Skip to content
  • Everything must go! Up to 70% off – last day!

Privacy Policy

1. INFORMATION ON THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1

We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the processing of your personal data when using our website.
Personal data includes all data that can be used to personally identify you.

1.2

The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Erfavo.
The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption.
You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser bar.


2. DATA COLLECTION WHEN VISITING OUR WEBSITE

2.1

If you visit our website for informational purposes only, meaning that you do not register or provide us with any other information, we only collect the data that your browser transmits to our server (server log files).

2.2

When you visit our website, we collect the following technically necessary data:

  • The website visited
  • Date and time of access
  • Amount of data transmitted in bytes
  • Source/referral from which you accessed the site
  • Browser used
  • Operating system used
  • IP address (possibly anonymized)

2.3

This data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR, based on our legitimate interest in improving the stability and functionality of our website.
The data is not shared with third parties or used for other purposes.
However, we reserve the right to review the server log files later if there is concrete evidence of illegal use.


3. COOKIES

3.1

To make visiting our website more attractive and to enable the use of certain functions, we use cookies on various pages.
Cookies are small text files that are stored on your device.

3.2

Some of the cookies we use are deleted after your browser session ends (session cookies).
Other cookies remain on your device and enable us or our partners (third-party cookies) to recognize your browser on your next visit (persistent cookies).

3.3 What data is collected through cookies?

When cookies are set, certain user information is collected and processed, including:

  • Browser data
  • Location data
  • IP address values

Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie.

3.4 Why do we use cookies?

Cookies are partly used to simplify the purchasing process by storing settings (e.g., remembering the contents of a shopping cart for a later visit).
If personal data is processed through cookies implemented by us, processing is carried out in accordance with:

  • Art. 6 para. 1 lit. b GDPR – If necessary for contract execution
  • Art. 6 para. 1 lit. f GDPR – To protect our legitimate interest in providing the best possible functionality of the website and a user-friendly experience

3.5 Third-party cookies

We may work with advertising partners who help make our website more interesting for you.
In this case, third-party cookies from partner companies may also be stored on your hard drive.

3.6 Managing cookies in your browser

You can set your browser settings to inform you when cookies are used, so that you can decide whether to accept or block them. Each browser has different cookie settings.

πŸ“Œ Note: If you disable cookies, the functionality of our website may be limited.


4. CONTACTING US

4.1

If you contact us (e.g., via contact form or email), we collect personal data to process your request.

4.2

The data collected in the contact form is visible in the form itself.
This data is stored and used exclusively to answer your inquiry or for administrative purposes.

πŸ“Œ Legal basis for data processing:

  • Art. 6 para. 1 lit. f GDPR – Legitimate interest in responding to inquiries
  • Art. 6 para. 1 lit. b GDPR – If the contact is related to a contract

4.3

Your data will be deleted once your inquiry has been processed, provided there are no legal retention obligations.


5. DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

5.1

In accordance with Art. 6 para. 1 lit. b GDPR, personal data is collected and processed when you provide it to us to execute a contract or open a customer account.
The data collected is visible in the respective input forms.

5.2

You can delete your customer account at any time by sending a request to the controller’s contact details provided above.
Your data will be stored and used for contract execution.

5.3

After the contract is fully executed or your customer account is deleted, your data will be blocked and deleted after the expiration of tax and commercial law retention periods, unless:

  • You have explicitly consented to further use of your data
  • We are legally permitted to continue using your data

6. USE OF DATA FOR DIRECT ADVERTISING

6.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers.
The only mandatory data required to send the newsletter is your email address. Providing any additional data is voluntary and serves to personalize your communication.

For sending the newsletter, we use the double opt-in method. This means that we will only send you a newsletter if you confirm explicitly that you agree to receive newsletters.
We will send you a confirmation email asking you to confirm, via a link, that you wish to receive newsletters in the future.

By clicking the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR.
When subscribing to the newsletter, we store:

  • The IP address registered by your Internet Service Provider (ISP)
  • The date and time of subscription

This allows us to track any potential misuse of your email address.
The data collected during newsletter registration is used exclusively for newsletter marketing.

πŸ“Œ You can unsubscribe at any time via the link provided in the newsletter or by contacting the controller mentioned at the beginning.
After unsubscribing, your email address will be immediately deleted from our newsletter mailing list unless you have expressly consented to further data use, or we reserve the right to further data use that is legally permitted and disclosed in this privacy statement.


