DATA PROTECTION

8.1 Data Disclosure for Contract Fulfillment and Service Providers

Where necessary for contract processing for delivery and payment purposes, we disclose personal data collected by us pursuant to Art. 6(1)(b) GDPR to the commissioned transport company and the commissioned financial institution.

If we are obligated to provide you with updates for goods with digital elements or for digital products under a corresponding contract, we process the contact data you provided during the order process to inform you personally in accordance with our legal information obligations under Art. 6(1)(c) GDPR. Your contact data is strictly used for communications about updates we owe and is processed by us only to the extent necessary for this purpose.

For the fulfillment of your order, we also work with the following service providers who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the information below.

8.2 Use of Payment Service Providers (Payment Services)

- Apple Pay

If you choose the “Apple Pay” payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment is processed via the “Apple Pay” feature of your device running iOS, watchOS, or macOS by charging a payment card stored in “Apple Pay.” Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorize a payment, you must enter a previously configured code and verify your identity via Face ID or Touch ID.

For payment processing purposes, the data you provide during the ordering process, along with information about your order, will be transmitted in encrypted form to Apple. Apple then re-encrypts this data with a developer-specific key before forwarding it to the payment service provider of the card stored in Apple Pay. The encryption ensures that only the website where the purchase was made can access the payment data. After the payment is completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the transaction.

If personal data is processed during this transmission, it is solely for payment processing purposes according to Art. 6(1)(b) GDPR.

Apple stores anonymized transaction data, such as approximate purchase amount, date and time, and transaction success. This data is completely anonymized and used to improve Apple Pay and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, your Mac and the authorizing device communicate via an encrypted channel on Apple servers. Apple does not process or store this information in a format that can identify you. You can disable Apple Pay on your Mac in your iPhone settings under "Wallet & Apple Pay" > "Allow Payments on Mac."

Further privacy information on Apple Pay is available at:
https://support.apple.com/en-us/HT203027

- Billie GmbH

One or more online payment options on this website are provided by: Billie GmbH, Charlottenstraße 4, 10969 Berlin, Germany.

If you select a payment method where you pay in advance (e.g., credit card), your payment data provided during the order (including name, address, bank and card information, currency, and transaction number) and information about your order will be forwarded to Billie in accordance with Art. 6(1)(b) GDPR. Data is shared solely for the purpose of payment processing and only as necessary.

If you choose a method where Billie pays in advance (e.g., invoice or installment purchase, or direct debit), you will be asked to provide certain personal data (first and last name, address, postal code, city, date of birth, email address, phone number, and potentially an alternative payment method).

To safeguard our legitimate interest in verifying the solvency of our customers, this data will be transmitted to Billie pursuant to Art. 6(1)(f) GDPR for the purpose of a credit check. Billie evaluates whether the selected payment method can be granted based on your data and other factors (such as shopping cart, invoice amount, order history, payment history).

Billie may also use identity and creditworthiness data from the following credit agencies pursuant to Art. 6(1)(f) GDPR:

• Creditreform Berlin Wolfram KG

• Creditreform Boniversum GmbH

• SCHUFA Holding AG

• Euler Hermes Deutschland

The credit check may include probability values (so-called score values) based on a recognized mathematical-statistical method. Address data may be included in the score calculation.

You may object to the processing of your data at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data if necessary for contractual payment processing.  

- Google Pay

If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing takes place via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with NFC functionality by charging a payment card stored in Google Pay or a verified payment system there (e.g., PayPal). To authorize a payment via Google Pay exceeding €25, you must first unlock your mobile device using the configured verification method (such as facial recognition, password, fingerprint, or pattern).

For payment processing purposes, your information provided during the order process together with details about your order are forwarded to Google. Google then transmits your payment information stored in Google Pay in the form of a one-time transaction number to the originating website, which verifies the payment. This transaction number contains no information about the real payment data of your payment methods stored in Google Pay but is generated and transmitted as a one-time valid numeric token. For all transactions via Google Pay, Google acts only as an intermediary for processing the payment. The transaction is conducted exclusively between the user and the originating website by charging the payment method stored in Google Pay.

If personal data are processed during these transmissions, this processing is carried out exclusively for the purpose of payment processing according to Art. 6(1)(b) GDPR.

Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos you attached to the transaction, the names and email addresses of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.

According to Google, this processing is performed solely under Art. 6(1)(f) GDPR based on the legitimate interest in proper accounting, verification of transaction data, and optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored when using other Google services.

Google Pay's terms of use can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information on data protection at Google Pay is available at:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

- Klarna

On this website, one or more online payment methods from the following provider are available: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you choose a payment method where you pay in advance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order are forwarded to this provider according to Art. 6(1)(b) GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary.

If you select a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will be asked during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and if applicable, data on an alternative payment method).

