Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are under no obligation to provide your data. Failure to provide such data will have no consequences unless otherwise specified in the individual processing operations described below.

“Personal data” means any information relating to an identified or identifiable natural person.

Hosting

We host the content of our website with the following provider:

rackSPEED GmbH

The provider is rackSPEED GmbH, D2-Park 5 // THE FLEX – Campus, 40878 Ratingen, Germany (hereinafter referred to as “rackSPEED GmbH”).

When you visit our website, rackSPEED GmbH collects various log files, including your IP address.

Further information can be found in rackSPEED GmbH’s Privacy Policy:
https://rackspeed.de/datenschutz/

The use of rackSPEED GmbH is based on Article 6(1)(f) GDPR. We have a legitimate interest in ensuring the most reliable presentation of our website possible. Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as the consent includes the storage of cookies or access to information on the user’s device (e.g., device fingerprinting). Consent may be revoked at any time.

Data Processing Agreement

We have concluded a Data Processing Agreement (DPA) with the above-mentioned provider. This agreement ensures that the provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Server Log Files

You may visit our website without providing any personal information.

Each time our website is accessed, usage data is transmitted by your internet browser to us or our web hosting/IT service provider and stored in protocol data (server log files). This stored data includes, for example:

• Name of the accessed page
• Date and time of access
• IP address
• Amount of data transferred
• Requesting internet service provider

Processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website and improving our services.

Contact Information

Controller

The controller responsible for data processing is:

Marco Ruf
Ottostrasse 4b
76227 Karlsruhe
Germany

Phone: +49 7243 33560
Email: marco.ruf@mygpo.com

Customer-Initiated Contact via Email

If you contact us by email on your own initiative, we collect your personal data (name, email address, message content) only to the extent provided by you.

The processing of your data serves the purpose of handling and responding to your inquiry.

Where your inquiry relates to pre-contractual measures (e.g., consultation regarding a purchase, preparation of an offer) or concerns an existing contract between you and us, processing is carried out pursuant to Article 6(1)(b) GDPR.

If contact is made for other purposes, processing is based on Article 6(1)(f) GDPR due to our legitimate interest in handling and responding to your inquiry.

In this case, you have the right to object at any time, on grounds relating to your particular situation, to processing based on Article 6(1)(f) GDPR.

Your email address will be used solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods unless you have consented to further processing and use.

Collection and Processing of Data When Using the Contact Form

When using our contact form, we collect your personal data (name, email address, message content) only to the extent provided by you.

The processing serves the purpose of establishing contact.

Where contact serves the implementation of pre-contractual measures or concerns an existing contract, processing is carried out pursuant to Article 6(1)(b) GDPR.

Otherwise, processing is based on Article 6(1)(f) GDPR due to our legitimate interest in handling and responding to your inquiry.

You may object at any time to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation.

Your email address is used solely for processing your request. Your data will then be deleted in accordance with statutory retention obligations unless you have consented to further processing.

Collection and Processing When Using the Withdrawal Button

If you have concluded a contract through our online presence, we provide a withdrawal function (“withdrawal button”) enabling you to submit your withdrawal declaration directly.

When using this function, we collect personal data only to the extent provided by you, including:

• Name
• Email address
• Information identifying the contract or part of the contract being withdrawn from
• Date and time of submission of the withdrawal declaration

Processing serves the purpose of providing the legally required option to withdraw from a contract and ensuring the proper handling of your withdrawal request.

Where processing concerns an existing contract, it is based on Article 6(1)(b) GDPR.

Otherwise, processing is carried out pursuant to Article 6(1)(c) GDPR in order to comply with our legal obligation to provide a withdrawal function.

Your email address is used solely for processing your withdrawal request and will subsequently be deleted in accordance with statutory retention obligations unless you have consented to further processing.

The processing also serves to ensure legally compliant implementation of the withdrawal function and is based on Article 6(1)(c) GDPR as well as our legitimate interest under Article 6(1)(f) GDPR in providing a user-friendly withdrawal process.

You may object at any time to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation.

Customer Account / Orders

Customer Account

When you open a customer account, we collect your personal data to the extent specified in the registration form.

