Datenschutzerklärung

1. General information

1.1 What is personal data

Personal data is information that discloses or may disclose the identity of the user. We adhere to the principle of data avoidance. As far as possible, we refrain from collecting personal data.

1.2 Handling of personal data

Personal data is used exclusively for the establishment of the contract, content design, execution or processing of the contractual relationship (Art. 6 (1 b) GDPR).

In addition, personal data will only be processed if we have obtained your consent to do so (Art. 6 (1 a) GDPR) or if the processing of the data is necessary for our legitimate interests and if the assessment shows that there are no overriding interests, fundamental rights or freedoms on your part to the contrary (Art. 6 (1 f) GDPR).

We may use data processors to process your personal data, with whom we have concluded a data processing agreement where necessary, but we will not pass on your personal data to third parties beyond this.

The data will only be passed on to the shipping company commissioned with the delivery for the fulfillment of the contract insofar as this is necessary for the delivery of ordered goods. In order to process payments, the required payment data will be passed on to the credit institution commissioned with the payment and, if applicable, to the commissioned and selected payment service provider.

Your personal data will be processed in the EU and countries classified by the EU as safe or appropriate. If personal data is processed in the USA, care is taken to ensure that the services we use are certified under the "Data Privacy Framework".

1.3 Usage data

General technical information is collected when you visit the website. This includes the IP address used, time, duration of the visit, browser type and, if applicable, the originating page. For technical reasons, this usage data is registered in a log file and can be used and stored for the purpose of statistical analysis of this website. This usage data is not linked to your other personal data.

1.4 Registration data

Registration is required to make full use of the functions of our website. The registration data is collected through your corresponding entries and used for the specifically stated purpose in accordance with your consent (Art. 6 (1 a) GDPR).

1.5 Duration of storage

We only store your personal data after the end of the purpose for which the data was collected for as long as this is required by law (in particular, tax law).

2. Your rights

2.1 Information

You can request information from us as to whether we are processing personal data about you, and if so, you have a right to be informed about this personal data and to receive further information referred to in Art. 15 of the GDPR.

2.2 Right to rectification

You have the right to rectify inaccurate personal data concerning you and may request the completion of incomplete personal data in accordance with Art. 16 GDPR.

2.3 Right to erasure

You have the right to obtain from us the erasure of personal data concerning you without undue delay. We are obliged to erase it immediately, in particular, if one of the following reasons applies:

• Your personal data are no longer necessary for the purposes they were collected or otherwise processed.
• You withdraw your consent on which the processing of your data was based, and there is no other legal basis for the processing.
• Your data has been processed unlawfully.

The right to erasure does not apply if your personal data is required to assert, exercise or defend our legal claims.

2.4 Right to restriction of processing

You have the right to demand that we restrict the processing of your personal data if

• you dispute the accuracy of the data, and we, therefore, check the accuracy,
• the processing is unlawful, and you oppose the erasure and request the restriction of use instead,
• we no longer need the data, but you need it to assert, exercise or defend legal claims,
• you have objected to the processing of your data, and it is not yet certain whether our legitimate reasons outweigh your reasons.

2.5 Right to data portability

You have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format, and you have the right to transmit those data to another controller without hindrance from us, where the processing is based on consent or a contract and the processing is carried out by automated means.

2.6 Right of revocation

If the processing of your personal data is based on consent, you have the right to revoke this consent at any time.

2.7 General information and right to lodge a complaint

Exercising your above rights is generally free of charge for you. In the event of complaints, you have the right to contact the supervisory authority responsible for us, the state data protection officer.

3. Data security

3.1 Data security

All data on our website is protected by technical and organizational measures against loss, destruction, access, modification and dissemination.

3.2 Sessions and cookies

To operate the website, we use cookies or server-side sessions in which data can be stored. We ensure that no personal data is transferred from sessions or through cookies without your express consent and that cookies are only used if this is technically necessary for the website (e.g., spam protection for the contact form, shopping cart function) and thus the consideration shows that there are no overriding interests on your part to the contrary (Art. 6 (1 f) GDPR) or that you have given your express consent.

With your express consent, we use cookies to personalize content and advertisements, to offer functions for social media and to analyze access to our website. With your consent, we may share information about your use of our website with our social media, advertising and analytics partners. Our partners may be able to combine this information with other data that the partners already have about you.

