Data Protection

PRIVACY POLICY

Sect. 1 General

We will process your personal data (e.g. title, name, address, e-mail address, phone number, bank details, credit card number) solely in accordance with the provisions of the German data protection law and the data protection law of the European Union (EU). The following provisions will inform you, besides the information about the processing purposes, recipients, legal bases and storage periods, also about your rights and the controller for your data processing. This privacy policy applies only to our websites. If you are directed to other sites via links on our pages, please pay attention and be sure to review their privacy practices.

Sect. 2 Data processing for the performance of contracts

(1) Purpose of data processing

Your personal data you provide us during the ordering process are necessary for the conclusion of a contract with us. You are not obliged to provide your personal data. However, we would not be able to send you the goods without your address. For some payment methods we ask for the necessary payment data in order to pass them on to a payment service provider commissioned by us. Hence, the processing of your data collected during the ordering process is soley for the purpose of contract performance.

If you send us a request by e-mail or by using the contact form, etc. before concluding the contract, we process the obtained data to carry out pre-contractual measures and answer your questions about e.g. our products.

In case of opening a customer account, your data (in particular name, address, payment method, e-mail and password) will be processed for registration and creation of a customer login. With the stored data, you are able to shop faster and view your previous orders at any time. By sending us a notice or via a delete function you can delete the account again.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (b) of the GDPR.

(3) Recipient categories

Payment service provider, shipping service provider, hosting provider, if necessary merchandise management system, suppliers if necessary (drop-shipping).

(4) Duration of storage

We store the data required for contract execution until the statutory warranty and, if applicable, contractual warranty periods expire.

We store the data required under commercial and tax law for the statutory periods, generally ten years (cf. § 257 German Commercial Code (HGB), § 147 Regulation of Taxation (AO)).

The data processed for the execution of pre-contractual measures will be deleted as soon as the measures have been carried out and the contract cannot be concluded.

Sect. 3 Comments

(1) Purpose of data processing

Adding comments is possible. Your personal data (e.g. name/pseudonym, email address, website) collected in this scope will be solely processed for the purpose of publishing your comments.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.

(3) Legitimate interest

Our legitimate interest is the public exchange of user opinions on specific topics and products. The publication serves, among other things, the purpose of transparency and opinion-forming. Your interest in data protection is preserved, as you can publish your comment under a pseudonym.

(4) Duration of Storage

There is no provision for a certain storage period. You may request the deletion of your comment at any time.

(5) Right of objection

You have the right to object at any time to the processing of data which was performed according to Article 6 (1)(f) of GDPR and which does not serve direct marketing for reasons arising from your particular situation.

In the case of direct marketing, however, you may object to the processing at any time without stating any reasons.

Sect. 4 More information

External Links

(1) Purpose of data processing

Our website contains links to external third-party websites. While we carefully select such links, we have no influence over the content of the linked websites or their compliance with applicable data protection laws and regulations.

The respective operators of the linked websites are solely responsible for the processing of personal data carried out on those websites. We therefore recommend that you carefully review the privacy policies of any external website before submitting personal data or engaging in any activities that may involve the processing of personal data.

(2) Legal Basis

For the purposes of Article 4(7) of the General Data Protection Regulation (GDPR), the controller responsible for the processing of personal data on the linked websites is the respective operator of the relevant website.

Integration of YouTube Videos

(1) Purpose of data processing

Certain pages of our website may contain embedded videos provided by YouTube. The service is operated by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

The embedded videos are loaded only after you actively interact with and start the respective video. If you do not play an embedded video, no personal data is generally transmitted to YouTube through the video integration.

By playing a video, personal data may be transmitted to YouTube and/or Google. Such data may include, in particular, information about your use of our website, your IP address, technical information relating to your device, and other usage-related data. We have no influence over the nature, scope, or purpose of the data processing carried out by YouTube or Google.

