Data protection

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally or
contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. A
failure to provide data has no consequences. This only applies if no other information is provided in the following processing operations.
"Personal data" means any information relating to an identified or identifiable natural person.
Server log files
You can visit our websites without providing any personal information.
Each time you access our website, usage data is transmitted to us or our web host / IT service provider by your Internet browser
and stored in log data (so-called server log files). This stored data includes, for example, the name of the accessed
page, date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from our overriding legitimate interest in
ensuring the trouble-free operation of our website and improving our offer.
Your data may be transmitted to third countries outside the EU, in particular to Canada and the USA, and processed there. For
Canada, an adequacy decision of the EU Commission exists. For the USA, an adequacy decision of the EU Commission
is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer
is based on contractual obligations that are comparable to those of the standard contractual clauses of the EU Commission.
Contact
Controller/Data Protection Officer
Contact us if you wish. The data controller is: Mark Maslaton, Gaßnerstraße
16, 80639 Munich Germany, 0151 40514344, Marc@Maslaton.de
You can reach our data protection officer directly at: Mark Maslaton
datenschutz@moveo-group.de
Proactive contact by the customer via email
If you proactively contact us by email for business purposes, we only collect your personal data (name, email address,
message text) to the extent provided by you. The data processing serves to process and answer your
contact request.
If the contact serves to carry out pre-contractual measures (e.g., consultation for purchase interest, offer creation)
or concerns an existing contract between you and us, this data processing is carried out on the basis of Art. 6 (1) lit.
b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR from
our overriding legitimate interest in processing and answering your request. In this case, you have the right,
for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 (1) lit. f GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory
retention periods, unless you have consented to further processing and use.
Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent provided by
you. The data processing serves the purpose of contacting you.
If the contact serves to carry out pre-contractual measures (e.g., consultation for purchase interest, offer creation)
or concerns an existing contract between you and us, this data processing is carried out on the basis of Art. 6 (1) lit.
b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) lit. f GDPR from
our overriding legitimate interest in processing and answering your request. In this case, you have the right,
for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6 (1) lit. f GDPR.
We only use your email address to process your request. Your data will then be deleted in compliance with statutory
retention periods, unless you have consented to further processing and use.
Collection and processing of applications via email
Site visitors can apply for vacant positions advertised on our website via email if interested. In this case,
we only collect your personal data to the extent provided by you. This includes your contact details (e.g.,
name, email address, telephone number), information about your professional qualifications and education, information about further professional training
as well as performance-related certificates.
The data processing serves the purpose of contacting you and deciding on the establishment of an employment relationship
with you. The provision of data is necessary to carry out the application process. A
failure to provide data means that no contract can be concluded. The processing of your
personal data is carried out on the basis of Art. 6 (1) lit. b GDPR in conjunction with Section 26 (1) BDSG for the implementation of pre-contractual
measures (running the application process as an initiation of an employment contract).
If you have given us consent to process personal data for inclusion in our applicant pool,
e.g., by ticking a checkbox, the processing is carried out on the basis of Art. 6 (1) lit. a GDPR. You can revoke your consent
at any time to us, without affecting the legality of the processing carried out on the basis of the consent until revocation.
If, within the scope of the application process, special categories of personal data within the meaning of Art. 9 (1) GDPR are
requested from applicants, such as information on the degree of severe disability, this is done on the basis of Art. 9 (2) lit. b.
GDPR, so that we can exercise the rights arising from labor law and the law of social security and social protection
and comply with our obligations in this regard.
We store your personal data for as long as it is necessary for the decision on your application. Your data will be
deleted at the latest after six months, unless you have consented to further processing and use.
If an employment relationship arises after the application process, the provided data will be
further processed on the basis of Art. 6 (1) lit. b GDPR in conjunction with Section 26 (1) BDSG for the purposes of carrying out the employment relationship
and subsequently transferred to the personnel file.
Use of WeTransfer
de.
We use the WeTransfer service of WeTransfer B.V. (Willem Fenengastraat 19, 1096 BL Amsterdam, Netherlands; "WeTransfer") to transmit
files up to 2 GB in size at your request.
