Privacy policy

Thank you for your interest in our online store. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data. Since changes in the law or changes in our business processes may require an adjustment of this privacy policy, we ask you to read through this privacy policy regularly.


You can also control your personal settings for the use of cookies on this website via the menu at following link: Cookie Management


1. Scope of application and responsible person; data protection officer


This data protection declaration applies to the Internet offering of the online store "pinqponq", which can be accessed under the domains "www.pinqponq.com" and the various subdomains (hereinafter "our website").


The responsible party within the meaning of the EU General Data Protection Regulation (hereinafter: DSGVO) and other national data protection laws of the member states as well as other data protection regulations is:


baesiq GmbH
Vitalisstraße 67
50827 Cologne
E-mail: info@baesiq.de


You can reach our data protection officer at the following contact options:


Data Protection Officer of the baesiq GmbH
Vitalisstraße 67
50827 Cologne
E-mail: datenschutz@baesiq.de


2. Principles of data processing


Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, telephone number, date of birth, e-mail address, IP address or user behavior. Information for which we cannot (or can only with a disproportionate effort) establish a link to your person, e.g. by anonymizing the information, are not personal data.


The processing of personal data (e.g. collection, retrieval, use, storage or transmission) always requires a legal basis or your consent.


Processed personal data are deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention obligations to be observed.


If we process your personal data for the provision of certain offers, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing and the respective storage period.


3. Individual data processing operations


3.1 Provision and use of the website


When you access and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.


When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security:


    1. IP address of the requesting computer
    2. Date and time of access
    3. Name and URL of the retrieved file
    4. Website from which the access is made (referrer URL)
    5. Browser used and, if applicable, the operating system of your computer, as well as the name of your access provider

For the aforementioned data processing, Section 25 para. 2 no. 2 of the Telecommunications Telemedia Data Protection Act (hereinafter: “TTDSG”) serves as the legal basis for the readout of stored information on your terminal device. The following processing of your personal data is based on our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO. The processing of the aforementioned data is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.


Third party hosting


Within the scope of processing on our behalf, our hosting service provider, “Shopify”, Shopify International Limited, Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Irland, provides us with the services for hosting and displaying the website. All data collected during the use of this website or in forms provided for this purpose in the online store, as described below, are processed on its servers. Processing on other servers only takes place within the framework explained in this declaration.


Your data will generally be stored on servers within the EU/EEA. The above mentioned service provider reserves the right in exceptional cases, however, that personal data may be transferred to the USA in this context. The USA is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. Due to the lack of an adequacy decision and without appropriate safeguards, there is in particular a risk that your data may be processed by US authorities for control and for monitoring purposes, possibly also without legal remedies.
In order to be able to ensure adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the service provider. Furthermore, where possible, we are in exchange with the service provider to ensure the protection of your personal data with any additional measures that may be required.


You can find more information on this page.


3.2 Creating a customer account


We collect your data when you provide it to us as part of your order. With the order, a customer account is automatically opened in our system. Mandatory fields are marked as such, because in these cases we necessarily need the data mandatory to open the customer account and you can not complete the account opening otherwise.


The following data is collected during the creation of the customer account:


    1. Salutation (optional)
    2. Name (invoice and package recipient)
    3. Address (billing and shipping address)
    4. E-mail address
    5. Phone number (optional for orders within Germany only)

We process the data provided by you in accordance with Art. 6 para. 1 p. 1 lit. b) DSGVO for the purpose of contract processing.


After complete deletion of your customer account, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.


The deletion of your customer account is possible at any time and can be realised either by sending a message to the contact option described above.


3.3 Purchase of goods


3.3.1 Purchase process


On our website, we offer you the opportunity to purchase our products by providing personal data. The data required for this is entered in an input mask and transmitted to us and stored. Mandatory fields are marked as such, because in these cases we need the data mandatory for opening the customer account and you can not complete the account opening otherwise. The data will only be passed on to third parties in the cases listed below.


