Skip to main content

Privacy Policy

We take the protection of your personal data very seriously. In the following we describe which data we collect, process and use within the scope of our website, when and for which purposes.

1. Controller and contact for data protection questions

The controller pursuant to Art. 4 para. 7 of the European General Data Protection Regulation (hereinafter “GDPR”) is Droessel, Heumann & Schankula GbR, Maximilianstr. 28, 80539 Munich, Germany. You can reach us at any time by post or by e-mail at

If you have any questions regarding data protection, you can reach us at any time, e.g. by e-mail to or at our postal address with the addition “Data protection”

2. Your rights

You have the following rights regarding personal data concerning you:

  • Right to access (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR),
  • Right to erasure (Art. 17 GDPR; “Right to be forgotten”),
  • Right to limitation of processing (Art. 18 GDPR),
  • Right to object to the processing (Art. 21 GDPR),
  • Right to data transferability (Art. 20 GDPR).

You also have the right to complain about our processing of your personal data to a data protection supervisory authority in the Member State where you are located, at your place of work or at the location of the alleged infringement if you believe that the processing of your personal data is unlawful.

If you have given us consent to the processing of your data, you can revoke it at any time with effect for the future. The legality of processing your data until revocation remains unaffected by this.

You can contact us at any time via the contact channels listed in Section 1 above and/or the contact information listed in our legal notice for the assertion of your rights or for other data protection concerns.

3. Supplementary note about your right of objection

Please note that if your personal data is processed on the basis of a legitimate interest within the scope of the balancing of interests pursuant to Art. 6 para.1 sentence 1 f) GDPR, you have the right to object to the processing of your personal data at any time.

4. processing of personal data when using the services offered

We collect personal data from you in the following cases: When you place an order in our online shop, when you subscribe to our e-mail newsletter and/or if you contact us.

a) Placing an order in our online shop

To place an order in our online shop, your first and last name, your e-mail address, your address and your telephone number are required.

We process this data in order to be able to carry out the order according to the contract concluded with you, to confirm your order by e-mail and to be able to process complaints and/or your inquiries to the customer service. Your telephone number will only be used to process queries regarding your order and to notify you of delivery, not for other purposes. The legal basis for the processing described above is Art. 6 para. 1 sentence 1 lit. b) GDPR (processing is necessary for the fulfilment of a contract).

b) Newsletter

On our website you can subscribe to our e-mail newsletter, in which we inform you regularly about current news / promotions about our products by e-mail. To subscribe to the aforementioned newsletter, all you need to do is enter your e-mail address. The indication of your salutation and your first and last name is voluntary and serves only to be able to address you personally in the newsletter. The legal basis for the processing described above is Art. 6 para. 1 sentence 1 lit a) GDPR (consent of the data subject).

We use the so-called double opt-in procedure for subscriptions to our newsletter. This means that after you subscribe on our website we will send you an e-mail to the specified e-mail address in which we will ask you to confirm that you wish to receive the newsletter. In addition, we save the dates of registration and confirmation. The purpose of the procedure is to prove your registration and, if necessary, to clarify any possible misuse of your personal data. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).

You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent e.g. by clicking on the unsubscribe link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint.

c) Establishing contact / use of the contact form

When you contact us via e-mail, post or telephone to the contact channels listed in the imprint or via our contact form, the data provided by you (e.g. your e-mail address and your name as well as the content of your enquiry) will be stored by us in order to process and answer your questions or concerns.

We delete the data arising in this connection after storage is no longer necessary (usually after your request has been completely dealt with), or we restrict processing if there are legal storage obligations (e.g. if the establishment of contact refers to a previous order in our online shop). Depending on the content of your request, the legal basis for the aforementioned processing is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).

d) Obligation to provide personal data

If you wish to place an order in our online shop or order our newsletter, you must provide the personal data required for the respective service.

If you do not provide us with this information, it will not be possible for us to process your order or send you our newsletter.

e) Automated decision making including profiling

We would like to point out that when using our website and the services offered on it (orders, newsletters, use of the contact form), you will not be subject to any decision based exclusively on automated processing – including profiling – which will have legal effect on you or which will have a similarly considerable effect on you.

