Privacy Policy

As of: 01/08/2026

The controller responsible for data processing is:
Käthe Wohlfahrt KG
Herrngasse 1
91541 Rothenburg ob der Tauber
Email: Datenschutz@wohlfahrt.com

Telephone: 098614090

Thank you very much for your interest in our website. The protection of your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access data and hosting

You can access our website without disclosing any personal information. Each time a website is accessed, the web server automatically stores only a so-called server log file containing, for example, the name of the requested file, your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the access. This access data is analysed exclusively to ensure the faultless operation of the website and to improve our offering. This serves to safeguard our overriding legitimate interests, within the context of a balancing of interests, in the correct presentation of our offering pursuant to Art. 6(1), sentence 1, point (f) GDPR.

All access data is erased no later than thirty days after the end of your visit to our website.

All access data is processed only for as long as is necessary to achieve the processing purposes stated above.

Hosting

The services for hosting and displaying the website are provided in part by our service providers as part of processing on our behalf. Unless otherwise explained in this Privacy Policy, all access data and all data collected in forms provided for this purpose on this website are processed on their servers. If you have any questions about our service providers or the basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

2. Data processing for contract performance and contacting us

2.1 Data processing for contract performance

For the purpose of contract performance (including enquiries regarding and the handling of any existing claims arising from warranty rights, rights in the event of defective performance and the right of withdrawal, as well as any statutory updating obligations) pursuant to Art. 6(1), sentence 1, point (b) GDPR, we collect personal data if you voluntarily provide it to us when placing your order. Mandatory fields are marked as such because, in these cases, we require the data to perform the contract and cannot dispatch the order without it. The data collected can be seen from the respective input forms. Further information on the processing of your data, in particular its disclosure to our service providers for order, payment and shipping processing, can be found in the following sections of this Privacy Policy. Once the contract has been fully performed, further processing of your data will be restricted and the data will be erased after expiry of the retention periods under tax and commercial law pursuant to Art. 6(1), sentence 1, point (c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6(1), sentence 1, point (a) GDPR or we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Policy.

2.2 Customer account

Where you have given your consent pursuant to Art. 6(1), sentence 1, point (a) GDPR by choosing to open a customer account, we use your data to open the customer account and to store your data for future orders on our website. You may have your customer account deleted at any time, either by sending a message using the contact details provided in this Privacy Policy or by using the function provided for this purpose in your customer account. After your customer account has been deleted, your data will be erased unless you have expressly consented to further use of your data pursuant to Art. 6(1), sentence 1, point (a) GDPR or we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Policy.

Contacting us

As part of customer communications, we collect personal data to process your enquiries pursuant to Art. 6(1), sentence 1, point (b) GDPR if you voluntarily provide it when contacting us (e.g. via a contact form or email). Mandatory fields are marked as such because, in these cases, we require the data to process your enquiry. The data collected can be seen from the respective input forms. Once your enquiry has been fully processed, your data will be erased unless you have expressly consented to further use of your data pursuant to Art. 6(1), sentence 1, point (a) GDPR or we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Policy.

3. Data processing for shipping purposes

In order to perform the contract pursuant to Art. 6(1), sentence 1, point (b) GDPR, we disclose your data to the shipping service provider commissioned with delivery, insofar as this is necessary for the delivery of the goods ordered. If you have any questions about our service providers or the basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

4. Data processing for payment processing

When processing payments in our online shop, we work with the following partners: technical service providers, credit institutions and payment service providers.

4.1 Data processing for transaction processing

Depending on the payment method selected, we disclose the data required to process the payment transaction to our technical service providers, the commissioned credit institutions or the selected payment service provider, insofar as this is necessary to process the payment. This serves to perform the contract pursuant to Art. 6(1), sentence 1, point (b) GDPR. In some cases, payment service providers collect the data required for payment processing themselves, for example on their own website or via technical integration into the ordering process. In this respect, the Privacy Policy of the respective payment service provider applies. Depending on the payment method selected, data may be transferred to third countries outside the EU/EEA for which the European Commission has determined an adequate level of data protection by means of an adequacy decision. Where data is transferred to third countries outside the EU/EEA for which the European Commission has not issued an adequacy decision, our cooperation is based on the European Commission's Standard Contractual Clauses. If you have any questions about our payment processing partners or the basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