Below, you will find the domain, name and duration of the cookies used only based on your consent:

Site cookies

Domain	Name	Runtime
tokentagged.com	_pk_ses	30 Minutes
tokentagged.com	_pk_cvar	30 Minutes
tokentagged.com	_pk_hsr	30 Minutes
tokentagged.com	_pk_ref	6 Months
tokentagged.com	_pk_id	13 Months

Third-party cookies

Domain	Name	Runtime
shop.tokentagged.com	_token	Session
shop.tokentagged.com	shop_pay_accelerated	8 Hours
shop.tokentagged.com	receive-cookie-deprecation	Session
shop.tokentagged.com	skip_shop_pay	1 Year
.tokentagged.com	_shopify_sa_t	Session
.tokentagged.com	_shopify_s	Session
shop.tokentagged.com	checkout_session_token	21 Hours
.tokentagged.com	_shopify_y	1 Year
.tokentagged.com	_cmp_a	1 Day
.tokentagged.com	_shopify_sa_p	Session
.tokentagged.com	_tracking_consent	1 Year
shop.tokentagged.com	checkout_session_lookup	21 Hours

4. Newsletter

If you subscribe to our newsletter, we will use the data required for this or separately provided by you to regularly send you our e-mail newsletter based on your consent in accordance with Art. 6 (1 a) GDPR.
You can unsubscribe from the newsletter at any time, either by sending a message to us using the contact options provided in the legal notice, by deactivating the relevant messages in the user settings or by clicking on the link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data, or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.

5. Comments

If you use the comment function on our website, the time of creation, your chosen pseudonym and temporarily also your IP address will be stored in addition to these comments. This is done so that we can protect our rights in the event of unlawful content.

6. Presence on social media platforms

We use the following social media platforms for company presentation and communication (explicit reference is made to the data protection declarations and opt-out options below).

These social media platforms may process personal data outside the EU; in this respect, we refer you to the above data protection declarations of the social media platforms.

The respective social media platforms may be able to create user profiles from your usage behavior and the resulting interests and actions on your part and store cookies on your computer in which your usage behavior is stored. If you have an account on the respective social media platform and are logged in, your usage behavior can be stored independently of your device. For example, your usage profile can be used to place advertisements that presumably correspond to your interests.

We process the personal data exclusively for communication with you via the social media platform you have selected and to optimize our online presence, and ensure that no interests on your part are affected that outweigh this legitimate interest on our part (Art. 6 (1 f) GDPR). If you have already given the respective operator of the social media platform effective consent to the corresponding data processing, your personal data will also be processed on the basis of this consent (Art. 6 (1 a) GDPR).

7. Services from third-party providers

7.1 Social media links and social sharing

We have our own social media pages with third-party providers that can be reached via links from this website. By using the links, you can access the respective websites of the third-party providers (e.g., Facebook, Twitter, Instagram) and also share our content. Here, no data transfer takes place by calling up our website. To avoid unnecessary data transfer, we recommend logging out of the respective third-party provider before using a corresponding link, so that usage profiles cannot be created by the third-party provider simply by using the link.

7.2 Shopify

7.2.1 Hosting by Shopify

We use the store system of the service provider Shopify (operated by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland) to host and display the online store. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. as part of further processing on behalf of Shopify. The use of Shopify is based on our legitimate interest (Art. 6 I p. 1 f GDPR) in being able to offer you an appealing store or website and to facilitate our processing. In the context of contract processing, the legal basis is Art. 6 (1 b) GDPR. You can view Shopify's privacy policy here: https://www.shopify.de/legal/datenschutz

7.2.2 Shopify Analytics

We also use the analytics tool Shopify Analytics (operated by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). In addition to processing your IP address, the tool also uses cookies. The information and data about the use of our website that the cookies collect is transferred to Shopify and analyzed there. This enables us to track the use of our website and optimize it accordingly. Shopify Analytics is only used with your consent (Art. 6 (1 a) GDPR). You can view Shopify's privacy policy here: https://www.shopify.de/legal/datenschutz
You can find more information about Shopify Analytics at https://help.shopify.com/de/manual/reports-and-analytics/shopify-reports

