our website

10. Log file data 

When you visit our website, the servers of our hosting provider (Profihost GmbH, Expo Plaza 1, 30539 Hannover, Germany) temporarily store every access in a log file. The following data is collected without your intervention and stored by us until automatically deleted: 

  • the IP address of the requesting computer,
  • the date and time of access,
  • the name and URL of the retrieved file, 
  • the website from which the access was made, if applicable with the search word used,
  • the operating system of your computer and the browser you use (incl. type, version and language setting), 
  • device type in case of access by mobile phones,
  • the city or region from where the access was made, 
  • the name of your internet access provider. 

The collection and processing of this data is carried out for the purpose of enabling the use of our website (connection establishment), to permanently guarantee system security and stability as well as for error and performance analysis and enables us to optimise our website (see on these last points also Section 13). 

In the event of an attack on the network infrastructure of the website or a suspicion of other unauthorised or abusive website use, the IP address and the other data will be evaluated for the purpose of clarification and defence and, if necessary, used in the context of criminal proceedings to identify and take civil and criminal action against the users concerned.

Our legitimate interest in data processing within the meaning of Art. 6 para. 1 lit. f EU-GDPR lies in the purposes described above.

When you visit our website, we use cookies as well as applications and tools that are based on the use of cookies. In this context, the data described here may also be processed. You will find more details on this in the subsequent sections of this data protection declaration, in particular Section 11.


11. Cookies

Cookies are information files that your web browser stores on your computer's hard drive or memory when you visit our website. Cookies are assigned identification numbers that identify your browser and allow the information contained in the cookie to be read. 

Among other things, cookies help to make your visit to our website easier, more pleasant and more meaningful. We use cookies for various purposes that are necessary, i.e. "technically required", for your desired use of the website. For example, we use cookies to be able to identify you as a registered user after logging in, without you having to log in again each time when navigating the various sub-pages. The provision of the shopping basket and order function is also based on the use of cookies. Furthermore, cookies also perform other technical functions required for the operation of the website, such as so-called load balancing, i.e. the distribution of the performance load of the page to different web servers in order to relieve the servers. Cookies are also used for security purposes, for example to prevent the unauthorised posting of content. Finally, we also use cookies as part of the design and programming of our website, e.g. to enable the uploading of scripts or codes.

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in providing a user-friendly and up-to-date website.

Most internet browsers automatically accept cookies. However, when accessing our website, we inform you about the use of cookies that are not technically necessary, especially third-party cookies for marketing purposes. You can use the corresponding buttons in the cookie banner to define your desired settings. Details of the services and data processing associated with the individual cookies can be found within the cookie banner and in the following sections of this Privacy Policy. 

You may also be able to configure your browser so that no cookies are stored on your computer or so that a message always appears when you receive a new cookie. On the following pages you will find explanations of how you can configure the processing of cookies in selected browsers.

Deactivating cookies may mean that you cannot use all the functions of our website. The cookie seetings can be changed again via the cookie banner.


12. Tracking and web analysis tools

12.1 General information on tracking

For needs-based design and continuous optimisation of our website, we use the web analysis services listed below. In this context, pseudonymised usage profiles are created and cookies are used (please also refer to Section 11). The information generated by the cookie about your use of our website is usually transferred together with the log file data listed in Section 10 to a server of the service provider, where it is stored and processed. This may also result in a transfer to servers abroad, e.g. the USA (see on this point, in particular on the guarantees taken, Section 8).

In processing this data, we obtain the following information, among others:

  • navigation path followed by a visitor on the site (inclunding content viewed and products selected or purchased),
  • time spent on the website or sub-page,
  • the last sub-page viewed before leaving the website, 
  • the country, region or city from where access is made, 
  • end device (type, version, colour depth, resolution, width and height of the browser window), and 
  • returning or new visitor.

The provider will use this information on our behalf to evaluate the use of the website, to compile reports on website activities for us and to provide other services related to website and internet use for the purposes of market research and needs-based design of these internet pages. For these processing operations, we and the providers may to a certain extent be considered joint data controllers. 