The purpose of use is to transfer large files in high quality. For this, we transmit your email address and the file to be
transferred to WeTransfer. WeTransfer generates a download link, which is sent to you and us by email. The
data is encrypted by WeTransfer during transmission and storage and can only be accessed via the download link.
Your personal data may be transmitted to WeTransfer's servers in the USA and temporarily stored there (partially unencrypted). For
the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data Privacy
Framework (TADPF). WeTransfer is not certified under the TADPF. The data transfer is based, among other things, on
Standard Contractual Clauses as appropriate safeguards for the protection of personal data, which can be viewed at:
https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc
_
The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent, provided you have expressly consented to the use of WeTransfer.
You can revoke your consent at any time by notifying us, without affecting the legality of the processing carried out on the basis of the consent until revocation.
Further information on data protection when using WeTransfer can be found at: https://wetransfer.com/legal/privacy.
Orders
Collection, processing and disclosure of personal data for orders
When placing an order, we only collect and process your personal data to the extent necessary for the fulfillment and processing of your order
and to process your inquiries. The provision of data is necessary for the conclusion of the contract. A
failure to provide data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. b
GDPR and is necessary for the fulfillment of a contract with you.
Your data is disclosed, for example, to shipping companies, dropshipping or fulfillment providers,
payment service providers, service providers for order processing and IT service providers. In all cases, we strictly adhere to the legal
requirements. The scope of data transmission is limited to a minimum.
Your data may be transmitted to third countries outside the EU, in particular to Canada and the USA, and processed there. For
Canada, an adequacy decision of the EU Commission exists. For the USA, an adequacy decision of the EU Commission
is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer
is based on contractual obligations that are comparable to those of the standard contractual clauses of the EU Commission.
Advertising
Use of email address for sending newsletters
We use your email address to send you information and offers via newsletter, provided you have expressly consented to this.
The data processing serves exclusively for the purpose of advertising. For this purpose, we process your email address as well as
any other data you voluntarily provided during registration for our newsletter.
The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time,
without affecting the legality of the processing carried out on the basis of the consent until revocation.
You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us.
Your email address will then be removed from the distribution list. Despite removal from the distribution list, we may continue to store your email address in
a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on
Art. 6 (1) lit. f GDPR due to our and your legitimate interest in preventing the renewed use of your email address for
sending our newsletter. You have the right, for reasons arising from your particular situation,
to object at any time to this processing of personal data concerning you.
Shipping service provider
Disclosure of email address to shipping companies for information about shipping status
We pass on your email address to the transport company as part of the contract processing, provided you have expressly agreed to this in the
order process. The disclosure serves the purpose of informing you about the shipping status by email. The processing
is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or
the transport company, without affecting the legality of the processing carried out on the basis of the consent until revocation.
Cookies
Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the
computer system of a user. If a user calls up a website, a cookie can be stored on the operating system of the
user. This cookie contains a characteristic string of characters that enables unique identification of the browser when
the website is called up again.
Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting
appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them,
as well as prevent the storage of cookies and the transmission of the data contained therein. Already
stored cookies can be deleted at any time. However, we would like to point out that in this case you may not be able to fully use all functions of this website.
Under the following links you can find out how to manage (including disable) cookies in the most important browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-
2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
Technically necessary cookies
Unless otherwise stated below in the privacy policy, we only use these technically necessary
cookies for the purpose of making our offer more user-friendly, effective and secure. Furthermore, cookies enable
our systems to recognize your browser even after a page change and to offer you services. Some functions of our
website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized again even after a
page change.
The use of cookies or similar technologies is based on Section 25 (2) TDDDG. The processing of your
personal data is carried out on the basis of Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in
ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right, for reasons arising from your particular situation,
to object at any time to this processing of personal data concerning you.
Analysis Affiliate
Use of Google Analytics 4
We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street,
Dublin 4, Ireland; "Google") on our website.
The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose,
Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website,
to compile reports on website activities, and to provide other services related to website use and internet use to the website operator.
