Data Privacy Policy

Please select your language:


  • Sect. 1 General

    We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please familiarise yourself with the respective use of your data there.

  • Sect. 2 Data processing for the performance of contracts

    (1) Purpose of data processing
    Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is soley for the purpose of contract performance. If you send us a request by e-mail or by using the contact form, etc. before concluding the contract, we process the obtained data to carry out pre-contractual measures and answer your questions about e.g. our products.

    (2) Legal basis
    The legal basis for such processing is set out in Article 6 (1) (b) of the GDPR.

    (3) Recipient categories
    Payment service provider, shipping service provider, hosting provider, if necessary merchandise management system, suppliers if necessary (drop-shipping).

    (4) Duration of Storage
    We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire. We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.

  • Sect. 3 Shop rating by Trusted Shops

    For the display of our Trusted Shops seal of approval and the possibly collected ratings as well as for the offer of Trusted Shops products for buyers after an order, the Trusted Shops trust badge is integrated on this website'.

    This serves the protection of our in the context of a balancing of interests predominant entitled interests in an optimal marketing by making a safe purchase possible in accordance with art. 6 exp. 1 S. 1 lit. f DSGVO. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The trust badge is made available by a CDN provider (Content Delivery Network) within the scope of order processing. Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is guaranteed. Further information on data protection at Trusted Shops GmbH can be found here.

    When you call up the Trustbadge, the web server automatically saves a so-called server log file, which also contains your IP address, date and time of the call, transferred data volume and the requesting provider (access data) and documents the call. Individual access data is stored in a security database for the analysis of security incidents. The log files are automatically deleted at the latest 90 days after creation.

    Further personal data is transferred to Trusted Shops GmbH if you decide to use Trusted Shops products after completing an order or if you have already registered for use. It applies the contractual agreement met between you and Trusted Shops. For this an automatic collection of personal data from the order data takes place. Whether you are already registered as a buyer for a product use is automatically checked by means of a neutral parameter, the e-mail address hashed by cryptological one-way function. The e-mail address is converted into this hash value, which cannot be decrypted by Trusted Shops, before it is transmitted. After checking for a match, the parameter is automatically deleted.

    This is necessary for the fulfilment of our and Trusted Shops' predominant legitimate interests in the provision of the buyer protection linked to the specific order and the transactional valuation services according to Art. 6 para. 1 sentence 1 lit. f DSGVO. Further details, also regarding the objection, can be found in the Trusted Shops privacy policy linked above and in the Trustbadge.

  • Sect. 4 PayPal-transactions

    Please note that all PayPal transactions are subject to the PayPal Privacy Policy: "https://www.paypal.com/de/webapps/mpp/ua/privacy-full"

  • Sect. 5 Web analysis with Google Analytics

    (1) Purpose of data processing
    This website uses Google Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland ("Google"). Google Analytics uses so-called “cookies”, small text files, which are placed on your computer to analyze how you use the website. The information generated by the cookie about your use of this website will be transmitted and saved on server in the United States by Google. If the anonymizeIP function is activated on this website, Google will shorten your IP address in advance within the member states of the European Union or in other states which are parties to the Agreement on the European Economic Area. Only in exceptional cases Google will transmit the full IP address on server in the United States and will shorten there. Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activities and providing other services related to website and internet usage for the website operators.

    (2) Legal basis
    The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

    (3) Recipient categories
    Google and its partners.

    (4) Transfer to a third country
    Google Ireland Limited is an affiliate of Google LLC. Google LLC is based in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043).

    (5) Duration of Storage
    14 months

    (6) RIGHT OF OBJECTION
    When visiting our website for the first time, you can use our cookie settings to object to the use of cookies for statistical purposes. You can reset these cookie settings here at any time. In addition, you can generally prevent the use of cookies by selecting the appropriate settings on your browser software, but there is a possibility that you will not be able to use all features of this website in this case.

  • Sect. 6 Web analysis with Matomo

    (1) Purpose of data processing
    Our website uses the web analysis service Matomo. Matomo (www.matomo.org) uses cookies. The information about your preferences generated by the cookie enables us to analyze the usage of this website. For this purpose the information generated by the cookies (including your shortened IP-address) will be transferred to our server and stored for analysis purpose. The information about your usage of this website generated by the cookies will not be transferred to any third party.

    (2) Legal basis
    The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

    (3) RIGHT OF OBJECTION
    When visiting our website for the first time, you can use our cookie settings to object to the use of cookies for statistical purposes. You can reset these cookie settings here at any time. In addition, you can generally prevent the use of cookies by selecting the appropriate settings on your browser software, but there is a possibility that you will not be able to use all features of this website in this case.

  • Sect. 7 Google Ads and Google Conversion Tracking

    (1) Purpose of data processing
    This website uses Google Ads. Ads is an online advertising program of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). When you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are not used for personal identification.
    With the help of the conversion cookie, we can analyze the effectiveness of our advertisements. Here we learn the total number of users who clicked on our ad and performed certain actions on our site. However, we do not receive any information with which users can be personally identified.