Further information regarding Google's processing of personal data can be found in Google's Privacy Policy:

https://policies.google.com/privacy

(2) Legal Basis

Where personal data is transferred to third countries outside the European Union (EU) or the European Economic Area (EEA) in connection with the use of YouTube, such transfers are carried out on the basis of Standard Contractual Clauses approved by the European Commission or another appropriate safeguard pursuant to Articles 44 et seq. GDPR.

The processing of personal data in connection with embedded YouTube videos is based on Article 6(1)(a) GDPR (consent), provided that the relevant consent has been obtained through the consent management mechanism implemented on our website.

Provision of the Website and Server Log Files

(1) Purpose of data processing

Each time our website is accessed, the web server automatically collects information that is technically necessary to display the website correctly and to ensure the stability and security of our systems.

In particular, the following data may be processed:

IP address of the requesting device
Date and time of access
URL accessed or file requested
Browser type and browser version
Operating system used
Referrer URL (if transmitted by the browser)
HTTP status code
Amount of data transferred
Browser language settings

The processing of this data is carried out exclusively for the purpose of ensuring the functionality, stability, and security of the website, as well as for the detection, prevention, and analysis of security incidents.

Where possible, data is processed in anonymized or pseudonymized form. The data collected is not combined with data obtained from other sources.

(2) Legal Basis

The processing is based on our legitimate interest in providing a secure, stable, and functional online service pursuant to Article 6(1)(f) GDPR.

The data is retained only for as long as necessary to achieve the aforementioned purposes or as required by applicable statutory retention obligations.

Disclosure of Personal Data to Third Parties

(1) Purpose of data processing to Third Parties

We disclose your personal data to third parties only to the extent necessary for the performance of a contract concluded with you or for the implementation of pre-contractual measures taken at your request.

Recipients of the data may include, in particular, companies involved in the performance of the contract, such as logistics and shipping service providers entrusted with the delivery of goods, as well as banks, payment service providers, or other financial institutions responsible for processing payments.

Any disclosure of personal data is limited to the extent necessary for the respective contractual purpose.

(2) Legal Basis

The legal basis for the processing and disclosure of personal data is Article 6(1)(b) GDPR, insofar as such processing is necessary for the performance of a contract to which the data subject is a party or in order to take steps at the request of the data subject prior to entering into a contract.

Hosting

(1) Purpose of Processing

For the provision and secure operation of this website, we use the hosting services of:

ALL-INKL.COM – Neue Medien Münnich

Owner: René Münnich

Hauptstraße 68

D-02742 Friedersdorf

Germany

as our hosting service provider.

Personal data collected when you access and use this website are processed on the servers of the hosting provider. Such processing is carried out for the purpose of providing, operating, maintaining, and ensuring the technical and organizational security of this website.

The following categories of personal data may, in particular, be subject to processing:

Usage data

Communication data

Contact data

Contract data

(2) Legal Basis

Where the processing of personal data is necessary for the implementation of pre-contractual measures or for the performance of a contract with the data subject, such processing is based on Article 6(1)(b) GDPR.

Where processing is necessary for compliance with a legal obligation to which we are subject, the legal basis is Article 6(1)(c) GDPR.

In all other cases, processing is carried out on the basis of Article 6(1)(f) GDPR. Our legitimate interest lies in providing the technical infrastructure required for the operation of our website and in ensuring its security, stability, functionality, and performance. This includes, in particular, making use of the technical expertise of the hosting provider in order to ensure a reliable and secure online service.

Where required by law, we have entered into a Data Processing Agreement (DPA) with the hosting provider in accordance with Article 28 GDPR.

(3) Storage Period

Personal data will be stored only for as long as necessary to fulfil the purposes described above or as required by applicable statutory retention obligations.

Thereafter, the data will be deleted or the processing thereof will be restricted, unless statutory obligations or overriding legitimate interests require further retention.

Sect. 5 PayPal-transactions

Please note that all PayPal transactions are subject to the PayPal Privacy Policy:

https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Sect. 6 Information about cookies

(1) Purpose of data processing

This website uses technically necessary cookies. These are small text files that are stored in or by your Internet browser on your computer system. These cookies enable, for example, the inserting of several products in a shopping basket.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (f) of the GDPR.

