1. PRIVACY AT A GLANCE

GENERAL INFORMATION
The following information provides a simple overview of what happens to your personal data when you visit this website. Personal data refers to all data that can be used to personally identify you. Detailed information on data protection can be found in our privacy policy listed below this text.

DATA COLLECTION ON THIS WEBSITE

Who is responsible for data collection on this website?
Data processing on this website is carried out by the website operator. Their contact details can be found in the legal notice (Imprint) of this website.

How do we collect your data?
Some data is collected when you provide it to us. This may include data you enter into a contact form.
Other data is collected automatically by our IT systems when you visit the website. These are primarily technical data (e.g., browser type, operating system, or time of page access). This data is collected automatically as soon as you access the website.

What do we use your data for?
Part of the data is collected to ensure the proper functioning of the website. Other data may be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to obtain information, free of charge, at any time, about the origin, recipient, and purpose of your stored personal data. You also have the right to request the correction or deletion of your data. If you have further questions about data protection, you can contact us at any time using the address listed in the legal notice.
Furthermore, you have the right to lodge a complaint with the competent supervisory authority.
You also have the right, under certain conditions, to request the restriction of the processing of your personal data. For details, please refer to this privacy policy under “Right to Restriction of Processing.”

ANALYSIS TOOLS AND TOOLS FROM THIRD PARTIES
When visiting this website, your browsing behavior may be statistically analyzed. This is done primarily using cookies and so-called analytics programs. The analysis of your browsing behavior is generally anonymous and cannot be traced back to you.
You can object to this analysis or prevent it by not using certain tools. Detailed information can be found in the privacy policy below.

2. HOSTING

EXTERNAL HOSTING
This website is hosted by an external service provider (host). The personal data collected on this website is stored on the host’s servers. This may include IP addresses, contact requests, metadata and communication data, contractual data, contact details, names, website accesses, and other data generated via a website.

The use of the host is for the purpose of fulfilling our contractual obligations towards our potential and existing customers (Art. 6 Para. 1 lit. b GDPR) and in the interest of secure, fast, and efficient provision of our online offering by a professional provider (Art. 6 Para. 1 lit. f GDPR).

Our host will only process your data to the extent necessary to fulfill its service obligations and will follow our instructions with regard to this data.

CONTRACTUAL PROCESSING AGREEMENT
To ensure data protection-compliant processing, we have concluded a data processing agreement with our host.

3. GENERAL INFORMATION AND MANDATORY DISCLOSURES

DATA PROTECTION
The operators of these pages take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with statutory data protection regulations as well as this privacy policy.

When you use this website, various personal data are collected. Personal data are data by which you can be personally identified. This privacy policy explains what data we collect and what we use it for. It also explains how and for what purpose this happens.

Please note that data transmission over the internet (e.g., communication by e-mail) may have security vulnerabilities. Complete protection of data against access by third parties is not possible.

INFORMATION ABOUT THE RESPONSIBLE PARTY
The responsible party for data processing on this website is:

Fürst von Hohenzollern Group of Companies
Karl-Anton-Platz 2
72488 Sigmaringen
Germany

Phone: +49 7571 729-0
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data (e.g., names, email addresses, etc.).

STATUTORY DATA PROTECTION OFFICER
We have appointed a data protection officer for our company:

Ulrike Eben
Panoramastraße 17
88271 Wilhelmsdorf
Germany

Phone: +49 151 17640968
Email: This email address is being protected from spambots. You need JavaScript enabled to view it.

REVOCATION OF YOUR CONSENT TO DATA PROCESSING
Many data processing operations are only possible with your express consent. You may revoke any consent you have already given at any time. An informal email to us is sufficient for this purpose. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

RIGHT TO OBJECT TO DATA COLLECTION IN SPECIAL CASES AND TO DIRECT ADVERTISING (ART. 21 GDPR)
IF DATA PROCESSING IS BASED ON ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, TO THE PROCESSING OF YOUR PERSONAL DATA, INCLUDING PROFILING BASED ON THOSE PROVISIONS. THE RESPECTIVE LEGAL BASIS FOR PROCESSING CAN BE FOUND IN THIS PRIVACY POLICY.
IF YOU OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS, OR THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS (OBJECTION UNDER ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS PROCESSED FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING, INCLUDING PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU OBJECT, YOUR PERSONAL DATA WILL NO LONGER BE USED FOR DIRECT MARKETING PURPOSES (OBJECTION UNDER ART. 21(2) GDPR).

