Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data refers to all data with which you can be personally identified.

1.2 The controller for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Sofia Montreal. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller). You can recognize an encrypted connection by the string "https://" and the lock icon in your browser's address bar.

2) Data Collection When Visiting Our Website

When using our website for informational purposes only, meaning if you do not register or otherwise transmit information to us, we collect only the data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

  • The website visited by you
  • Date and time of access
  • The amount of data sent in bytes
  • Source/reference from which you accessed the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. This data is not shared or used in any other way. However, we reserve the right to check the server log files afterward if there are specific indications of illegal use.

3) Cookies

To make our website more attractive and to enable the use of certain functions, we use cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after your browser session ends (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser the next time you visit (persistent cookies). If cookies are set, they collect and process specific user information, such as browser and location data, as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

Some cookies serve to simplify the ordering process (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed through individual cookies implemented by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either for contract performance or under Art. 6 (1) (f) GDPR to safeguard our legitimate interest in the best possible functionality of the website and a customer-friendly and efficient design of the page visit.

We may work with advertising partners to help make our website more interesting for you. In this case, cookies from our partner companies may also be stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately in the following sections if we work with such advertising partners.

Please note that you can configure your browser to inform you about the setting of cookies, allowing you to decide on their acceptance individually or to exclude the acceptance of cookies for specific cases or in general. Every browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find the respective browser links here:

Please note that the functionality of our website may be limited if you do not accept cookies.

4) Contacting Us

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected in the case of a contact form is evident from the respective contact form. This data is stored and used solely for the purpose of responding to your request or for contacting you and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request, as per Art. 6 (1) (f) GDPR. If your contact aims to conclude a contract, an additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted once your request has been fully processed, provided there are no legal retention requirements preventing deletion.

5) Data Processing When Opening a Customer Account and for Contract Execution

In accordance with Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. The specific data collected can be seen from the respective input forms. The deletion of your customer account is possible at any time and can be requested by sending a message to the address of the controller mentioned above. We store and use the data you provide for the execution of the contract. After the full execution of the contract or the deletion of your customer account, your data will be blocked in consideration of retention periods under tax and commercial law and deleted after the expiration of these periods unless you have expressly consented to further use of your data or a legally permitted further data use has been reserved by us, about which we inform you accordingly below.

6) Use of Your Data for Direct Advertising

6.1 Subscription to Our Email Newsletter
If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing any further data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an email newsletter if you have expressly confirmed that you consent to the sending of the newsletter. We will then send you a confirmation email in which you are asked to confirm that you want to receive the newsletter by clicking a corresponding link.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) (a) GDPR. When registering for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to track any possible misuse of your email address at a later date. The data collected when you subscribe to the newsletter will be used exclusively for the purpose of advertising via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned above. After unsubscribing, your email address will be immediately removed from our newsletter distribution list, unless you have expressly consented to the further use of your data or we reserve the right to further use your data, which is permitted by law and about which we inform you in this policy.

6.2 Sending of Email Newsletters to Existing Customers
If you have provided us with your email address when purchasing goods or services, we reserve the right to send you regular offers for similar goods or services, such as those already purchased, via email. We do not need to obtain your separate consent for this. Data processing in this case is solely based on our legitimate interest in personalized direct advertising in accordance with Art. 6 (1) (f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send any emails. You are entitled to object to the use of your email address for advertising purposes at any time with future effect by notifying the controller mentioned above. For this, you will only incur transmission costs in accordance with the basic rates. Upon receiving your objection, the use of your email address for advertising purposes will immediately cease.

7) Data Processing for Order Processing

7.1 Transmission of Personal Data for Order Processing
The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of the contract execution, provided this is necessary for the delivery of the goods. We will pass on your payment details to the commissioned credit institution as part of the payment processing, provided this is necessary for the payment processing. If payment service providers are used, we explicitly inform you about this below. The legal basis for the transmission of data is Art. 6 (1) (b) GDPR.

7.2 Use of Payment Service Providers (Payment Services)

  • PayPal
    When paying via PayPal, credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transmission is carried out in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for the payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies based on PayPal's legitimate interest in determining your solvency in accordance with Art. 6 (1) (f) GDPR. The result of the credit check regarding the statistical probability of payment default is used by PayPal to decide on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data is included in the calculation of the score values, among other things. Further information on data protection, including the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/webapps/mpp/ua/privacy-full.

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

  • SOFORT
    If you choose the "SOFORT" payment method, the payment will be processed by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT"). We will pass on the information you provided during the ordering process, along with details about your order, to SOFORT in accordance with Art. 6 (1) (b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The transmission of your data is solely for the purpose of processing payments with the payment service provider SOFORT and only to the extent necessary. You can find more information on SOFORT's privacy policy at: https://www.klarna.com/sofort/privacy-policy.

8) Contact for Review Reminder

  • Own Review Reminder (No Customer Review System)
    We use your email address for a one-time reminder to submit a review of your order through our review system, provided that you have expressly given us your consent during or after your order in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time by sending a message to the controller.

