General information

(Last updated: 4 October 2026)

The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data is any data that can be used to identify you personally.

Data collection on this website

We process personal data (hereinafter mostly referred to simply as “data”) only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.

According to Art. 4 No. 1 of Regulation (EU) 2016/679, i.e. the General Data Protection Regulation (hereinafter referred to as “GDPR”), “processing” means any operation or set of operations which is performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.

With the following privacy policy, we inform you in particular about the type, scope, purpose, duration and legal basis of the processing of personal data, insofar as we decide on the purposes and means of the processing either alone or jointly with others. In addition, we inform you below about the third-party components we use for optimisation purposes and to improve the quality of use, insofar as third parties process data under their own responsibility as a result.

Name and address of the controller

The controller responsible for the collection, processing and use of your personal data within the meaning of the General Data Protection Regulation (GDPR) is Mr Senol Celebi, Teutonenweg 10c, 22453 Hamburg, Germany (hereinafter: “we”). If you wish to object to the collection, processing or use of your data by us in accordance with this privacy policy, either in its entirety or for individual measures, you can send your objection by e-mail or letter to the following contact details:

Senol Celebi, Teutonenweg 10c, 22453 Hamburg, Germany, e-mail address: datenschutz@master-watch-parts.com

In addition, you can of course obtain information about the data we have stored about you at any time free of charge.

1. Description and scope of data processing and hosting

You can visit our website without providing any personal information. Each time our website is accessed, our system automatically collects data and information from the computer system of the accessing computer.

The following data is collected: information about the browser type and version used, the user’s operating system, the user’s IP address, the date and time of access, websites from which the user’s system reaches our website, and websites accessed by the user’s system via our website.

This access data is evaluated exclusively for the purpose of ensuring the trouble-free operation of the website and improving our offer. In accordance with Art. 6 (1) sentence 1 lit. f GDPR, this serves to protect our legitimate interests, which prevail in the balancing of interests, in the correct presentation of our offer. All access data is deleted no later than seven days after the end of your visit to the website.

Hosting services by a third-party provider

As part of processing on our behalf, a third-party provider provides us with services for hosting and displaying the website. All data collected in the course of using this website or in the forms provided for this purpose in the online shop, as described below, is processed on its servers. Processing on other servers only takes place within the scope explained here. Our host will only process your data to the extent necessary to fulfil its service obligations and will follow our instructions with regard to this data.

The host is used for the purpose of fulfilling contracts with our potential and existing customers (Art. 6 (1) lit. b GDPR) and in the interest of a secure, fast and efficient provision of our online offer by a professional provider (Art. 6 (1) lit. f GDPR).

Where consent has been requested, processing is carried out exclusively on the basis of Art. 6 (1) lit. a GDPR and Section 25 (1) TDDDG (German Telecommunications Digital Services Data Protection Act), insofar as the consent covers the storage of cookies or access to information on the user’s terminal device (e.g. device fingerprinting) within the meaning of the TDDDG. Consent can be withdrawn at any time.

We use the following host:

lima-city: a project of TrafficPlex GmbH

TrafficPlex GmbH, Konsul-Smidt-Str. 90, 28217 Bremen, Germany

Phone: +49 421/40 89 99 94

E-mail: support@lima-city.de

The following list shows the cookies used by our host on our website.

_lcp – Used to detect spam and improve the security of the website

_lcp2 – Used to detect spam and improve the security of the website

_lcp3 – Used by the website to identify and remove spam in the website’s comment function.

