Data Protection Declaration

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise.
“Personal data” is any information relating to an identified or identifiable natural person.

Server log files

You can use our websites without submitting personal data. Every time our website is accessed, user data is transferred to us or our web hosts/IT service providers by your internet browser and stored in server log files. This stored data includes for example the name of the site called up, date and time of the request, the IP address, amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1) f) GDPR due to our legitimate interests in ensuring the smooth operation of our website as well as improving our services.

Contact

Responsible person

Contact us at any time. The person responsible for data processing is: i-flair GmbH, Neuländer Kamp 5, 21079 Hamburg, Deutschland, 040 73675470, info@i-flair.de.

Proactive contact of the customer by e-mail

If you make contact with us proactively via email, we shall collect your personal data (name, email address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request.

If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, processing takes place on the basis of Article 6(1)(b) GDPR.
If the initial contact occurs for other reasons, processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing.

We will only use your email address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Collection and processing when using the contact form

When you use the contact form we will only collect your personal data (name, email address, message text) in the scope provided by you. The data processing is for the purpose of making contact.

Legal basis as above: Article 6(1)(b) GDPR for pre-contractual/contract-related enquiries; otherwise Article 6(1)(f) GDPR with right to object.

We will only use your email address to process your request. Finally your data will be deleted, unless you have agreed to further processing and use.

WhatsApp Business

If you communicate with us via WhatsApp, we use the WhatsApp Business version of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“WhatsApp”). If you have your residence outside the EEA, the service is provided by WhatsApp Inc., 1601 Willow Road, Menlo Park, CA 94025, USA.

We process your WhatsApp-registered mobile number and, if provided, your name and additional data to the extent provided by you.
We use a mobile device whose address book stores exclusively the data of users who have contacted us via WhatsApp.
Disclosure of personal data to WhatsApp does not take place unless you have already consented to this with respect to WhatsApp.
Your data are transmitted by WhatsApp to servers of Meta Platforms Inc. in the USA. Meta Platforms Inc. is certified under the Trans-Atlantic Data Privacy Framework (TADPF).
Legal basis: Article 6(1)(b) GDPR if pre-contractual/contract-related; otherwise Article 6(1)(f) GDPR (quick and easy communication) with right to object.

We will only use your personal data to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use. Further information: Terms of Service, Privacy Policy.

Customer account & orders

Customer account

When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. Legal basis: Article 6(1)(a) GDPR (consent). You can withdraw your consent at any time; your customer account will then be deleted.

Collection, processing, and transfer of personal data in orders

When you submit an order we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as processing of your queries. The provision of data is necessary for conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. Legal basis: Article 6(1)(b) GDPR.

Your data will be shared, for example, with shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. We comply strictly with legal requirements; the scope of data transmission is restricted to a minimum.

Evaluations & advertising

Shopauskunft customer review

We use the “shopauskunft.de” evaluation tool from Händlerbund Management AG, Kohlgartenstraße 11–13, 04315 Leipzig (“Shopauskunft”). Following your order, we may ask you to evaluate your purchase via email using an RBA (legally sound) request. We process order data (order/invoice number, value, shipping costs) and your email address with your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time. More info: shopauskunft.de/datenschutz.

Trustami customer ratings

To display collected ratings and feedback from social media, the Trustami trust seal is embedded on this website (Trustami GmbH, Schröderstraße 5, 10115 Berlin). When called up, access data (incl. truncated IP) are logged and deleted no later than seven days after your visit. Legal basis: Article 6(1)(f) GDPR (optimal marketing). Privacy: trustami.com/privacy.

Website logo for Google Customer Reviews

Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Cookies may be used; data may be transferred to the USA (TADPF-certified). Legal basis: Art. 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent). Terms/Privacy: Google CR ToS, Google Privacy.

Google Customer Reviews opt-in module

After your order we may invite you via Google’s survey opt-in module. Processed data may include order details (order ID, delivery country, expected delivery date, GTIN) and your email address. Transfer to USA possible (TADPF). Legal basis: Art. 6(1)(a) GDPR (consent). ToS/Privacy: see links above.

Review reminder

Following your order, we may send a review reminder by email if you have expressly consented (Art. 6(1)(a) GDPR). You can withdraw consent at any time via link or message.

Use of your personal data for sending postal advertising

We may use your name and address obtained in the sale of goods/services to send postal advertising unless you object. Legal basis: Article 6(1)(f) GDPR (direct advertising). You can object at any time using the contact details in our imprint.