The legal basis for this data processing with the following tools is your consent within the meaning of Art. 6 para. 1 lit. a EU-GDPR. You can revoke your consent or refuse processing at any time by rejecting or deactivating the relevant cookies in your web browser settings (see Section 11) or by making use of the service-specific options described below.

For the further processing of your data by the respective provider as the (sole) data protection controller, in particular also any forwarding of this information to third parties such as authorities on the basis of national legal regulations, please refer to the respective data protection information of the provider.


12.2 Google Analytics 4 and Google Universal Analytics

We use the web analytics service Google Analytics from Google Ireland Limited (Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) or Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) ("Google"). 

The data described about the use of the website may be transmitted to the servers of Google LLC. in the USA for the processing purposes explained (see Section 13.1). The IP address is shortened by activating IP anonymisation ("anonymizeIP") on the website before transmission within the Member States of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. 

Users can prevent the collection of the data generated by the cookie and related to their website use (inclunding the IP address) and its transmission to and processing by Google by downloading and installing a browser plugin under the following link: http://tools.google.com/dlpage/gaoptout?hl=de. Further information on data protection at Google can be found here.


12.3 Google Tag Manager

On our website, we use Google Tag Manager, a solution provided by Google Inc., 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, to manage our website tags through an interface. The Google Tag Manager is a cookie-less domain that does not collect any personal data. It facilitates the triggering of other tags (cookies and pixels) that may, in turn, collect data. We hereby notify you separately about this. The Google Tag Manager does not access this data. If the user has disabled it at the domain or cookie level, this will apply to all tracking tags implemented with Google Tag Manager.

When you visit our website, technical protocols like HTTPS may send personal data such as your IP address, device information, and browser information to the Google Tag Manager from your browser. However, the Google Tag Manager does not collect or process this data.


12.4 Google Signals

In Google Analytics, we have enabled Google signals. This updates existing features such as ad reports, remarketing, cross-device reports, and interest and demographic information. If you have allowed personalized ads in your Google account, we receive aggregated and anonymized data from you.

What makes this special is cross-device tracking, which allows us to analyze your data across devices. Once you have Google signals enabled, data is collected and linked to your Google account. This allows Google to determine, for example, when you view a product on our website with your smartphone and later purchase it via your laptop. Thanks to the activation of Google signals, we can carry out targeted remarketing campaigns that would otherwise not be possible. In doing so, we can also present our offers to you on other websites.

In addition to standard analytics data, Google Analytics collects additional visitor information through the use of Google signals, such as your location, search history, YouTube history, and activity on our website. This allows us to provide better advertising reports and useful insights about your interests and demographic characteristics such as age, language, location, gender, occupation, marital status or income. All these characteristics help us create clearly defined target groups.

The reports generated improve our understanding of your behavior and interests. This allows us to better tailor and optimize our services and products to your needs. By default, this data is automatically deleted after 26 months. Please note that this data collection only occurs if you allow personalized advertising in your Google account. The information collected is always aggregated and anonymized and never includes personal data. You have the option to manage and delete this data in your Google Account.



13. Online advertising and targeting
13.1 In general

We use services of various companies to provide you with interesting offers online. In the process of doing this, your user behaviour on our website and websites of other providers is analysed in order to subsequently be able to show you online advertising that is individually tailored to you. 

Most technologies for tracking your user behaviour and targeting advertisements work with cookies (see also Section 11), which can be used to recognise your browser across different websites. Depending on the service provider, it may also be possible for you to be recognised online even when using different end devices (e.g. laptop and smartphone). This may be the case, for example, if you have registered for a service that you use with several devices. 

In addition to the data already mentioned, which is collected when websites are called up ("log file data", see Section 10) and the use of cookies (Section 11) and which may be passed on to the companies involved in the advertising networks, the following data in particular is used to select the advertising that is potentially most relevant to you: 

  • Information about you that you provided when registering or using a service from advertising partners (e.g. your gender, age group);
  • User behaviour (e.g. search queries, interactions with advertising, types of websites visited, products viewed and purchased, newsletters subscribed to).