The purpose of processing is to improve your shopping experience and simplify order processing.

Processing is carried out on the basis of Article 6(1)(a) GDPR with your consent.

You may withdraw your consent at any time by notifying us. Withdrawal does not affect the lawfulness of processing carried out before the withdrawal.

Your customer account will then be deleted.

Collection, Processing and Disclosure of Personal Data in Connection with Orders

When placing an order, we collect and process your personal data only insofar as necessary for fulfilling and processing your order and handling your inquiries.

The provision of your data is required for the conclusion of a contract. Failure to provide the required data will result in the inability to conclude a contract.

Processing is carried out pursuant to Article 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to:

• Shipping companies
• Dropshipping and fulfillment providers
• Payment service providers
• Order processing service providers
• IT service providers

In all cases, we strictly comply with applicable legal requirements. The scope of data transmission is limited to the minimum necessary.

Marketing, Cookies and Analytics

Use of Email Address for Newsletter Distribution

We use your email address to send you information and promotional offers via our newsletter, provided that you have expressly consented to this.

The processing of your data serves exclusively the purpose of advertising communication. For this purpose, we process your email address and any additional information you voluntarily provide when subscribing to our newsletter.

Processing is carried out on the basis of Article 6(1)(a) GDPR with your consent.

You may revoke your consent at any time without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can unsubscribe from the newsletter at any time by using the corresponding link included in each newsletter or by notifying us directly.

Your email address will then be removed from the mailing list.

Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist in order to prevent future newsletter mailings to that address. This storage is based on Article 6(1)(f) GDPR due to our legitimate interest, as well as your interest, in preventing unwanted newsletter communications.

You have the right to object at any time, on grounds relating to your particular situation, to this processing of your personal data.

Cookies

Our website uses cookies.

Cookies are small text files that are stored on a user's computer system by an internet browser. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a unique identifier that enables the browser to be recognized when the website is visited again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies.

By selecting the appropriate technical settings in your internet browser, you can:

• Be notified before cookies are set;
• Decide individually whether to accept cookies;
• Prevent the storage of cookies and transmission of the data they contain.

Cookies that have already been stored can be deleted at any time.

Please note, however, that disabling cookies may prevent you from using all functions of this website without restriction.

Information on managing or disabling cookies in common browsers can be found at the following links:

• Google Chrome: https://support.google.com/accounts/answer/61416
• Microsoft Edge: https://support.microsoft.com
• Mozilla Firefox: https://support.mozilla.org
• Safari: https://support.apple.com

Technically Necessary Cookies

Unless otherwise specified in this Privacy Policy, we use only technically necessary cookies in order to make our website more user-friendly, effective, and secure.

Cookies also enable our systems to recognize your browser after a page change and provide services to you. Certain functions of our website cannot be provided without the use of cookies.

The use of cookies or comparable technologies is based on Section 25(2) TDDDG.

The processing of your personal data is carried out pursuant to Article 6(1)(f) GDPR based on our legitimate interest in ensuring the optimal functionality of the website and providing a user-friendly and efficient online service.

You have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data carried out on this basis.

Use of the CCM19 Cookie Consent Manager

We use the CCM19 Cookie Consent Manager provided by:

Papoo Software & Media GmbH
Auguststrasse 4
53229 Bonn
Germany

This tool enables you to grant consent to data processing operations via the website, particularly the setting of cookies, and to exercise your right to withdraw previously granted consent.

The purpose of data processing is to obtain, document, and manage legally required user consents.

Cookies are used for this purpose.

The following information may be collected, stored, and transmitted to CCM19:

• Randomly generated ID
• Consent status
• Date and time of consent or rejection

The data is stored for one year and one month and then deleted.

This information is not disclosed to any other third parties.

Processing is carried out pursuant to Article 6(1)(c) GDPR in order to comply with legal obligations.

Further information can be found in CCM19’s Privacy Policy:

https://www.ccm19.de/datenschutzerklaerung.html

Analytics Tools

Google Tag Manager

We use Google Tag Manager.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Tag Manager is a tool that allows us to integrate tracking tools, analytics services, and other technologies into our website.

