Privacy policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data means all data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Sascha Blank, Lion Instinct, Friedhofstraße 1, 25779 Hennstedt, Germany, Tel.: +49 172 8010144, E-mail: info@lion-instinct.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When you use our website for informational purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the server hosting the website (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data transmitted in bytes
• Source/reference from which you accessed the page
• Browser used
• Operating system used
• IP address used (where applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used in any other way. However, we reserve the right to subsequently review the server log files if there are concrete indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries submitted to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the padlock symbol in your browser's address bar.

3) Hosting & Content Delivery Network

3.1 Shopify

We use the system of the following provider to host our website and display the website content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits any unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Shopify

We use a Content Delivery Network provided by the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data may also be transferred to:

• Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
• Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA

This service enables us to deliver large media files such as graphics, website content, or scripts more quickly through a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 (1) lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits any unauthorized disclosure to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For data transfers to the United States, the data recipient has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.

4) Cookies

To make your visit to our website more attractive and to enable the use of certain functions, we use cookies, which are small text files stored on your end device. Some of these cookies are automatically deleted after you close your browser (so-called "session cookies"), while others remain on your end device for a longer period and allow your website settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of your web browser's cookie settings.

If personal data is also processed through individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of a contract, in accordance with Art. 6 (1) lit. a GDPR where consent has been given, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website as well as a customer-friendly and effective design of your visit to our website.

You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies for specific cases or in general.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting Us

When you contact us (e.g. via the contact form or by e-mail), personal data is processed exclusively for the purpose of handling and responding to your inquiry and only to the extent necessary for this purpose.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted once it can be inferred from the circumstances that the matter in question has been conclusively resolved, provided that no statutory retention obligations prevent such deletion.

6) Data Processing When Opening a Customer Account

In accordance with Art. 6 (1) lit. b GDPR, personal data is collected and processed to the extent necessary if you provide such data when opening a customer account. The data required for opening an account can be found in the input form of the respective registration form on our website.

You may delete your customer account at any time by sending a message to the controller at the address stated above. After your customer account has been deleted, your data will also be deleted, provided that all contracts concluded through the account have been fully performed, no statutory retention obligations prevent deletion, and we no longer have a legitimate interest in retaining the data.

7) Use of Customer Data for Direct Advertising

7.1 Subscription to Our E-mail Newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your e-mail address. The provision of additional data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending our newsletter, which ensures that you will only receive newsletters after you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the e-mail address you provided.

By activating the confirmation link, you grant us your consent to process your personal data in accordance with Art. 6 (1) lit. a GDPR. In this context, we store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of your registration, in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time by using the corresponding link provided in every newsletter or by sending a corresponding message to the controller named at the beginning of this Privacy Policy. After you unsubscribe, your e-mail address will be removed from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where permitted by law and about which we inform you in this Privacy Policy.

7.2 Sending the E-mail Newsletter to Existing Customers

If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers by e-mail for similar goods or services from our product range to those you have already purchased. In accordance with Section 7 (3) of the German Act Against Unfair Competition (UWG), we are not required to obtain separate consent from you for this purpose. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1) lit. f GDPR. If you initially objected to the use of your e-mail address for this purpose, no e-mails will be sent by us.

You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning of this Privacy Policy. For this, you will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease without delay.

7.3 E-mail Notification of Product Availability

For items that are temporarily unavailable, you may subscribe to receive e-mail notifications when the selected product becomes available again. In this case, we will send you a one-time e-mail informing you that the item you selected is available again. The only mandatory information required for sending this notification is your e-mail address. The provision of additional data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending these e-mails, which ensures that you will only receive a notification after you have expressly confirmed your consent by clicking on a verification link sent to the e-mail address you provided.

By activating the confirmation link, you grant us your consent to process your personal data in accordance with Art. 6 (1) lit. a GDPR. In this context, we store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of your registration, in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for our e-mail notification service for product availability is used strictly for the intended purpose.

You can unsubscribe from the product availability notifications at any time by sending a corresponding message to the controller named at the beginning of this Privacy Policy. After you unsubscribe, your e-mail address will be removed from the distribution list created for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where permitted by law and about which we inform you in this Privacy Policy.

7.4 Shopping Cart Reminder by E-mail

If you discontinue your purchase before completing your order, you have the option of receiving a one-time e-mail reminding you of the contents of your virtual shopping cart.

The only mandatory information required for sending this reminder is your e-mail address. The provision of additional data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending these e-mails, which ensures that you will only receive a reminder after you have expressly confirmed your consent by clicking on a verification link sent to the e-mail address you provided.

By activating the confirmation link, you grant us your consent to process your personal data in accordance with Art. 6 (1) lit. a GDPR for the purpose of sending a shopping cart reminder. In this context, we store the IP address assigned by your Internet Service Provider (ISP), as well as the date and time of your registration, in order to be able to trace any possible misuse of your e-mail address at a later date. The data collected by us when you register for our e-mail notification service is used strictly for the intended purpose.