7.2.3 Shopify Payments

We also use the payment service provider Shopify Payments (operated by Shopify Payments Inc., 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2, Ireland). If you choose a payment method offered by the payment service provider Shopify Payments, the payment will be processed by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process together with the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1 b) GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent that it is necessary for this purpose. You can find more information about Shopify Payments' data protection in their privacy policy: https://www.shopify.com/legal/privacy
The privacy policy of Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

7.3 Klarna

In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer the following payment options:

• Invoice: The payment period is 14 days from the dispatch of the goods or, in the case of other services, the provision of the service. You can find the invoice terms here: https://cdn.klarna.com/1.0/shared/content/legal/terms/EID/de_de/invoice?fee=0
• Installment purchase: With Klarna's financing service, you can pay for your purchase flexibly in monthly installments of at least 1/24 of the total amount (but at least EUR 6.95) or under the conditions otherwise specified in the checkout. Payment by installments is due at the end of each month after Klarna has sent you a monthly invoice. Further information on installment purchases, including the General Terms and Conditions and the European standard information for consumer credit, can be found here: https://cdn.klarna.com/1.0/shared/content/legal/terms/EID/de_de/account
• Immediately: Your account will be debited immediately after placing the order.
• Credit card (Visa/ Mastercard)
• Direct debit: The amount will be debited after the goods have been dispatched. You will be informed of the date by e-mail.

The legal basis for this is Art. 6 (1 b) GDPR.

The use of the payment methods invoice, installment purchase and direct debit also requires a positive credit check, as we make advance payments and ship the goods. We, therefore, have a legitimate interest in the information (Art. 6 (1 f) GDPR). In this respect, we forward your data to Klarna for the purpose of address and credit checks as part of the purchase initiation and processing of the purchase contract. Further information and Klarna's terms of use can be found here: https://cdn.klarna.com/1.0/shared/content/legal/terms/EID/de_de/user
You can find general information about Klarna here: https://www.klarna.com/de/
You can view Klarna's privacy policy here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

7.4 Further payment options

In addition to payment by credit card, Klarna's payment methods and processing via Shopify Payments, it is also possible to carry out the payment process via the following payment provider:

PayPal (PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg (City), Luxembourg)
Privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full/

Google Pay (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland)
Privacy policy: https://www.google.de/intl/de/policies/privacy

The following of your data is regularly transmitted to the third-party providers for payment processing and processed by them:

• Your e-mail address
• Your address
• Details of your order
• Your IP address
• Phone number
• Bank details

The transfer and processing of your personal data by the payment provider is necessary so that you can make the payment through them. The legal basis for this is Art. 6 (1 b) GDPR (processing for the performance of a contract).

7.5 Braintree (PayPal)

If you use our services for a fee, we will pass on your data to the online payment service Braintree from PayPal (PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) for payment processing. The legal basis for this is Art. 6 (1 b) GDPR. PayPal receives your e-mail address, address and details of the items you have purchased from us. Information provided to Braintree is not under our control and is subject to the privacy policy of PayPal or Braintree.

You can view PayPal's privacy policy here:
https://www.paypal.com/de/webapps/mpp/ua/privacy-prev?locale.x=de_DE

You can view Braintree's privacy policy here:
https://www.braintreepayments.com/en-de/legal/braintree-privacy-policy.

7.6 Use of Matomo

This website uses Matomo (developed by InnoCraft Ltd, 7 Waterloo Quay PO625, 6140 Wellington, New Zealand). Matomo is a web analysis service. Matomo uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your shortened IP address) is transmitted to our server and stored for usage analysis purposes, which serves to optimize our website. Your IP address is immediately anonymized during this process so that you, as a user, remain anonymous to us. Matomo is only used with your consent (Art. 6 (1 a) GDPR). The information generated by the cookie about your use of this website will not be passed on to third parties. You may refuse to use cookies by selecting the appropriate settings on your browser. However, please note that if you do this, you may not be able to use the full functionality of this website. If you do not agree to the storage and analysis of this data from your visit, you can object to its storage and use at any time. In this case, a so-called opt-out cookie will be stored in your browser, which means that Matomo will not collect any session data.

Please note: If you delete your cookies, the opt-out cookie will also be deleted and may have to be reactivated by you.

You can deactivate the analysis by Matomo here:

You can view Matomo's privacy policy here: https://matomo.org/privacy-policy/

8. Contacting us

You are welcome to use the following contact options to contact us regarding data protection. Controller within the meaning of the GDPR: