This English text is a courtesy translation. Only the German version is legally binding.
Current operating status as of 11 September 2026
Shopify Network Intelligence, Shopify Inbox including its AI agent, hCaptcha and the Shopify integrations with Google and Meta are currently deactivated. The newsletter sign-up in the shop theme is deactivated; consent to email marketing may still be offered at checkout or in the customer account. Where consent has been given, Shopify may send reminders about your cart, products viewed, price changes or items back in stock. The contact form is active and uses its own spam protection without cookies or third-party services (see “Collection and processing when using the contact form”). You can also contact us by email. The information marked below with “Status: currently deactivated” relates to previous use and data already transmitted.
Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is given for the processing operations described below.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our website without providing any information about yourself.
Each time you access our website, usage data is transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offering.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the European Commission. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the European Commission's standard contractual clauses.The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offering.
Contact
Controller
Contact us if you wish. The controller responsible for data processing is: Checkpoint & Cinema - Birgit Scharrer, Mehringdamm 41, 10961 Berlin Germany, 030 70071669 (no customer service), kontakt@checkpoint-cinema.com
Customer-initiated contact by email
If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent you provide it. The data processing serves to handle and respond to your contact request.
If the contact serves to take pre-contractual measures (e.g. advice on a potential purchase, preparing a quotation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If you contact us for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When you use the contact form, we collect your personal data (name, email address, message text as well as the selected topic and an optional item number) only to the extent you provide it. The data processing serves the purpose of making contact.
If the contact serves to take pre-contractual measures (e.g. advice on a potential purchase, preparing a quotation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If you contact us for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in handling and responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
We use your email address only to handle your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Spam protection in the contact form (entry code)
To protect against automated requests (spam), we use our own entry code in the contact form. Your browser generates a random character code and displays it as an image; you type it in. We also check that a field that is invisible to humans remains empty and that the form is not sent immediately after the page has loaded. This check takes place exclusively in your browser. No cookies are set, no data is stored on your device and no third-party services are involved. Along with your message, we only transmit a note that the code was confirmed. The optional “Read aloud” function only uses the speech output installed on your device.
The contact form is transmitted via our shop provider Shopify, which delivers your message to us by email. The processing for spam protection is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in protecting our contact form against misuse.
Collection and processing when using the withdrawal button
If you have concluded a contract via our online presence, we provide you with a withdrawal function (withdrawal button) through which you can submit your declaration of withdrawal directly.
When you use the withdrawal function, we collect your personal data (name, email address, information identifying the contract or part of the contract from which you wish to withdraw, and the time (date and time) at which the declaration of withdrawal was sent) only to the extent you provide it. The data processing serves the purpose of providing you with the statutory option to withdraw from your contract and of properly processing your withdrawal.
If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. Otherwise, the data processing is carried out on the basis of Art. 6(1)(c) GDPR, in order to fulfil a legal obligation to provide you with a withdrawal function on our online presence.
We use your email address only to process your declaration of withdrawal. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Disclosure to third-party providers (use of plug-ins)For the technical provision and management of the withdrawal function on our online presence, we use, within the scope of processing on our behalf, a software solution of the third-party provider Shopify. The self-service page may require you to log in to your customer account and does not replace the option of declaring your withdrawal via the contact channels stated in the withdrawal information (self-service returns and cancellations via https://konto.checkpoint-cinema.com/orders)
When you use the withdrawal function, your collected personal data is transmitted to the servers of the third-party providers named above.
The processing of your personal data serves the purpose of meeting the statutory requirements for the design of the withdrawal function in a legally compliant manner and is carried out on the basis of Art. 6(1)(c) GDPR. This data processing is also carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in being able to offer you a user-friendly way to withdraw. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
Collection and processing of applications by email
Website visitors who are interested can apply by email for vacancies advertised on our website. In doing so, we collect your personal data only to the extent you provide it. This includes your contact details (e.g. name, email address, telephone number), information on your professional qualifications and education, information on further professional training and performance-related certificates.
The data processing serves the purpose of making contact and deciding on the establishment of an employment relationship with you. Providing the data is necessary to carry out the application procedure. Your personal data is processed on the basis of Art. 6(1)(b) GDPR in conjunction with § 26(1) of the German Federal Data Protection Act (BDSG) in order to take pre-contractual measures (going through the application procedure as the initiation of an employment contract).