The following information, among others, may be collected: IP address, date and time of page view, click path, information about
the browser you are using and the device you are using, pages visited, referrer URL (website from which you
accessed our website), location data, purchase activities. Your data may be linked by Google with other data, such as
your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
The IP address is truncated by Google within member states of the European Union or in other contracting states of the Agreement
on the European Economic Area.
The processing of your personal data is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. You can revoke your
consent at any time without affecting the legality of the processing carried out on the basis of the consent until revocation.
The information generated about your use of this website is usually transmitted to a Google server in the USA
and stored there. For the USA, an adequacy decision of the EU Commission is available, the Trans-Atlantic Data
Privacy Framework (TADPF). Google has certified itself under the TADPF and has thus committed to comply with European data protection principles.
Both Google and US government agencies have access to your data.
Further information on terms of use and data protection can be found at https://policies.google.com/technologies/partner-sites and
at https://policies.google.com/privacy?hl=de&gl=de.
Use of Shopify Statistics
We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2
Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of order processing. Shopify is a company affiliated with Shopify Inc. (151
O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
The data processing serves the purpose of analyzing this website and its visitors. For this purpose, data for marketing and
optimization purposes are stored and provided in reports, analyses and statistics. The following device information, among others,
is collected and processed: Information about the web browser, the IP address, the time zone and some of the cookies that are installed on your device.
When you navigate the website, information about visited web pages or products, the referrer
URL (website from which you accessed our website), and information about how you interact with the website are also collected.
Technologies such as cookies, web beacons, tags and pixels (electronic files for collecting information about how you navigate the website) are used for this purpose.
Your data may be transmitted to third countries outside the EU, in particular to Canada and the USA, and processed there. For
Canada, an adequacy decision of the EU Commission exists. For the USA, an adequacy decision of the EU Commission
is available, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer
is based on contractual obligations that are comparable to those of the standard contractual clauses of the EU Commission.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) Sentence 1 TDDDG in conjunction with
Art. 6 (1) lit. a GDPR.

The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit.
a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
processing carried out.
Further information on data protection at Shopify can be found at https://www.shopify.com/de/legal/datenschutz, information on the
order processing agreement at https://www.shopify.com/de/legal/dpa and information on the cookies used
at https://www.shopify.com/de/legal/cookies.
Use of the Awin Partner Program
We use the partner program "Awin" of AWIN AG (Eichhornstraße 3, 10785 Berlin; "Awin").
If you click on an advertisement with an affiliate link, Awin places a cookie for conversion tracking on your computer.
computer. The cookies serve the purpose of correct billing within the partner program by recording the success
of an advertising medium. The cookies recognize that you have clicked on the advertisement and the origin of the order at the advertiser
advertiser can be traced. In addition, Awin uses so-called fingerprinting. This allows the device you are using to be recognized.
device can be recognized. Among other things, Awin can recognize that the affiliate link on this website has been clicked or viewed. Awin
collects, among other things, your transaction data (such as order value, product type, sales channel, use of a voucher) and your user name
in the form of an individual sequence of numbers, so that no identity is recognizable, but includes information about specific user actions and the
used end device of the user.
Your data may be transferred to third countries such as the USA. There is no adequacy decision from the EU Commission for the USA.
Commission. The data transfer is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data.
protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-
data-protection/standard-contractual-clauses-scc
de.
_
The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) sentence 1 TDDDG in conjunction with
Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit.
a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
processing carried out.
The data protection declaration with detailed information on the use of data by Awin can be found at
https://www.awin.com/de/datenschutzerklarung.
Plug-ins and Miscellaneous
Use of Google reCAPTCHA
We use the reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland;
"Google"). The query serves the purpose of distinguishing between input by a human or by automated, machine
processing. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and, if applicable,
further data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the
European Union and may also be transferred to servers of Google LLC in the USA. For the USA, an adequacy decision from the EU
Commission is available, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and thus committed to comply with European data protection principles.
to comply with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) sentence 1 TDDDG in conjunction with
Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit.
a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
processing carried out.
Further information on Google reCAPTCHA and the associated privacy policy can be found
at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy.