We and our service providers use this data to identify whether you belong to the target group we address and take this into account when selecting the advertisements. For example, after you have visited our site, you may be shown advertisements of the products you have consulted when you visit other sites ("re-targeting"). Depending on the scope of the data, a user's profile may also be created, which is evaluated automatically, and the ads are selected according to the information stored in the profile, such as membership of certain demographic segments or potential interests or behaviours. Such ads may be presented to you on various channels, which include, in addition to our website or app (as part of onsite and in-app marketing), ads provided through the online advertising networks we use, such as Google. 

The data may then be analysed for the purpose of billing the service provider and assessing the effectiveness of advertising measures in order to better understand the needs of our users and customers and to improve future campaigns. This may also include information that the taking of an action (e.g. visiting certain sections of our website or sending information) is due to a particular advertising ad. We also receive aggregated reports from service providers of ad activity and information about how users interact with our website and ads.

The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU-GDPR. You can revoke your consent at any time by rejecting or deactivating the relevant cookies in the settings of your web browser (see Section 11). You can also find further options for blocking advertising in the information provided by the respective service provider, such as Google.


13.2 Google Ads 

This website uses the services of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for online advertising. Google uses cookies for this purpose, such as the so-called DoubleClick cookie, which enable your browser to be recognised when visiting other websites. We provide user data (first name, last name, email, address) to Google in hashed form when making a purchase. The information generated by the cookies about your visit to these websites (including your IP address) will be transmitted to and stored by Google on servers in the United States (please refer to Section 8). Further information on data protection at Google can be found here.

The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU-GDPR. You can revoke your consent at any time by rejecting or deactivating the relevant cookies in the settings of your web browser (see Section 11). Further options for blocking advertising can be found here.


13.3 Google Remarketing

This website uses the remarketing function provided by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This function is used to present interest-based advertisements to website visitors within the Google advertising network. A "cookie" is stored in the visitor's browser, enabling the visitor to be pseudonymously recognized when visiting websites that belong to Google's advertising network. On these pages, the visitor may be presented with advertisements related to content they previously accessed on websites that use Google's remarketing function. According to Google's statements, no personally identifiable information is collected during this process. Therefore, the balancing of interests indicates that there are no overriding interests on your part (Art. 6 (1) f GDPR).

If you do not wish to use Google's remarketing function, you can generally deactivate it by adjusting the corresponding settings at http://www.google.com/settings/ads. Alternatively, you can opt-out of the use of cookies for interest-based advertising through the Network Advertising Initiative by following the instructions at http://www.networkadvertising.org/managing/opt_out.asp.


13.4 Bing Ads 

This website uses technologies from Bing Ads, operated by Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA, as an independent controller. We use Microsoft Conversion Tracking, where Microsoft sets a cookie on your device if you have clicked on a Microsoft Bing ad or arrived at our website through other means. Through this, Microsoft and we can recognize that you clicked on an ad, were redirected to our website, and reached a specific target page ("Conversion Site") linked through the ad. Furthermore, Microsoft and we can see if you accessed the website through other means and made a purchase or performed a service defined as a conversion. Additionally, we use Microsoft's retargeting technology, which collects and stores information about your user behavior on our website. Cookies may be used for this purpose. The cookies allow Microsoft to collect, process, and use information from them to create usage profiles using pseudonyms. These usage profiles are used to analyze visitor behavior, enabling us to display relevant advertising and offers through Bing Ads to users who have shown interest in our website and content/offers. No personal information about the user's identity is processed.

Due to the marketing tool used, your browser automatically establishes a direct connection to Microsoft's server. We have no control over the scope and further use of the data collected by Microsoft using this tool, and thus inform you to the best of our knowledge: By integrating Microsoft, Microsoft receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Microsoft service, Microsoft can assign the visit to your account. Even if you are not registered with Microsoft or have not logged in, it is possible for the provider to obtain and store your IP address.

When using our website, Microsoft processes the UET Tag ID, Microsoft cookie, browser information, device information, user behavior, and interaction with advertising materials.

Your data will be stored on servers within the EU or the USA and may be shared with service providers and their subsidiaries that provide technologies or support services for certain Microsoft online services. The transfer of your data to servers in the USA is based on the Microsoft Advertising Agreement.

