Privacy Policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies insofar as no other information is given in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any personal information.
Each time our website is accessed, usage data is transmitted by your internet browser to us or to our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in ensuring the trouble-free operation of our website and in improving our offer.

Shop system and hosting

This online shop is operated on the e-commerce platform of Shopify International Limited (Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify"). Shopify hosts the website and processes the data you enter in the shop (e.g. order data, customer account data, contact form entries) on our behalf within the scope of a data processing agreement. Shopify may transfer data to companies of the Shopify group in Canada and the USA; for Canada an adequacy decision of the EU Commission exists, for the USA the transfer is based on the EU-U.S. Data Privacy Framework and on standard contractual clauses. Further information can be found in Shopify's privacy policy at https://www.shopify.com/legal/privacy.

Contact

Controller
Contact us if you wish. The contact details of the controller responsible for data processing can be found in our legal notice.

Customer-initiated contact by e-mail
If you initiate business contact with us by e-mail, we collect your personal data (name, e-mail address, message text) only to the extent provided by you. The data processing serves to process and answer your contact request.
If the contact serves the implementation of pre-contractual measures (e.g. advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you based on Art. 6 (1) lit. f GDPR.
We only use your e-mail address to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form / request form
When you use the contact form or the custom build request form, we collect your personal data (name, e-mail address, country, vehicle details, message text) only to the extent provided by you. The data processing serves the purpose of establishing contact.
If the contact serves the implementation of pre-contractual measures (e.g. advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR. If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you based on Art. 6 (1) lit. f GDPR. We only use your e-mail address to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

WhatsApp Business
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "WhatsApp"). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The data processing serves to process and answer your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name if provided, and further data to the extent provided by you. We use a mobile device for the service whose address book exclusively contains data of users who have contacted us via WhatsApp. Personal data is therefore not passed on to WhatsApp without you having already consented to this vis-à-vis WhatsApp.
Your data is transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. Data transfers to the USA are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.
If the contact serves the implementation of pre-contractual measures (e.g. advice in the event of interest in purchasing, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in providing a quick and easy way of contacting us and in answering your enquiry. In this case, you have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you based on Art. 6 (1) lit. f GDPR.
We only use your personal data to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.
Further information on the terms of use and data protection when using WhatsApp can be found at https://www.whatsapp.com/legal/#terms-of-service and https://www.whatsapp.com/legal/#privacy-policy.

Customer account and orders

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. Your customer account will then be deleted.

Collection, processing and transfer of personal data for orders
When you place an order, we collect and process your personal data only insofar as this is necessary for the fulfilment and processing of your order and for processing your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the fulfilment of a contract with you.
Your data is passed on, for example, to the shipping companies and dropshipping providers you have selected, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of the data transfer is limited to a minimum.

Reviews and advertising

Website logo for Google Customer Reviews
The website logo for Google Customer Reviews of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google") is integrated on our website.
The integration serves the purpose of displaying the number and result of the reviews we have received via Google so far and of advertising our participation in this programme.
In order to display the logo on our website and to show you personalised advertisements on Google, Google uses cookies. Among other things, your IP address may be processed and transmitted to Google.
Your data may be transferred to the USA. Data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://privacy.google.com/businesses/controllerterms/.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in the optimal marketing of our offers by displaying the customer reviews already received. You have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you. You can deactivate personalised advertising in the advertising settings at Google. Instructions can be found at https://support.google.com/ads/answer/2662922. Alternatively, you can prevent the use of cookies by third parties by visiting the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the further information on opting out provided there.
Further information on the terms of use and data protection when using Google Customer Reviews can be found at https://www.google.com/shopping/customerreviews/static/tos/en/1_01_tos.html and at https://policies.google.com/privacy.

Use of the e-mail address for sending newsletters
Irrespective of the processing of the contract, we use your e-mail address exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until revocation. To do so, you can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your e-mail address will then be removed from the distribution list.

Merchandise management

Use of an external merchandise management system
We use a merchandise management system for contract processing within the scope of order processing. For this purpose, your personal data collected in the course of the order is transmitted to
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany.

