1. Information on the collection of personal data and contact details of the data controller
2. Data collection when visiting our website
3. Cookies
4. Data processing for order processing
5. Data processing when opening a customer account and for contract processing
6. Contact
7. Use of your data for direct marketing
8. Contact for review reminder
9. Web analytics services
10. Retargeting / Remarketing / Referral Advertising
11. Use of rating and test seal graphics
12. Rights of the person concerned
13. Duration of storage of personal data

1. Information on the collection of personal data and contact details of the data controller

1.1 Thank you for visiting our website. Below, we would like to inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for the processing of data on our website within the meaning of the General Data Protection Regulation (GDPR) is:

Kontra GmbH
Lochhamer Str. 4A
Planegg, Germany
Telephone: +49 (0)30 22399 53632
Fax: +49 (0) 89 5403 0787
Email: service@kontra.eu

1.3 The controller has appointed the following data protection officer:

Johannes Walther
Lochhamer Str. 4a
82152 Planegg
Telephone: +49 (0) 30 22399 53632
Email: datenschutz@kontra.eu

1.4 To protect the security of your data during transmission, we use state-of-the-art encryption methods (e.g. SSL or TLS) via HTTPS.

2. Data collection when visiting our website

Each time you access our website, our system automatically collects data and information that your browser transmits to our server (so-called "server log files"). The following data, which is technically necessary for us, is collected:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed this page
Operating system used
Browser used
IP address used (possibly in anonymized form)

The legal basis for this processing is Article 6(1)(f) GDPR, based on our legitimate interest in improving the stability and maintaining the functionality of our website. The data will not be shared or used for any other purpose. The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must be stored for the duration of the session.
We reserve the right to review server log files retrospectively should there be concrete indications of unlawful use. The data will be deleted as soon as it is no longer required for the purpose for which it was collected. In the case of data collected for the provision of the website, this is the case when the respective session has ended.
In the case of data being stored in log files, this occurs after a maximum of seven days. Storage beyond this period is possible. In this case, the users' IP addresses are deleted or anonymized so that it is no longer possible to identify the requesting client. The collection of data for providing the website and the storage of data in log files is essential for the operation of the website. Consequently, users have no right to object.

3. Cookies

Our website uses cookies.

Cookies are text files that are stored on the user's device. When a user visits a website, a cookie can be stored on the user's operating system. Some functions of our website cannot be offered without the use of cookies. This requires that the browser is recognized even after a page change. The user data collected by technically necessary cookies is not used to create user profiles. Our legitimate interest in processing personal data pursuant to Art. 6 para. 1 lit. f) GDPR lies in the aforementioned purposes.

Furthermore, our website uses cookies that enable us to analyze users' browsing behavior (so-called third-party cookies). You can find more detailed information about the scope, purpose, legal basis, and options for objecting to this in the relevant sections of the respective chapter of this privacy policy.

As a user, you have full control over the use of cookies. By changing the settings in your internet browser, you can disable, restrict, or delete the transmission of cookies. If you disable cookies for our website, you may no longer be able to use all of its functions to their full extent. You can prevent the transmission of Flash cookies by changing the settings of the Flash Player.

Help with the settings can be found in your browser's help menu at the following links:
Internet Explorer: http://windows.microsoft.com/de-DE/windows-vista/Block-or-allow-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne
Chrome: http://support.google.com/chrome/bin/answer.py?hl=de&hlrm=en&answer=95647
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Some of the cookies used here are deleted after you close your browser (so-called session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data as well as IP addresses, to varying degrees. Persistent cookies are automatically deleted after a predetermined period, which can vary depending on the cookie.

4. Data processing for order fulfillment

4.1 If you wish to place an order in our online shop, it is necessary for the conclusion of the contract that you provide your personal data, which we require for processing your order. We process the data you provide in order to process your order.

In some cases, we work with external service providers to process your order. For this purpose, we need to share the necessary personal data with them.