Insofar as you have given us your consent to the processing of personal data for inclusion in our applicant pool, e.g. by ticking a checkbox, the processing is carried out on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent from us at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Insofar as special categories of personal data within the meaning of Art. 9(1) GDPR are requested from applicants in the course of the application procedure, such as information on the degree of a severe disability, this is done on the basis of Art. 9(2)(b) GDPR so that we can exercise the rights arising from employment law and from social security and social protection law and fulfil our obligations in this respect.
We store your personal data for as long as this is necessary to decide on your application. Your data will then be deleted after six months at the latest, unless you have consented to further processing and use. If the application procedure is followed by an employment relationship, the data provided will be further processed on the basis of Art. 6(1)(b) GDPR in conjunction with § 26(1) BDSG for the purposes of carrying out the employment relationship and then transferred to your personnel file.
WhatsApp BusinessIf you contact us for business purposes via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”) for this purpose. If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to handle and respond to your contact request. For this purpose, we collect and process the mobile phone number you have stored with WhatsApp, your name if provided, and other data to the extent you provide it. For this service, we use a mobile device whose address book only stores data of users who have contacted us via WhatsApp. Personal data is therefore not passed on to WhatsApp unless you have already consented to this vis-à-vis WhatsApp.
Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles. If the contact serves to take pre-contractual measures (e.g. advice on a potential purchase, preparing a quotation) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.
If you contact us for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in providing a quick and easy way to contact us and in responding to your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR.
We use your personal data only to handle your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.
Customer account Orders
Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal. Your customer account will then be deleted.
Collection, processing and disclosure of personal data for orders
When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. Providing the data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
In this context, your data is disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of the data transfer is limited to a minimum.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the European Commission. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the European Commission's standard contractual clauses.Advertising
Use of your email address for sending newsletters
We use your email address to send you information and offers by newsletter if you have expressly consented to this. The data processing serves exclusively the purpose of direct advertising. For this purpose, we process your email address and, where applicable, other data that you have voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6(1)(f) GDPR, based on our and your legitimate interest in preventing your email address from being used again to send our newsletter. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
In this context, your data is passed on to an email marketing service provider within the scope of processing on our behalf. It is not disclosed to any other third parties.
Payment service providers
Use of PayPal
On our website, we use the payment service PayPal of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of being able to offer you payment via this payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
All PayPal transactions are subject to the PayPal Privacy Statement. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Use of PayPal Express
On our website, we use the payment service PayPal Express of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal"). The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies make it possible to recognise your browser.
Your personal data is processed on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in offering a customer-oriented choice of different payment methods. You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy statement at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
Use of Shopify Payments
On our website, we use the payment service "Shopify Payments" of Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify"). In this case, payments are processed by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; "Stripe"). The data processing serves the purpose of being able to offer you payment via the Shopify Payments payment service. When you select and use a corresponding "Shopify Payments" payment method, the data required for payment processing is transmitted to Stripe in order to be able to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.
Stripe reserves the right to obtain, where applicable, a credit report based on mathematical-statistical methods from credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognised mathematical-statistical methods and whose calculation includes, among other things, address data. Your interests worthy of protection are taken into account in accordance with the statutory provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in protection against payment default where Stripe performs in advance.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you that is based on Art. 6(1)(f) GDPR by notifying Stripe. Providing the data is necessary for the conclusion of the contract using the payment method you have requested. Failure to provide it means that the contract cannot be concluded using the payment method you have selected.
Further information on data processing when using the Shopify Payments payment service can be found in Shopify's privacy policy at: https://www.shopify.com/de/legal/datenschutz.
Further information on data processing when payments are processed via the payment service provider Stripe can be found in Stripe's privacy policy at: https://stripe.com/de/privacy.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user visits a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is visited again.
Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set, decide individually whether to accept them, and prevent cookies from being stored and the data they contain from being transmitted. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website to their full extent.
The following links explain how you can manage cookies (including, among other things, how to deactivate them) in the most common browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Technically necessary cookies
Unless otherwise stated below in this privacy policy, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary for the browser to be recognised even after a page change.
Cookies or comparable technologies are used on the basis of § 25(2) TDDDG. Your personal data is processed on the basis of Art. 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering.
You have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you.