6.2 Sending the newsletter via email to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar products or services via email.
This does not require additional consent from you.

πŸ“Œ Legal basis:
Data processing is exclusively based on our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR.

If you initially objected to the use of your email address for this purpose, we will not send you any marketing messages.
You have the right to object to the use of your email address for advertising at any time with future effect by notifying the controller mentioned at the beginning.

You will only incur transmission costs according to the basic rates.
After receiving your objection, we will immediately stop using your email address for advertising.


7. DATA PROCESSING FOR ORDER PROCESSING

7.1 Data transmission for contract execution

Personal data collected will be transmitted to the shipping company responsible for delivery, to the extent necessary for delivery of the goods.
Your payment data will be transmitted to the financial institution responsible for payment processing, if required for payment processing.
If we use payment service providers, we will inform you explicitly about this below.

πŸ“Œ Legal basis: The transmission of data is based on Art. 6 para. 1 lit. b GDPR.


7.2 Use of payment service providers

PayPal

If you choose to pay via PayPal, credit card via PayPal, direct debit via PayPal, or, if available, "installment purchase" or "purchase on invoice" via PayPal, we transmit your payment data to:

πŸ“Œ PayPal (Europe) S.a.r.l. et Cie, S.C.A.
22-24 Boulevard Royal,
L-2449 Luxembourg

Transmission is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

πŸ“Œ Credit check by PayPal:
PayPal reserves the right to perform a credit check for certain payment methods (e.g., "purchase on invoice" or "installment purchase").
To do this, your payment data may be transmitted to credit agencies, based on Art. 6 para. 1 lit. f GDPR, for PayPal’s legitimate interest in assessing your solvency.

More information can be found in PayPal’s privacy policy:
PayPal Privacy Policy

You can object to this data processing at any time by contacting PayPal directly. However, PayPal may still be authorized to process your personal data if required for contractual payment processing.

SOFORT (Klarna Group)

If you choose the "SOFORT" payment method, the payment processing will be handled by:

πŸ“Œ SOFORT GmbH
TheresienhΓΆhe 12,
80339 Munich, Germany

(SOFORT GmbH is part of Klarna Bank AB (publ), Sweden).
We will transmit your order-related information to SOFORT GmbH based on Art. 6 para. 1 lit. b GDPR.

More details on data protection at SOFORT:
SOFORT Privacy Policy


8. CONTACT FOR FEEDBACK REQUESTS

We may ask you to leave a review of your order via email (without using an external review system).

πŸ“Œ Legal basis:
We use your email address only once to request a review if you have given explicit consent in accordance with Art. 6 para. 1 lit. a GDPR during or after your order.

πŸ”Ή You can revoke your consent at any time by contacting the data controller.


9. USE OF SOCIAL MEDIA PLUGINS

9.1 Facebook Plugin (Shariff solution)

To protect your data, Facebook plugins are not directly embedded into our website.
Instead, we use Shariff, which prevents your data from being transferred to Facebook without your explicit consent.

πŸ“Œ Provider:
Facebook Inc.,
1 Hacker Way,
Menlo Park, CA 94025, USA

For further details, see Facebook's Privacy Policy:
Facebook Privacy Policy

9.2 Google+ Plugin (Shariff solution)

Similar to Facebook, we use the Shariff solution for Google+.
This ensures that no connection to Google servers is established until you actively click on the plugin.

πŸ“Œ Provider:
Google LLC,
1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA

More information:
Google Privacy Policy

9.3 Instagram Plugin using the Shariff Solution

Our website uses social plugins ("Plugins") from the online service Instagram, operated by:

πŸ“Œ Instagram LLC
1601 Willow Rd,
Menlo Park, CA 94025, USA ("Instagram").

To increase data protection, these buttons are not fully integrated as plugins but only as HTML links.
This ensures that no connection to Instagram servers is established just by visiting our website.

πŸ”Ή If you click on the button, a new browser window will open and take you to Instagram’s page, where you can interact with the plugins after logging in.

πŸ“Œ Instagram LLC is certified under the EU-US Privacy Shield, ensuring compliance with the EU's data protection level.

For more details about data collection, processing, and usage by Instagram, and your rights and settings options to protect your privacy, please refer to:
Instagram Privacy Policy


10. ONLINE MARKETING

10.1 Google DoubleClick

This website uses Google DoubleClick, an online marketing tool provided by:

πŸ“Œ Google LLC
1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA ("DoubleClick").

