Privacy Policy

1, Introduction and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data includes all data that can personally identify you.

1.2 The data controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Philipp Umscheid, Anhedna, Ruhrstraße 32, 70374 Stuttgart, Germany, Email: info@anhedna.com. The data controller is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser sends to our server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/reference from which you accessed the page
Used browser
Operating system used
IP address used (possibly in anonymized form)

The processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no further disclosure or use of the data. However, we reserve the right to retrospectively check the server log files should there be concrete indications of illegal use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string “https://” and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

Shopify

For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”).

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc.

All data collected on our website is processed on the provider’s servers. We have concluded a data processing agreement with the provider, ensuring the protection of data of our site visitors and prohibiting unauthorized disclosure to third parties.

For data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

For data transfer to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies, which are small text files that are stored on your device. Some of the cookies we use are automatically deleted after you close your browser (so-called “session cookies”), while others remain on your device and allow us to save your settings for the next visit (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.

If personal data is also processed by individual cookies implemented by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR either to execute the contract, in accordance with Art. 6(1)(a) GDPR in case of consent, or in accordance with Art. 6(1)(f) GDPR for our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can configure your browser settings to inform you about the use of cookies and decide on their acceptance individually or exclude the acceptance of cookies for specific cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

When contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of processing and responding to your request, and only to the extent necessary for that purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for the processing is Art. 6(1)(b) GDPR. Your data will be deleted when it can be inferred from the circumstances that the relevant matter has been finally clarified, and there are no legal retention obligations to the contrary.

6) Data Processing When Opening a Customer Account

Pursuant to Art. 6(1)(b) GDPR, personal data is collected and processed to the extent necessary when you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.

You can delete your customer account at any time by sending a message to the data controller’s address mentioned above. After deletion of your customer account, your data will be deleted unless legal retention obligations prevent deletion, and unless we have a legitimate interest in continued storage.

7) Use of Customer Data for Direct Marketing

7.1 Registration for our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only required information for sending the newsletter is your email address. Providing additional data is voluntary and is used to address you personally. For sending the newsletter, we use the double opt-in procedure, which ensures that you will only receive the newsletter if you confirm your consent by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. In this process, we store your IP address, as well as the date and time of registration, as entered by the Internet service provider (ISP), to trace potential misuse of your email address at a later date. The data collected during the registration for the newsletter is used exclusively for sending our newsletter.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the data controller mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

7.2 Sending Email Newsletters to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services, such as those already purchased, from our range by email. According to § 7(3) of the German Unfair Competition Act (UWG), we do not need separate consent from you for this. The data processing takes place solely based on our legitimate interest in personalized direct advertising according to Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, no emails will be sent by us.

You are entitled to object to the use of your email address for the above-mentioned advertising purpose at any time with effect for the future by notifying the data controller mentioned at the beginning. For this, you only have to pay the transmission costs according to the basic rates. Upon receipt of your objection, the use of your email address for advertising purposes will be stopped immediately.

7.3 Cart Reminder Emails

In case you abandon your purchase with us before completing the order, you have the option to be reminded of the contents of your virtual shopping cart via email.

The only required information for sending this reminder is your email address. Providing additional data is voluntary and may be used to address you personally. For sending these reminders, we use the double opt-in procedure, which ensures that you will only receive a notification after confirming your consent by clicking on a verification link sent to the email address provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR for sending a cart reminder. In this process, we store your IP address, as well as the date and time of registration, as entered by the Internet service provider (ISP), to trace potential misuse of your email address at a later date. The data collected during registration for our email notification service is used exclusively for sending cart reminders.

You can unsubscribe from cart reminders at any time by sending a corresponding message to the data controller mentioned above. After unsubscribing, your email address will be immediately deleted from our distribution list set up for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.

8) Data Processing for Order Processing

8.1 Transfer of Data for Delivery and Payment Purposes

To the extent necessary for the processing of contracts for delivery and payment purposes, we will pass on the personal data collected by us in accordance with Art. 6(1)(b) GDPR to the commissioned transport company and the commissioned bank.

If, on the basis of a corresponding agreement, we owe updates for goods with digital elements or for digital products, we process the contact data (name, address, email address) you provided during the order to inform you personally about upcoming updates within the legally specified period. Your contact data will be used strictly for notifications about updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of closed contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Use of Payment Service Providers

– PayPal

On this website, one or more online payment methods from the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When selecting a payment method from the provider where you pay in advance, the payment data you provided during the order process (including name, address, bank and credit card information, currency, and transaction number) will be passed on to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is only disclosed to the extent necessary for the payment transaction with the provider.