    (2) Legal basis
    The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

    (3) RIGHT OF OBJECTION
    When visiting our website for the first time, you can use our cookie settings to object to the use of cookies for marketing purposes. You can reset these cookie settings here at any time. In addition, you can generally prevent the use of cookies by selecting the appropriate settings on your browser software, but there is a possibility that you will not be able to use all features of this website in this case.

  • Sect. 8 Facebook Pixel and Facebook Conversion

    (1) Purpose of data processing
    This website uses the so-called "Facebook Pixel" of the social network Facebook, which is operated by Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA, or if you are a resident of the EU, Facebook Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").

    With the help of the Facebook pixel, it is possible for Facebook, on the one hand, to determine you as a visitor to our online offer as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. With the help of the Facebook pixel, we can further track the effectiveness of the Facebook ads for statistical and market research purposes by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").

    (2) Legal basis
    The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

    (3) RIGHT OF OBJECTION
    When visiting our website for the first time, you can use our cookie settings to object to the use of cookies for marketing purposes. You can reset these cookie settings here at any time. In addition, you can generally prevent the use of cookies by selecting the appropriate settings on your browser software, but there is a possibility that you will not be able to use all features of this website in this case.
    You can object to the collection by the Facebook pixel and use of your data to display Facebook ads. To set which types of ads are displayed to you within Facebook, you can visit the page set up by Facebook and follow the instructions there on the settings for usage-based advertising. The settings are done in a platform-independent manner, which means that they are applied to all devices, such as desktop computers or mobile devices. You can further object to the use of cookies that are used for reach measurement and advertising purposes via the deactivation page of the Network Advertising Initiative and additionally the European website youronlinechoices.com.

  • Sect. 9 Pinterest Conversion Tracking

    (1) Purpose of data processing
    This website uses the conversion tracking technology of the social network Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland), which enables us to show our website visitors who have already taken an interest in our website and our content/offers and are Pinterest members, advertising and offers on Pinterest that are relevant to them. For this purpose, a so-called conversion tracking pixel from Pinterest is integrated on our pages, via which Pinterest is informed when you visit our website that you have accessed our website and in which parts of our offer you were interested.

    (2) Legal basis
    The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.

    (3) RIGHT OF OBJECTION
    When visiting our website for the first time, you can use our cookie settings to object to the use of cookies for marketing purposes. You can reset these cookie settings here at any time. In addition, you can generally prevent the use of cookies by selecting the appropriate settings on your browser software, but there is a possibility that you will not be able to use all features of this website in this case.
    You can object to the collection of data for the display of interest-based advertising on Pinterest at any time in your account settings on Pinterest.

  • Sect. 10 Information about cookies

    (1) Purpose of data processing
    This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, the inserting of several products in a shopping basket.

    (2) Legal basis
    The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.

    (3) Legitimate interest
    Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This preserves your interest in data protection.

    (4) Duration of Storage
    The technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have different validity period from a few minutes to several years.

    (5) RIGHT OF OBJECTION
    If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website. You can also delete persistent cookies at any time by changing your browser settings.
    When you visit our website for the first time, you can use our cookie settings to object to the use of cookies for certain purposes. You can reset these cookie settings here at any time .

  • Sect. 11 Newsletter

    (1) Purpose of data processing
    When registering for the newsletter, your e-mail address will be used for advertising purposes, i.e. the newsletter will inform you in particular about products from our product range. For statistical purposes we may evaluate which links are viewed in the newsletter. However, it is not recognizable for us, which concrete person has accessed the links. You have expressly given the following consent separately or, as the case may be, in the course of the ordering process: Subscribe to the newsletter.

    (2) Legal basis
    The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

    (3) Recipient
    rapidmail GmbH, Germany

    (4) Duration of Storage
    Your e-mail address will only be stored for the respective duration of your registration.

    (5) RIGHT OF OBJECTION
    You may revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you may unsubscribe as follows: By a log-out link in the newsletter.

  • Sect. 8 Your rights as a data subject

    If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:

    1. Right to information

    You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.

    2. Right to rectification

    If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.

    3. Right to erasure

    You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.

    4. Right to restriction of processing

    You have the right to restrict the processing your personal data under Article 18 of the GDPR.

    5. Right to data portability

    You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

    6. Right to revoke the consent given under data protection law

    You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.

    7. Right to lodge a complaint with a supervisory authority

    If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement).

    Please also note your right of objection under Article 21 GDPR:

    a) In general: reasoned objection required

    If the processing of personal data concerning you takes place in order

    - to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR)

    or

    - to safeguard the public interest (legal basis: Article 6 (1e) GDPR), you are entitled to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

    In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;

    b) Special case of direct marketing: simple objection is sufficient

    If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing.

    If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

  • Responsible for data processing:
    Omniscale GmbH & Co. KG
    Moltkestraße 6a
    26122 Oldenburg
    Germany
    Phone: 044193927744
    info@cartida.com

updated 19 February 2021