4.2 Data processing for fraud prevention and optimisation of our payment processes

Where applicable, we provide the service providers referred to above with additional data which they use together with the data required for payment processing for the purposes of fraud prevention and optimising our payment processes (e.g. invoicing, handling disputed payments and supporting accounting). Pursuant to Art. 6(1), sentence 1, point (f) GDPR, this serves to safeguard our overriding legitimate interests, within the context of a balancing of interests, in protecting ourselves against fraud and in efficient payment management.

4.3 Credit assessment

Where we make delivery before payment (purchase on account), we obtain an identity and credit report from specialised service providers (credit agencies). For this purpose, we transfer the personal data required for a credit assessment to:

infoscore Consumer Data GmbH
Rheinstraße 99
76532 Baden-Baden
Germany

This serves to safeguard our overriding legitimate interests, within the context of a balancing of interests, pursuant to Art. 6(1), sentence 1, point (f) GDPR in assessing the creditworthiness and willingness to pay of our potential customers before entering into a contract and thus avoiding payment defaults, and is necessary for entering into the contract pursuant to Art. 22(2), point (a) GDPR. Appropriate measures to safeguard your rights, freedoms and legitimate interests are taken into consideration. You may use the contact details provided in this Privacy Policy to present your point of view and contest the decision. Once the contract has been fully performed, the data processed for this purpose will be erased unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Policy.

5. Advertising by email and post

If you subscribe to our newsletter, we will use the data required for this purpose or any separate data provided by you to send you our email newsletter regularly on the basis of your consent pursuant to Art. 6(1), sentence 1, point (a) GDPR.

You may unsubscribe from the newsletter at any time, either by sending a message using the contact details provided below or by using the link provided for this purpose in the newsletter.

After you unsubscribe, we will erase your email address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1), sentence 1, point (a) GDPR or we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Policy.

Please note that when sending the newsletter we analyse your user behaviour. For this purpose, we also analyse how you interact with our newsletter by measuring, storing and evaluating opening rates and click-through rates in order to design future newsletter campaigns (“newsletter tracking”). For this analysis, the emails sent contain single-pixel technologies (e.g. web beacons and tracking pixels) which are stored on our website. For the analyses, we link in particular the following “newsletter data”: the page from which the page was requested (so-called referrer URL), the date and time of access, a description of the type of web browser used, the IP address of the requesting computer, the email address, the date and time of registration and confirmation, and the single-pixel technologies with your email address or IP address and, where applicable, an individual ID. Links contained in the newsletter may also contain this ID. If you do not wish newsletter tracking to take place, you can unsubscribe from the newsletter at any time as described above. The information is stored for as long as you are subscribed to the newsletter.

5.2 Newsletter dispatch

The newsletter and the newsletter tracking described above may also be provided by our service providers as part of processing on our behalf. If you have any questions about our service providers or the basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

5.3 Postal advertising and your right to object

In addition, we reserve the right to use your first and last name and your postal address for our own advertising purposes, e.g. to send interesting offers and information about our products by post. This serves to safeguard our overriding legitimate interests, within the context of a balancing of interests, in advertising to our customers pursuant to Art. 6(1), sentence 1, point (f) GDPR. You may object to the storage and use of your data for these purposes at any time by sending a message using the contact details provided in this Privacy Policy. After withdrawal of your consent, we will erase your address from the recipient list unless you have expressly consented to further use of your data pursuant to Art. 6(1), sentence 1, point (a) GDPR or we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Policy.

Advertising mailings are provided by a service provider as part of processing on our behalf, to whom we disclose your data for this purpose. If you have any questions about our service providers or the basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

6. Cookies and other technologies

6.1 General information

In order to make your visit to our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are erased at the end of the browser session, i.e. when you close your browser (so-called session cookies). Other cookies remain on your device and enable us to recognise your browser on your next visit (persistent cookies). You can find the storage duration in the overview in your web browser’s cookie settings. Protection of privacy on devices: when you use our online services, we employ technologies that are strictly necessary to provide the digital service expressly requested by you. In this respect, the storage of information on your device or access to information already stored on your device does not require consent.