9) Use of Social Media: Social Plugins

9.1 Facebook Plugins with Shariff Solution
Our website uses social plugins ("plugins") from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook").

To increase the protection of your data when visiting our website, these buttons are not integrated as unrestricted plugins but only by using an HTML link. This ensures that when you access a page of our website containing such buttons, no connection to Facebook's servers is established. When you click on the button, a new browser window opens and loads the Facebook page, where you can interact with the plugins there (after entering your login data, if necessary).

Facebook Inc., based in the USA, is certified for the US-European Privacy Shield agreement, which ensures compliance with the data protection level applicable in the EU.

For more information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your rights and privacy settings, please refer to Facebook's privacy policy: https://www.facebook.com/policy.php.

9.2 Google+ Plugins with Shariff Solution
Our website uses social plugins ("plugins") from the social network Google+, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

9.3 Instagram Plugin with Shariff Solution

Our website uses social plugins ("plugins") from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To protect your data when visiting our website, these buttons are not integrated as unrestricted plugins but are instead embedded using an HTML link. This ensures that when you visit a page on our website containing such buttons, no connection is made to Instagram’s servers. When you click on the button, a new browser window opens and loads the Instagram page, where you can interact with the plugins (after entering your login data if necessary).

Instagram LLC, based in the USA, is certified under the US-European Privacy Shield, ensuring compliance with the data protection standards applicable in the EU.

For more information on the purpose and scope of data collection and further processing and use of the data by Instagram, as well as your rights and privacy settings, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/.

10) Online Marketing

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display ads relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Using a cookie ID, Google records which ads are shown in which browser, preventing them from being displayed multiple times. The processing is based on our legitimate interest in optimizing the marketing of our website in accordance with Art. 6 (1) (f) GDPR.

In addition, DoubleClick can use cookie IDs to track conversions related to ad requests. This occurs, for example, when a user sees a DoubleClick ad and later visits the advertiser’s website using the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain personal data.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's servers. We have no control over the extent and further use of the data collected by Google through this tool. To the best of our knowledge, by integrating DoubleClick, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered or logged into Google, there is still the possibility that the provider may obtain and store your IP address.

If you want to opt out of participating in this tracking process, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, available at https://www.google.com/settings/ads, though this setting will be deleted if you clear your cookies. Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to learn more about setting cookies and make the appropriate adjustments. Finally, you can configure your browser so that you are notified about the placement of cookies and decide individually whether to accept them or block them in specific cases or entirely. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, based in the USA, is certified under the US-European Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

More information about DoubleClick by Google’s privacy policy can be found at: https://www.google.com/policies/privacy/.

10.2 Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, within the framework of Google AdWords, conversion tracking by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to promote our website with advertisements on external websites. We can assess the success of individual advertising campaigns based on the data related to those advertising campaigns. Our goal is to show you ads that are of interest to you and to make our website more appealing to you while achieving a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files stored on your device. These cookies expire after 30 days and are not used for personal identification. If a user visits certain pages on this website and the cookie has not yet expired, Google and we can see that the user clicked on the ad and was redirected to that page. Each Google AdWords customer receives a different cookie. Cookies cannot be tracked across AdWords customer websites. The information obtained via the conversion cookie is used to create conversion statistics for AdWords customers who have opted for conversion tracking. We can see the total number of users who clicked on our ad and were redirected to a page containing a conversion tracking tag. However, we do not receive any information that personally identifies users.

If you do not wish to participate in tracking, you can opt out of this by disabling the Google conversion tracking cookie in your browser settings. You will then not be included in conversion tracking statistics.

We use Google AdWords based on our legitimate interest in targeted advertising in accordance with Art. 6 (1) (f) GDPR.

Google LLC, based in the USA, is certified under the US-European Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

More information about Google’s privacy policies can be found at: https://www.google.com/policies/privacy/.

You can permanently disable cookies for ad preferences by adjusting your browser settings accordingly or by installing the browser plugin available at: https://www.google.com/settings/ads/plugin.

Please note that if you disable the use of cookies, some functions of this website may be limited or unavailable.

11) Web Analytics Services

Google (Universal) Analytics

11.1 Google Universal Analytics
This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of this website (including your shortened IP address) is transmitted to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()". This ensures the anonymization of the IP address by shortening it and excludes direct personal reference. Through this extension, Google shortens your IP address within member states of the European Union or in other contracting states to the Agreement on the European Economic Area before transmission to the USA. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, the processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website usage and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by configuring your browser software accordingly; however, please note that if you do so, you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting and processing the data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout.

Alternatively, you can opt out of Google Analytics by clicking on the following link to set an opt-out cookie, which will prevent future collection of your data when visiting this website: Disable Google Analytics.

Google LLC, based in the USA, is certified under the US-European Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

This website also uses Google Analytics for cross-device analysis of visitor traffic, which is conducted through a user ID. When a page is accessed for the first time, the user is assigned a unique, permanent, and anonymized ID, which is used across devices. This enables tracking of interaction data across devices and from different sessions. The user ID does not contain personal data and is not transmitted to Google.

