Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data are all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Hagen Puls, mariblum Hagen Puls, Ammerweg 5, 38268 Lengede, Germany, Tel.: 017699818284, Email: info@mariblum.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.

2) Data Collection when Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide information to us, we only collect the data that your browser transmits to our server (so-called « server log files »). When you visit our website, we collect the following data, which are technically necessary for us to display the website:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Used browser
Used operating system
Used IP address (if necessary: in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data are not passed on or otherwise used. However, we reserve the right to check the server log files retrospectively if specific indications point to unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string « https:// » and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

For hosting our website and displaying the site content, we use an external service provider who provides its services through its own servers or through servers of specifically contracted sub-providers located exclusively within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the service provider to ensure the protection of the data of our website visitors and to prohibit unauthorized disclosure to third parties.

4) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are deleted automatically after closing the browser (so-called « session cookies »), while others remain on your device longer and allow us to save settings (so-called « persistent cookies »). In the latter case, you can see the storage duration in the overview of cookie settings of your web browser.

If personal data is processed by individual cookies implemented by us, the processing is carried out either according to Art. 6(1)(b) GDPR for the performance of the contract, according to Art. 6(1)(a) GDPR in case of given consent, or according to Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective organization of the visit.

You can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or can exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

5) Contact

5.1 Trustpilot

To send review reminders, we use the services of the following provider: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark

Only with your express consent in accordance with Art. 6(1)(a) GDPR, we will transmit your email address and, if necessary, other customer data to the provider to allow them to contact you with a review reminder via email.

You can revoke your given consent at any time with future effect towards us or towards the provider.

We have concluded a data processing agreement with the provider to ensure the protection of the data of our website visitors and to prohibit unauthorized disclosure to third parties.

5.2 WhatsApp-Business

We offer visitors to our website the opportunity to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called « Business Version » of WhatsApp.

If you contact us via WhatsApp on a specific business occasion (e.g., an order placed), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name according to Art. 6(1)(b) GDPR to process and respond to your request. Based on the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) to be able to assign your request to a specific process.

If you use our WhatsApp contact for general inquiries (e.g., about the range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name according to Art. 6(1)(f) GDPR based on our legitimate interest in efficient and timely provision of the requested information.

Your data will only be used to answer your request via WhatsApp. A transfer to third parties does not take place.

Please note that WhatsApp Business gains access to the address book of the mobile device used by us here and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For operating our WhatsApp Business account, we use a mobile device in the address book of which only the WhatsApp contact data of such users is stored who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transfer of their WhatsApp phone number from the address books of their chat contacts in accordance with Art. 6(1)(a) GDPR the first time they use the app on their device by accepting the WhatsApp terms of use. A transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.

For purpose and scope of data collection and the further processing and use of data by WhatsApp as well as your relevant rights and settings options to protect your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have concluded a data processing agreement with the provider to protect the data of our website visitors and to prohibit unauthorized transfer to third parties.

In the context of the above-mentioned operations, data may be transmitted to servers of Meta Platforms Inc. in the USA.

For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

5.3 As part of contacting us (e.g., via contact form or email), personal data will be processed – solely for the purpose of processing and answering your request and only to the extent necessary.

The legal basis for processing these data is our legitimate interest in responding to your request in accordance with Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, an additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter is conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5.4 Use of Oracle Service Cloud

When contacting us, our customer service stores and uses additional data about the details of your visit to our service pages, such as your IP address, the date and time of your visit, your browser used, the individual websites you visited and the time spent on them. This is to know which websites you have already visited when processing your request, so we do not refer you in our service information to websites that you have already visited and therefore know. This processing is based on our legitimate interest in the continuous optimization of our customer service and the improvement of the quality of advice in accordance with Art. 6(1)(f) GDPR. Your personal data is stored and used solely to process and answer your request or for contacting you and the associated technical administration.

Your personal data are stored on cloud servers provided by Oracle Deutschland B.V. & Co. KG (Riesstraße 25, 80992 Munich), which provides us storage capacities as part of the « Oracle Service Cloud. » The cloud servers where your personal data is stored are located in Germany, so your data never leaves Germany at any given time. Your data will be deleted there after your request has been fully processed, provided you wish so and there are no legal retention requirements.