RIGHT TO LODGE A COMPLAINT WITH THE COMPETENT SUPERVISORY AUTHORITY
In the event of violations of the GDPR, data subjects have the right to lodge a complaint with a supervisory authority, in particular in the Member State of their habitual residence, place of work, or the place of the alleged violation. This right exists without prejudice to any other administrative or judicial remedy.

RIGHT TO DATA PORTABILITY
You have the right to have data which we process automatically based on your consent or in performance of a contract delivered to you or to a third party in a commonly used, machine-readable format. If you request the direct transfer of data to another controller, this will only be done to the extent technically feasible.

SSL OR TLS ENCRYPTION
This site uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as orders or inquiries you send to us as the site operator. You can recognize an encrypted connection by the browser address line switching from “http://” to “https://” and by the lock icon in your browser line.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.

ENCRYPTED PAYMENT TRANSACTIONS ON THIS WEBSITE
If there is an obligation to transmit your payment data (e.g., account number for direct debit authorization) after concluding a paid contract, this data is required for payment processing.
Payment transactions using common payment methods (Visa/MasterCard, direct debit) are carried out exclusively via an encrypted SSL or TLS connection.
An encrypted connection is indicated by the browser address line switching from “http://” to “https://” and by the lock icon in your browser line.
With encrypted communication, the payment data you transmit to us cannot be read by third parties.

RIGHT TO ACCESS, ERASURE AND RECTIFICATION
Within the framework of applicable legal provisions, you have the right at any time to obtain free information about your stored personal data, its origin and recipients, and the purpose of the data processing. You also have the right to rectification or erasure of this data. For this purpose and for further questions about personal data, you can contact us at any time at the address provided in the legal notice.

RIGHT TO RESTRICTION OF PROCESSING
You have the right to request the restriction of the processing of your personal data. You can contact us at any time at the address provided in the legal notice. The right to restriction of processing exists in the following cases:

• If you contest the accuracy of your personal data stored by us, we usually need time to verify this. For the duration of the verification, you have the right to request restriction of processing of your personal data.

• If the processing of your personal data was/is unlawful, you may request restriction of data processing instead of erasure.

• If we no longer need your personal data but you require it to exercise, defend or assert legal claims, you have the right to request restriction of processing instead of erasure.

• If you have objected pursuant to Art. 21(1) GDPR, a balancing of interests must be carried out between your interests and ours. As long as it has not yet been determined whose interests prevail, you have the right to request restriction of processing of your personal data.

If you have restricted the processing of your personal data, such data – apart from being stored – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the European Union or a Member State.

OBJECTION TO PROMOTIONAL EMAILS
We hereby object to the use of contact data published within the framework of the imprint obligation for sending unsolicited advertising and informational materials. The operators of the website expressly reserve the right to take legal action in the event of the unsolicited sending of promotional information, such as spam emails.

4. DATA COLLECTION ON THIS WEBSITE

COOKIES
Our websites use so-called “cookies.” Cookies do not damage your computer and do not contain viruses. Cookies help make our website more user-friendly, efficient, and secure. Cookies are small text files that are stored on your device and saved by your browser.

Most of the cookies we use are so-called “session cookies.” They are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.

You can configure your browser to inform you about the use of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general, and to enable the automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

Cookies that are required to carry out electronic communications or to provide certain functions you request (e.g., shopping cart) are stored based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If consent to store cookies has been requested (e.g., consent to store cookies for analytics), processing is carried out exclusively on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

Where other cookies (e.g., cookies for analyzing your browsing behavior) are stored, they are treated separately in this privacy policy.

SERVER LOG FILES
The provider of these pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version

• Operating system used

• Referrer URL

• Hostname of the accessing computer

• Time of the server request

• IP address

This data will not be merged with data from other sources.