5. Data transfer to third parties/ recipients, use of service providers

Your personal data will only be passed on or transmitted by us to third parties if this is necessary to fulfil the contract with you, if there is a legitimate interest on our part, if you have given your consent to this and/or if we are obliged to do so by law or by officials or court orders. In the cases and for the purposes described below, your personal data will be transferred to third parties by us.

If you have placed an order with us, your first and last name as well as your address will be transmitted to our dispatch service providers for the purpose of dispatching the ordered goods. Legal basis for the transmission is Art. 6 para. 1 sentence 1 lit. b) GDPR (processing is necessary for the fulfilment of a contract).

For payment via PayPal, please note that PayPal collects your payment data itself and is therefore responsible for the data collected in connection with the payment and that the data protection provisions of PayPal apply in addition.

For the dispatch of our e-mails to you, e.g. transaction e-mails such as the dispatch of the order confirmation and for the dispatch of a newsletter ordered by you or, if you have consented thereto, for the dispatch of advertising by e-mail, we use e-mail dispatch service providers who use your e-mail address on our behalf and only within the scope of our instructions on the basis of order processing agreements in accordance with Art. 28 GDPR for the purpose of dispatching the respective message, but not for other purposes and not for their own establishment of contact by the e-mail dispatch service providers.

In addition, we use service providers who provide services to us in connection with web hosting, and we use third-party cloud or web-based software solutions that enable us to manage and host personal information in the cloud with external service providers to relieve our own servers and effectively work with new software solutions. We have concluded order processing agreements with the respective service providers to ensure that the respective service providers do not process the data for their own purposes, but only within the framework of our instructions and on our behalf. The legal basis for the use of the service providers is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller) in conjunction with Art. 28 GDPR (order processing).

Some of our service providers who process personal data for us on our behalf and within the framework of our instructions as so-called contract processors pursuant to Art. 28 GDPR are based outside the EU/EEC. Before transferring data to processors outside the EU/EEC, we ensure that the processor has an adequate level of data protection. For contract processors in countries such as Canada and Israel, for example, this is the result of an adequacy decision of the EU Commission (so-called safe third countries), for contract processors in the USA of self-certification in accordance with the EU-US Privacy Shield and for other contract processors by concluding the EU standard contract clauses before the start of processing by the respective contract processor.

6. Storage period and deletion of data

Even without a special request, we naturally comply with our obligations to delete personal data (e.g. pursuant to Art. 17 GDPR) and therefore only store data for as long as is necessary for the provision of the desired service or the respective purpose.

For example, we only store data relating to the dispatch of our newsletter for as long as you have subscribed to the newsletter and we delete the data as soon as it is no longer required, e.g. after you have unsubscribed from the newsletter.

Please note, however, that the deletion will be replaced by a blocking or restriction of processing, insofar as deletion would be contrary to legal storage obligations which we must fulfil. For example, in accordance with the statutory provisions in § 257 German Commercial Code (“Handelsgesetzbuch”), we must store contract-related communications with you in connection with orders in our online shop for a period of up to ten years.

7. Log files/ information provided by your browser

If you only use our website for information purposes, i.e. if you do not use one of our services offered on the website or place an order with us (see section 4 above), we only collect the data that your browser transmits to our server. For the use of cookies on our website, please see the separate information below in section 8.

Each time you use the Internet, your Internet browser automatically transmits certain information, which we store in so-called log files. These are the following data that are required to display our website to you and to guarantee stability and security: IP address (Internet protocol address), date and time of the request, content of the request (specific page), access status/HTTP status code, amount of data transferred, website from which the request came, browser, operating system and its interface, language and version of the browser software. It is not possible for us to draw conclusions about individual persons on the basis of this data. This data is stored by us for technical security reasons, e.g. to prevent attacks on our web server. The legal basis for the aforementioned processing is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).

8. Use of cookies

When you use our online shop, cookies are stored on your computer.

Cookies are text files containing information on the use of our website (pages visited, number of visits, visiting times, duration of stay on individual pages, browser used, operating system used, etc.), which are stored on your hard drive if you allow this via the settings of your browser. Cookies cannot execute programs or transmit viruses to your computer. The cookies we use do not store any personal data and do not allow any conclusions to be drawn about your person.