Use of Complianz GDPR cookie consent
On our website, we use the Complianz GDPR Cookie Consent plug-in of iubenda s.r.l (Via San Raffaele 1, 20121 Milan, Italy; “iubenda”).
The plug-in enables you to give consent to data processing via the website, in particular to the setting of cookies, and to exercise your right to withdraw consents already given. The data processing serves the purpose of obtaining and documenting the required consents to data processing and thus complying with legal obligations. Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to iubenda: uniquely assignable ID, consent status. This data is not passed on to any other third parties.
The data processing is carried out to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR.
Further information on data protection can be found at: https://complianz.io/de/legal-deutsch/datenschutzerklaerung-von-complianz-shopify/
Analytics Ad tracking Communication
Use of Google Analytics 4 (currently deactivated)
Status: currently deactivated. The following information relates to previous use and data already transmitted.
On our website, we use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).The data processing serves the purpose of analysing this website and its visitors as well as marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide the website operator with further services relating to website use and internet use.
Among other things, the following information may be collected: IP address, date and time of the page view, click path, information about the browser and the device you use, pages visited, referrer URL (the website from which you accessed our website), location data, purchase activity. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google holds about you.
The IP address is first truncated by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area.
Google uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. Cookies or comparable technologies are used with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.
Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
The information generated in this way about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles. Both Google and US government authorities have access to your data.
Further information on the terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites at https://policies.google.com/privacy?hl=de&gl=de and at https://business.safety.google/privacy/.
Use of Shopify statistics
On our website, we use the statistics and analytics functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") within the scope of processing on our behalf. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analysing this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and made available in reports, analyses and statistics. Among other things, the following device information is collected and processed: information about the web browser, the IP address, the time zone and some of the cookies installed on your device. When you navigate the website, information about the web pages or products viewed, the referrer URL (the website from which you accessed our website) and information about how you interact with the website are also recorded. Technologies such as cookies as well as web beacons, tags and pixels (electronic files for recording information about how you navigate the website) are used for this purpose.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the European Commission. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the European Commission's standard contractual clauses.
Cookies or comparable technologies are used with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz, information on the data processing agreement at https://www.shopify.com/de/legal/dpa and information on the cookies used at https://www.shopify.com/de/legal/cookies.
Use of the Meta Pixel (currently deactivated)
Status: currently deactivated. The following information relates to previous use and data already transmitted.
On our website, we use the Meta Pixel of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta").
Meta and we are joint controllers for the collection of your data that takes place when the service is integrated and for the transmission of this data to Meta. This is based on an agreement between us and Meta on the joint processing of personal data, which sets out the respective responsibilities. The agreement can be accessed at https://de-de.facebook.com/legal/terms/businesstools. According to this agreement, we are responsible in particular for fulfilling the information obligations under Arts. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Arts. 33 and 34 GDPR insofar as a personal data breach affects our obligations under the joint processing agreement. Meta is responsible for enabling the data subject rights under Arts. 15 - 20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for complying with the obligations under Arts. 33 and 34 GDPR insofar as a personal data breach affects Meta's obligations under the joint processing agreement.
The application serves the purpose of addressing visitors to the website in a targeted manner with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta's remarketing tag has been implemented on the website. When you visit the website, this tag establishes a direct connection to the Meta servers. This transmits to the Meta server which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account. When you then visit the social networks Facebook or Instagram, you will be shown personalised, interest-based ads.
The application also serves the purpose of compiling conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page bearing a conversion tracking tag, as well as which actions are taken on this website after the redirection. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
You can deactivate the “Custom Audiences” remarketing function here. Further information on the collection and use of data by Meta, on your rights in this regard and on options for protecting your privacy can be found in Meta's privacy notice at https://www.facebook.com/about/privacy/.
You can deactivate the “Custom Audiences” remarketing function here. Further information on the collection and use of data by Meta, on your rights in this regard and on options for protecting your privacy can be found in Meta's privacy notice at https://www.facebook.com/about/privacy/.
Use of Google Ads conversion tracking (currently deactivated)
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked across the websites of Ads customers.
The information obtained with the help of the conversion cookie serves the purpose of compiling conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page bearing a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
Your data may be transmitted to the servers of Google LLC in the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Status: currently deactivated. The following information relates to previous use and data already transmitted.