For functions that are not strictly necessary, storing information on your device or accessing information already stored on your device requires your consent. Please note that if you do not give your consent, parts of the website may not be fully usable. Any consent you have given remains in place until you adjust or reset the relevant settings on your device.

Subsequent data processing by cookies and other technologies: we use technologies that are strictly necessary for the use of certain functions of our website. These technologies collect and process your IP address, time of the visit, device and browser information and information about your use of our website. Within the context of a balancing of interests, this serves our overriding legitimate interests in the optimised presentation of our offering pursuant to Art. 6(1), sentence 1, point (f) GDPR.

We also use technologies to comply with legal obligations to which we are subject (e.g. to be able to demonstrate consent to the processing of your personal data), as well as for web analytics and online marketing. Further information, including the respective legal basis for data processing, can be found in the following sections of this Privacy Policy.

Cookie settings: you can find the cookie settings for your browser via the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

Where you have consented to the use of technologies pursuant to Art. 6(1), sentence 1, point (a) GDPR, you may withdraw your consent at any time by sending a message using the contact details provided in this Privacy Policy.

Alternatively, you can click on the privacy button. If you do not accept cookies, the functionality of our website may be restricted.

6.2 Consent Manager Platform (CMP)

On our website, we use a consent management service (“Consent Manager Platform (CMP)”) to inform you about the cookies and other technologies used on our website and to obtain, manage and document any consent required from you for the processing of your personal data by means of these technologies. Pursuant to Art. 6(1), sentence 1, point (c) GDPR, this is necessary in order to comply with our legal obligation under Art. 7(1) GDPR to be able to demonstrate your consent to the processing of your personal data. The Consent Manager Platform (CMP) used is provided by Cookiefirst, Plantage Middenlaan 42a, 1018DH Amsterdam, the Netherlands, which processes your data on our behalf. After you submit your cookie declaration on our website, the web server stores the following data: IP address, device information, browser information, language setting, the website or URL accessed, the date and time of your declaration of consent and information about your consent behaviour. The following technologies, which contain information about your consent behaviour, are also used: cookies and log files.

Your data will be erased after three years unless you have expressly consented to further use of your data pursuant to Art. 6(1), sentence 1, point (a) GDPR or we reserve the right to use data beyond this scope where permitted by law and about which we inform you in this Policy.

7. Use of cookies and other technologies

We use the following cookies and other third-party technologies on our website. Unless otherwise stated for the individual technologies, this is done on the basis of your consent pursuant to Art. 6(1), sentence 1, point (a) GDPR. Once the relevant purpose no longer applies and we cease using the respective technology, the data collected in this context is erased. You may withdraw your consent at any time with effect for the future. Further information on your options for withdrawing consent can be found in the section “Cookies and other technologies”. Further information, including the basis of our cooperation with the individual providers, can be found under the respective technologies. If you have any questions about the providers or the basis of our cooperation with them, please use the contact details provided in this Privacy Policy.

7.1 Use of Adobe services

We use the technologies of Adobe Systems Software Ireland Limited, 4-6 Riverwalk, Citywest Business Campus, Dublin 24, Ireland (“Adobe”) described below. Information about your use of our website that is automatically collected by Adobe technologies is generally transferred to and stored on a server of Adobe Inc., 345 Park Avenue, San Jose, CA 95110-2704, USA. If your IP address is collected via Adobe technologies, it is truncated before being stored on Adobe servers, or completely replaced by a generic IP address, by activating the relevant settings. Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by means of an adequacy decision: Canada, Japan, Switzerland, the United Kingdom and the USA. The adequacy decision for the USA serves as the basis for third-country transfers where the respective service provider is certified. Certification is in place. Our service providers are located and/or use servers in countries outside the EU and EEA for which no adequacy decision of the European Commission exists. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

Adobe Fonts

For the uniform presentation of content on our website, the “Adobe Fonts” script code collects data (IP address, time of the visit, device and browser information), transfers it to Adobe and Adobe subsequently processes it. We have no influence over this subsequent data processing. Data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR.