The collection of this data is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the technically error-free presentation and optimization of its website – for this purpose, the server log files must be collected.

CONTACT FORM
If you send us inquiries via the contact form, your details from the inquiry form, including the contact details you provide, will be stored by us for the purpose of processing the inquiry and for follow-up questions. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your request is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on our legitimate interest in the effective handling of inquiries addressed to us (Art. 6(1)(f) GDPR) or on your consent (Art. 6(1)(a) GDPR) if requested.

The data you enter in the contact form will remain with us until you request deletion, revoke your consent to storage, or the purpose for data storage no longer applies (e.g., after your inquiry has been processed). Mandatory statutory provisions – especially retention periods – remain unaffected.

REQUEST BY EMAIL, TELEPHONE OR FAX
If you contact us by email, telephone or fax, your inquiry, including all resulting personal data (name, inquiry), will be stored and processed by us for the purpose of handling your request. We do not pass on this data without your consent.

The processing of this data is based on Art. 6(1)(b) GDPR if your inquiry is related to the performance of a contract or is necessary for pre-contractual measures. In all other cases, processing is based on your consent (Art. 6(1)(a) GDPR) and/or our legitimate interests (Art. 6(1)(f) GDPR), as we have a legitimate interest in the effective processing of inquiries addressed to us.

The data sent to us via contact inquiries remains with us until you request deletion, revoke your consent to storage, or the purpose for storage no longer applies (e.g., after your request has been processed). Mandatory statutory provisions – in particular statutory retention periods – remain unaffected.

5. ANALYSIS TOOLS AND ADVERTISING

WORDPRESS STATS
This website uses the WordPress tool "Stats" to statistically analyze visitor traffic. The provider is Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA.

WordPress Stats uses cookies that are stored on your computer and allow an analysis of the use of the website. The information generated by the cookies about your use of this website is stored on servers in the USA. Your IP address is anonymized after processing and before storage.

“WordPress Stats” cookies remain on your device until you delete them.

The storage of “WordPress Stats” cookies and the use of this analysis tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the anonymized analysis of user behavior to optimize both the website and advertising. If consent has been requested (e.g., consent to the storage of cookies), processing is carried out solely on the basis of Art. 6(1)(a) GDPR; consent can be revoked at any time.

You can configure your browser to inform you about the use of cookies, to allow cookies only in individual cases, to exclude the acceptance of cookies for specific cases or in general, and to enable automatic deletion of cookies when closing the browser. Disabling cookies may limit the functionality of this website.

You can object to the collection and use of your data for the future by setting an opt-out cookie in your browser via this link:
https://www.quantcast.com/opt-out/

If you delete the cookies on your device, you will need to set the opt-out cookie again.

GOOGLE ANALYTICS
This website uses functions of the web analytics service Google Analytics. The provider is Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics uses so-called “cookies.” These are text files stored on your computer that allow an analysis of your use of the website. The information generated by the cookie about your use of this website is generally transmitted to a Google server in the USA and stored there.

The storage of Google Analytics cookies and the use of this analysis tool are based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in analyzing user behavior to optimize both the website and its advertising. If appropriate consent was requested (e.g., consent to store cookies), processing is carried out exclusively based on Art. 6(1)(a) GDPR; consent may be revoked at any time.

IP ANONYMIZATION
We have activated the IP anonymization feature on this website. As a result, your IP address will be shortened by Google within the member states of the European Union or other parties to the Agreement on the European Economic Area before being transmitted to the USA. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and shortened there.
On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage to the website operator.
The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data.