If we commission a transport company to deliver your goods, we will forward your data necessary for delivery to the respective transport company. For payment processing, we will forward your data to the commissioned bank as necessary. If we use payment service providers, you will also be informed of this below.
The legal basis for the transfer of your data is Art. 6 para. 1 lit. b GDPR.

4.2 External service providers for order processing and fulfillment

- Afterbuy

Order processing is handled by the service provider "Afterbuy" (VIA Online GmbH in Krefeld). Therefore, we will forward your name, address, and any other personal data to "Afterbuy" in accordance with Article 6 Paragraph 1 Letter b of the GDPR, solely for the purpose of processing your order and only to the extent necessary. Details regarding data protection at Afterbuy and the privacy policy of VIA Online GmbH can be found at the following link: http://www.afterbuy.de/Datenschutz.htm

- Amazon Fulfillment (FBA)

Order processing is handled by the service provider "Amazon" (Amazon EU S.à rl, 5, Rue Plaetis 2338, Luxembourg) using the "Fulfilment by Amazon" option. We transmit your personal data to Amazon solely for the purpose of processing your order. This transfer is carried out in accordance with Article 6 Paragraph 1 Letter b GDPR and is limited to the data necessary for order processing. Details on data protection at Amazon and Amazon's privacy policy can be found at the following link: http://www.amazon.de/gp/help/customer/display.html/ref=footer_privacy?ie=UTF8&nodeId=3312401

- Plentymarkets

Order processing is handled by the service provider "plentymarkets" (plentymarkets GmbH, Bürgermeister-Brunner-Str. 15, 34117 Kassel, Germany). Therefore, we transmit your name, address, and any other personal data to plentymarkets in accordance with Article 6 Paragraph 1 Letter b of the GDPR solely for the purpose of processing your order and only to the extent necessary. Details regarding data protection at plentymarkets, as well as the privacy policy of plentymarkets GmbH, can be found on the plentymarkets website at " plentymarkets.eu ".

4.3 Disclosure of your personal data to shipping service providers

- DHL

If your order is delivered by the shipping provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will only share your name and delivery address with DHL for delivery purposes and to the extent necessary, in accordance with Article 6(1)(b) GDPR. Only if you have given your explicit consent during the ordering process will we share your email address with DHL before delivery, in accordance with Article 6(1)(a) GDPR, for the purpose of coordinating a delivery date or providing delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or DHL.

- DPD

If your order is delivered by the shipping provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will only share your name and delivery address with DPD for delivery purposes and to the extent necessary, in accordance with Article 6(1)(b) GDPR. Only if you have given your explicit consent during the ordering process will we share your email address with DPD before delivery, in accordance with Article 6(1)(a) GDPR, for the purpose of coordinating a delivery date or providing delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or DPD.

-  GLS

If your goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein), we will only forward the recipient's name and delivery address to GLS for the purpose of delivery and to the extent necessary in accordance with Art. 6 Para. 1 lit. b GDPR. Only if you have given your express consent during the ordering process will we forward your email address to GLS before delivery in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or the transport service provider GLS.

- Hermes

If your goods are delivered by the shipping provider Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg), we will only share your name and delivery address with Hermes for delivery purposes and to the extent necessary, in accordance with Article 6(1)(b) GDPR. Only if you have given your explicit consent during the ordering process will we share your email address with Hermes before delivery, in accordance with Article 6(1)(a) GDPR, for the purpose of coordinating a delivery date or providing delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or the shipping provider Hermes.

- UPS

If your goods are delivered by the shipping provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will only share the recipient's name and delivery address with UPS for delivery purposes and to the extent necessary, in accordance with Article 6(1)(b) GDPR. Only if you have given your explicit consent during the ordering process will we share your email address with UPS before delivery, in accordance with Article 6(1)(a) GDPR, for the purpose of coordinating a delivery date or providing delivery notification. You can withdraw your consent at any time with effect for the future by contacting the data controller named above or UPS.