7.2 Use of Google services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) described below. Information about your use of our website that is automatically collected by Google technologies is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR concluded for the respective technology. Further information about data processing by Google can be found in Google’s privacy notices. Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection by means of an adequacy decision. Our service providers are also located and/or use servers in countries outside the EU and EEA for which no adequacy decision of the European Commission exists. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of the visit, device and browser information and information about your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from the EU, your IP address is stored on a server located in the EU for the purpose of deriving location data and is then erased immediately before the traffic is forwarded to other Google servers for processing. Data processing is carried out on the basis of a data processing agreement with Google.

For the purpose of optimising the marketing of our website, we have enabled the data-sharing settings for “Google products and services”. This allows Google to access data collected and processed by Google Analytics and subsequently use it to improve Google services. The sharing of data with Google under these data-sharing settings is based on an additional agreement between controllers. We have no influence over Google’s subsequent data processing.

For the purpose of optimising the marketing of our website, we use the so-called User-ID function. This function enables us to assign a unique, permanent ID to your interaction data from one or more sessions on our online presences and thus analyse your user behaviour across devices and sessions.

For web analytics, the Google Signals extension function of Google Analytics enables so-called “cross-device tracking”. Where your internet-enabled devices are linked to your Google Account and you have activated the “personalised advertising” setting in your Google Account, Google may create reports about your usage behaviour (in particular cross-device user numbers), even if you change devices. We do not process personal data in this respect; we only receive statistics created on the basis of Google Signals.

For web analytics and advertising purposes, the DoubleClick cookie, an extension function of Google Analytics, enables your browser to be recognised when you visit other websites. Google will use this information to compile reports on website activity and to provide other services relating to website use.

If you do not give us your consent pursuant to Art. 6(1), sentence 1, point (a) GDPR to the use of Google Analytics, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place. In order to close gaps in web analytics by means of behavioural and conversion modelling, pings containing data (user agent, information about your consent behaviour, screen resolution and IP address) are sent to Google.

Our website markets advertising space for third-party advertisements via Google AdSense. These advertisements are displayed to you at various points on this website. The so-called DoubleClick cookie enables interest-based advertising by collecting and processing data (IP address, time of the visit, device and browser information and information about your use of our website) and by automatically assigning a pseudonymous user ID, which is used to determine interests based on visits to this and other websites.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing cookie is set when you visit our website. By collecting and processing data (IP address, time of the visit, device and browser information and information about your use of our website), using a pseudonymous cookie ID and based on the pages you have visited, this cookie automatically enables interest-based advertising. Further data processing takes place only if you have activated the “personalised advertising” setting in your Google Account. If, in this case, you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

Google Tag Manager

Google Tag Manager enables us to manage various codes and services on our website. When implementing individual tags, Google may also process personal data (e.g. IP address and online identifiers, including cookies). Data processing is carried out on the basis of a data processing agreement with Google. Google Tag Manager enables various services and technologies to be integrated. If you do not wish individual tracking services to be used and have therefore deactivated them, the deactivation remains in place for all affected tracking tags integrated via Google Tag Manager.

7.3 Use of Meta services

Meta Ads Manager

We use Meta Ads Manager to advertise this website on Facebook (by Meta) and on other platforms. We determine the parameters of each advertising campaign. Meta Platforms Ireland is responsible for the precise implementation, in particular the decision regarding the placement of advertisements for individual users. Unless otherwise stated for the individual technologies, data processing is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Joint controllership is limited to the collection of data and its transfer to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this joint controllership.

7.4 Other providers of web analytics and online marketing services

Use of Dymatrix for web analytics

For the purpose of website analysis, technologies of Dymatrix GmbH, Lautenschlagerstraße 2, 70173 Stuttgart, Germany automatically collect and store data (IP address, time of the visit, device and browser information and information about your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymised user profiles are not combined with personal data relating to the bearer of the pseudonym without separate, express consent. Dymatrix acts on our behalf.