You can opt out of cross-device tracking by disabling Google Analytics on all systems you use (e.g., in another browser or on your mobile device). You can do this by installing the browser plugin from Google (https://tools.google.com/dlpage/gaoptout). Alternatively, click the following link to set an opt-out cookie: Disable Google Analytics.

More information on Universal Analytics can be found here: https://support.google.com/analytics/answer/2838718.

12) Retargeting/Remarketing/Referral Advertising

12.1 Facebook Custom Audience via the Pixel Method
This website uses the "Facebook Pixel" of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). If you have given your explicit consent, this allows tracking of user behavior after they have seen or clicked on a Facebook advertisement. This process is used to evaluate the effectiveness of Facebook advertisements for statistical and market research purposes and can help optimize future advertising efforts.

The collected data is anonymous to us, meaning we do not see the personal data of individual users. However, the data 

is stored and processed by Facebook, allowing it to be linked to the respective user profile, and Facebook can use this data for its own advertising purposes, in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/). This may enable Facebook and its partners to display advertisements both on and off Facebook. A cookie may also be stored on your computer for these purposes. These processing activities only take place if explicit consent has been given in accordance with Art. 6 (1) (a) GDPR.

Consent for the use of the Facebook Pixel may only be given by users who are at least 13 years old. If you are younger, we ask that you seek permission from your parent or guardian.

Facebook Inc., based in the USA, is certified under the US-European Privacy Shield, which guarantees compliance with the data protection standards applicable in the EU.

To disable the use of cookies on your computer, you can configure your internet browser to prevent cookies from being stored on your computer in the future or to delete cookies that have already been saved. Disabling all cookies may limit the functionality of some features on our website. You can also opt out of the use of cookies by third-party providers like Facebook on the website of the Digital Advertising Alliance: https://www.aboutads.info/choices/

12.2 Google AdWords Remarketing

Our website uses Google AdWords Remarketing, which allows us to advertise this website in Google search results and on third-party websites. This is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google sets a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. The processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) (f) GDPR.

Further data processing only takes place if you have agreed with Google that your internet and app browsing history will be linked to your Google account and information from your Google account will be used to personalize ads you view on the web. In this case, if you are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. To do this, your personal data is temporarily linked by Google to Google Analytics data to create target groups.

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plugin available at: https://www.google.com/settings/ads/onweb/. Alternatively, you can visit the Digital Advertising Alliance website at https://www.aboutads.info to learn more about setting cookies and make the necessary changes. Lastly, you can configure your browser to notify you whenever cookies are being set and decide on a case-by-case basis whether to accept them or block them entirely. If you do not accept cookies, the functionality of our website may be limited.

Google LLC, based in the USA, is certified under the US-European Privacy Shield, which ensures compliance with the data protection standards applicable in the EU.

Further information and Google's privacy policy regarding advertising can be found at: https://www.google.com/policies/technologies/ads/.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you comprehensive rights (rights of access and intervention) in relation to the processing of your personal data by the controller, which we will inform you about below:

  • Right of Access (Art. 15 GDPR): You have the right to request information about the personal data we process about you, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been disclosed or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, or objection to the processing, the right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us from you, the existence of automated decision-making, including profiling, and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing, as well as your right to be informed about the safeguards provided in accordance with Art. 46 GDPR when your data is transferred to third countries.

  • Right to Rectification (Art. 16 GDPR): You have the right to have inaccurate personal data concerning you corrected without undue delay and/or to have incomplete data completed.

  • Right to Deletion (Art. 17 GDPR): You have the right to request the deletion of your personal data under the conditions of Art. 17 (1) GDPR. This right, however, does not apply in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

  • Right to Restriction of Processing (Art. 18 GDPR): You have the right to request the restriction of the processing of your personal data for the duration of any verification of contested accuracy, if you oppose the deletion of unlawfully processed data and instead request the restriction of processing, if you require the data for the establishment, exercise, or defense of legal claims, or if you have objected to processing pending the verification of whether our legitimate grounds override your rights.

  • Right to Notification (Art. 19 GDPR): If you have exercised your right to rectification, deletion, or restriction of processing against the controller, they are obliged to inform all recipients to whom your personal data has been disclosed about this correction, deletion, or restriction unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.

  • Right to Data Portability (Art. 20 GDPR): You have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format or to request the transfer of this data to another controller, where technically feasible.

  • Right to Withdraw Consent (Art. 7 (3) GDPR): You have the right to withdraw your consent to the processing of your data at any time with effect for the future. Upon withdrawal, we will promptly delete the data concerned unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out based on the consent before the withdrawal.

  • Right to Lodge a Complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your residence, workplace, or location of the alleged infringement, without prejudice to any other administrative or judicial remedy.

13.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, FURTHER PROCESSING MAY BE PERMITTED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is determined by the respective legal retention period (e.g., tax and commercial retention periods). After the expiration of the period, the corresponding data is routinely deleted, provided it is no longer required for contract fulfillment or contract initiation and/or there is no legitimate interest in further storage.