6) Data Processing when Opening a Customer Account

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed to the extent necessary when you provide it to us when opening a customer account. The required data for the account opening are visible in the entry form on our website.

You may delete your customer account at any time, which can be done by sending a message to the above-mentioned address of the responsible party. After the deletion of your customer account, your data will be deleted as long as all contracts concluded through it have been fully completed, there are no statutory retention periods, and there is no legitimate interest in further storage from our side.

7) Data Processing for Order Fulfillment

7.1 To the extent necessary for contract performance for delivery and payment purposes, the personal data collected by us will be transferred to the contracted transport company and the contracted credit institution in accordance with Art. 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding agreement, we process the contact data you provided at the time of order (name, address, email address) to inform you personally about upcoming updates within the legally required period via a suitable communication channel (e.g., post or email). Your contact data is processed exclusively for the notifications about updates owed by us and used only to the extent necessary for this purpose.

To fulfill your order, we also work together with the following service provider(s) who support us in whole or in part in fulfilling concluded contracts. Personal data are transferred to these service providers in accordance with the following information.

7.2 Disclosure of Personal Data to Shipping Providers

– DHL

We use the following provider as a transport service: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

Before the delivery of the goods, we provide your email address and/or telephone number to the provider for the purpose of coordinating a delivery date or notification of delivery in accordance with Art. 6(1)(a) GDPR, provided you have given your express consent during the checkout process. Otherwise, we only provide the name of the recipient and the delivery address to the provider for delivery in accordance with Art. 6(1)(b) GDPR. The disclosure takes place only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery notice is not possible.

The consent can be revoked at any time with future effect towards the responsible party mentioned above or towards the provider.

7.3 Use of Payment Service Providers (Payment Services)

– Amazon Pay

On this website, one or more online payment methods from the following provider are available: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg

If you select a payment method provided by the provider where you make an advance payment (e.g., credit card payment), the payment data you provide during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary.

– Mollie

On this website, one or more online payment methods from the following provider are available: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands

– PayPal

On this website, one or more online payment methods from the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

If you select a payment method provided by the provider where you make an advance payment, the payment data you provide during the order process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order will be transmitted to the provider in accordance with Art. 6(1)(b) GDPR. The transfer of your data takes place exclusively for the purpose of payment processing with the provider and only to the extent necessary.

If you select a payment method where we make an advance payment, you will also be requested to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data on an alternative payment method) during the order process.

To protect our legitimate interest in determining your creditworthiness, this data will be forwarded to the provider for a credit check in accordance with Art. 6(1)(f) GDPR. The provider checks, based on the personal data you provided, as well as other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you selected can be granted with regard to payment risks and/or default risks.

The credit report can contain probability values (so-called score values). Scores included in the credit rating result are based on a scientifically recognized mathematical-statistical process. The calculation of score values involves address data, among other things, but not exclusively.

You can object to the processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

SOFORT

On this website, one or more online payment methods from the following provider are available: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany

8) Online Marketing

Own Affiliate Program

In connection with the product presentations on our website, we operate our own affiliate program, in which we provide interested third-party operators with partner links for placement on their websites, which lead to our offers. Cookies are used for the affiliate program, which are set on the partner’s website after clicking on a corresponding partner link, for which we are not responsible under data protection law. Cookies are small text files that are stored on your device to trace the origin of transactions (e.g., « sales leads ») generated via such links. In doing so, we can, among other things, recognize that you clicked the partner link and were redirected to our website. This information is necessary for payment processing between us and the affiliate partners. If the information also involves personal data, the described processing takes place on the basis of our legitimate financial interest in the settlement of commission payments in accordance with Art. 6(1)(f) GDPR.

If you wish to block the evaluation of user behavior via cookies, you can set your browser so that you are informed about the setting of cookies and can decide individually on their acceptance or exclude the acceptance of cookies for certain cases or in general.

9) Web Analytics Services

9.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (« Google »), which enables an analysis of your use of our website.

Google (Universal) Analytics is used on this website exclusively without the use of cookies, which means that the service does not set cookies on your end device at any time.