BROWSER PLUGIN
You can prevent the storage of cookies by selecting the appropriate settings in your browser software. However, please note that if you do so, you may not be able to fully use all functions of this website.
You can also prevent the collection of the data generated by the cookie relating to your use of the website (including your IP address) and its processing by Google by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=en

OBJECTION TO DATA COLLECTION
You can prevent the collection of your data by Google Analytics by clicking on the following link. An opt-out cookie will be set to prevent the collection of your data during future visits to this website:
Deactivate Google Analytics

More information about how Google Analytics handles user data can be found in Google’s privacy policy:
https://support.google.com/analytics/answer/6004245?hl=en

DATA PROCESSING AGREEMENT
We have entered into a data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

DEMOGRAPHIC FEATURES IN GOOGLE ANALYTICS
This website uses the “demographics” feature of Google Analytics. It allows the creation of reports that contain information about the age, gender, and interests of site visitors. These data come from interest-based advertising by Google and third-party visitor data. These data cannot be assigned to a specific individual. You can deactivate this feature at any time in the ad settings of your Google account or prohibit the collection of your data by Google Analytics as described under “Objection to Data Collection.”

DATA RETENTION
User and event-level data stored by Google that is linked to cookies, user IDs, or advertising IDs (e.g., DoubleClick cookies, Android advertising ID) will be anonymized or deleted after 14 months. For details, see:
https://support.google.com/analytics/answer/7667196?hl=en

6. PLUGINS AND TOOLS

GOOGLE WEB FONTS
For uniform representation of fonts, this site uses web fonts provided by Google. When you access a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly.

To do this, the browser you use must connect to Google’s servers. In doing so, Google becomes aware that your IP address was used to access this website. The use of Google Web Fonts is based on Art. 6(1)(f) GDPR. The website operator has a legitimate interest in the uniform and appealing presentation of its online services.

If your browser does not support web fonts, a standard font will be used by your computer.

More information about Google Web Fonts can be found at:
https://developers.google.com/fonts/faq
and in Google’s privacy policy:
https://policies.google.com/privacy

GOOGLE MAPS
This site uses the map service Google Maps via an API. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

To use the features of Google Maps, it is necessary to store your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of presenting our online offerings in an appealing way and to make the locations specified on the website easy to find. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR.

More information on the handling of user data can be found in Google’s privacy policy:
https://policies.google.com/privacy

7. OWN SERVICES

HANDLING OF APPLICANT DATA
We offer you the opportunity to apply to us (e.g., by email, postal mail, or via an online application form). Below, we inform you about the scope, purpose, and use of your personal data collected as part of the application process. We assure you that the collection, processing, and use of your data will be carried out in accordance with applicable data protection law and all other legal provisions, and that your data will be treated strictly confidentially.

SCOPE AND PURPOSE OF DATA COLLECTION
When you send us an application, we process your associated personal data (e.g., contact and communication data, application documents, notes from interviews, etc.) to the extent necessary to decide on the establishment of an employment relationship.
The legal basis for this is Section 26 BDSG-new under German law (initiation of an employment relationship), Art. 6(1)(b) GDPR (general contract initiation), and—if you have given consent—Art. 6(1)(a) GDPR. Consent can be revoked at any time. Within our company, your personal data will only be passed on to persons involved in processing your application.

If the application is successful, the data you submitted will be stored on the basis of Section 26 BDSG-new and Art. 6(1)(b) GDPR for the purpose of carrying out the employment relationship in our data processing systems.

RETENTION PERIOD OF DATA
If we are unable to offer you a position, you reject an offer, or withdraw your application, we reserve the right to retain the data you have submitted based on our legitimate interests (Art. 6(1)(f) GDPR) for up to 6 months after the conclusion of the application process (rejection or withdrawal of the application). The data will then be deleted, and any physical application documents will be destroyed.
Retention serves in particular as evidence in the event of a legal dispute. If it becomes apparent that the data will still be required after the 6-month period (e.g., due to a pending legal dispute), deletion will take place only when the purpose for further retention no longer applies.

Longer storage may also occur if you have given consent (Art. 6(1)(a) GDPR) or if statutory retention obligations prevent deletion.

INCLUSION IN THE APPLICANT POOL
If we do not offer you a position, there may be the possibility of including you in our applicant pool. In the event of inclusion, all documents and information from your application will be transferred to the applicant pool in order to contact you in the event of suitable vacancies.