Payment service providers

Use of Shopify Payments
Depending on the payment method you select at checkout, payment is processed via Shopify Payments, a service of Shopify International Limited (Victoria Buildings, 1–2 Haddington Road, Dublin 4, Ireland) provided in cooperation with Stripe Payments Europe Ltd. (1 Grand Canal Street Lower, Dublin 2, Ireland). When you select and use this payment method, the data required for payment processing (e.g. name, address, payment details, order amount) is transmitted to the payment service provider in order to fulfil the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Further information can be found at https://www.shopify.com/legal/privacy and https://stripe.com/privacy.

Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/webapps/mpp/ua/privacy-full.

Use of PayPal Express
We use the payment service PayPal Express of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. The cookies enable your browser to be recognised.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to be able to fulfil the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 (1) lit. b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy policy at https://www.paypal.com/webapps/mpp/ua/privacy-full.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually about their acceptance, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.

You can find out how to manage (and also deactivate) cookies in the most important browsers under the following links:
Chrome: https://support.google.com/accounts/answer/61416
Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge
Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences
Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies
Unless otherwise stated below in the privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

The use of cookies or comparable technologies is based on Section 25 (2) TDDDG (German Telecommunications Digital Services Data Protection Act). The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.
You have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you.

Consent to cookies
Cookies and comparable technologies that are not technically necessary (e.g. for analysis and advertising) are only used with your consent, which you can give or refuse via the cookie banner when you visit the website and change at any time via "Manage preferences" (Section 25 (1) TDDDG, Art. 6 (1) lit. a GDPR).

Analysis and advertising tracking

Use of Google Analytics
We use the web analysis service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide further services to the website operator associated with website use and internet use. The following information may be collected, among others: IP address, date and time of the page view, click path, information about the browser and device you are using, pages visited, referrer URL (website via which you accessed our website), location data, purchase activities. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.
Google Analytics uses technologies such as cookies, web storage in the browser and tracking pixels that enable an analysis of your use of the website. The information generated in this way about your use of this website is usually transferred to a Google server in the USA and stored there. Data transfers to the USA are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adsprocessorterms/. Both Google and US government authorities have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and all other data that Google has about you.
IP anonymisation is activated on this website. This means that your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area beforehand. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent given via the cookie banner. You can revoke your consent at any time with effect for the future.
You can prevent the collection of the data generated by Google Analytics and relating to your use of the website (including your IP address) to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout
Further information on the terms of use and data protection can be found at https://www.google.com/analytics/terms/ and https://policies.google.com/privacy as well as at https://policies.google.com/technologies/cookies.

Use of the Facebook Pixel
We use the remarketing function "Custom Audiences" of Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Facebook") on our website.
Meta Platforms Ireland and we are joint controllers for the collection of your data that takes place when the service is integrated and the transfer of this data to Facebook. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum. According to this, we are in particular responsible for fulfilling the information obligations pursuant to Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for compliance with the obligations under Art. 33, 34 GDPR insofar as a personal data breach affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling data subject rights pursuant to Art. 15–20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for the obligations under Art. 33, 34 GDPR insofar as a personal data breach affects the obligations of Meta Platforms Ireland under the joint processing agreement.
The application serves the purpose of targeting visitors of the website with interest-based advertising on the social network Facebook. For this purpose, the Facebook remarketing tag has been implemented on the website. Via this tag, a direct connection to the Facebook servers is established when the website is visited. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you will then be shown personalised, interest-based Facebook ads.
Your data may be transferred to the USA. Data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://www.facebook.com/legal/EU_data_transfer_addendum.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent given via the cookie banner. You can revoke your consent at any time with effect for the future.
Further information on the collection and use of data by Facebook, on your rights in this regard and on ways to protect your privacy can be found in Facebook's privacy policy at https://www.facebook.com/about/privacy/.