Instead, the local storage of your browser is used to store an individual ID assigned by Google (Universal) Analytics, which enables your use of the website to be analyzed. For this purpose, certain user information is processed via this ID. This information also includes your IP address, which, however, is truncated by Google by the last digits in order to exclude direct personal reference.

The information will be transmitted to Google servers and further processed there. In this context, data transfers to Google LLC in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and Internet use. The IP address transmitted and shortened by your browser as part of Google Analytics will not be merged with other Google data. The data collected in the context of using Google (Universal) Analytics will be stored for two months and then deleted.

All processing described above, including storage of information on the user’s device in the form of the ID, takes place only if you have given us your express consent to this in accordance with Art. 6(1)(a) GDPR.

Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can revoke your consent at any time with future effect.

To exercise your withdrawal, you can download and install the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin or within browsers on mobile devices, you can revoke your consent by clicking the following link to place an opt-out cookie that will prevent the future collection of your data by Google Analytics within this website (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again):
Deactivate Google Analytics

We have concluded a data processing agreement with Google to ensure the protection of the data of our website visitors and to prohibit unauthorized disclosure to third parties.

Further legal information about Google (Universal) Analytics can be found at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites

Demographic features
Google (Universal) Analytics uses the special « demographic features » function and can create statistics that provide information about the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third-party providers. This allows target groups for marketing activities to be identified. The collected data cannot be attributed to a specific person and will be deleted after a storage period of two months.

Google Signals
As an extension of Google (Universal) Analytics, Google Signals may be used on this website to create cross-device reports. If you have activated personalized advertising and linked your devices with your Google account, Google may, subject to your consent to the use of Google Analytics in accordance with Art. 6(1)(a) GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop the cross-device analysis, you can disable the « Personalized Advertising » function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de Further information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de

User IDs
As an extension of Google (Universal) Analytics, the « User IDs » function may be used on this website. If you have agreed to the use of Google (Universal) Analytics in accordance with Art. 6(1)(a) GDPR, set up an account on this website, and log in to various devices with this account, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.

9.2 Google Tag Manager

This website uses the « Google Tag Manager, » a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: « Google »).

The Google Tag Manager provides a technical basis for combining various web applications, including tracking and analytics services, and calibrating, controlling, and binding them to conditions via a unified user interface. The Google Tag Manager itself does not store information on user devices or read it from them. The service does not perform independent data analyses. However, when the page is called up by using the Google Tag Manager, your IP address is transmitted to Google and may be saved there. A transmission to servers of Google LLC in the USA is also possible.

This processing takes place only if you have given us your express consent for this in accordance with Art. 6(1)(a) GDPR. Without this consent, the use of Google Tag Manager will not take place during your website visit. You can revoke your consent at any time with effect for the future. Please deactivate this service in the « Cookie-Consent-Tool » provided on the website to exercise your consent withdrawal.

We have concluded a data processing agreement with the provider to ensure the protection of the data of our website visitors and to prohibit unauthorized transfer to third parties.

Further legal information about Google Tag Manager can be found at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

10) Retargeting/Remarketing and Conversion Tracking

Meta Pixel

Within our online offering, we use the « Meta Pixel » service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (« Meta »)

If a user clicks on an advertisement placed by us on Facebook and/or Instagram, the URL of our linked page is extended by a parameter with the help of « Meta Pixel ». This URL parameter is then entered into the user’s browser through a cookie set by our linked page after the redirection.

This enables Meta to identify the visitors of our online offering as a target group for the display of ads (so-called « ads »). Accordingly, we use the service to display the Facebook and/or Instagram ads we have placed only to users who have also shown an interest in our online offering or who exhibit characteristics (e.g., interests in certain topics or products, determined based on visited websites) that we transmit to Meta (so-called « Custom Audiences »).

On the other hand, the « Meta Pixel » allows us to track whether users were redirected to our website after clicking on an ad and what actions they take there (so-called « Conversion Tracking »).

The data collected are anonymous for us, so we do not draw any conclusions about the identity of the users. However, the data are stored and processed by Meta, which means a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.

All the aforementioned processing, particularly the setting of cookies for reading information on the used device, is only carried out if you have given us your express consent according to Art. 6(1)(a) GDPR. You may revoke your given consent at any time with future effect by deactivating this service in the « Cookie-Consent-Tool » provided on the website.