Use of the e-mail address for newsletters

We use your email address to send newsletters if you have expressly consented (Art. 6(1)(a) GDPR). You can unsubscribe any time. Your email may remain in a blacklist to prevent future sends, based on Article 6(1)(f) GDPR.

Use of your email address for direct marketing

We may use your email obtained during a sale for marketing of similar goods/services unless you object (Art. 6(1)(f) GDPR). You can object at any time via the contact details or link in the email.

Use of Brevo (formerly Sendinblue)

We use Brevo (Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin) for newsletter dispatch as a processor. We transmit registration data (email, and if provided first/last name). Emails may contain a tracking pixel and/or tracking links for statistical evaluation (open/click, device, IP, time). Legal basis: Article 6(1)(f) GDPR (targeted, effective, user-friendly newsletter), with right to object. Privacy: brevo.com …/privacypolicy.

Availability notifications

If an item is unavailable, you may enter your email to receive a one-time availability notification with your consent (Art. 6(1)(a) GDPR). You can withdraw consent at any time.

Shipping companies & merchandise management

Forwarding of your email address to shipping companies

If you have explicitly agreed during order processing, we forward your email address to the shipping company to inform you about shipping status by email (Art. 6(1)(a) GDPR). You can withdraw consent at any time with us or the carrier.

Use of an external merchandise management system

We use a merchandise management system in order processing. For this purpose, your order data may be transmitted to:

Pickware GmbH, Goebelstr. 21, 64293 Darmstadt
JTL-Software-GmbH, Rheinstr. 7, 41836 Hückelhoven, Germany

Payment service providers & credit check

Use of Klarna payment options

We use Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (“Klarna”). When selecting Klarna, data required for payment processing are transmitted to Klarna to fulfil the contract (Art. 6(1)(b) GDPR). Cookies may be stored (Art. 6(1)(f) GDPR – interest in customer-oriented payment methods; right to object).

‘Pay Later’ (invoice), ‘Pay Now’ (direct debit, credit card, instant bank transfer), ‘Financing’ (instalment)

Klarna may obtain credit information from credit agencies and process personal data (first/last name, address, gender, email, IP, order data) to assess identity/creditworthiness. Legal basis: Article 6(1)(f) GDPR (overriding legitimate interest in protection against payment default if Klarna pays in advance). You may object by notifying Klarna. The provision of data is necessary for concluding the contract with your chosen Klarna method.

Further information on credit agencies (DE): DE list. General info: klarna.com/de. Privacy (DE): DE privacy.

Additional information for Germany/Austria

Credit agency lists: Germany link, Austria link. General info: Germany klarna.com/de, Austria klarna.com/at. Privacy: Germany link, Austria link.

Cookies

General information

Cookies are small text files stored in the browser or on the device. Cookies can uniquely identify a browser on repeat visits.

Cookies are stored on your computer; you control their use. You can set your browser to be notified before cookies are set, decide case-by-case, prevent storage, and delete cookies at any time. Note: some functions of the website may be limited.

Managing cookies in major browsers

Technically necessary cookies

We use technically necessary cookies to make our offering more user-friendly, effective and secure. Some functions cannot be offered without them. Legal basis: Art. 25(2) TDDDG and Art. 6(1)(f) GDPR (optimal functionality, user-friendly and effective services). You have a right to object for reasons relating to your personal situation.

Analysis

Use of Google Analytics 4

Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The data processing serves the purpose of analyzing this website and its visitors as well as marketing/advertising. Google may link your data with other Google data (search history, accounts, cross-device use). IP is shortened within the EU/EEA.

Legal basis: Art. 6(1)(a) GDPR (consent). You may revoke at any time.
Google Signals: cross-device tracking if “personalised advertising” is enabled; aggregated reports only. You can deactivate personalised ads in your Google Account. More: Google Signals.
Advanced Consent Mode: certain “pings” may be sent to Google even without consent (e.g., IP country derivation, timestamp, URL, user agent, referrer, conversion events) for modelled analytics.
Transfer to USA possible (TADPF; Google certified). Both Google and US authorities may have access.

More information: Technologies on partner sites, Google Privacy.

Use of shopware Analytics

Provider: shopware AG, Ebbinghoff 10, 48624 Schöppingen, Germany. Shopware and we are jointly responsible for collection and transmission to shopware under a joint controller agreement. Shopware is responsible for most data subject rights; you may also contact us and we will forward your request.

Purpose: analyse website and visitors for marketing/optimisation; data made available in reports, analyses, statistics. Data processed may include customer group, pages visited, click paths, date/time, device info (resolution/density/OS), referrer, browser, locale, search queries, time zone. Cookies or comparable technologies are used.