4.4 Use of payment service providers

-  Amazon Pay

When paying via "Amazon Pay," payment processing is handled by Amazon Payments Europe sca, 5 Rue Plaetis, L-2338 Luxembourg (hereinafter referred to as "Amazon Payments"). The seller forwards the information provided by the customer during the ordering process.  In accordance with Article 6(1)(b) GDPR, your data will be forwarded to Amazon Payments solely for the purpose of payment processing and only to the extent necessary. Further information about Amazon Payments' privacy policy can be found here: https://pay.amazon.com/de/help/201751600

- Paypal

When selecting the payment method PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “installment payment” via PayPal, payment processing is carried out via PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter referred to as “PayPal”).
We will transfer your personal data to PayPal in accordance with Article 6(1)(b) GDPR to the extent necessary. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal.
For this purpose, your payment data may be forwarded to credit agencies in accordance with Article 6(1)(f) GDPR, based on PayPal's legitimate interest in assessing your creditworthiness. PayPal uses the result of the credit check, specifically the statistical probability of payment default, to decide whether to offer you a particular payment method.
The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the factors, but not the only one, used in calculating the score values.
What other data PayPal collects is detailed in PayPal's privacy policy. This can be found at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

-  IMMEDIATELY

When selecting the payment method "SOFORT", payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter referred to as "SOFORT").
We will pass on your personal data, along with information about your order, to SOFORT in accordance with Art. 6 para. 1 lit. b GDPR exclusively for the purpose of payment processing and only to the extent necessary.
Sofort GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden).
SOFORT's privacy policy can be viewed here: https://www.klarna.com/sofort/datenschutz

5. Data processing when opening a customer account and for contract processing

When you open a customer account with us, personal data is collected and processed in accordance with Article 6 Paragraph 1 Letter b of the GDPR. The scope of the data is evident from the input form. The data you enter will be stored and used by us for contract processing.
You can delete your customer account at any time. This can be done by sending a message to the data controller or, if offered, directly within your customer account. In this case, we will also restrict your data in accordance with tax and commercial law retention periods and delete it after these periods have expired. Only your consent to permanent storage or further use of your data by us as permitted by law can prevent this.

6. Making contact

When you contact us via our contact form, the data you enter in the form will be transmitted to us and stored. The specific data collected is indicated in the respective form. When you contact us by email, only the data you enter in the email will be transmitted to us.
The data will be used exclusively for processing the conversation and your request. The legal basis for processing the data, if the user has given consent, is Article 6(1)(a) GDPR. The legal basis for processing data transmitted via email is Article 6(1)(f) GDPR. If the email contact aims at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. The data will be deleted as soon as it is no longer required for the purpose for which it was collected, provided there are no legal retention obligations to the contrary. For personal data from the contact form and those transmitted by email, this is the case when the respective conversation with the user has ended. A conversation is considered ended when it is clear from the circumstances that the matter in question has been conclusively resolved. The user has the right to withdraw their consent to the processing of their personal data at any time. If the user contacts us by email, they can object to the storage of their personal data at any time. In such a case, the conversation cannot be continued.

7. Use of your data for direct marketing

7.1 Newsletter

You can subscribe to our free newsletter on our website. When you subscribe, the data you enter in the registration form is transmitted to us. The only required field is your email address. Any additional information you provide will only be used for personalized communication.

The legal basis for processing your data after subscribing to the newsletter is, if the user has given their consent, Article 6(1)(a) GDPR. We obtain this consent by sending you a confirmation email after you subscribe to the newsletter, which contains a confirmation link. By clicking this link, you simultaneously give your consent to receive the newsletter.
When you submit your newsletter subscription, we store your IP address as well as the date and time of registration. This information is stored to enable us to trace any potential misuse of your email address.

We use the data we collect when you subscribe to our newsletter exclusively for the purpose of sending the newsletter.

You can unsubscribe from the newsletter at any time. A corresponding link is included in every newsletter for this purpose. This also allows you to revoke your consent to the storage of the personal data collected during the registration process.