We have concluded a data processing agreement with the provider to ensure the protection of the data of our website visitors and to prohibit unauthorized transfer to third parties.

The information generated by Meta is generally transmitted and stored on a server of Meta; in this context, data transfers to servers of Meta Platforms Inc. in the USA may occur.

11) Page Functionalities

11.1 Facebook Plugins

Our website uses plugins of the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called « 2-click » or « Shariff » solution.

This integration ensures that no connection with the servers of the provider is made when a page of our website that contains such plugins is called up.

Only when you activate the plugins and thus give your consent to the data transfer according to Art. 6(1)(a) GDPR, does your browser establish a direct connection to the provider’s servers. In this case, regardless of log-in to an existing user profile, certain information about your device (including your IP address), your browser, and your website usage is transmitted to and potentially further processed by the provider.

If you are logged into an existing user profile on the social network of the provider, the information about interactions made via the plugins is also published and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking again. However, the withdrawal does not affect data already transferred to the provider.

Data may also be transferred to: Meta Platforms Inc., USA

We have concluded a data processing agreement with the provider to ensure the protection of the data of our website visitors and to prohibit unauthorized transfer to third parties.

11.2 Google Web Fonts

This site uses web fonts provided by the following provider for uniform representation of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you call up a page, your browser loads the required web fonts into your browser cache to display texts and fonts correctly and establishes a direct connection to the provider’s servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to: Google LLC, USA

Processing of personal data in connection with linking to the provider of web fonts will only take place if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your given consent at any time with future effect by disabling this service via the provided « Cookie-Consent-Tool » on the website. If your browser does not support web fonts, a standard font from your computer will be used.

Further notes on Google’s privacy policy can be found here: https://business.safety.google/intl/de/privacy/

12) Rights of the Data Subject

12.1 The applicable data protection law grants you the following data subject rights concerning the processing of your personal data by the controller (information and intervention rights), whereby reference is made to the cited legal basis for the respective exercise requirements:

Right to information according to Art. 15 GDPR;
Right to rectification according to Art. 16 GDPR;
Right to deletion according to Art. 17 GDPR;
Right to restriction of processing according to Art. 18 GDPR;
Right to notification according to Art. 19 GDPR;
Right to data portability according to Art. 20 GDPR;
Right to withdraw given consent according to Art. 7(3) GDPR;
Right to complain according to Art. 77 GDPR.

12.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA BASED ON A BALANCING OF INTERESTS ON ACCOUNT OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE RELEVANT DATA. CONTINUED PROCESSING REMAINS RESERVED, HOWEVER, IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING OVERRIDING YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.

13) Duration of Storage of Personal Data

The duration of storage of personal data is measured based on the respective legal basis, the purpose of processing, and – if relevant – additionally based on the respective statutory retention period (e.g., commercial and tax retention periods).

In the processing of personal data on the basis of a declared consent according to Art. 6(1)(a) GDPR, the data concerned will be stored until you withdraw your consent.

If there are statutory retention periods for data that are processed in the context of legal and/or similar legal obligations based on Art. 6(1)(b) GDPR, these data will be routinely deleted after the expiry of the retention periods, provided they are no longer necessary for contract fulfillment or contract initiation and/or our legitimate interest in further storage has ceased.

In the processing of personal data based on Art. 6(1)(f) GDPR, these data will be stored until you exercise your right to object according to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

In the processing of personal data for direct marketing purposes based on Art. 6(1)(f) GDPR, these data will be stored until you exercise your right to object according to Art. 21(2) GDPR.

Unless otherwise specified in the specific processing situations detailed in this statement, stored personal data will be deleted when they are no longer necessary for the purposes they were collected or otherwise processed.

Privacy Policy

1) Introduction and Contact Details of the Controller

2) Data Collection when Visiting Our Website

3) Hosting & Content Delivery Network

4) Cookies

5) Contact

6) Data Processing when Opening a Customer Account

7) Data Processing for Order Fulfillment

8) Online Marketing

9) Web Analytics Services

10) Retargeting/Remarketing and Conversion Tracking

11) Page Functionalities

12) Rights of the Data Subject

13) Duration of Storage of Personal Data

Se connecter

S’enregistrer