Use of Google Ads conversion tracking
We use the online advertising programme "Google Ads" on our website and, within this framework, conversion tracking (evaluation of visit actions). Google conversion tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland).
If you click on an ad placed by Google, a cookie for conversion tracking is placed on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you have clicked on the ad and have been redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible for cookies to be tracked across the websites of Ads customers.
The information obtained with the help of the conversion cookie is used to create conversion statistics. We learn the total number of users who have clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
Your data may be transferred to the servers of Google LLC in the USA. Data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks and https://business.safety.google/adscontrollerterms/.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent given via the cookie banner. You can revoke your consent at any time with effect for the future.
You can deactivate personalised advertising in the advertising settings at Google. Instructions can be found at https://support.google.com/ads/answer/2662922.
Alternatively, you can prevent the use of cookies by third parties by visiting the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the further information on opting out provided there. You will then not be included in the conversion tracking statistics.
Further information and Google's privacy policy can be found at: https://policies.google.com/privacy

Use of the remarketing or "similar audiences" function of Google
We use the remarketing or "similar audiences" function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) on our website.
The application serves the purpose of analysing visitor behaviour and visitor interests. Google uses cookies to carry out the analysis of website use, which forms the basis for the creation of interest-based advertisements. The cookies record visits to the website as well as anonymised data on the use of the website. No personal data of the visitors of the website is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously accessed product and information areas.
Your data may be transferred to servers of Google LLC in the USA. Data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent given via the cookie banner. You can revoke your consent at any time with effect for the future.
You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://support.google.com/ads/answer/7395996
Alternatively, you can prevent the use of cookies by third parties by visiting the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ and implementing the further information on opting out provided there.
Further information on Google Remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/

Plug-ins and other services

Use of Google Tag Manager
We use Google Tag Manager of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This application is used to manage JavaScript tags and HTML tags that are used to implement tracking and analysis tools in particular. The data processing serves the purpose of the needs-based design and optimisation of our website.
Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the triggering of further tags that may collect and process personal data.
Further information on the terms of use and data protection can be found here.

Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website, including the invisible reCAPTCHA variant. The query serves the purpose of distinguishing between input by a human and automated, machine processing. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and, if applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and, if applicable, also transmitted to the servers of Google LLC in the USA. Data transfers to the USA are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in protecting our website from automated spying, misuse and SPAM. You have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you based on Art. 6 (1) lit. f GDPR.
Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/about/ and https://www.google.com/privacy.

Use of YouTube
We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").
The function displays videos stored on YouTube in an iFrame on the website. The "extended privacy mode" option (youtube-nocookie.com) is activated and videos are only loaded after you click on them. As a result, YouTube does not store any information about visitors to the website beforehand. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. Data transfers are based, among other things, on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks.
The processing of your personal data is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object at any time, for reasons arising from your particular situation, to this processing of personal data concerning you.
Further information on the collection and use of data by YouTube and Google, on your rights in this regard and on ways to protect your privacy can be found in YouTube's privacy policy at https://www.youtube.com/t/privacy.

Data subject rights and storage period

Duration of storage
After complete processing of the contract, the data is initially stored for the duration of the warranty period, then taking into account statutory retention periods, in particular under tax and commercial law, and then deleted after the period has expired, unless you have consented to further processing and use.

Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right to information, to rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 (1) GDPR you have the right to object to processing based on Art. 6 (1) lit. f GDPR and to processing for the purposes of direct marketing.

Right to lodge a complaint with the supervisory authority
In accordance with Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You can lodge a complaint, among others, with the supervisory authority responsible for us, which you can reach at the following contact details:

Landesbeauftragte für den Datenschutz Niedersachsen (State Commissioner for Data Protection of Lower Saxony)
Prinzenstraße 5
30159 Hannover
Germany
Phone: +49 511 1204500
Fax: +49 511 1204599
E-mail: poststelle@lfd.niedersachsen.de

Right to object
If the personal data processing operations listed here are based on our legitimate interest pursuant to Art. 6 (1) lit. f GDPR, you have the right to object to these processing operations at any time with effect for the future, for reasons arising from your particular situation.
After an objection has been made, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

Last updated: 10.01.2022 (English version of 10.09.2026)