privacy statement

You can visit our websites without providing any personal information. Each time you call up a website, the web server only automatically saves a so-called server log file, which contains, for example, the name of the requested file, your IP address, the date and time of the call, the amount of data transferred and the requesting provider (access data) and documents the call.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our offer. In accordance with Art. 6 para. 1 p. 1 lit. f DSGVO, this serves to protect our legitimate interests in a correct presentation of our offer, which outweigh our interests in the context of a balancing of interests. All access data will be deleted no later than seven days after the end of your visit to the site.

Hosting services by a third-party provider
. As part of processing on our behalf, a third-party provider provides hosting and website display services on our behalf. This serves to protect our legitimate interests in a correct presentation of our offer, which are overriding in the context of a balancing of interests. All data collected in the context of the use of this website or in forms provided for this purpose in the online shop as described below are processed on its servers. Processing on other servers only takes place within the framework explained here.

This service provider is located within a country of the European Union or the European Economic Area.

For the fulfilment of the contract in accordance with Art. 6 para. 1 p. 1 lit. b DSGVO, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of ordered goods. Depending on which payment service provider you select in the ordering process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, if applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves, insofar as you create an account with them. In this case, you must register with the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

Coupon offers of the Sovendus GmbH
For the selection of a voucher offer that is currently of interest to you, the hash value of your e-mail address and your IP address are transmitted by us pseudonymously and encrypted to Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe (Sovendus) (Art. 6 para.1 f DSGVO). The pseudonymised hash value of the e-mail address is used by Sovendus to take into account a possible objection to advertising (Art. 21 Para.3, Art. 6 Para.1 c DSGVO). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymised after seven days (Art. 6 para. 1 f DSGVO). In addition, for billing purposes, we transmit pseudonymised order number, order value with currency, session ID, coupon code and time stamp to Sovendus (Art. 6 para.1 f DSGVO). If you are interested in a voucher offer from Sovendus, if there is no advertising objection to your e-mail address and if you click on the voucher banner that is only displayed in this case, we will transmit your title, name and e-mail address in encrypted form to Sovendus for the preparation of the voucher (Art. 6 para.1 b, f DSGVO). For more information on the processing of your data by Sovendus, please refer to the online privacy policy at http://www.sovendus.de/datenschutz.

Advantage offers of the Sovendus GmbH
For the selection of an advantage offer that is currently of interest to you regionally, we will transmit your title, year of birth, country, postcode, hash value of the e-mail address and your IP address to Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe (Sovendus) in pseudonymised and encrypted form (Art. 6 para.1 f DSGVO). The pseudonymised hash value of the e-mail address will also be used by Sovendus to take into account any objection to advertising (Art. 21 para.3, Art. 6 para.1 c DSGVO). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymised after seven days (Art. 6 para.1 f DSGVO). When you click on a special offer, we also transmit your name, address data and e-mail address in encrypted form to Sovendus in preparation for the personalised request for the special offer from the product provider (Art. 6 Para. 1 b, f DSGVO). For further information on the processing of your data by Sovendus, please refer to the online privacy notices at http://www.sovendus.de/datenschutz.

Email advertising with newsletter signup
. If you register for our newsletter, we use the data required for this purpose or separately provided by you to regularly send you our e-mail newsletter based on your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact option described below or via a link provided for this purpose in the newsletter. After unsubscribing, we will delete your e-mail address unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

Email advertising without subscribing to the newsletter and your right to object
. If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right, on the basis of Section 7 (3) of the German Unfair Competition Act (UWG), to regularly send you offers for similar products, such as those already purchased, from our range by e-mail. This serves to protect our legitimate interests in addressing our customers in an advertising manner, which are outweighed in the context of a balancing of interests. You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates.

The newsletter is sent as part of a processing on our behalf by a service provider to whom we pass on your e-mail address for this purpose. This service provider is located within a country of the European Union or the European Economic Area.

Postal advertising and your right to object
. In addition, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by letter post. This serves to protect our legitimate interests in addressing our customers in an advertising manner in accordance with Art. 6 Para. 1 S. 1 lit. f DSGVO. The advertising mailings are provided within the scope of processing on our behalf by a service provider, to whom we pass on your data for this purpose. You can object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

Credit check
Insofar as we provide advance services, e.g. in the case of purchase on account, it is necessary for the conclusion of the contract pursuant to Art. 22 (2) lit. a DSGVO to obtain information on identity and creditworthiness from service companies specialising in this area (credit agencies). For this purpose, we transmit your personal data required for a credit check to the following company(ies):