You can find information on how lima-city handles personal data at the following link:

www.blog.lima-city.de/2014/07/spam-schutz-fuer-die-webseiten/

Wordfence: firewall, security and error detection functions to detect and prevent unauthorised access attempts and technical vulnerabilities that could enable such access. For these purposes, cookies and similar storage methods required for this purpose may be used, and security logs may be created during the check and in particular in the event of unauthorised access. In this context, the IP addresses of users, a user identification number and their activities, including the time of access, are processed and stored, compared with the data provided by the provider of the firewall and security function and transmitted to it; service provider: Defiant, Inc., 800 5th Ave Ste 4100, Seattle, WA 98104, USA; legal basis: legitimate interests (Art. 6 (1) sentence 1 lit. f GDPR);

Website: https://www.wordfence.com

Privacy policy: https://www.wordfence.com/privacy-policy/

Basis for third-country transfer – standard contractual clauses: https://www.wordfence.com/standard-contractual-clauses/

Further information: https://www.wordfence.com/help/general-data-protection-regulation/

2. Collection, processing and disclosure of personal data for orders

When you place an order, we only collect and process your personal data to the extent necessary to fulfil and process your order and to handle your enquiries. The provision of the data is necessary for the conclusion of the contract. If the data is not provided, no contract can be concluded. Processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you.

Your data is passed on, for example, to the shipping companies and shipping service providers you have chosen, dropshipping providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with the statutory requirements. The scope of the data transfer is limited to a minimum.

The legal basis for the temporary storage of data and log files is Art. 6 (1) lit. f GDPR.

Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable the website to be delivered to the user’s computer. For this purpose, the user’s IP address must remain stored for the duration of the session.

Storage in log files is carried out to ensure the functionality of the website. We also use the data to optimise the website and to ensure the security of our information technology systems. The data is not evaluated for marketing purposes in this context.

These purposes also constitute our legitimate interest in data processing pursuant to Art. 6 (1) lit. f GDPR.

Note on data transfer to the USA and other third countries

Among other things, we use tools from companies based in the USA or other third countries that are not secure under data protection law. If these tools are active, your personal data may be transferred to these third countries and processed there. We would like to point out that a level of data protection comparable to that in the EU cannot be guaranteed in these countries.

For example, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It can therefore not be ruled out that US authorities (e.g. intelligence services) process, evaluate and permanently store your data located on US servers for monitoring purposes. We have no influence on these processing activities.

Note on data transfer to shipping service providers

If you have given us your express consent during or after your order, we will, on the basis of this consent pursuant to Art. 6 (1) sentence 1 lit. a GDPR, pass on your e-mail address and telephone number to the selected shipping service provider so that it can contact you before delivery for the purpose of announcing or coordinating the delivery.

Consent can be withdrawn at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After withdrawal, we will delete the data you provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this policy.

Shipping service providers:

Deutsche Post AG (letters, Warenpost) – shipping and logistics

DHL Paket GmbH (parcels) – shipping and logistics

DPD Deutschland GmbH – shipping and logistics

Hermes Germany GmbH – shipping and logistics

Jumingo GmbH – shipping and logistics

UPS (United Parcel Service Deutschland S.à r.l. & Co. OHG) – shipping and logistics

Transglobal Express GmbH – shipping and logistics

Packlink Shipping, S.L. – shipping and logistics

General contact information (phone, fax or e-mail):

Deutsche Post AG – phone: 0228 4333 112

DHL Paket GmbH – Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany – phone: 0228 18 20

DPD Deutschland GmbH – info@dpd.de – phone: 06021 8430

Hermes Germany GmbH – phone: 040 593 551 111

Jumingo GmbH – phone: 0221 98044999

UPS – 02131-1542222 (fax)

Transglobal Express GmbH – phone: 069 90506780

Packlink – sales@packlink.de

Use of an external inventory management system

We use an inventory management system for contract processing as part of processing on our behalf. For this purpose, your personal data collected in the course of the order is transmitted to:

Billbee Gesellschaft mit beschränkter Haftung

Arolser Str. 10, 34477 Twistetal, Germany

E-mail: support@billbee.io

E-mail dispatch via Brevo

For sending transactional e-mails (order confirmations, shipping notifications, information on the terms and conditions and the right of withdrawal), we use the Brevo service of Sendinblue SAS, 55 rue d’Amsterdam, 75008 Paris, France. In doing so, the recipient’s name and e-mail address are transmitted to Brevo. Data processing is carried out on the basis of Art. 6 (1) lit. b GDPR (performance of a contract). A data processing agreement has been concluded with Brevo. Further information: https://www.brevo.com/de/legal/privacypolicy/

Contact initiated by the customer by e-mail or via the chat function

Purposes of processing

We use the data collected exclusively for the purpose of answering your enquiry and for other purposes specified when the data was collected. If you contact us via a contact form, by telephone, via online chat or by e-mail, the personal data you provide will be collected and stored.