8. Integration of the Trusted Shops Trustbadge / other widgets

Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g. the trustmark and collected reviews) and to offer Trusted Shops products to buyers after an order. This serves to safeguard our overriding legitimate interests, within the context of a balancing of interests, in optimal marketing by enabling secure shopping pursuant to Art. 6(1), sentence 1, point (f) GDPR. The Trustbadge and the services advertised with it are provided by Trusted Shops SE, Subbelrather Str. 15C, 50823 Cologne (“Trusted Shops”), with which we are joint controllers under data protection law pursuant to Art. 26 GDPR. In the following, as part of this Privacy Policy, we inform you about the essential provisions of the agreement pursuant to Art. 26(2) GDPR. When you interact with Trustbadge AI+, session cookies are set to store login status and display the so-called welcome layer, which shows details of the respective online shop (company information, reviews and information about the availability of buyer protection) as well as the #trstd secret. A cookie is set to recognise logged-in users and is stored for a maximum of 400 days after login. Session cookies are also set to send push notifications when using the app, provided that the user has permitted them. This is necessary so that Trusted Shops can provide the digital service requested by you. Trusted Shops is responsible for data processing when you interact with Trustbadge AI+. Within the scope of the joint controllership between us and Trusted Shops, please preferably contact Trusted Shops with data protection questions and to exercise your rights, using the contact details given in its privacy information. Irrespective of this, you may always contact the controller of your choice. If necessary, your request will then be forwarded to the other controller for a response.

8.1 Data processing when integrating the Trustbadge / other widgets

The Trustbadge is provided by a US-based CDN provider (content delivery network). An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which can be accessed here for the USA. Service providers used in the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information is available here. Where service providers used are not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard. When the Trustbadge is accessed, the web server automatically stores a so-called server log file which also contains your IP address, the date and time of access, the volume of data transferred and the requesting provider (access data), and documents the access. The IP address is anonymised immediately after collection so that the stored data cannot be attributed to you personally. The anonymised data is used in particular for statistical purposes and error analysis.

8.2 Data processing after completion of an order

After completion of an order, order information (order total, order number and, where applicable, product purchased) and your email address hashed using a cryptographic one-way function are transferred to Trusted Shops. The legal basis is Art. 6(1), sentence 1, point (f) GDPR. This is used to check whether you are already registered for Trusted Shops services and is therefore necessary to fulfil our and Trusted Shops’ overriding legitimate interests in providing buyer protection linked to the specific order and transactional review services pursuant to Art. 6(1), sentence 1, point (f) GDPR. If you are already registered, further processing takes place in accordance with the contractual agreement between you and Trusted Shops. If you are not yet registered for the services, you will subsequently have the opportunity to register for the first time. Further processing after registration is likewise governed by the contractual agreement with Trusted Shops. If you do not register, all transferred data is automatically erased by Trusted Shops and it is then no longer possible to relate the data to an individual. Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6(1), point (f) GDPR for the purpose of ensuring faultless operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which can be accessed here for the USA and here for Israel. Service providers used in the USA are generally certified under the EU-U.S. Data Privacy Framework. Further information is available here. Where service providers used are not certified under the DPF, Standard Contractual Clauses have been concluded as an appropriate safeguard.

Where you have given your consent to the respective social media operator pursuant to Art. 6(1), sentence 1, point (a) GDPR, when you visit our online presences on the social media platforms named above your data is automatically collected and stored for market research and advertising purposes, from which user profiles are created using pseudonyms. These may be used, for example, to display advertisements within and outside the platforms that are presumed to correspond to your interests. Cookies are generally used for this purpose. Detailed information on the processing and use of data by the respective social media operator, contact details, your rights in this regard and settings available to protect your privacy can be found in the providers’ privacy notices linked below. If you nevertheless require assistance in this respect, you can contact us.

Facebook (by Meta) is provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). Information about your use of our Facebook (by Meta) online presence that is automatically collected by Meta Platforms Ireland is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing in connection with a visit to a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here. Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by means of an adequacy decision: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom and Argentina. The adequacy decision for the USA serves as the basis for third-country transfers where the respective service provider is certified. Certification is in place. Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Contractual Clauses.