SCHUFA Holding AG
Kormoranweg 5
65201 Wiesbaden

SCHUFA Holding AG
Kormoranweg 5
65201 Wiesbaden

CRIF Bürgel GmbH
Radlkoferstrasse 2
81373 Munich

Creditsafe Deutschland GmbH
Schreiberhauerstr. 30
10317 Berlin

Appropriate measures to protect your rights, freedoms and legitimate interests will be taken into account. You have the opportunity to present your point of view and contest the decision by contacting the contact option described below. After the contract has been fully processed, your data processed for this purpose will be deleted unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

Identity and credit checks when you choose Klarna payment services
. If you choose Klarna's payment services, we ask for your consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO that we may transmit the data necessary for the processing of the payment and an identity and credit check to Klarna. In Germany, the credit agencies mentioned in Klarna's privacy policy may be used for the identity and credit check. The information received about the statistical probability of non-payment is used by Klarna for a weighed decision on the establishment, implementation or termination of the contractual relationship. You can revoke your consent at any time by sending a message to the contact details below. This may result in us no longer being able to offer you certain payment options. You can also revoke your consent to this use of personal data at any time to Klarna.

Financing
When selecting the payment method "Financing" as well as granting the data protection consent required for this pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO, personal data (first name, surname, address, email, telephone number, date of birth, IP address, gender) together with data required for transaction processing (item, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time) are transferred for the purpose of processing this payment method to our partner TARGOBANK AG & Co. KGaA, Kasernenstraße 10, 40213 Düsseldorf, Germany. In order to verify the identity or creditworthiness of the customer, our partner carries out queries and obtains information from publicly accessible databases and credit agencies. The providers from whom information and, if applicable, creditworthiness information is obtained on the basis of mathematical-statistical procedures, as well as further details on the processing of your data after transmission to our partner TARGOBANK AG & Co. KGaA, please refer to its privacy policy, which you can find here.
The information received about the statistical probability of default is used by our partner TARGOBANK AG & Co. KGaA for a weighed decision on the establishment, implementation or termination of the contractual relationship. By contacting our partner TARGOBANK AG & Co. KGaA to explain your point of view and to contest the decision. The consent to the transfer of data given in the order process can be revoked at any time, even without giving reasons, with effect for the future.

When you visit our website, we may store information on your computer in the form of cookies. Many cookies contain what is known as a cookie ID. A cookie ID is a unique identifier of the cookie. It consists of a string of characters by which Internet pages and servers can be assigned to the specific Internet browser in which the cookie was stored. This enables the visited Internet pages and servers to distinguish the individual browser of the person concerned from other Internet browsers that contain other cookies. A specific Internet browser can be recognized and identified via the unique cookie ID.

Through the use of session cookies, the responsible party can provide the users of this website with a user-friendly service that would not be possible without the cookie setting. Without consent, we only use technically necessary cookies on the legal basis of legitimate interest pursuant to Art. 6 (1) lit. f DSGVO.

We only use personal cookies to improve our website or for marketing/advertising purposes with your consent. On your first visit, you can voluntarily agree to tracking or analysis via the cookie banner that appears. If necessary, your data will be passed on to partners or third-party providers. Only if you explicitly agree to this will these cookies be stored, the legal basis is then your consent in accordance with Art. 6 para. 1 lit. a DSGVO. You can change your settings for the use of cookies at any time at the end of the list.

We use the technologies set out below provided by Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). The information automatically collected by Google technologies about your use of our website is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. For the USA there is no adequacy decision of the European Commission. Our cooperation is based on standard data protection clauses of the European Commission.

If your IP address is collected via Google technologies, it will be shortened by activating IP anonymization before being stored on Google's servers. Only in exceptional cases will the full IP address be transmitted to a Google server and shortened there. Unless otherwise specified for the individual technologies, data processing is carried out on the basis of an agreement concluded for the respective technology between jointly responsible parties in accordance with Art. 26 DSGVO. Further information about data processing by Google can be found in the privacy policy of Google.

Google Tag Manager

This website uses Google Tag Manager. The Tag Manager does not collect any personally identifiable information. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it will remain in place for all tracking tags implemented with Google Tag Manager. Google's privacy notice for this tool can be found here.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, and information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. As a matter of principle, your IP address will not be merged with other Google data. Data processing is carried out on the basis of an order processing agreement by Google.

For the purpose of optimized marketing of our website, we have activated the data sharing settings for "Google products and services". This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google services. Data sharing with Google under these data sharing settings is based on an additional agreement between data controllers. We have no control over Google's subsequent data processing.

To create and run tests, we also use the Google Analytics Google Optimize extension feature.

For web analysis, the Google Analytics Google Signals extension function enables so-called "cross-device tracking". Insofar as your internet-enabled devices are linked to your Google account and you have activated the "personalised advertising" setting in your Google account, Google can generate reports on your usage behaviour (esp. cross-device user figures), even if you change your terminal device. A processing of personal data by us does not take place in this respect, we only receive statistics generated on the basis of Google Signals.