7.2 Newsletter2Go

We send our newsletters via Newsletter2Go GmbH, Köpenicker Str. 126, 10179 Berlin (hereinafter referred to as "Newsletter2GO").
We give the  When you register for our newsletter, we forward the data you entered to Newsletter2Go in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interest in using an effective, secure and user-friendly newsletter system.
The data you enter when subscribing to our newsletter (e.g., your email address) is stored on Newsletter2Go's servers in Germany. Newsletter2Go uses your data on our behalf to send and statistically analyze the newsletters. For this purpose, the newsletter emails contain web beacons or tracking pixels, which are single-pixel image files stored on our website. This allows us to track whether a newsletter email has been opened and which links within it have been clicked. This conversion tracking also allows us to see whether an action (such as purchasing an item from our shop) was taken after clicking a link in the newsletter. Technical information is also collected (e.g., the time of access, your IP address, browser type, and/or operating system). This data is collected exclusively in pseudonymized form and is not linked to your other personal data. If you do not wish to participate in the data analysis described here, you must unsubscribe from the newsletter. We have a data processing agreement with Newsletter2Go.

Details regarding Newsletter2GO's data protection policy can be found at:
https://www.newsletter2go.at/datenschutz/

8. Contacting you to send a review reminder

8.1 Self-assessment reminder

After you have given your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, you will receive  We will send you a one-time reminder to submit a review of your order via email. You can withdraw your consent at any time by contacting the data controller.

8.2 Review reminder via eKomi

Based on your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, we will transmit your email address to the review platform eKomi (eKomi Ltd., Markgrafenstraße 11, 10969 Berlin, ( www.ekomi.de )). You will receive a review reminder from eKomi via email. You can revoke your consent at any time by sending a message to the data controller or to eKomi.

8.3 Review reminder via Trusted Shops

You can withdraw your consent at any time by sending a message to the data controller or to the rating platform.
Based on your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, we will transmit your email address to the review platform Trusted Shops (Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne ( www.trustedshops.de )). You will receive a review reminder from Trusted Shops via email.
You can withdraw your consent at any time by sending a message to the data controller or to Trusted Shops.

8.4 Review reminder via Trustpilot

Based on your explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, we will transmit your email address to the review platform Trustpilot (Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark ( www.trustpilot.com )). You will receive from Trustpilot  You will receive a review reminder via email. You can withdraw your consent at any time by contacting the data controller or Trustpilot.

9. Web analytics services

- Google Analytics

We use the web analytics service Google Analytics (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland) for this website.
Google Analytics uses cookies. These are text files that are stored on your computer and enable an analysis of your use of the website.

The information generated about your use of this website (including the truncated IP address) will be transmitted to and stored on a Google server, and may be transferred to the USA.

We use Google Analytics with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and prevents direct identification of individuals. Therefore, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. In exceptional cases, the full IP address will be transmitted to a Google server, including in the USA.  transferred and only shortened there.
In these exceptional cases, this processing takes place in accordance with Art. 6 para. 1 lit. a GDPR, namely with your explicit consent.

On our behalf, Google uses this information to evaluate your website usage, compile reports on website activity, and provide us with other services related to website and internet usage. Your IP address collected in this context will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser settings accordingly.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google by downloading and installing the following browser plugin:

http://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, you can set an out-out cookie:
Disable Google Analytics

This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again.

In the event of data transfer to Google LLC, which is based in the USA, Google LLC is certified under the US-European Data Protection Agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

This website also uses Google Analytics for cross-device analysis of visitor traffic, which is carried out using a user ID. You can deactivate cross-device analysis of your usage in your customer account under "My Data", "Personal Data".

Google's privacy policy:
https://support.google.com/analytics/answer/6004245?hl=de

10. Retargeting / Remarketing / Referral Advertising

- Facebook Custom Audience via the pixel method

This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA ("Facebook"). With your explicit consent, this allows us to track user behavior after they have seen or clicked on a Facebook ad. This process helps us evaluate the effectiveness of Facebook ads for statistical and market research purposes and can contribute to optimizing future advertising campaigns. The data collected is anonymous to us; we cannot draw any conclusions about the identity of individual users. However, Facebook stores and processes the data, making it possible to link it to the respective user profile and use the data for its own advertising purposes, in accordance with the Facebook Data Policy ( https://www.facebook.com/about/privacy/ ).