Use of Google invisible reCAPTCHA
We use the invisible reCAPTCHA service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4,
Ireland; "Google").
This serves the purpose of distinguishing between input by a human or by automated, machine processing. In the background, Google collects and analyzes usage data that is used by Invisible reCaptcha to distinguish regular users from bots.
used by Invisible reCaptcha to distinguish regular users from bots. For this purpose, your input is transmitted to Google and used there. In addition, the IP address and
and, if applicable, other data required by Google for the Invisible reCAPTCHA service are transmitted to Google.
This data is processed by Google within the European Union and may also be transferred to servers of Google LLC in the
USA. For the USA, an adequacy decision from the EU Commission is available, the Trans-Atlantic Data Privacy Framework
(TADPF). Google has certified itself under the TADPF and thus committed to comply with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) sentence 1 TDDDG in conjunction with
Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit.
a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
processing carried out.
Further information on Google reCAPTCHA and the associated privacy policy can be found
at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy
Use of hCaptcha
We use the hCaptcha service of Intuition Machines Inc. (1065 SW 8th St #704, Miami, FL 33130, USA;
"hCaptcha") within the framework of an order processing agreement.
HCaptcha serves to protect our website from spam and misuse by automated access (bots). By implementing
hCaptcha, we ensure that certain actions on our website are only performed by real people, which ensures the security
and integrity of our online services.
When using hCaptcha, the following data may be collected and processed: user's IP address, information about the
end device used (e.g. browser and operating system), mouse movements and interactions on the website, time spent on the
website, user input behavior.
Your data may be transferred to the USA. For the USA, an adequacy decision from the EU Commission is available,
the Trans-Atlantic Data Privacy Framework (TADPF). HCaptcha has certified itself under the TADPF and thus committed to comply with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) sentence 1 TDDDG in conjunction with
Art. 6 (1) lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit.
a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent until revocation.
processing carried out.
Further information on data processing and data protection at hCaptcha can be found at https://www.hcaptcha.com/gdpr.
Integration of the Händlerbund member logo
The Händlerbund member logo (Händlerbund e.V., Kohlgartenstraße 11 - 13, 04315 Leipzig) is integrated on our website. When you access our website,
our website, information is automatically sent by the browser used on your end device to the server of Händlerbund e.V. This information is temporarily stored in a so-called server log file for 7 days.
server log file for 7 days. The following information is collected without your intervention and stored until automated deletion:
IP address of the requesting computer,
Date and time of access,
Name and URL of the retrieved file,
Website from which access was made (referrer URL),
browser used and, if applicable, the operating system of your computer as well as the name of your access provider.
The temporary storage of the IP address by the system is necessary to enable the delivery of the website. For this
purpose, the IP address must remain stored for the duration of the session. The storage in log files is done to ensure the functionality of the
website. In addition, the data serves to optimize the website and to ensure the security of the information technology systems.
information technology systems. This data is not stored together with other personal data.
The legal basis for data processing is Art. 6 para. 1 sentence 1 lit. f GDPR.
Data subject rights and storage period
Duration of storage
After complete contract processing, the data will initially be stored for the duration of the warranty period, then taking into account
legal, in particular tax and commercial law retention periods, and then deleted after expiry of the period, unless you
have not consented to further processing and use.
Rights of the data subject
If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: Right to information, to
rectification, to erasure, to restriction of processing, to data portability.
In addition, under Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR
as well as to processing for direct marketing purposes.
Right to lodge a complaint with the supervisory authority
Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing
of your personal data is not lawful.
You can lodge a complaint with the supervisory authority responsible for us, which you can reach at the following contact details:
State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Tel.: +49 711 6155410
Fax: +49 711 61554115
E-mail: poststelle@lfdi.bwl.de
Right to object
If the personal data processing listed here is based on our legitimate interest according to Art. 6 para. 1 lit.
f GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation with effect for the future.
After a successful objection, the processing of the affected data will be terminated, unless we can demonstrate compelling legitimate grounds
for the processing that override your interests, rights and freedoms, or if the processing serves the assertion,
exercise or defense of legal claims.

Last Updated: October 22, 2024