Type of data

The following data may be collected. Whether this data is collected depends on your request: first name, surname, address, tracking number, telephone number, e-mail address, bank details, etc.

The legal basis for data processing is Art. 6 (1) lit. f GDPR. In this case, our legitimate interest outweighs your legitimate interest. The reason for this is that it is not possible to process your enquiry without processing your personal data. In addition, the use of the contact form or contacting us is voluntary.

Storage period

We delete the data arising from the contact form, by e-mail or from the chatbot once storage is no longer necessary for the purpose of the contact or – where applicable – taking into account the statutory retention obligations.

Possibility of withdrawal, objection and erasure

Where processing is based on a legitimate interest, you can object to the processing at any time with effect for the future. In the event of an objection, the correspondence cannot be continued. All personal data collected in this context will be deleted in the event of a justified objection.

Obligation to provide your personal data

You are not obliged to disclose personal data. The fields marked in the input form are mandatory fields without which your enquiry cannot be processed.

Chat function

Purposes of processing

The chat function is used to contact us. You can use the chat like a contact form to chat with us in almost real time.

Type of data

When the chat is started, the following personal data is processed: date and time of access, browser type/version, IP address, operating system used, URL of the previously visited website, amount of data sent, content of the communication, tracking number, contact details (if provided, e.g. first name, surname and e-mail address).

Depending on the course of the conversation with us, further personal data entered by you may arise in the chat. The type of this data depends heavily on your enquiry or the problem you describe to us. Please only send us the data required for your enquiry. The processing of all this data serves to provide you with a fast and efficient way of contacting us and thus to improve our customer service.

The data is processed on the basis of Art. 6 (1) lit. a GDPR. Consent is given here by using the chat.

Storage period

The chat data is stored for the purpose of ensuring the security of our information technology systems.

In addition, we store the chat history, the chat data and the contact details you provide for a period of four weeks. This serves to make further enquiries easier for you on the basis of the chat history and to ensure the continuous quality control of our chat service.

Possibility of withdrawal, objection and erasure

If you do not wish your data to be stored, please let us know using the contact details given below. Stored chats will then be deleted by us without delay.

Further information

When you access our website, the chat widget is loaded in the form of a JavaScript file from Amazon CloudFront. Technically, the chat widget is the source code that is executed on your computer and enables the chat.

We use the chat software of the following company:

Lime Connect (Userlike) GmbH

Probsteigasse 44-46, 50670 Cologne, Germany

Support: 0221-77268620
E-mail: support(at)lime-connect.com

Further information on the data processed can be found at:

https://connect.lime-technologies.com/de/legal/privacy-policy/

Processing of your personal data in third countries

We have generally commissioned the processing of your personal data within the European Union. Nevertheless, your personal data may be processed in the United States of America (USA). There is no adequacy decision of the European Commission for the USA. We have therefore secured the level of data protection with appropriate safeguards within the meaning of Art. 46 GDPR.

Obligation to provide your personal data

You are not obliged to disclose personal data. If you do not give your consent, unfortunately you will not be able to use the chat function.

If the contact serves the implementation of pre-contractual measures (e.g. advice in the event of interest in a purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

If you contact us for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) lit. f GDPR.

We only use your e-mail address to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we only collect your personal data (name, e-mail address, message text) to the extent you provide it. The data processing serves the purpose of making contact.