Inclusion in the applicant pool is based exclusively on your express consent (Art. 6(1)(a) GDPR). Giving consent is voluntary and has no relation to the ongoing application process.
The applicant can revoke their consent at any time. In this case, the data will be irreversibly deleted from the applicant pool, provided there are no legal grounds for retention.

The data in the applicant pool will be irreversibly deleted no later than two years after consent has been granted.

8. VIDEO SURVEILLANCE

On the basis of Section 4 of the German Federal Data Protection Act (BDSG), we use video surveillance at and within our castle premises. You will be informed of the surveillance by a posted notice at the entrance to the respective building.

Video surveillance serves the following purposes, which also constitute legitimate interests in the sense of data processing:

• Protection of property and cultural assets

• Prevention of theft

• Prevention of property damage (vandalism)

• Securing evidence

The recorded data is automatically deleted by the system after 28 working days, unless incidents relevant to our legitimate interests occur—particularly damage to property—requiring longer retention.

9. OUR SOCIAL MEDIA PRESENCES

DATA PROCESSING THROUGH SOCIAL NETWORKS
We maintain publicly accessible profiles on social networks. You can find the specific platforms we use below.

Social networks such as Facebook, Twitter, etc. can usually comprehensively analyze your user behavior when you visit their websites or websites with integrated social media content (e.g., like buttons or advertisements). Visiting our social media profiles triggers numerous data protection-related processing operations.

When you are logged into your social media account and visit our profile, the operator of the social media portal can associate this visit with your user account. Your personal data may also be collected even if you are not logged in or do not have an account with the respective social media platform. In such cases, data collection can occur, for example, via cookies stored on your device or by recording your IP address.

Using the data thus collected, the operators of the social media platforms can create user profiles that store your preferences and interests. This way, interest-based advertising can be shown to you both inside and outside the respective platform. If you have an account with the respective social network, this advertising can be displayed across all devices on which you are or were logged in.

Please also note that we cannot track all processing activities on social media platforms. Depending on the provider, additional processing may be carried out by the operators of the social networks. For details, please consult the terms of use and privacy policies of the respective platforms.

LEGAL BASIS
Our social media presences are intended to ensure the broadest possible presence on the internet. This constitutes a legitimate interest within the meaning of Art. 6(1)(f) GDPR. The analysis processes initiated by the social networks may be based on different legal grounds to be stated by the providers (e.g., consent under Art. 6(1)(a) GDPR).

CONTROLLER AND EXERCISING OF RIGHTS
If you visit one of our social media profiles (e.g., Facebook), we are jointly responsible with the platform operator for the data processing operations triggered by this visit.
You can assert your rights (access, rectification, erasure, restriction of processing, data portability, and complaint) both against us and against the operator of the respective social media platform (e.g., Facebook).

Please note that despite the joint responsibility with the platform operators, we do not have full influence over the data processing procedures. Our capabilities depend largely on the corporate policies of the respective provider.

STORAGE DURATION
The data we collect directly via our social media presence is deleted from our systems as soon as the purpose for its storage ceases to apply, you request deletion, revoke your consent, or the data storage is no longer required. Stored cookies remain on your end device until you delete them. Mandatory legal provisions—particularly retention periods—remain unaffected.

We have no control over the storage duration of your data that is stored by social network operators for their own purposes. For details, please contact the operators of the social networks directly (e.g., via their privacy policies, see below).

SOCIAL NETWORKS IN DETAIL

FACEBOOK
We have a profile on Facebook. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”). According to Meta, the collected data is also transferred to the USA and other third countries.

We have entered into a joint processing agreement (Controller Addendum) with Meta. This agreement defines which data processing operations we and Meta are responsible for when you visit our Facebook page. You can view this agreement here:
https://www.facebook.com/legal/terms/page_controller_addendum

You can adjust your ad settings in your user account yourself. To do so, click the following link and log in:
https://www.facebook.com/settings?tab=ads

Data transfer to the USA is based on the European Commission’s Standard Contractual Clauses. Details can be found here:
https://www.facebook.com/legal/EU_data_transfer_addendum
and
https://de-de.facebook.com/help/566994660333381

You can find further details in Facebook’s privacy policy:
https://www.facebook.com/about/privacy/