πŸ”Ή DoubleClick uses cookies to display relevant advertisements, improve campaign performance reports, or prevent the repeated display of the same ad.

With a cookie ID, Google records which ads have been shown in which browser and prevents repetitive display.
The processing is based on our legitimate interest in optimizing our website marketing in accordance with Art. 6 para. 1 lit. f GDPR.

Additionally, DoubleClick cookies can track conversions, such as when a user views a DoubleClick ad, then visits the advertiser's website and makes a purchase.
According to Google, DoubleClick cookies do not contain personal information.

πŸ“Œ Automatic server connection:
Due to the marketing tools used, your browser automatically connects to Google’s server.

We have no control over the extent and further use of data collected by Google via DoubleClick. However, we provide information to the best of our knowledge:

  • Google receives information that you have visited the corresponding part of our website or clicked on one of our ads.
  • If you are logged into Google, your visit may be linked to your Google account.
  • Even if you are not logged in or do not have a Google account, Google may still process and store your IP address.

πŸ”Ή How to opt-out of tracking:

  • Block cookies from www.googleadservices.com via your browser settings.
  • Use the Digital Advertising Alliance tool at www.aboutads.info to manage your cookie preferences.
  • Adjust your browser settings to be notified about cookies and decide individually whether to accept or reject them.

⚠ Rejecting cookies may limit website functionality.

πŸ“Œ Google LLC is certified under the EU-US Privacy Shield, ensuring compliance with EU data protection laws.
More details on Google DoubleClick privacy policy:
Google DoubleClick Privacy Policy


10.2 Use of Google AdWords Conversion Tracking

Our website uses Google AdWords and Google AdWords Conversion Tracking, a service provided by:

πŸ“Œ Google LLC
1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA ("Google").

We use Google AdWords to promote our services on external websites (Google Ads).
This allows us to evaluate the success of specific advertising campaigns.

πŸ”Ή How it works:

  • When you click on a Google Ad, a cookie for conversion tracking is set.
  • This cookie expires after 30 days and does not personally identify you.
  • If you visit certain pages on our site and the cookie has not expired, Google and we can recognize that you clicked the ad.
  • Each Google AdWords customer gets a different cookie, preventing cross-site tracking.

πŸ“Œ What is tracked?
Google provides conversion statistics to AdWords advertisers, showing:
βœ” Number of users who clicked on their ad
βœ” Whether they were redirected to a conversion page

⚠ Advertisers do NOT receive personal information.

πŸ”Ή How to disable tracking:

  • Block conversion tracking cookies in your browser settings.
  • Use the Google Ads Settings tool to disable ads:
    Google Ads Preferences

πŸ“Œ Google LLC is certified under the EU-US Privacy Shield, ensuring compliance with EU data protection laws.
More details on Google's privacy policy:
Google Privacy Policy


11) WEB ANALYSIS SERVICES

11.1 Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by:

πŸ“Œ Google LLC
1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA ("Google").

πŸ”Ή Google Analytics uses cookies to analyze user behavior on our website. The information generated by the cookie regarding your use of this website (including your shortened IP address) is usually transmitted to and stored on a Google server in the USA.

πŸ”Ή IP Anonymization:
This website uses Google Analytics exclusively with the "_anonymizeIp()" extension.
This ensures that your IP address is anonymized and prevents direct personal identification.

  • Your IP address is shortened by Google within the European Union or other contracting states of the European Economic Area.
  • Only in exceptional cases is the full IP address transmitted to a Google server in the USA and then shortened there.

πŸ“Œ Processing basis:
βœ” Art. 6 para. 1 lit. f GDPR – legitimate interest in statistical analysis to optimize and improve the website.

πŸ”Ή Google’s role:
Google uses this information on our behalf to:
βœ” Evaluate website usage
βœ” Compile reports on website activities
βœ” Provide additional services related to website and internet usage

Your IP address will not be merged with other Google data.

πŸ”Ή How to disable tracking:
You can prevent the storage of cookies by adjusting your browser settings.
⚠ However, this may limit some website functionality.

Additionally, you can prevent Google from collecting and processing data related to your website usage (including your IP address) by:

βœ… Downloading and installing the Google Analytics Opt-Out Browser Plugin:
Google Analytics Opt-Out

βœ… Clicking this link to set an opt-out cookie (valid only for this browser and domain):
Disable Google Analytics

πŸ“Œ Google LLC is certified under the EU-US Privacy Shield, ensuring compliance with EU data protection laws.