Instagram (by Meta) is provided by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland (“Meta Platforms Ireland”). Information about your use of our Instagram online presence that is automatically collected by Meta Platforms Ireland is generally transferred to and stored on a server of Meta Platforms, Inc., 1601 Willow Road, Menlo Park, CA 94025, USA. Data processing in connection with a visit to an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers pursuant to Art. 26 GDPR. Further information (information on Insights data) can be found here. Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by means of an adequacy decision: Brazil, USA, Canada, Japan, South Korea, New Zealand, United Kingdom and Argentina. The adequacy decision for the USA serves as the basis for third-country transfers where the respective service provider is certified. Certification is in place. Our service providers are located and/or use servers in the following countries: Australia, Hong Kong, India, Indonesia, Malaysia, Singapore, Thailand, Taiwan and Mexico. No adequacy decision of the European Commission exists for these countries. Our cooperation with them is based on the following safeguards: the European Commission’s Standard Contractual Clauses.

YouTube is provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). Information about your use of our YouTube online presence that is automatically collected by Google is generally transferred to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection by means of an adequacy decision. Our service providers are also located and/or use servers in countries outside the EU and EEA for which no adequacy decision of the European Commission exists. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

Pinterest is provided by Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland (“Pinterest”). Information about your use of our Pinterest online presence that is automatically collected by Pinterest is generally transferred to and stored on a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection by means of an adequacy decision. Our service providers are also located and/or use servers in countries outside the EU and EEA for which no adequacy decision of the European Commission exists. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

LinkedIn is provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). Information about your use of our LinkedIn online presence that is automatically collected by LinkedIn is generally transferred to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. Our service providers are located and/or use servers in the following countries for which the European Commission has determined an adequate level of data protection by means of an adequacy decision: USA. The adequacy decision for the USA serves as the basis for third-country transfers where the respective service provider is certified. Certification is in place.

Xing is provided by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany. Our service providers are located and/or use servers in countries outside the EU and EEA for which the European Commission has determined an adequate level of data protection by means of an adequacy decision. Our service providers are also located and/or use servers in countries outside the EU and EEA for which no adequacy decision of the European Commission exists. Our cooperation with them is based on the European Commission’s Standard Contractual Clauses.

10. Contact details and your rights

10.1 Your rights

As a data subject, you have the following rights: pursuant to Art. 15 GDPR, the right to obtain information about your personal data processed by us to the extent specified therein; pursuant to Art. 16 GDPR, the right to obtain without undue delay the rectification of inaccurate personal data or completion of incomplete personal data stored by us; pursuant to Art. 17 GDPR, the right to obtain the erasure of your personal data stored by us, unless further processing is required for exercising the right of freedom of expression and information; for compliance with a legal obligation; for reasons of public interest; or for the establishment, exercise or defence of legal claims; pursuant to Art. 18 GDPR, the right to obtain restriction of processing of your personal data where the accuracy of the data is contested by you; the processing is unlawful but you oppose its erasure; we no longer require the data, but you require it for the establishment, exercise or defence of legal claims; or you have objected to processing pursuant to Art. 21 GDPR; pursuant to Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller; pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence, place of work or our company’s registered office.

Right to object

Insofar as we process personal data to safeguard our overriding legitimate interests, within the context of a balancing of interests, as explained above, you may object to this processing with effect for the future. If processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Where processing is carried out for other purposes, you have a right to object only on grounds relating to your particular situation. After you exercise your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing serves the establishment, exercise or defence of legal claims. This does not apply where processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.

10.2 Contact details

If you have any questions regarding the collection, processing or use of your personal data, require access to information, rectification, restriction or erasure of data, wish to withdraw any consent granted or object to a particular use of data, please contact us directly using the following contact details.

Käthe Wohlfahrt KG
Data Protection Officer
Herrngasse 1
91541 Rothenburg ob der Tauber
Germany
Telephone: 09861409317
Datenschutz@wohlfahrt.com

Trusted Shops SE
Data Protection Officer
Subbelrather Str. 15c
50823 Cologne
dpo@trustedshops.com

↑ Back to top