INSTAGRAM
We have a profile on Instagram. The provider of this service is Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

Data transfer to the USA is based on the Standard Contractual Clauses of the European Commission. Details:
https://www.facebook.com/legal/EU_data_transfer_addendum
https://help.instagram.com/519522125107875
https://de-de.facebook.com/help/566994660333381

For details on how Instagram handles your personal data, see Instagram’s privacy policy:
https://help.instagram.com/519522125107875

10. DATA TRANSFER IN OUR ONLINE SHOP OR TICKET SHOP

TRANSFER OF DATA FOR ORDER PROCESSING AND SHIPPING
When you place an order with us, we transfer your personal data to the shipping company commissioned to deliver your order and, where applicable, to the payment service provider tasked with processing your payment. Only the data necessary for the respective service provider to fulfill their task will be disclosed.
The legal basis for this is Art. 6(1)(b) GDPR, which permits the processing of data for the performance of a contract or pre-contractual measures.

If you have given us your consent pursuant to Art. 6(1)(a) GDPR, we will also share your email address with the shipping company so that it can inform you by email about the status of your shipment. You can revoke this consent at any time.

PAYMENT SERVICES
We integrate payment services from third-party providers on our website. When you make a purchase with us, your payment data (e.g., name, payment amount, account number, credit card number) is processed by the payment service provider for the purpose of payment handling.

These transactions are subject to the respective provider’s contractual and data protection terms. The use of payment service providers is based on Art. 6(1)(b) GDPR (contract performance) and in the interest of a smooth, convenient, and secure payment process (Art. 6(1)(f) GDPR).
If consent has been requested for certain actions, Art. 6(1)(a) GDPR is the legal basis for data processing. Consent can be revoked at any time.

We use the following payment providers:

• PayPal
  Provider: PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg
  Data transfers to the USA are based on the EU Commission’s standard contractual clauses.
  Details: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full
  Privacy Policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

• Klarna
  Provider: Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden
  Klarna uses cookies for optimal use of its checkout solution.
  Cookie Policy: https://cdn.klarna.com/1.0/shared/content/policy/cookie/de_de/checkout.pdf
  Privacy Policy: https://www.klarna.com/de/datenschutz/

• giropay
  Provider: paydirekt GmbH, Stephanstraße 14–16, 60313 Frankfurt am Main, Germany
  Privacy Policy: https://www.paydirekt.de/agb/index.html

11. COOKIE POLICY

UPDATED: 13 JULY 2025

WHAT ARE COOKIES?
Cookies and similar technologies are very small text files or pieces of code that often include a unique identification code. When you visit a website or use a mobile application, a website may ask your browser or device for permission to store this file and access information. Cookies can collect information such as the date and time of your visit and how you interact with a site or app.

WHY DO WE USE COOKIES?
Cookies help ensure that:

• You stay logged in during your visit

• Items remain in your shopping cart

• You can shop securely

• The website functions smoothly

• We understand how our website is used and how we can improve it

• You see advertising that is tailored to your interests (if you have consented)

WHAT TYPES OF COOKIES DO WE USE?

NECESSARY COOKIES
These are required for basic site functionality. They enable:

• Storage of items in your online shopping cart

• Saving your cookie settings for this site

• Language preferences

• Login and session management

FUNCTIONAL COOKIES
These enhance site functionality and user experience. They may enable:

• Live chat services

• Embedded online videos

• Social media sharing features

• Social media login options

HOW TO DISABLE OR DELETE COOKIES
You can manage your cookie settings at any time. Most browsers offer a “Help” section that explains how to block cookies or change your settings.
Please note: Disabling cookies may limit some functionalities and negatively impact your user experience.

We make it easy for you to manage your cookie consent.

Manage your consent / Withdraw your consent
Consent ID: ebf9f164-b76e-4e67-ff5e-6b0c3583fe65
Last consent update: 11 July 2025, 00:56

COOKIES USED ON THIS WEBSITE
Updated: 20 June 2025, 03:38

This cookie policy was created and updated by CookieFirst Consent Management Platform.