Cookies are used to make our online shop more user-friendly and effective. Cookies also serve to track the preferences of the visitors, whereby the design of our website can be optimized. This enables us to tailor the content of our online shop to your specific needs and thus improve our services for you. Our online shop uses the following types of cookies, the scope and function of which are explained below:

a) Cookies to maintain the functionality and user friendliness of the website

Certain cookies are required so that we can provide you with our online shop and the functions/services it offers in a trouble-free and user-friendly manner. These are, for example, cookies for the temporary storage of user inputs on the website, e.g. contents of a form and cookies for the storage of user preferences when displaying our website with regard to language settings, font size, etc., also during later visits to our website. The legal basis for the use of cookies to maintain the functionality and user-friendliness of the website is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).

b) Web Analytics and Advertising Cookies/Tools

We use the following cookies and tools for the purpose of web analysis in order to analyze your use of our website and to measure the reach of our online shop. The statistics and findings obtained will enable us to improve our services and make them more interesting for you as a user. The legal basis for the use of the following web analysis cookies and tools is Art. 6 para. 1 sentence 1 lit. f) GDPR (processing is necessary to safeguard the legitimate interests of the controller).

Under the description of each tool you will find a link or instructions with which you can object to the collection of data for the analysis of your use (“opt-out”).

aa) Google Analytics

This website uses Google Analytics, a web analysis service of Google Inc, USA (“Google”). Google Inc. is “Privacy Shield” certified (

Google Analytics uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States. We have activated IP anonymisation on this website (by the extension “_anonymizeIp()), so that your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European EEC in order to exclude the possibility of personal references. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

Google will use this information on our behalf to evaluate your use of the website, to compile reports on website activity and to provide other services relating to website activity and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics is not combined with other data from Google.

Opt-out: You can prevent the collection by Google of the data generated by the cookie and related to your use of the website (including your IP address) and the processing of this data by Google both for Google Analytics and Google Universal Analytics, by downloading and installing the browser plug-in available under the following link:

bb) Google Adwords Remarketing/Conversion Tracking

Our website uses the Google Adwords service. Google AdWords is an online advertising program of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). The remarketing feature allows us to present advertisements based on the interests of users of our site on other sites within the Google display network (on Google itself, known as “Google ads”, or on other sites). As part of conversion tracking, when you click on an ad placed by Google, a cookie is placed on your computer/device. These cookies lose their validity after 30 days, contain no personal data and are therefore not used for personal identification.

You can deactivate interest-related ads on Google and interest-related Google ads on the web (within the Google display network) in your browser by activating the “Off” button at

c) Deleting cookies / browser settings

If you do not want websites to place cookies on your computer or mobile device, you can set your web browser to notify you before a cookie is placed.

You can also set your web browser so that all cookies or only cookies from third parties are rejected.

You can also delete cookies that have already been set at any time via your web browser settings.

9. use of social plug-ins

In order to give our website visitors the opportunity to interact with social networks/platforms (e.g. through share, like, tweet and pin buttons) and to make our offer more interesting and user-friendly for you, we use so-called social plug-ins of the following social networks/platforms:

We would like to point out that calling up our website leads to a connection being established with the above-mentioned social networks/platforms and that these receive, among other things, the information that the user has called up the corresponding subpage of our website. If you interact with one of the integrated plug-ins, e.g. click on it and are logged in to the respective social network/platform, your data may be assigned directly to your existing user account at the respective social network/platform.

We have no influence on the data and data processing processes collected by the social networks/platforms, nor are we aware of the full scope of the data collection, the purposes of the processing or the storage periods of the social networks/platforms. We also do not have any information on the deletion of the collected data.

We recommend that you inform yourself about the types of data covered by this as well as the purpose and scope of the data collection and the further processing and use of the data by the social networks/platforms as well as about your rights in this regard and setting options to protect your privacy by reading the data protection information linked above.

You can prevent the loading of plug-ins and thus the collection of data by installing add-ons (so-called browser extensions) / script blockers in your browser.