Microsoft retains your data from the UET Tag for 180 days. The cookie expiration period for the Microsoft cookie is 13 months.

You have the right to object to data collection and storage at any time for the future. To object to data collection and storage for the future, you can click on the following link: account.microsoft.com/privacy/ad-settings

For further details on data processing, please refer to the privacy policy of Microsoft Corporation: privacy.microsoft.com/en-us/PrivacyStatement.


13.5 Profity

Vouchers and special offers: As a thank-you gesture for the orders placed with us, we use Profity, a service offered by our partner, adfocus GmbH, with its registered office in Zug (Switzerland). This service gives you access to vouchers and special offers for your purchase and to further services offered online by other providers. In order for you to be able to access these offers, we incorporate an adfocus reference using an encrypted connection when you place an order on our website. As a result, it is possible to exchange data, especially your Internet Protocol (IP) address – which can be considered personal information – with adfocus. Any personal data exchanged within this framework are used exclusively for the purpose of offering Profity in a permanent, secure and reliable manner (legal bases pursuant to GDPR, to the extent applicable: Art. 6 Sec. 1 lit. b and f GDPR). Further information on the nature, scope and purpose of the data processing can be found in the Privacy Notice of Profity.  


13.6 Push notifications

If push notifications from our website are enabled, a function of your internet browser or mobile operating system will be used to provide the notifications for you. Only anonymous or pseudonymous data will be transmitted for sending these messages. Depending on the configuration of the website, this may include: • Pseudonymous user identifier: a randomly generated value stored in a tracking cookie ID • Pseudonymous digital fingerprints, pseudonymous mobile device identifiers, and possibly pseudonymous cross-device identifiers

These data will only be processed to deliver the notifications you have subscribed to and to manage notification-related settings. For storing this data, we kindly ask for your consent. The legal basis for data processing in this case is Art. 6 (1) lit. a GDPR. You can object to receiving notifications at any time by adjusting the settings of your browser or mobile device.


14. Freshdesk Customer Service tool

We use the customer service software Freshdesk.com (Freshworks Inc., 2950 S. Delaware Street, Suite 201, San Mateo, CA 9440, USA). This service allows us to manage the coordination of your inquiries, orders, and emails within our team. For more information on the processing of your data by Freshdesk.com, please refer to https://freshdesk.de/datenschutz/dsgvo/.


15. Use of our chat tool

If you contact us via chat, your personal data will be processed. The data that you have provided to us is processed, e.g. the name of your company, your name, your function, your e-mail address and your request. In addition, the time of receipt of the request is documented. Mandatory data are marked with an asterisk (*). 

We process this data exclusively in order to implement your request (e.g. providing information about a product, support in the processing of contracts such as the return of products, incorporating your feedback into the improvement of our service, etc.). We use a tool from Freshworks Inc. (2950 S. Delaware Street, Suite 201, San Mateo, CA 9440, USA) to provide the chat function. Your data will be stored in a database of Freshworks Inc. which may allow Freshworks Inc. access your data if necessary for the provision of the software and for the support in the use of the software. 

The legal basis for this data processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU- GDPR in the use of up-to-date communication technologies or, if your request is directed towards the conclusion or performance of a contract, in the implementation of the necessary measures within the meaning of Art. 6 para. 1 lit. b EU-GDPR.


16. Registration for a customer account

If you open a customer account on our website, we collect the following data, whereby mandatory data is marked with an asterisk (*) in the corresponding form:

  • Personal data: 
    • Salutation
    • Name
    • First name
    • Billing and delivery address
    • Birthday
    • Company name, company address 
  • Login data: 
    • E-mail address
    • Password
  • Further information: 
    • Languages
    • Gender

We use the personal details to establish your identity and to check the requirements for registration. The email address and password are used as login details to ensure that the correct person is using the website under your account. We also need your email address to verify and confirm the opening of your account and for future communication with you as required to process the contract. In addition, this data is stored in the customer account for conclusion of future contracts. For this purpose, we also enable you to store further details in the account (e.g. your preferred means of payment). 