If the contact serves the implementation of pre-contractual measures (e.g. advice in the event of interest in a purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) lit. b GDPR.

If you contact us for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to this processing of personal data concerning you based on Art. 6 (1) lit. f GDPR.

We only use your e-mail address to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer account / orders

Customer account registration function

If you create a customer account with us via our website, we will collect and store the data you enter during registration (e.g. your name, address or e-mail address) exclusively for pre-contractual services, for the performance of the contract or for the purpose of customer care (e.g. to provide you with an overview of your previous orders with us or to be able to offer you the so-called wish list function). At the same time, we store the IP address and the date and time of your registration. This data is of course not passed on to third parties.

As part of the further registration process, your consent to this processing is obtained and reference is made to this privacy policy. The data we collect in this process is used exclusively for providing the customer account. Insofar as you consent to this processing, Art. 6 (1) lit. a GDPR is the legal basis for the processing. If the opening of the customer account also serves pre-contractual measures or the performance of a contract, the legal basis for this processing is also Art. 6 (1) lit. b GDPR.

You can withdraw the consent you have given us to open and maintain the customer account at any time with effect for the future in accordance with Art. 7 (3) GDPR. To do so, you simply need to inform us of your withdrawal. The data collected in this respect will be deleted as soon as processing is no longer necessary. However, we must observe retention periods under tax and commercial law.

Possibility of objection and removal

As a user, you can cancel your registration at any time. You can have the data stored about you changed at any time.

Your customer account can be deleted at any time, either by sending a message to the contact option described below or via a function provided for this purpose in the customer account.

If the data is required for the performance of a contract or for the implementation of pre-contractual measures, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

Online withdrawal function

You can withdraw from your contract online via the “Withdraw from contract” page. In doing so, we process the information you enter in the form, in particular your name, your e-mail address, the order number and, where applicable, the items concerned, as well as the date and time of receipt. We use this data to process your withdrawal and to send you an acknowledgement of receipt on a durable medium (e.g. by e-mail) without undue delay. Your IP address may also be processed to protect against misuse.

The legal basis is Art. 6 (1) lit. c GDPR in conjunction with Section 356a of the German Civil Code (BGB) (statutory obligation to provide the withdrawal function and the acknowledgement of receipt) and Art. 6 (1) lit. b GDPR (processing of the contract); for protection against misuse, Art. 6 (1) lit. f GDPR. The data is deleted together with the order data after the statutory retention periods have expired.

Product reviews

If you review a product, we process the information you enter (rating, review text, name or pseudonym, e-mail address) as well as the date and time of submission. Your name or pseudonym is displayed publicly together with the review; your e-mail address is not published.

Processing is carried out on the basis of your consent (Art. 6 (1) lit. a GDPR). You can withdraw your consent at any time with effect for the future, for example by sending a message to the e-mail address given above; your review will then be deleted.

Newsletter

If you subscribe to our free newsletter, the data requested for this purpose, i.e. your e-mail address and – optionally – your name and address, will be transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website, as well as the date and time of your registration and your operating system and browser. During the registration process, reference is first made to the privacy policy and your consent to receive the newsletter is obtained. We use the data collected exclusively for sending the newsletter – in particular, it is therefore not passed on to third parties. The legal basis for this is Art. 6 (1) lit. a GDPR. If we send newsletters, they are sent via the Brevo service of Sendinblue SAS, 55 rue d’Amsterdam, 75008 Paris, France, which processes the data exclusively on our behalf (processing on behalf, see section “E-mail dispatch via Brevo”).

You can withdraw your consent to receiving the newsletter at any time with effect for the future in accordance with Art. 7 (3) GDPR. To do so, you simply need to inform us of your withdrawal or click on the unsubscribe link contained in every newsletter.

Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage no longer applies. Storage may also take place if this has been provided for by the European or national legislator in EU regulations, laws or other provisions to which the controller is subject. The data will also be blocked or deleted when a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

Cookies

Our website uses so-called cookies. Cookies are small text files or other storage technologies that are placed and stored on your terminal device by the internet browser you use. These cookies process certain information about you to an individual extent, such as your browser or location data or your IP address.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, and you can prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. Please note, however, that you may then not be able to use all functions of this website to their full extent.

You can find out how to manage cookies (including how to deactivate them) in the most important browsers at the following links:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated below in this privacy policy, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognise your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognised even after a page change.

Cookies or comparable technologies are used on the basis of Section 25 (2) TDDDG. Your personal data is processed on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.

You have the right to object at any time to this processing of personal data concerning you on grounds relating to your particular situation.

Language setting

Our online shop is available in several languages. To ensure that the language you have selected is retained when you change pages and for background requests (e.g. in the shopping cart), we set a technically necessary cookie that only contains the code of the selected language. If you close the notice about another language version, we store this in your browser’s local storage so that the notice does not appear again. This does not involve the transmission of personal data to us. The legal basis is Section 25 (2) TDDDG and Art. 6 (1) lit. f GDPR; our legitimate interest lies in providing the shop in your language.

On our website, we use the cookie banner and consent management tool Real Cookie Banner of devowl.io GmbH, Tannet 12, 94539 Grafling, Germany (“Real Cookie Banner”).

The tool enables you to give consent to data processing via the website, in particular the setting of cookies, and to exercise your right to withdraw consent already given. The data processing serves the purpose of obtaining and documenting the necessary consent to data processing and thus complying with legal obligations.

Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to Real Cookie Banner: anonymised IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data is not passed on to any other third parties.

The data processing is carried out to fulfil a legal obligation on the basis of Art. 6 (1) lit. c GDPR.

Further information on data protection at Real Cookie Banner can be found at:

www.devowl.io/de/datenschutzerklaerung/

Data processing for payment processing

We work with the following partners to process payments in our online shop: technical service providers, credit institutions, payment service providers.

Data processing for transaction processing

Depending on the payment method selected, we pass on the data required to process the payment transaction to our technical service providers, who act on our behalf as processors, or to the commissioned credit institutions or to the selected payment service provider, insofar as this is necessary to process the payment. This serves the performance of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR. In some cases, the payment service providers collect the data required to process the payment themselves, e.g. on their own website or via a technical integration in the ordering process. In this respect, the privacy policy of the respective payment service provider applies.

PayPal

We offer you the option of paying for your purchase in the online shop via PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”). PayPal is an e-money service provider licensed as a bank in Luxembourg. If you select “PayPal” as the payment method, we will pass on the following information provided by you during the ordering process to PayPal: name, address, e-mail address, invoice amount. We receive the following data about you from PayPal: name, address, e-mail address, invoice amount, paid: yes/no. Your data is passed on exclusively for the purpose of processing the payment for your respective order with the payment service provider PayPal and only to the extent necessary for this. The legal basis is Art. 6 (1) lit. b GDPR (for the purpose of performing the contract).

We have no influence on the data processing by PayPal; it is carried out by PayPal under its own responsibility within the framework of the contractual relationship between you and PayPal. If you click on the payment option “PayPal”, you will be redirected to the secure pages of PayPal, where you must log in with your e-mail address and password or, if you do not yet have a PayPal account, register. PayPal is used exclusively on the basis of the contract concluded between you and PayPal. Data processing by PayPal is governed by the privacy notice that PayPal provided to you when the contract was concluded.

According to its own information, PayPal processes the data received from you to process the payment on your instructions and credits the amount to us on your behalf. According to its own information, PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment in instalments” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR on the basis of PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

For further data protection information, including on the credit agencies used by PayPal, please refer directly to PayPal’s privacy policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

Stripe

We also offer payment processing via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland (hereinafter: “Stripe”). If you select “Stripe” as the payment method, we will pass on the following information provided by you during the ordering process to Stripe for the purpose of processing the payment: name, address, e-mail address, invoice amount, credit card information. We receive the following data about you back from Stripe: name, address, e-mail address, invoice amount, paid: yes/no. Your data is passed on exclusively for the purpose of processing the payment for your respective order with the payment service provider Stripe and only to the extent necessary for this. The legal basis is Art. 6 (1) lit. b GDPR (for the purpose of performing the contract).

