Privacy policy

9.3 Use of Payment Service Providers (Payment Services)

Apple Pay

If you choose the “Apple Pay” payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the “Apple Pay” function on your iOS, watchOS or macOS device by charging a payment card stored in “Apple Pay”. Apple Pay uses security features integrated into your device’s hardware and software to protect your transactions. To authorize a payment, you must therefore enter a code previously specified by you and verify the transaction using the “Face ID” or “Touch ID” function on your device.

For the purpose of processing the payment, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website through which the purchase was made can access the payment data. Once the payment has been completed, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm successful payment.

Where personal data is processed as part of the transfers described above, such processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6(1)(b) GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, approximate date and time, and whether the transaction was successfully completed. The anonymization completely prevents the data from being linked to an individual. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on an iPhone or Apple Watch to complete a purchase initiated via Safari on a Mac, the Mac and the authorizing device communicate via an encrypted channel on Apple’s servers. Apple does not process or store this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay” and disable “Allow Payments on Mac”.

Google Pay

If you choose the “Google Pay” payment method provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), payment is processed via the “Google Pay” application on your NFC-enabled mobile device running at least Android 4.4 (“KitKat”), by charging a payment card stored in Google Pay or another verified payment system (e.g. PayPal). For payments via Google Pay exceeding €25, your mobile device must first be unlocked using the verification method configured on the device, such as facial recognition, password, fingerprint or pattern.

For payment processing purposes, the information you provide during the ordering process, together with information about your order, is transmitted to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a unique transaction number used to verify the payment. This transaction number contains no information about the actual payment details of the payment methods stored in Google Pay; instead, it is generated and transmitted as a one-time numerical token. For all transactions via Google Pay, Google acts solely as an intermediary for processing the payment. The transaction itself takes place exclusively between the user and the originating website by charging the payment method stored in Google Pay.

Where personal data is processed as part of the transfers described above, such processing is carried out exclusively for payment processing in accordance with Art. 6(1)(b) GDPR.

Google reserves the right to collect, store and analyze certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively pursuant to Art. 6(1)(f) GDPR on the basis of its legitimate interest in proper accounting, verification of transaction data, and optimization and maintenance of the Google Pay service. Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when you use other Google services.

Klarna

One or more online payment methods provided by Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden, are available on this website.

If you select a payment method for which you make payment in advance, such as credit card payment, the payment data you provide during the ordering process—including your name, address, bank and payment card information, currency and transaction number—as well as information concerning the contents of your order will be transmitted to the provider pursuant to Art. 6(1)(b) GDPR. Your data is transmitted exclusively for the purpose of processing the payment and only to the extent necessary for this purpose.

If you select a payment method for which the provider makes an advance payment, such as purchase on account, installment payments or direct debit, you will also be asked to provide certain personal data during the ordering process, including your first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.

To safeguard our legitimate interest in determining our customers’ ability to pay, we transmit this data to the provider for the purpose of a credit assessment pursuant to Art. 6(1)(f) GDPR. Based on the personal data you provide and other data such as your shopping cart, invoice amount, order history and payment history, the provider assesses whether the payment option you selected can be granted in view of payment and/or default risks.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data insofar as this is necessary for contractual payment processing.

PayPal

One or more online payment methods provided by PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg, are available on this website.

If you select a payment method for which you make payment in advance, the payment data provided during the ordering process—including your name, address, bank and payment card information, currency and transaction number—as well as information concerning the contents of your order will be transmitted to the provider pursuant to Art. 6(1)(b) GDPR. Your data will be transmitted exclusively for payment processing and only to the extent necessary for this purpose.

If you select a payment method for which we make an advance payment, you will also be asked to provide certain personal data during the ordering process, including your first and last name, street, house number, postal code, city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method.

In such cases, to safeguard our legitimate interest in determining your ability to pay, we transmit this data to the provider for a credit assessment pursuant to Art. 6(1)(f) GDPR. Based on the personal data provided by you and other data such as your shopping cart, invoice amount, order history and payment history, the provider assesses whether your selected payment option can be granted in view of payment and/or default risks.

Shopify Payments

One or more online payment methods provided by Shopify International Limited, Victoria Buildings, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland, are available on this website.

If you select a payment method for which you make payment in advance, such as credit card payment, the payment data provided during the ordering process—including your name, address, bank and payment card information, currency and transaction number—as well as information concerning the contents of your order will be transmitted to the provider pursuant to Art. 6(1)(b) GDPR. Your data is transmitted exclusively for payment processing and only to the extent necessary for this purpose.

10) Web Analytics Services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device and which collect certain information. This information includes your IP address, although Google truncates the final digits to prevent it from being directly linked to an individual. The information is transmitted to Google servers and processed there. This may also involve transfers to Google LLC in the United States.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us, and provide other services relating to website and internet usage. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Data collected through Google Analytics 4 is stored for two months and then deleted.

All processing described above, particularly the placement of cookies on your device, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit. You may withdraw your consent at any time with future effect by disabling this service via the “Cookie Consent Tool” provided on the website.

Demographic Features

Google Analytics 4 uses the special “demographic features” function and can use it to generate statistics regarding the age, gender and interests of website visitors. This is done by analyzing advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be attributed to a specific individual and is deleted after being stored for two months.