For web analysis and advertising purposes, the extension function of Google Analytics the so-called DoubleClick cookie enables a recognition of your browser when visiting other websites. Google will use this information to compile reports on website activity and to provide other services related to website usage.

Google Doubleclick

Doubleclick by Google uses cookies to present you with ads that are relevant to you. In the process, a pseudonymous identification number (ID) is assigned to your browser in order to check which ads were displayed in your browser and which ads were called up. The cookies do not contain any personal information. The use of DoubleClick cookies only enables Google and its partner websites to serve ads based on previous visits to our website or other websites on the Internet. The information generated by the cookies is transferred by Google to a server in the USA for analysis and stored there.

Google Ads

For advertising purposes in Google search results as well as on third-party websites, the so-called Google Remarketing Cookie is set when you visit our website, which automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information as well as information on your use of our website) and by means of a pseudonymous CookieID and based on the pages you visit. Any further data processing will only take place if you have activated the "personalised advertising" setting in your Google account. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing.

We also use Google Ads Customer Match lists as part of our Google advertising activities. We only use Google Ads Customer Match with your consent in accordance with Art. 6 (1) a) GDPR. For the use of Customer Match, lists with encrypted user data (e.g. names, email addresses, addresses, customer-specific identifiers) are uploaded to Google. Google then compares whether the transmitted user data matches existing Google customers. This in turn can be used to create target groups that can be used to target ads/campaigns. After the creation of the customer match lists, the encrypted customer data is automatically deleted again. The providers do not obtain new addresses as a result.

The recipient of the data is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as an order processor. We have concluded an order processing agreement with Google for this purpose. Google LLC, based in California, USA, and possibly US authorities may access the data stored by Google.

You can object to this use by preventing the installation of cookies through a corresponding setting in your browser software (deactivation option). You can also adjust personal advertising in your Google user account in the Privacy tab according to your wishes. To do this, log in to Google and go to "Manage Google Account" in the "Data and Privacy" section.

Google Shopping Reviews

We use "Google Shopping Reviews on our website. Google Shopping Reviews stores and processes information about your user behavior on our website. For this purpose, Google Shopping Reviews uses, among other things, cookies, i.e. small text files that are stored locally in the cache of your web browser on your terminal device and that enable an analysis of your use of our website.

We use Google Shopping Reviews for marketing and optimization purposes, in particular to analyze the use of our website and to continuously improve individual functions and offers as well as the user experience. Through the statistical evaluation of user behavior, we can improve our offer and make it more interesting for you as a user. This is also our legitimate interest in the processing of the above data by the third-party provider. The legal basis is Art. 6 para. 1 p. 1 lit. a) DSGVO. Information of the third-party provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Further information of the third-party provider on data protection can be found on the following website.

Google Remarketing

The feature is used to present interest-based ads to website visitors within the Google advertising network. The technology allows us to serve automatically generated, targeted ads after your visit to our website. The ads are based on the products and services you clicked on the last time you visited our website. For this purpose, a so-called "cookie" is stored in the browser of the website visitor, which makes it possible to recognize the visitor when he or she visits websites that belong to Google's advertising network. Cookies are small text files that are stored in your browser when you visit our website. Google usually stores information such as your web request, IP address, browser type, browser language, date and time of your request. This information is used to associate the web browser with a specific computer. On the pages of the Google advertising network, the visitor may then be presented with advertisements that relate to content that the visitor has previously viewed on websites that use Google's remarketing feature.

Google reCAPTCHA

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is mainly used to distinguish whether an entry is made by a natural person or misused by automatic and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in determining the individual willingness of actions on the Internet and avoiding misuse and spam. Further information about Google reCAPTCHA and Google's privacy policy can be found at: Google Privacy Policy

New Relic

This website uses a plugin from New Relic's web analytics service. This service is provided by New Relic Inc, 188 Spear Street, Suite 1200 San Francisco, CA 94105, USA. This enables statistical evaluations of the speed of the website to be recorded. Through the plugin, New Relic receives the information that a user has called up the corresponding page of the offer. For this purpose, New Relic collects system data on add-ons used, browsers, hardware and software and usage times, so-called application data, for which cookies are set in your browser. If you are logged in as a user at New Relic, New Relic can assign the visit to your account there. If you are not a member of New Relic, it is still possible for New Relic to obtain and store your IP address. The purpose and scope of the data collection as well as information on the processing and use of the data by New Relic, as well as setting options for protecting the privacy of users, can be found in the privacy policy of New Relic.

Microsoft Advertising

For advertising purposes in the Bing, Yahoo and MSN search results and on third party websites, when you visit our website, the so-called Microsoft Advertising Remarketing Cookie is set, which automatically enables interest-based advertising by collecting and processing data (IP address, time of visit, device and browser information and information about your use of our website) and by means of a pseudonymous CookieID and based on the pages you visit.