Further information on the handling of personal data is available in the Privacy Center:

https://stripe.com/de/privacy-center/legal

Third-country transfer: Stripe uses the EU standard contractual clauses with its subcontractors, which are to be regarded as appropriate safeguards pursuant to Art. 46 (2) lit. c GDPR. Information from Stripe on international data transfers is available here:

https://stripe.com/de/privacy-center/legal#data-transfers

In addition, Stripe protects your data through certain security precautions and data protection compliance measures. You can find out what these are here:

https://stripe.com/de/guides/general-data-protection-regulation

Klarna

Via Stripe, we also offer payment with Klarna. The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter: “Klarna”). If you choose the payment method Klarna, we pass on the following information provided by you during the ordering process to Klarna via Stripe for the purpose of payment processing: name, address, e-mail address, telephone number (if provided), invoice amount and order details (items, quantity, price). We receive information from Klarna as to whether the payment has been made. Klarna may consult credit agencies to verify your identity and creditworthiness and decides on this basis which Klarna payment options are offered to you; Klarna is itself responsible for this processing. Your data is passed on solely for the purpose of payment processing and only to the extent necessary for this. The legal basis is Art. 6 (1) lit. b GDPR (for the purpose of performing the contract).

Further information can be found in Klarna’s privacy notice:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_gb/privacy

Data processing for the purpose of fraud prevention and the optimisation of our payment processes

Where applicable, we provide our service providers with further data, which they use, together with the data required to process the payment, as our processors for the purpose of fraud prevention and the optimisation of our payment processes (e.g. invoicing, processing of disputed payments, accounting support). In accordance with Art. 6 (1) sentence 1 lit. f GDPR, this serves to protect our legitimate interests, which prevail in the balancing of interests, in protecting ourselves against fraud and in efficient payment management.

Rights of data subjects and storage period

Storage period

After complete processing of the contract, the data is first stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial, retention periods, and then deleted after the period has expired, unless you have consented to further processing and use.

Rights of the data subject

As a data subject, you have the following rights:

pursuant to Art. 15 GDPR, the right to request information about your personal data processed by us to the extent specified therein;

pursuant to Art. 16 GDPR, the right to request without undue delay the rectification of inaccurate or the completion of your personal data stored by us;

pursuant to Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is required to exercise the right to freedom of expression and information, to fulfil a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;

pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data if you dispute the accuracy of the data, the processing is unlawful but you refuse its erasure, we no longer need the data but you require it for the establishment, exercise or defence of legal claims, or you have objected to the processing pursuant to Art. 21 GDPR;

pursuant to Art. 20 GDPR, the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller;

pursuant to Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or of our registered office for this purpose.

If you have any questions about the collection, processing or use of your personal data, for information, rectification, restriction or erasure of data, or to withdraw consent given or object to a particular use of data, please contact us directly using the contact details in our Imprint.

Right to lodge a complaint with the supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you consider that the processing of your personal data is unlawful.

Right to object to data collection in special cases and to direct marketing (Art. 21 GDPR)

IF THE DATA PROCESSING IS BASED ON ART. 6 (1) LIT. E OR F GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS. THE RESPECTIVE LEGAL BASIS ON WHICH PROCESSING IS BASED CAN BE FOUND IN THIS PRIVACY POLICY. IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA CONCERNED UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS (OBJECTION PURSUANT TO ART. 21 (1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING; THIS ALSO APPLIES TO PROFILING INSOFAR AS IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR THE PURPOSE OF DIRECT MARKETING (OBJECTION PURSUANT TO ART. 21 (2) GDPR).