When selecting a payment method where we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and, if applicable, data on an alternative payment method) during the order process.

In such cases, to maintain our legitimate interest in determining your ability to pay, we will transmit this data to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. The provider checks whether the payment option selected by you can be granted with regard to payment and/or default risks based on the personal data you provided, as well as other data (such as shopping cart, invoice amount, order history, payment experiences).

The credit report may include probability values (so-called score values). Insofar as score values are incorporated into the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. Address data is one of the factors taken into account in calculating score values, among other things.

You can object to the processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the proper processing of payments under the contract.

9) Online-Marketing

Google AdSense

Google AdSense

This website uses Google AdSense, an online advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses cookies, which are text files stored on your computer that allow for the analysis of your use of the website. In addition, Google AdSense uses so-called “web beacons” (small invisible graphics) to collect information, enabling the recording, collection, and evaluation of simple actions, such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also involve a transfer to Google LLC servers in the USA.

Google uses the information obtained to evaluate your usage behavior with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on behalf of Google.

All the processing described above, especially the reading of information on the end device used via cookies and/or web beacons, is only carried out if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to our website.

You can revoke your consent given at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

Google’s privacy policy can be viewed here: Google Privacy Policy.

10) Retargeting/ Remarketing und Conversion-Tracking

10.1 Facebook Pixel for Creating Custom Audiences with Extended Data Matching (with Cookie Consent Tool)

Within our online offering, we use the service “Facebook Pixel” from the following provider in extended data matching mode: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”).

When a user clicks on an advertisement we placed on Facebook, the “Facebook Pixel” extends the URL of our linked page with a parameter. This URL parameter is then added to the user’s browser after redirection by a cookie set by our linked page itself. In addition, this cookie collects specific customer data, such as the email address, which we collect on our website linked to the Facebook ad during processes such as purchases, account registrations, or sign-ups (extended data matching). The cookie is then read and allows the transmission of data, including specific customer data, to Facebook.

We use “Facebook Pixel” with extended data matching to make our Facebook ads (so-called “Facebook Ads”) more effective and ensure that they correspond to the interests of users or have certain features (e.g., interests in specific topics or products determined based on visited websites) that we transmit to Facebook (so-called “Custom Audiences”).

Furthermore, we analyze the effectiveness of our ads by tracking whether users were redirected to our website after clicking on an ad (conversion). Compared to the standard version of “Facebook Pixel,” the extended data matching feature helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.

All transmitted data is stored and processed by Facebook, allowing it to be assigned to the respective user profile, and Facebook can use the data for its own advertising purposes in accordance with Facebook’s data usage policies (https://www.facebook.com/about/privacy/). The data may allow Facebook and its partners to place ads on and off Facebook.

All the processing described above, especially the setting of cookies for reading information on the used end device, is only carried out if you have given us your explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded a data processing agreement with the provider, which ensures the protection of data of our site visitors and prohibits unauthorized disclosure to third parties.

The information generated by Facebook is usually transferred to a Facebook server and stored there; in this context, there may also be a transfer to servers of Meta Platforms Inc. in the USA.

For data transfers to the USA, the provider has joined the EU-US Privacy Shield, which, based on an adequacy decision by the European Commission, ensures compliance with the European data protection level.

10.2 Google Ads Conversion Tracking

We use Google Ads to draw attention to our attractive offers with the help of advertisements (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertisements that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have decided to use conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.

As part of the use of Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.

Details on the processing initiated by Google Ads Conversion Tracking and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/plugin?hl=de

To address users who we receive data from in the context of business or business-related relationships in a more targeted manner, we use a customer matching function as part of Google Ads. To do this, we electronically transmit one or more files with aggregated customer data (especially email addresses and phone numbers) to Google. Google does not have access to clear data but automatically encrypts the information in the customer files using a special algorithm during the transmission process. Google can then only use the encrypted information to assign it to existing Google accounts that the individuals have set up. This allows personalized advertising to be displayed across all Google services associated with the respective Google account.

The transmission of customer data to Google only takes place if you have given us explicit consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google’s data protection measures regarding the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182 Google’s privacy policy can be viewed here: https://www.google.de/policies/privacy/

10.3 Google Ads Conversion Tracking

This website uses the online advertising program “Google Ads,” and within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the Google Ads program to draw attention to our attractive offers with the help of advertisements (so-called Google Adwords) on external websites. We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertisements that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the advertising costs incurred.

As part of the use of Google Ads, personal data may also be transferred to the servers of Google LLC. in the USA.

Details on the processing initiated by Google Ads Conversion Tracking and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

Please note that certain functions of this website may not be or only partially usable if you have deactivated the use of cookies.