For website analytics and event tracking, we use Microsoft Advertising Universal Event Tracking (UET) to measure your subsequent usage behaviour when you have accessed our website via a Microsoft Advertising ad, from which usage profiles are created using pseudonyms. For this purpose, cookies may be used and data (IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a website or subscribing to a newsletter) may be collected, from which usage profiles are created using pseudonyms. If your Internet-enabled devices are linked to your Microsoft account and you have not deactivated the "Interest-based advertising" setting in your Microsoft account, Microsoft may create reports about usage behavior (in particular, cross-device user numbers), even if you change your terminal device, so-called "cross-device tracking". We do not process any personal data in this respect; we only receive statistics compiled on the basis of Microsoft UET.

Awin

The controller has integrated components of Awin on this website. Awin is a German affiliate network that offers affiliate marketing. Affiliate marketing is an Internet-based form of distribution that enables commercial operators of Internet sites, so-called merchants or advertisers, to display advertisements, which are usually remunerated via click or sale commissions, on third-party Internet sites, i.e. with distribution partners, who are also called affiliates or publishers. The merchant provides an advertising medium via the affiliate network, i.e. an advertising banner or other suitable means of Internet advertising, which is subsequently integrated by an affiliate on its own Internet pages or advertised via other channels, such as keyword advertising or e-mail marketing.

The operating company of Awin is Awin AG, Eichhornstraße 3, 10785 Berlin, Germany. Awin sets a cookie on the information technology system of the data subject. The tracking cookie of Awin does not store any personal data. Only the identification number of the affiliate, i.e. the partner referring the potential customer, as well as the order number of the visitor to a website and the advertising material clicked on are stored. The purpose of storing this data is the processing of commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. Awin.

You can access Awin's applicable privacy policy here.

We have implemented technical and administrative security measures to protect your personal data against loss, destruction, manipulation and unauthorized access. All our employees as well as service providers working for us are bound by the applicable data protection laws.

Whenever we collect and process personal data, it is encrypted before it is transmitted. This means that your data cannot be misused by third parties. Our security measures are subject to a continuous improvement process and our data protection statements are constantly being revised. Please ensure that you have the latest version.

When processing personal data - especially IP addresses - we rely on partners with very high security standards. With the support of Myra Security GmbH, we ensure the availability of our service and protect our infrastructure from attacks by criminals, botnets or other malware. The Myra Security GmbH is a specialized German IT security company based in Munich, which performs this filtering on our behalf. For your security, all traffic flows are checked before accessing our service. By analyzing each call, we can verify that your request is a legitimate one, thus protecting your sensitive data from unauthorized access. This filtering does not restrict you from using our service/website.

As a data subject, you have the following rights:

• According to Art. 15 DSGVO, the right to request information about your personal data processed by us to the extent specified therein;
.
• According to Art. 16 DSGVO, the right to demand the correction of inaccurate or incomplete personal data stored by us without undue delay;
• According to Art. 17 DSGVO the right to request the deletion of your personal data stored by us, unless the further processing
  - for the exercise of the right to freedom of expression and information;
  - for the fulfilment of a legal obligation;
  - for reasons of public interest or
  - for the assertion, exercise or defence of legal claims
  is necessary;
• According to Art. 18 DSGVO, the right to demand the restriction of the processing of your personal data, insofar as
  - the accuracy of the data is disputed by you;
  - the processing is unlawful, but you object to its erasure;
  - we no longer require the data, but you need it for the assertion, exercise or defence of legal claims or
  - you have objected to the processing in accordance with Art. 21 DSGVO;
• According to Art. 20 DSGVO, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request the transfer to another controller;
.
• According to Art. 77 DSGVO, the right to complain to a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters for this purpose.

As a data subject residing in Switzerland, the applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective prerequisites for exercising these rights:

• Right to information pursuant to Art. 25 DSG
• Right to data disclosure or transfer pursuant to Art. 28 DSG
• Right to rectification pursuant to Art. 32 Abs. 1 DSG

For questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data, as well as revocation of consent given or objection to a particular use of data, please contact us directly at.

Christian Volkmer
Nordring 98a
90409 Nuremberg
Tel: 0941 29 86 93 0
Fax: 0941 29 86 93 16
Email: datenschutz@getgoods.com

Right to object
Insofar as we process personal data as explained above in order to safeguard our legitimate interests that prevail in the context of a balance of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. Where processing is carried out for other purposes, you will only have the right to object on grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is for the establishment, exercise or defence of legal claims.

This does not apply if the processing is for direct marketing purposes. Then we will not further process your personal data for this purpose.