You can unsubscribe from the shopping cart reminders at any time by sending a corresponding message to the controller named at the beginning of this Privacy Policy. After you unsubscribe, your e-mail address will be removed from the distribution list created for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope where permitted by law and about which we inform you in this Privacy Policy.

8) Data Processing for Order Processing

8.1 To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned financial institution in accordance with Art. 6 (1) lit. b GDPR.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact data you provided when placing your order in order to personally inform you within the scope of our statutory information obligations pursuant to Art. 6 (1) lit. c GDPR. Your contact data is used strictly for the purpose of informing you about updates we are legally required to provide and is processed by us only to the extent necessary for the respective information.

For the processing of your order, we also cooperate with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

8.2 Order Printer Pro

For order processing, we use the following provider: FORSBERG+TWO, Tranegårdsvej 74, 2900 Hellerup, Denmark.

Your name, address, and, where applicable, other personal data are transferred to the provider in accordance with Art. 6 (1) lit. b GDPR for the purpose of processing your online order. Your data is only transferred to the extent actually necessary for processing the order. The provider is also used for accounting purposes. In this context, the provider processes incoming and outgoing invoices as well as, where applicable, our company's banking transactions in order to automatically record invoices, match them with transactions, and prepare financial accounting in a partially automated process.

Where personal data is processed in this context, the processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business operations.

8.3 Transfer of Personal Data to Shipping Service Providers

• DHL

We use the following provider as our shipping service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany.

We transmit your e-mail address and/or telephone number to the provider prior to the delivery of the goods in accordance with Art. 6 (1) lit. a GDPR for the purpose of coordinating a delivery date or providing a delivery notification, provided that you have given your express consent during the ordering process. Otherwise, for the purpose of delivering the goods, we only transmit the recipient's name and delivery address to the provider in accordance with Art. 6 (1) lit. b GDPR. The transfer takes place only to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or a delivery notification is not possible.

Your consent may be withdrawn at any time with effect for the future by notifying either the controller named above or the provider.

8.4 Use of Payment Service Providers (Payment Services)

• Apple Pay

If you choose the "Apple Pay" payment method provided by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the "Apple Pay" function of your device running iOS, watchOS, or macOS by charging a payment card stored in "Apple Pay". Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, you must enter a code previously defined by you and verify the payment using your device's "Face ID" or "Touch ID" function.

For the purpose of processing the payment, the information you provide during the ordering process, together with information about your order, is transmitted to Apple in encrypted form. Apple then encrypts this data again using a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been completed, Apple sends your device account number together with a transaction-specific dynamic security code to the originating website to confirm the successful payment.

Where personal data is processed in the course of the transfers described above, such processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.

Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and information on whether the transaction was completed successfully. Through anonymization, any personal reference is completely excluded. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.

If you use Apple Pay on your iPhone or Apple Watch to complete a purchase initiated through Safari on your Mac, the Mac and the authorization device communicate via an encrypted channel through Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac."

Further information about data protection with Apple Pay can be found at the following website:

https://support.apple.com/de-de/HT203027

• Google Pay

If you choose the "Google Pay" payment method provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment is processed via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with NFC functionality by charging a payment card stored in Google Pay or another payment system verified there (e.g. PayPal). To authorize a payment via Google Pay exceeding EUR 25.00, your mobile device must first be unlocked using the verification method you have configured (such as facial recognition, password, fingerprint, or pattern).

For the purpose of processing the payment, the information you provide during the ordering process, together with information about your order, is transmitted to Google. Google then transmits the payment information stored in Google Pay to the originating website in the form of a unique transaction number used to verify that the payment has been completed. This transaction number contains no information about the actual payment details of your payment methods stored in Google Pay, but is generated and transmitted as a unique numerical token valid for a single transaction. For all transactions carried out through Google Pay, Google acts solely as an intermediary for processing the payment. The transaction itself is carried out exclusively between the user and the originating website by charging the payment method stored in Google Pay.

Where personal data is processed in the course of the transfers described above, such processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.

Google reserves the right to collect, store, and evaluate certain transaction-specific information for every transaction carried out through Google Pay. This includes the date, time, and amount of the transaction, the merchant's location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and e-mail address of the seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction, and, where applicable, the offer associated with the transaction.

According to Google, this processing is carried out exclusively in accordance with Art. 6 (1) lit. f GDPR on the basis of its legitimate interest in proper accounting, verification of transaction data, and the optimization and maintenance of the Google Pay service.

Google also reserves the right to combine the processed transaction data with other information collected and stored by Google through your use of other Google services.

The Google Pay Terms of Service can be found here:

https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

Further information about data protection with Google Pay can be found at the following website:

https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

• Klarna

One or more online payment methods provided by the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

If you select a payment method offered by the provider under which you make payment in advance (such as credit card payment), the payment data you provide during the ordering process (including your name, address, bank and payment card details, currency, and transaction number), as well as information about the contents of your order, will be transmitted to the provider in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method under which the provider makes payment in advance (such as purchase on account, installment payment, or direct debit), you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and, where applicable, details of an alternative payment method).