To protect our legitimate interest in determining the creditworthiness of our customers, these data will be forwarded by us according to Art. 6(1)(f) GDPR to the provider for the purpose of a credit check. The provider checks, based on the personal data you have provided and further data (such as shopping cart, invoice amount, order history, payment experiences), whether the selected payment method can be granted considering payment and/or default risks.

For decision-making during the application review, besides internal provider criteria, identity and creditworthiness information from the following credit agencies may also be included according to Art. 6(1)(f) GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Where score values influence the credit report result, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending us or the provider a message. However, the provider may still be entitled to process your personal data if this is necessary for contract-compliant payment processing.

- Mollie

On this website, one or more online payment methods from the following provider are available: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands.

If you choose a payment method where you pay in advance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order are forwarded to this provider according to Art. 6(1)(b) GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary.

- PayPal

On this website, one or more online payment methods from the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method where you pay in advance, your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order are forwarded to this provider according to Art. 6(1)(b) GDPR. The transfer takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary.

If you select a payment method where we pay in advance, you will also be asked during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and if applicable, data on an alternative payment method).

To protect our legitimate interest in determining your creditworthiness, these data will be forwarded by us according to Art. 6(1)(f) GDPR for the purpose of a credit check to the provider. The provider checks, based on the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the selected payment method can be granted considering payment and/or default risks.

The credit report may contain probability values (so-called score values). Where score values influence the credit report result, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending us or the provider a message. However, the provider may still be entitled to process your personal data if this is necessary for contract-compliant payment processing.

- PayPal Checkout

This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third parties.

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—"Pay Later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") within the scope of payment processing. This transfer is carried out pursuant to Art. 6(1)(b) GDPR and only to the extent necessary for payment processing.

PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or—if offered—"Pay Later" via PayPal. For this purpose, your payment data may be passed on to credit agencies based on PayPal’s legitimate interest under Art. 6(1)(f) GDPR to determine your creditworthiness. The result of the credit check regarding the statistical likelihood of payment default is used by PayPal to decide on providing the respective payment method. The credit report may include probability values (so-called score values). Where score values influence the credit report result, they are based on a scientifically recognized mathematical-statistical method. The calculation of score values includes, among other things but not exclusively, address data. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contract-compliant payment processing.

If the PayPal payment method "Invoice Purchase" is available and selected, your payment data will first be transmitted to PayPal to prepare the payment. PayPal will then forward this data to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for payment execution. The legal basis is Art. 6(1)(b) GDPR. In this case, Ratepay performs an identity and credit check in its own name to determine creditworthiness according to the principles mentioned above and forwards your payment data to credit agencies based on the legitimate interest in determining creditworthiness under Art. 6(1)(f) GDPR. A list of credit agencies Ratepay may access can be found here:
https://www.ratepay.com/legal-payment-creditagencies/

When using a local third-party payment method, your payment data will first be transmitted to PayPal for payment preparation according to Art. 6(1)(b) GDPR. Depending on your selection of a local payment method, PayPal will then transmit your payment data for payment execution to the respective provider pursuant to Art. 6(1)(b) GDPR:

• Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)

• Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

• iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)

• bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)

• blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)

• eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2 1200 Vienna, Austria)

• MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)

• Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

Further data protection information is available in PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

- SOFORT

On this website, one or more online payment methods from the following provider are available: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany.

If you choose a payment method where you pay in advance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order are forwarded to this provider according to Art. 6(1)(b) GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary.

- Stripe

On this website, one or more online payment methods from the following provider are available: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

If you choose a payment method where you pay in advance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order are forwarded to this provider according to Art. 6(1)(b) GDPR. The transfer takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary.

If you select a payment method where the provider pays in advance (e.g., invoice or installment purchase or direct debit), you will also be asked during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, and if applicable, data on an alternative payment method).

To protect our legitimate interest in determining the creditworthiness of our customers, these data will be forwarded by us according to Art. 6(1)(f) GDPR to the provider for the purpose of a credit check. The provider checks, based on the personal data you have provided and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the selected payment method can be granted considering payment and/or default risks.

The credit report may contain probability values (so-called score values). Where score values influence the credit report result, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things, but not exclusively, address data.

You can object to this processing of your data at any time by sending us or the provider a message. However, the provider may still be entitled to process your personal data if this is necessary for contract-compliant payment processing.

- Wix Payments

On this website, one or more online payment methods from the following provider are available: Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel.

If you choose a payment method where you pay in advance (e.g., credit card payment), your payment data provided during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about your order are forwarded to this provider according to Art. 6(1)(b) GDPR. The transfer takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary.

In connection with the aforementioned services, data may also be transmitted by further processing on behalf of Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA.

When transmitting data to the provider's location, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which aim to ensure compliance with the European data protection level.

 

 

​