(3) Legitimate interest

Our legitimate interest is the functionality of our website. The user data collected by technically necessary cookies are not used to create user profiles. This preserves your interest in data protection.

(4) Duration of storage

The technically necessary cookies are usually deleted when the browser is closed. Persistent cookies have different validity period from a few minutes to several years.

(5) Right of objection

If you do not wish these cookies to be stored, please deactivate the use of cookies in your Internet browser. However, this may cause a functional limitation of our website. You can also delete persistent cookies at any time by changing your browser settings.

Sect. 7 Newsletter

(1) Purpose of data processing

When registering for the newsletter, your e-mail address will be used for advertising purposes, i.e. the newsletter will inform you in particular about products from our product range. For statistical purposes we may evaluate which links are viewed in the newsletter. However, it is not recognizable for us, which concrete person has accessed the links. You have expressly given the following consent separately or, as the case may be, in the course of the ordering process: Subscribe to the newsletter.

(2) Legal basis

The legal basis for such processing is set out in Article 6 (1) (a) of the GDPR.

(3) Recipient categories

if necessary: newsletter provider

(4) Duration of Storage

Your e-mail address will only be stored for the respective duration of your registration.

(5) Right of revocation

You may revoke your consent at any time with effect for the future. If you no longer wish to receive the newsletter, you may unsubscribe as follows: By a log-out link in the newsletter

Sect. 8 Your rights as a data subject

If your personal data is being processed, you are the ‘data subject’ in terms of GDPR and you have the following rights towards us, the controller:

1. Right to information

You may request us to provide information about your personal data processed by us under Article 15 of the GDPR.

2. Right to rectification

If your personal data provided to us is not up to date or not accurate you have the right to ask for modifications to your personal data under Article 16 of the GDPR. You also have the right to request us to complete an incomplete data.

3. Right to erasure

You have the right to have your personal data erased and ask for deletion of your data under Article 17 of the GDPR.

4. Right to restriction of processing

You have the right to restrict the processing your personal data under Article 18 of the GDPR.

5. Right to data portability

You have the right referred to in Article 20 of the GDPR to receive your personal data provided to us, in a structured, commonly used and machine-readable format and have the right to transmit those data to another controller.

6. Right to revoke the consent given under data protection law

You have the right referred to in paragraph 3 of Article 7 to withdraw your given consent based on the data protection provisions at any time. This does not affect the lawfulness of the processing based on consent before its withdrawal.

7. Right to lodge a complaint with a supervisory authority

If you consider that the processing of personal data relating to you infringes the GDPR, you have the right referring to in Article 77 of the GDPR to complain to the supervisory authority against the processing of your personal data (in particular in the Member State of your habitual residence, place of work or place of the alleged infringement ).

Please also note your right of objection under Article 21 GDPR:

a) In general: reasoned objection required

If the processing of personal data concerning you takes place in order

- to perform our overriding legitimate interest (legal basis: Article 6 (1f) GDPR)

- to safeguard the public interest (legal basis: Article 6 (1e) GDPR),

you are entitled to object to the processing at any time for reasons arising from your particular situation; this also applies to profiling based on the provisions of the GDPR.

In the event of objection, we will no longer process the personal data concerning you unless we can prove compelling grounds for processing which override your interests, rights and freedoms, or the processing is necessary for the establishment, exercise or defence of legal claims;

b) Special case of direct marketing: simple objection is sufficient

If the personal data concerning you are processed for the purpose of direct marketing, you have the right to object at any time to the processing and without stating reasons; this includes profiling to the extent that it is related to such direct marketing.

If you object to the processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

Responsible for data processing:
Heinrichshofen Verlag GmbH & Co.KG
Liebigstrasse 6
26389 Wilhelmshaven
Phone: + 49 (0) 4421 92 670
info@heinrichshofen.de

Contact details of our data protection officer:
Liebigstraße 16
26389 Wilhelmshaven
hinrichs@heinrichshofen.de

Update as of 19 June 2026