Legal basis: § 25(1) TDDDG i.V.m. Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time. More info: shopware Analytics docs.

Plug-ins

Use of the Google Tag Manager

Provider: Google Ireland Limited. Manages tags used to implement tracking/analysis tools. Tag Manager itself does not store cookies or process personal data but may trigger tags that do. Terms/Privacy: Use Policy.

Use of social plug-ins

We use social network plug-ins to optimise advertising for our products. If you consent, a connection to the social provider’s servers is established; your IP and visited pages are transmitted. This applies whether or not you are registered/logged in; assignment to profiles is possible if you are logged in. Log out before visiting/activating buttons to prevent assignment.

Legal basis: Art. 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR (consent). You can withdraw consent at any time.

Facebook by Meta Platforms Ireland Limited

4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We and Meta are joint controllers for collection and transfer to Facebook per joint processing agreement: controller addendum. Meta is TADPF-certified. Privacy: facebook.com/about/privacy/.

Use of Facebook Connect (Single Sign-On)

Allows login via Facebook. Joint controller arrangement as above. Data such as IP, browser info, referrer, location data may be transmitted; assignment to your profiles is possible if logged in. When SSO is used, certain profile data (e.g., name, address, public profile info, email, friends list, “Likes”) may be transmitted to us.

Legal basis: Art. 25(1) TDDDG with Art. 6(1)(a) GDPR (consent). Privacy: facebook.com/about/privacy/.

Use of Google reCAPTCHA

Provider: Google Ireland Limited. Distinguishes human input from bots. IP and other necessary data are transferred to Google (EU and possibly USA; TADPF). Legal basis: Art. 25(1) TDDDG with Art. 6(1)(a) GDPR (consent). Info: About reCAPTCHA, Google Privacy.

Use of Google invisible reCAPTCHA

Background analysis distinguishes regular users from bots. IP and, where applicable, other necessary data may be transmitted to Google (EU and, if necessary, USA; TADPF). Legal basis: Art. 25(1) TDDDG with Art. 6(1)(a) GDPR (consent). Info: reCAPTCHA, Privacy.

Use of Google Maps

Embeds interactive maps; Google may process data of visitors to pages with embedded maps. Transfer to USA possible (TADPF). Legal basis: Art. 25(1) TDDDG with Art. 6(1)(a) GDPR (consent). Privacy center: google.com/privacypolicy.html.

Using Vimeo

Plug-ins from Vimeo Inc., 555 West 18th Street, New York, NY 10011, USA. If such pages are accessed, a connection to Vimeo is established (IP and visited sites transmitted). If logged in at Vimeo, assignment to your account is possible. Transfer to USA (TADPF; Vimeo certified). Legal basis: Art. 25(1) TDDDG with Art. 6(1)(a) GDPR (consent). Privacy: vimeo.com/privacy.

Integration of the “FairCommerce” logo

Händlerbund e.V., Kohlgartenstraße 11–13, 04315 Leipzig. On visit, server stores in log file for 7 days: IP, date/time, file name/URL, referrer, browser/OS/provider. Legal basis: Art. 6(1)(f) GDPR (functionality, security, optimisation).

Using Font Awesome

Fonticons Inc., 307 S Main St., Suite 202, Bentonville, AR 72712-9214, USA. Uniform display of fonts/icons via connection to Font Awesome servers; cookies may be used; IP and browser info may be processed; transfer to third countries incl. USA. Legal basis: Art. 25(1) TDDDG with Art. 6(1)(a) GDPR (consent). Info: Privacy, Support.

Rights of data subjects & storage duration

Duration of storage

After contractual processing has been completed, data are stored initially for the duration of the warranty period, then according to statutory retention periods (especially tax/commercial law), and deleted thereafter unless you have agreed to further processing and use.

Rights of the affected person

If legal requirements are fulfilled, you have the following rights according to Articles 15–20 GDPR: right of access, rectification, erasure, restriction of processing, data portability. You also have a right to object to processing based on Article 6(1) GDPR and to processing for direct marketing (Article 21(1) GDPR).

Right to complain to the supervisory authority

You have the right to complain to the supervisory authority according to Article 77 GDPR if you believe that your data are not being processed lawfully.

Right to object

If processing outlined here is based on our legitimate interests in accordance with Article 6(1)(f) GDPR, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your data with future effect. If the objection is successful, we will no longer process the personal data unless we can demonstrate compelling legitimate grounds which override your interests or the processing is for the establishment, exercise or defence of legal claims.

If personal data are processed for purposes of direct advertising, you can object at any time. If the objection is successful, we will no longer process personal data for direct advertising.

Last update: 22.10.2024