We also use the data to provide an overview of the products ordered and services received (see Sections 18 and 23) and as a simple way to manage your personal data, to administer our website and our contractual relationships, i.e. to establish, define the content of, process and amend the contracts concluded with you via your customer account. 

We process the information on language and gender in order to display offer suggestions on the website that are best tailored to your profile or your personal needs, for statistical recording and evaluation of the selected offers and thus to optimise our suggestions and offers. 

The legal basis for the processing of your data for the preceding purpose is your consent pursuant to Art. 6 para. 1 lit. a EU-GDPR. You can revoke your consent at any time by removing the information from your customer account or by deleting your customer account or having it deleted by notifying us.

To avoid misuse, you must always keep your login details confidential and should close the browser window when you have finished communicating with us, especially if you share the computer with others. 


17. Ordering products

If you wish to order products or to book services on the website, we require various data for the processing of the contract. If you do not log in with your customer account (see Section 17), we collect the following data - depending on the product or service - whereby mandatory data is marked with an asterisk (*) in the corresponding form: 

  • Salutation
  • Name
  • First name
  • Billing and delivery address
  • E-mail address
  • Birthday
  • Company name, company address 
  • Telephone number

We use the data to establish your identity before concluding a contract. We also need your e-mail address to confirm your order and for future communication with you that is necessary to process the contract. We store your data together with the marginal data of the order (e.g. time, order number, etc.), the data regarding the ordered/booked services (e.g. designation, price and features of the product; "product data"), the data on payment (e.g. selected payment method, confirmation of payment and time; see also Section 19) as well as the data on the processing and fulfilment of the contract (e.g. return of products, use of service or warranty services, etc.) in our CRM database (see also Section 6.1) so that we can ensure correct order processing and contract fulfilment. 

Insofar as this is necessary for the fulfilment of the contract, we will also pass on the required information to any third-party service providers (e.g. transport companies). 

The legal basis for this data processing is the fulfilment of the contract with you according to Art. 6 para. 1 lit. b EU-GDPR. 

The provision of data that is not marked as mandatory is voluntary. We process this data in order to tailor our offering to your personal needs in the best possible way, to facilitate the processing of contracts, to contact you via an alternative communication channel if necessary with a view to fulfilling the contract, or for statistical collection and evaluation to optimise our offerings. The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit. a EU-GDPR. You can revoke your consent at any time by notifying us. 


18. Payment processing online

If you purchase services or products against payment via our website, depending on the product or service and the desired method of payment - in addition to the information mentioned in Section 18 - you may be required to provide data, such as your credit card information or the login to your payment service provider. This information, as well as the fact that you have purchased a service from us for the amount and at the time in question, is forwarded to the respective payment service providers (e.g. payment solution providers, credit card issuers and credit card acquirers). In doing so, please always also note the information provided by the respective company, in particular the data protection declaration and the general terms and conditions. The legal basis for this transfer is the fulfilment of a contract according to Art. 6 para. 1 lit. b EU-GDPR.

To ensure payment, the necessary data, in particular your personal details, may also be transmitted to Intrum AG for the automated assessment of your creditworthiness and may be stored there. In this context, the credit agency may assign you a so-called score value. This is an estimate of the future risk of non-payment, e.g. based on a percentage. The value is collected using mathematical-statistical methods and including data from the credit agency from other sources. We reserve the right, according to the information received, not to offer you the payment method "invoice". The legal basis for this data processing is our legitimate interest according to Art. 6 para. 1 lit. f. EU-GDPR in the avoidance of payment defaults.


19. Submitting ratings

In order to help other users with their purchase decision and to support our quality management (in particular the processing of negative feedback), you have the opportunity to rate ordered products on our website. The data that is processed and published on the website is the data that you have made available to us, i.e. in addition to your rating and its time of submission, possibly also any comment that you have added to your rating or the name that you have given. The legal basis for this data processing is your consent within the meaning of Art. 6 para. 1 lit a EU-GDPR.

We reserve the right to delete unlawful ratings and to contact you in case of suspicion and ask you to comment. The legal basis for this processing is our legitimate interest within the meaning of Art. 6 para. 1 lit. f EU-GDPR in providing the comment and rating function and preventing abuse when using it. 


V8 22.07.2023