In order to safeguard our legitimate interest in determining the creditworthiness of our customers, this data is forwarded to the provider in accordance with Art. 6 (1) lit. f GDPR for the purpose of a credit check. The provider assesses, on the basis of the personal data you provide and additional information (such as the shopping cart, invoice amount, order history, and previous payment experience), whether the payment option you selected can be granted with regard to payment and/or default risks.

Identity and creditworthiness information from the following credit agencies may also be included in the decision-making process, in addition to provider-specific criteria, in accordance with Art. 6 (1) lit. f GDPR:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. Among other factors, but not exclusively, address data is included in the calculation of the score values.

You may object to the processing of your data at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data where this is necessary for contractual payment processing.

• PayPal

One or more online payment methods provided by the following provider are available on this website: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method offered by the provider under which you make payment in advance, the payment data you provide during the ordering process (including your name, address, bank and payment card details, currency, and transaction number), as well as information about the contents of your order, will be transmitted to the provider in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

If you select a payment method under which we make payment in advance, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and, where applicable, details of an alternative payment method).

In such cases, in order to safeguard our legitimate interest in determining your creditworthiness, this data is forwarded to the provider in accordance with Art. 6 (1) lit. f GDPR for the purpose of a credit check. The provider assesses, on the basis of the personal data you provide and additional information (such as the shopping cart, invoice amount, order history, and previous payment experience), whether the payment option you selected can be granted with regard to payment and/or default risks.

The credit report may contain probability values (so-called score values). Where score values are included in the result of the credit assessment, they are based on a scientifically recognized mathematical-statistical procedure. Among other factors, but not exclusively, address data is included in the calculation of the score values.

You may object to the processing of your data at any time by notifying us or the provider. However, the provider may still be entitled to process your personal data where this is necessary for contractual payment processing.

• Shopify Payments

One or more online payment methods provided by the following provider are available on this website: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

If you select a payment method offered by the provider under which you make payment in advance (such as credit card payment), the payment data you provide during the ordering process (including your name, address, bank and payment card details, currency, and transaction number), as well as information about the contents of your order, will be transmitted to the provider in accordance with Art. 6 (1) lit. b GDPR. Your data is transferred solely for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.

8.5 Electronic Right of Withdrawal Function for Distance Selling Contracts

Consumers who conclude contracts on this website for which a statutory right of withdrawal exists have the option of exercising their right of withdrawal by means of an electronic withdrawal function in accordance with the applicable withdrawal provisions.

To provide the electronic withdrawal function, we use a solution from the following provider: ECOMBEAT, Garnisonsgasse 4/11, 1090 Vienna, Austria.

When using the withdrawal function, in addition to information required to identify the contract to be withdrawn from, further personal information such as the consumer's first and last name and e-mail address must be provided or confirmed.

This information is initially collected by the provider on the basis of our legitimate interest in a user-friendly, stable, and process-optimized solution pursuant to Art. 6 (1) lit. f GDPR, then used to confirm receipt of the withdrawal declaration by e-mail on our behalf, and finally transmitted to us. We subsequently process the transmitted information for the proper handling of the withdrawal in accordance with Art. 6 (1) lit. b GDPR and Art. 6 (1) lit. c GDPR on the basis of our legal obligation to provide an electronic withdrawal function for consumer distance selling contracts subject to payment.

The information collected by the provider is routinely deleted after the withdrawal has been fully processed, provided that no statutory retention obligations prevent such deletion.

We have concluded a data processing agreement with the provider that protects the data processed within the scope of the withdrawal function and prohibits any unauthorized disclosure to third parties.

9) Retargeting / Remarketing and Conversion Tracking

Meta Pixel with Advanced Matching

Within our online offering, we use the "Meta Pixel" service provided by the following provider in Advanced Matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta").

If a user clicks on one of our advertisements displayed on Facebook or Instagram, the URL of our linked page is extended by a parameter using the "Meta Pixel". After the redirect, this URL parameter is stored in the user's browser by means of a cookie set by our linked page itself. In addition, this cookie collects specific customer data, such as the e-mail address that we collect on our website linked to the Facebook or Instagram advertisement during processes such as purchases, account registrations, or sign-ups (Advanced Matching). The cookie is then read and enables the transmission of the data, including the specific customer data, to Meta.

We use the "Meta Pixel" with Advanced Matching to make our advertisements ("Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to users' interests or exhibit certain characteristics (e.g. interests in specific topics or products determined on the basis of visited websites), which we transmit to Meta (so-called "Custom Audiences").

In addition, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of the "Meta Pixel," the Advanced Matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All transmitted data is stored and processed by Meta so that it can be linked to the respective user profile, and Meta may use the data for its own advertising purposes in accordance with Meta's Data Policy (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to display advertisements on and outside of Facebook.

All of the processing activities described above, in particular the setting of cookies for reading information on the device used, are carried out only if you have given us your express consent in accordance with Art. 6 (1) lit. a GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits any unauthorized disclosure to third parties.

The information generated by Meta is generally transferred to a Meta server and stored there; in this context, it may also be transferred to servers of Meta Platforms Inc. in the United States.

For data transfers to the United States, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.