You can allow Facebook and its partners to display advertisements on and off Facebook. For this purpose, a cookie may be stored on your device. This processing only takes place with your explicit consent in accordance with Article 6(1)(a) GDPR. Consent to the use of the Facebook pixel may only be given by users who are older than 13 years of age. If you are younger, please ask your parent or guardian for permission. Facebook Inc., based in the USA, is certified under the EU-US Privacy Shield Framework, which ensures compliance with the level of data protection applicable in the EU. You can deactivate the use of cookies on your computer by adjusting your browser settings. However, this may prevent you from fully using some functions on our website. You can also deactivate the use of cookies by third-party providers such as Facebook on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/

11. Use of rating and test seal graphics

Trustami Trust Seal

To display collected reviews and social media feedback, we integrate the Trustami trust seal, an offer from Trustami GmbH, Schröderstraße 5, 12103 Berlin, on this website.
Our legitimate interest lies in the optimal marketing of our services. The legal basis for this is Article 6(1)(f) GDPR.

When you access the Trustami trust seal, the web server automatically saves access data in the form of a server log file, which contains, for example, the date and time of access, your IP address in abbreviated form, and the requesting provider. We do not analyze this data, and it is automatically overwritten no later than seven days after your visit to our website.

12. Rights of the data subject

12.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

- Right of access pursuant to Art. 15 GDPR:
You can request confirmation from the controller as to whether personal data concerning you is being processed by the controller.  Furthermore, you have the right to information about the purpose, the categories of personal data, the recipients, the planned duration of storage and the existence of further rights such as rectification of the data or the existence of a right to lodge a complaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling and, where applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Article 46 GDPR when your data is transferred to third countries;

- Right to rectification pursuant to Art. 16 GDPR:
You have the right to immediate rectification of inaccurate data concerning you and/or the completion of incomplete data stored with us; the rectification or completion must be carried out without delay.

- Right to restriction of processing pursuant to Article 18 GDPR:
You have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you need your data for the establishment, exercise or defense of legal claims after we no longer need this data for the purposes for which it was collected; or if you have objected on grounds relating to your particular situation, pending the verification whether our legitimate grounds override yours.
If the processing of your personal data has been restricted, this data – apart from being stored – may only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or of a Member State. If the restriction of processing has been lifted, you will be informed by the controller before the restriction is lifted.

- Right to erasure pursuant to Art. 17 GDPR:
You have the right to the immediate erasure of your personal data if the conditions of Article 17(1) GDPR are met. However, this right to erasure does not apply, in particular – but not exclusively – if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.

- Right to information pursuant to Art. 19 GDPR:
If you have exercised your right to rectification, erasure, or restriction of processing, the controller is obligated to communicate this rectification, erasure, or restriction of processing to all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.

- Right to data portability pursuant to Art. 20 GDPR:
You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller, insofar as this is technically possible;

- Right to withdraw consent pursuant to Art. 7 para. 3 GDPR:
You have the right to object at any time to the processing of personal data concerning you which is based on point (e) or (f) of Article 6(1) of the GDPR; this also applies to profiling based on these provisions.
You also have the right to withdraw your consent to data processing at any time with effect for the future. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

- Right to lodge a complaint pursuant to Article 77 GDPR:
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, if you consider that the processing of personal data relating to you infringes the GDPR.

12.2 Right to object

You have the right to object to the processing of your data at any time with effect for the future if we process your data based on our overriding legitimate interest after a balancing of interests.
If you exercise this right to object, we will cease processing your data unless there are demonstrably overriding legitimate grounds for the termination or further processing serves the purpose of exercising or defending legal claims.

12. Duration of storage of personal data

The duration for which personal data is stored depends on the respective statutory retention periods. After these periods expire, we routinely delete the data if it is no longer required for the performance or initiation of a contract and/or if we no longer have a legitimate interest in its continued storage.