On our website, we use the online advertising programme “Google Ads” and, in this context, conversion tracking (evaluation of visit actions). Google Conversion Tracking is an analytics service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked across the websites of Ads customers.
The information obtained with the help of the conversion cookie serves the purpose of compiling conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page bearing a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
Your data may be transmitted to the servers of Google LLC in the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Cookies or comparable technologies are used with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/ or https://business.safety.google/privacy/
Use of Google's remarketing or “Similar audiences” function (currently deactivated)
The application serves the purpose of analysing visitor behaviour and visitor interests. Google uses cookies to analyse website usage, which forms the basis for creating interest-based advertisements. The cookies record visits to the website as well as anonymised data on the use of the website. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account product and information areas you viewed previously.
Your data may be transmitted to servers of Google LLC in the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Cookies or comparable technologies are used with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
Status: currently deactivated. The following information relates to previous use and data already transmitted.
On our website, we use the remarketing or "Similar audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google").The application serves the purpose of analysing visitor behaviour and visitor interests. Google uses cookies to analyse website usage, which forms the basis for creating interest-based advertisements. The cookies record visits to the website as well as anonymised data on the use of the website. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account product and information areas you viewed previously.
Your data may be transmitted to servers of Google LLC in the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Cookies or comparable technologies are used with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/ and https://business.safety.google/privacy/
Use of Shopify Inbox (currently deactivated)
The data processing serves the purpose of direct and efficient communication between you and us as the provider. Data is stored and processed for the operation of the system and for the purpose of optimising the service.
Cookies that enable the browser to be recognised may be used to operate the live chat system. The following information may be collected and processed: IP address and personal data you provide when using the chat system.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the European Commission. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the European Commission's standard contractual clauses.
Cookies or comparable technologies are used with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz and https://www.shopify.com/de/legal/dpa.
Status: currently deactivated. The following information relates to previous use and data already transmitted.
On our website, we use the live chat system Shopify Inbox of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") within the scope of processing on our behalf. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).The data processing serves the purpose of direct and efficient communication between you and us as the provider. Data is stored and processed for the operation of the system and for the purpose of optimising the service.
Cookies that enable the browser to be recognised may be used to operate the live chat system. The following information may be collected and processed: IP address and personal data you provide when using the chat system.
Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. For Canada, there is an adequacy decision of the European Commission. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to those of the European Commission's standard contractual clauses.
Cookies or comparable technologies are used with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz and https://www.shopify.com/de/legal/dpa.
Plug-ins and miscellaneous
Use of hCaptcha (currently deactivated)
Status: currently deactivated. The following information relates to previous use and data already transmitted.
On our website, we use the hCaptcha service of Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA; “hCaptcha”) within the scope of processing on our behalf.HCaptcha serves to protect our website against spam and abuse by automated access (bots). By implementing hCaptcha, we ensure that certain actions on our website are only carried out by real people, which safeguards the security and integrity of our online services.
When hCaptcha is used, the following data may be collected and processed: the user's IP address, information about the device used (e.g. browser and operating system), mouse movements and interactions on the website, time spent on the website, the user's input behaviour.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the European Commission, the Trans-Atlantic Data Privacy Framework (TADPF). HCaptcha has certified itself under the TADPF and has thereby undertaken to comply with European data protection principles.
Cookies or comparable technologies are used with your consent on the basis of § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent before its withdrawal.
Further information on data processing and data protection at hCaptcha can be found at https://www.hcaptcha.com/gdpr.
Data subject rights and storage period
Storage period
After the contract has been fully processed, the data is initially stored for the duration of the warranty period, then in accordance with statutory retention periods, in particular under tax and commercial law, and deleted once these periods have expired, unless you have consented to further processing and use.
Rights of the data subject
Where the statutory requirements are met, you have the following rights under Arts. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, under Art. 21(1) GDPR you have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for the purposes of direct marketing.
Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that your personal data is not being processed lawfully.
You can lodge a complaint with, among others, the supervisory authority responsible for us, which can be contacted using the following details:
Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Friedrichstr. 219
Visitor entrance: Puttkamerstr. 16 – 18 (5th floor)
10969 Berlin
Phone: +49 30 138890
Fax: +49 30 2155050
Email: mailbox@datenschutz-berlin.de
Right to object
If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to such processing at any time with effect for the future on grounds relating to your particular situation.
Once you have objected, the processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.