Google Tag Manager itself:

• Does not create user profiles;
• Does not store cookies;
• Does not perform independent analyses.

It serves solely to manage and deploy the tools integrated through it.

However, Google Tag Manager records your IP address, which may also be transmitted to Google's parent company in the United States.

The use of Google Tag Manager is based on Article 6(1)(f) GDPR.

The website operator has a legitimate interest in the efficient integration and management of various tools on the website.

Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG, insofar as consent includes the storage of cookies or access to information on the user’s device.

Consent may be withdrawn at any time.

Google Analytics

This website uses Google Analytics, a web analytics service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

Google Analytics enables us to analyze the behavior of visitors to our website.

The website operator receives various usage data, including:

• Page views
• Duration of visits
• Operating systems used
• User origin and referral sources

These data are assigned to the respective end device and are not linked to a user ID.

We may also use Google Analytics to record:

• Mouse movements
• Scrolling behavior
• Click interactions

Google Analytics further uses modeling techniques and machine-learning technologies to supplement and analyze collected data.

Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior, including:

• Cookies
• Device fingerprinting

Information collected by Google regarding the use of this website is generally transmitted to and stored on Google servers in the United States.

The use of Google Analytics is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TTDSG.

Consent may be withdrawn at any time.

Transfers of personal data to the United States are based on the European Commission’s Standard Contractual Clauses (SCCs).

Further information is available at:

https://privacy.google.com/businesses/controllerterms/mccs/

Browser Add-On

You can prevent Google from collecting and processing your data by downloading and installing the browser add-on available at:

https://tools.google.com/dlpage/gaoptout

Further information on how Google handles user data can be found in Google’s Privacy Policy:

https://support.google.com/analytics/answer/6004245

Plugins, External Services, Social Media and Data Subject Rights

Use of Google reCAPTCHA

We use the reCAPTCHA service provided by:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

The service is used within the framework of a data processing agreement.

The purpose of reCAPTCHA is to distinguish whether data entered on our website is being entered by a human user or by automated, machine-based processing.

For this purpose, your input is transmitted to Google and further processed there.

In addition, your IP address and any other data required by Google for the reCAPTCHA service may be transmitted to Google.

These data are processed by Google within the European Union and may also be transferred to servers of Google LLC in the United States.

For data transfers to the United States, the European Commission has adopted an adequacy decision under the EU–US Data Privacy Framework (DPF). Google has certified under the DPF and has committed to complying with European data protection principles.

The use of cookies or comparable technologies is based on your consent pursuant to Section 25(1) TDDDG in conjunction with Article 6(1)(a) GDPR.

The processing of your personal data is likewise based on your consent pursuant to Article 6(1)(a) GDPR.

You may withdraw your consent at any time with future effect.

Google Fonts (Local Hosting)

This website uses Google Fonts for the uniform display of fonts.

Google Fonts are installed locally on our server.

No connection to Google servers is established in this context.

Further information about Google Fonts can be found at:

https://developers.google.com/fonts/faq

Google’s Privacy Policy is available at:

https://policies.google.com/privacy

Font Awesome (Local Hosting)

This website uses Font Awesome for the consistent display of icons and fonts.

Font Awesome is hosted locally.

No connection to servers operated by Fonticons, Inc. is established.

Further information can be found in Font Awesome’s Privacy Policy:

https://fontawesome.com/privacy

Google Maps

This website uses Google Maps.

The provider is:

Google Ireland Limited
Gordon House
Barrow Street
Dublin 4
Ireland

To use Google Maps, it is necessary to store your IP address.

This information is generally transmitted to and stored on a Google server in the United States.

The operator of this website has no influence over this data transfer.

When Google Maps is activated, Google may use Google Fonts to ensure the consistent display of fonts.

When accessing Google Maps, your browser loads the required web fonts into its browser cache in order to display text and fonts correctly.

The use of Google Maps serves the purpose of providing an attractive presentation of our online services and making the locations specified on our website easy to find.

This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Where consent has been requested, processing is carried out exclusively on the basis of Article 6(1)(a) GDPR and Section 25(1) TTDSG.

Consent may be withdrawn at any time.

Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses (SCCs).

Further information can be found at:

https://privacy.google.com/businesses/gdprcontrollerterms/ and https://privacy.google.com/businesses/gdprcontrollerterms/sccs/

Google’s Privacy Policy is available at:

https://policies.google.com/privacy

Social Media

Facebook

This website incorporates elements of the Facebook social network.

The provider is:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

According to Facebook, collected data may also be transferred to the United States and other third countries.

An overview of Facebook social media plugins is available at:

https://developers.facebook.com/docs/plugins/

When the social media element is active, a direct connection is established between your device and Facebook's servers.

Facebook thereby receives information that you have visited this website using your IP address.

If you click the Facebook “Like” button while logged into your Facebook account, the content of this website may be linked to your Facebook profile.

This enables Facebook to associate your visit to this website with your user account.

We would like to point out that, as the provider of this website, we have no knowledge of the content of the transmitted data or of how Facebook uses such data.

Further information is available in Facebook’s Privacy Policy:

https://www.facebook.com/privacy/policy/

The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Consent may be withdrawn at any time.

Joint Controllership

Where personal data are collected via this tool and forwarded to Facebook, we and Meta Platforms Ireland Limited are jointly responsible for this data processing within the meaning of Article 26 GDPR.

The joint responsibility is limited exclusively to the collection and transmission of data to Facebook.

The subsequent processing by Facebook is not part of the joint responsibility.

The terms of the joint processing agreement are available at:

https://www.facebook.com/legal/controller_addendum

Data transfers to the United States are based on the Standard Contractual Clauses and the EU–US Data Privacy Framework.

Instagram

This website incorporates functions of the Instagram service.

The provider is:

Meta Platforms Ireland Limited
Merrion Road
Dublin 4
D04 X2K5
Ireland

When the social media element is active, a direct connection is established between your device and Instagram’s servers.

Instagram thereby receives information regarding your visit to this website.

If you are logged into your Instagram account, you may link content from this website to your Instagram profile by clicking the Instagram button.

This enables Instagram to associate your visit to this website with your user account.

We would like to point out that, as the website operator, we have no knowledge of the content of the transmitted data or how Instagram uses such data.

Further information can be found in Instagram’s Privacy Policy:

https://privacycenter.instagram.com/policy/

The use of this service is based on your consent pursuant to Article 6(1)(a) GDPR and Section 25(1) TDDDG.

Consent may be withdrawn at any time.

Joint Controllership

Where personal data are collected through Instagram or Facebook integrations and forwarded to Meta, we and Meta Platforms Ireland Limited act as joint controllers within the meaning of Article 26 GDPR.

The joint responsibility is limited exclusively to the collection and transmission of data.

Subsequent processing by Meta is not covered by this joint responsibility.

The corresponding agreement can be viewed at:

https://www.facebook.com/legal/controller_addendum

Meta participates in the EU–US Data Privacy Framework (DPF).

Data Subject Rights and Data Retention

Storage Duration

After complete performance of the contract, your data will initially be retained for the duration of the statutory warranty period.

Thereafter, the data will be stored in accordance with applicable legal retention obligations, particularly under tax and commercial law, and deleted once those periods have expired, unless you have consented to further processing and use.

Rights of Data Subjects

Provided the legal requirements are met, you have the following rights under Articles 15–20 GDPR:

• Right of access
• Right to rectification
• Right to erasure
• Right to restriction of processing
• Right to data portability

In addition, pursuant to Article 21(1) GDPR, you have the right to object to processing based on Article 6(1)(f) GDPR and to processing for direct marketing purposes.

Right to Lodge a Complaint with a Supervisory Authority

Pursuant to Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful.

You may contact, among others, the supervisory authority responsible for us:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstrasse 10a
70173 Stuttgart
Germany

Phone: +49 711 6155410
Fax: +49 711 61554115
Email: poststelle@lfdi.bwl.de

Right to Object

Where the processing of personal data described in this Privacy Policy is based on our legitimate interests pursuant to Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to such processing with future effect.

Once an objection has been submitted, processing of the affected data will cease unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or where processing serves the establishment, exercise, or defence of legal claims.