Google Signals

As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized advertising and linked your devices to your Google Account, Google may, subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including models relating to cross-device conversions. We do not receive personal data from Google, only statistics.

User IDs

As an extension of Google Analytics 4, the “User IDs” function may be used on this website. If you have consented to the use of Google Analytics 4 pursuant to Art. 6(1)(a) GDPR, created an account on this website and log in to that account on different devices, your activities, including conversions, may be analyzed across devices.

For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

11) Retargeting/Remarketing and Conversion Tracking

Meta Pixel with Advanced Matching

As part of our online offering, we use “Meta Pixel” in advanced matching mode, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).

If a user clicks on an advertisement placed by us on Facebook or Instagram, “Meta Pixel” adds a parameter to the URL of our linked page. Following redirection, this URL parameter is entered into the user’s browser by a cookie set by our linked page itself. In addition, this cookie collects specific customer data, such as the email address that we collect on the website linked to the Facebook or Instagram advertisement during activities such as purchases, account logins or registrations (“advanced matching”). The cookie is then read and enables the transmission of data, including specific customer data, to Meta.

We use Meta Pixel with advanced matching to make our advertisements (“Ads”) on Facebook and/or Instagram more effective and to ensure that they correspond to users’ interests or certain characteristics, such as interests in specific topics or products identified on the basis of websites visited, which we transmit to Meta (“Custom Audiences”).

We also analyze the effectiveness of our advertisements by tracking whether users are redirected to our website after clicking an advertisement (conversion). Compared with the standard version of Meta Pixel, advanced matching helps us measure the effectiveness of our advertising campaigns more accurately by recording a greater number of attributable conversions.

All transmitted data is stored and processed by Meta, allowing it to be associated with the relevant user profile. Meta may use the data for its own advertising purposes in accordance with its data-use policies. The data may enable Meta and its partners to display advertisements both on and outside Facebook.

All processing described above, particularly the placement of cookies for reading information from the device being used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service via the “Cookie Consent Tool” provided on the website.

12) Website Functions

12.1 Vimeo

This website uses plugins for displaying and playing videos provided by Vimeo.com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA.

When you access a page on our website containing such a plugin, your browser establishes a direct connection to the provider’s servers in order to load the plugin. Certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, generate playback statistics and prevent abusive behavior. If you are logged into a user account with the provider while visiting our website, your data will be directly associated with your account when you click on a video. If you do not want this association to occur, you must log out before clicking the playback button.

All processing described above, particularly the placement of cookies for reading information from the device being used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service via the “Cookie Consent Tool” provided on the website.

For data transfers to the United States, the provider participates in the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

12.2 YouTube

This website uses plugins for displaying and playing videos provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to: Google LLC, USA.

When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers, at the latest when the video is played, in order to load the content. In doing so, certain information, including your IP address, is transmitted to the provider.

If playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, generate playback statistics, and prevent abusive behavior.

If you are logged into a user account with the provider while visiting our website, your data will be directly associated with your account when you click on a video. If you do not want your data to be associated with your account, you must log out before clicking the play button.

All processing described above, in particular the placement of cookies for reading information from the device being used, takes place only if you have given us your express consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service via the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which, on the basis of an adequacy decision by the European Commission, ensures compliance with the European level of data protection.

12.3 Trusted Shops Trustbadge

Our website incorporates graphic elements provided by Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany, for the purpose of displaying external customer reviews and/or an externally awarded trust seal.

When you access a page on our website containing such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements correctly. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Where personal data is also processed in this context, such processing is carried out pursuant to Art. 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our offering and presenting our website in an appealing manner.

Further processing may take place if you place an online order with us.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, after completion of an order, your order information (order value, order number and, where applicable, the product purchased) as well as your email address will be transmitted in encrypted form to the provider via the Trustbadge in order to verify whether you are already registered for the provider’s services (in particular “Buyer Protection”) and, where applicable, to enable a new registration.

If an existing registration is identified, or if you newly register for the provider’s services (in particular Buyer Protection), your order information (order value, order number, product purchased) and your email address will be transmitted to the provider on the basis of the contractual agreement pursuant to Art. 6(1)(b) GDPR and further processed by the provider in order to provide the relevant services (in particular Buyer Protection).

We and the provider are jointly responsible for the processing described above pursuant to Art. 26 GDPR. The agreement on joint controllership can be viewed here:
Trusted Shops – Joint Controllership Agreement

13) Rights of the Data Subject

13.1

The applicable data protection law grants you the following rights as a data subject vis-à-vis the controller with regard to the processing of your personal data (rights of access and intervention), whereby reference is made to the respective legal basis for the conditions governing the exercise of these rights:

• Right of access pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to notification pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent granted pursuant to Art. 7(3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

13.2 RIGHT TO OBJECT

IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

14) Duration of Storage of Personal Data

The duration for which personal data is stored is determined by the respective legal basis, the purpose of processing and – where applicable – additionally by the relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

Where statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Art. 6(1)(b) GDPR, such data will routinely be deleted after the applicable retention periods have expired, provided that it is no longer required for the performance or initiation of a contract and/or we have no legitimate interest in continuing to store it.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the information contained in this Privacy Policy regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

© IT-Recht Kanzlei

Last updated: 25 August 2026, 05:33:13