Google’s privacy policy can be viewed here: https://www.google.de/policies/privacy/

10.4 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).

GMP uses cookies to display ads relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Google collects information about which ads are displayed in which browser via a cookie ID and can thus prevent them from being shown multiple times. In addition, GMP can use cookie IDs to record so-called conversions that relate to ad requests. This is the case, for example, when a user sees a GMP ad and later, when using the same browser, visits the advertiser’s website and buys something through this website. According to Google, GMP cookies do not contain personal information. Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server.

We have no influence on the scope and further use of the data collected by Google through the use of this tool and inform you according to our level of knowledge as follows: By integrating GMP, Google receives information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address. As part of the use of GMP, personal data may also be transferred to the servers of Google LLC. in the USA.

The privacy policy of GMP by Google can be found here: https://www.google.de/policies/privacy/

11) Page Functionalities

11.1 Facebook Plugins

On our website, plugins from the social network of the following provider are used: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of the so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our website containing such plugins is called up, no connection is established with the provider’s servers.

Only when you activate the plugins and thus give your consent to data transmission in accordance with Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the provider’s servers. In this process, regardless of whether you are logged into an existing user profile, information about your used end device (including your IP address), your browser, and your page history is transmitted to the provider and may be processed there.

If you are logged into an existing user profile on the provider’s social network, information about interactions performed via the plugins will also be published there and displayed to your contacts.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no effect on data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have concluded a data processing agreement with the provider, ensuring the protection of the data of our site visitors and prohibiting unauthorized disclosure to third parties.

11.2 Instagram Plugins

On our website, plugins from the social network of the following provider are used: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.

These plugins enable direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of the so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our website containing such plugins is called up, no connection is established with the provider’s servers.

You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no effect on data that has already been transmitted to the provider.

Data may also be transferred to: Meta Platforms Inc., USA.

We have concluded a data processing agreement with the provider, ensuring the protection of the data of our site visitors and prohibiting unauthorized disclosure to third parties.

12, Tools and Miscellaneous

12.1 – AccountOne

For the completion of our accounting, we use the service of the cloud-based accounting software from the following provider: AccountOne GmbH, Fördepromenade 4d, 24944 Flensburg, Germany.

The provider processes incoming and outgoing invoices and, if applicable, the bank movements of our company to automatically record invoices, match transactions, and create the financial accounting in a partially automated process.

If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in an efficient organization and documentation of our business transactions.

12.2 Cookie Consent Tool

This website uses a so-called “Cookie Consent Tool” to obtain effective user consent for consent-required cookies and cookie-based applications. The “Cookie Consent Tool” is displayed to users in the form of an interactive user interface when the page is called up, on which consent for certain cookies and/or cookie-based applications can be given by setting checkboxes. By using the tool, all consent-required cookies/services are only loaded if the respective user grants the corresponding consents by setting checkboxes. This ensures that only in the case of granted consent, such cookies are set on the respective user’s end device.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is nevertheless processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our online presence.

Further legal basis for the processing is also Art. 6 para. 1 lit. c GDPR. As data controllers, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user’s consent.

If necessary, we have concluded a data processing agreement with the provider, ensuring the protection of the data of our site visitors and prohibiting unauthorized disclosure to third parties.

Further information about the operator and the settings options of the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

13) Rights of the Data Subject

13.1 The applicable data protection law grants you the following rights against the data controller regarding the processing of your personal data (rights of data subjects), with reference to the specified legal basis for the respective exercise requirements:

Right to information according to Art. 15 GDPR
Right to rectification according to Art. 16 GDPR
Right to erasure according to Art. 17 GDPR
Right to restriction of processing according to Art. 18 GDPR
Right to notification according to Art. 19 GDPR
Right to data portability according to Art. 20 GDPR
Right to withdraw consent granted according to Art. 7 para. 3 GDPR
Right to lodge a complaint according to Art. 77 GDPR

13.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN PROVE COMPELLING, PROTECTABLE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US TO OPERATE DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

14) Duration of Storage of Personal Data

The duration of the storage of personal data is based on the respective legal basis, the purpose of processing, and, if applicable, additionally on the respective statutory retention period (e.g., commercial and tax retention periods).

In the case of processing personal data based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.

If there are legal retention periods for data that is processed within the framework of contractual or similar legal obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer necessary for contract fulfillment or contract initiation, and/or there is no longer a legitimate interest on our part in continuing storage.

In the case of processing personal data based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

In the case of processing personal data for the purpose of direct advertising based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise indicated in the specific processing situations provided in the other information in this statement, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

As of: November 27, 2023, 22:30:15