For more details, visit:
Google Analytics Support


12) RETARGETING / REMARKETING / TARGETED ADVERTISING

12.1 Facebook Custom Audience via Pixel Method

This website uses the Facebook Pixel, a service provided by:

πŸ“Œ Facebook Inc.
1 Hacker Way,
Menlo Park, CA 94025, USA ("Facebook").

πŸ”Ή How Facebook Pixel Works:
With your explicit consent, Facebook Pixel tracks user behavior after interacting with a Facebook ad.

βœ… Purpose:
βœ” Evaluates Facebook ad effectiveness
βœ” Conducts market research
βœ” Helps optimize future ad campaigns

The collected data is anonymous to us (we cannot identify users), but Facebook processes and stores the data.
Facebook may link this data to your Facebook profile and use it for its own advertising purposes as stated in:
Facebook Privacy Policy

πŸ”Ή You can allow Facebook and its partners to display targeted ads on and off Facebook.
To do so, a cookie may be placed on your device.

πŸ“Œ Processing is based on:
βœ” Art. 6 para. 1 lit. a GDPR – Explicit consent for tracking.

Who Can Give Consent?

⚠ Facebook Pixel can only be used for users aged 13 and older.
If you are under 13, please ask for parental permission.

πŸ“Œ Facebook Inc. is certified under the EU-US Privacy Shield, ensuring compliance with EU data protection laws.

πŸ”Ή How to disable Facebook tracking:
You can:


12.2 Google AdWords Remarketing

This website uses Google AdWords Remarketing, a service provided by:

πŸ“Œ Google LLC
1600 Amphitheatre Parkway,
Mountain View, CA 94043, USA ("Google").

πŸ”Ή How Google Remarketing Works:
We use Google AdWords to promote our website via Google search results and third-party websites.

βœ… Google places a cookie in your browser to:
βœ” Show you interest-based ads based on your browsing history
βœ” Track your interactions on different devices (cross-device tracking)

πŸ“Œ Processing is based on:
βœ” Art. 6 para. 1 lit. f GDPR – Legitimate interest in optimizing advertising.

How to disable Google Ads tracking:

You can disable remarketing:

βœ… By using Google Ads Settings:
Google Ads Preferences

βœ… By visiting the Digital Advertising Alliance opt-out page:
Digital Advertising Alliance

πŸ“Œ Google LLC is certified under the EU-US Privacy Shield, ensuring compliance with EU data protection laws.

For more details, visit:
Google AdWords Remarketing FAQ


13) RIGHTS OF THE DATA SUBJECT

13.1 Data Protection Rights

Under applicable data protection laws, you have the following rights regarding the processing of your personal data:

πŸ”Ή Right of access (Art. 15 GDPR):
βœ” Obtain information about your stored personal data, processing purposes, recipients, and storage duration.

πŸ”Ή Right to rectification (Art. 16 GDPR):
βœ” Request correction of inaccurate or completion of incomplete personal data.

πŸ”Ή Right to erasure (Art. 17 GDPR):
βœ” Request deletion of your personal data unless required for legal or contractual obligations.

πŸ”Ή Right to restrict processing (Art. 18 GDPR):
βœ” Request processing restrictions in specific cases (e.g., contesting data accuracy).

πŸ”Ή Right to data portability (Art. 20 GDPR):
βœ” Receive your data in a structured, machine-readable format or request transfer to another controller.

πŸ”Ή Right to withdraw consent (Art. 7 para. 3 GDPR):
βœ” Withdraw your consent at any time with future effect.

πŸ”Ή Right to lodge a complaint (Art. 77 GDPR):
βœ” File a complaint with a data protection authority if you believe your data is being processed unlawfully.


13.2 Right to Object

πŸ”Ή If we process your data based on our legitimate interest (Art. 6 para. 1 lit. f GDPR), you have the right to object at any time.

πŸ”Ή If you object, we will stop processing your data unless we demonstrate overriding legitimate reasons for the processing.

πŸ”Ή If your data is used for direct marketing, you have the right to object at any time. If you object, we will stop using your data for this purpose immediately.


14) DATA RETENTION PERIOD

The duration of the retention of personal data is based on the respective legal retention obligations (e.g., tax and commercial law retention periods).

Once this period expires, the corresponding data is routinely deleted, unless:

βœ” It is still necessary for fulfilling a contract or contractual negotiations, and/or
βœ” There is a legitimate interest on our part for further retention.