The following data is collected during the ordering process:


    1. Salutation (optional)
    2. Name (invoice and package recipient)
    3. Address (billing and shipping address)
    4. E-mail address
    5. Payment information
    6. Phone number (optional for deliveries within Germany only)

When processing your personal data, which is necessary for the fulfillment of a purchase contract concluded with us, Art. 6 para. 1 lit. b) DSGVO serves as the legal basis.


With complete execution of the contract and full payment of the purchase price, your data will be blocked for further use and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to the further use of your data. Further storage may take place in individual cases if this is required by law.


3.3.2 Payment by credit card or PayPal


If you select the payment method (credit card or PayPal), your personal data will be forwarded to the payment service provider "Shopify Payments" (Shopify International Limited Victoria Buildings, 2. Floor, 1-2 Haddington Road, Dublin 4, D04 XN32) commissioned by us and to the credit institution commissioned with the payment or to the online payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must register with the payment service provider with your access data during the ordering process. In this respect, the privacy policy of the respective payment service provider applies.


The following data is transmitted to the payment service provider and involved credit institutions in the course of payment processing:


    1. Name of the invoice recipient
    2. Phone number
    3. E-mail address
    4. Billing address
    5. Name of the package recipient
    6. Shipping address
    7. Order number
    8. Credit card number, if applicable
    9. Account number
    10. Bank card check digit
    11. Bank code
    12. Invoice amount

When processing your personal data that is required for the fulfillment of a purchase contract concluded with us, i.e. in particular for payment processing, Art. 6 para. 1 lit. b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the implementation of pre-contractual measures. In some cases, we may also be legally obliged to transfer the data relating to you in accordance with the implementation of strong customer authentication under Directive EU 2015/2366 (PSD 2) or the Law on the Implementation of the Second Payment Services Directive (Zahlungsdiensteumsetzungsgesetz - ZDUG). Insofar as we are legally obligated to transfer data, Art. 6 para. 1 lit. c) DSGVO in conjunction with the corresponding regulations of Directive EU 2015/2366 (PSD 2) or the Law on the Implementation of the Second Payment Services Directive (Zahlungsdiensteumsetzungsgesetz - ZDUG) will be used as the legal basis.


With complete execution of the contract and full payment of the purchase price, your data will be blocked for further use and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to the further use of your data. Further storage may take place in individual cases if this is required by law.


If you choose to pay with "PayPal" during your order process, your personal data will be automatically transmitted to PayPal via the payment service provider PAYONE described above. PayPal is an offer of PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal assumes the function of an online payment service provider as well as a trustee and offers buyer protection services.


The personal data transmitted to PayPal are regularly first name, last name, address, e-mail address, IP address or other data necessary for payment processing. Also necessary for the processing of the purchase contract are such personal data that are related to the respective order (such as number of items, item number, invoice amount and taxes and other billing information).


This corresponds with our legitimate interest in offering an efficient and secure payment method (Art. 6 para. 1 lit. f) DSGVO). In this context, we share the aforementioned data with PayPal to the extent necessary for the fulfillment of the contract (Art. 6 para. 1 lit b) DSGVO).


PayPal also reserves the right to collect personal data from the buyer. According to PayPal, this can be the following information:


    1. Name
    2. Address
    3. Phone number
    4. E-mail
    5. Account number

PayPal may share your personal data with affiliated companies and service providers or subcontractors to the extent necessary to fulfill contractual obligations or to process the data on behalf.


The personal data we transmit to PayPal may be transmitted by PayPal to credit reporting agencies. This transmission is for the purpose of checking identity and creditworthiness. PayPal uses the result of the credit check, taking into account the statistical probability of payment default, for the purpose of deciding whether to provide the respective payment method. The creditworthiness information may contain probability values (so-called score values). As far as score values are included in the result of the credit report, these have their basis in a scientifically recognized mathematical-statistical procedure.


You can find out which credit reporting agencies are involved here.


You have the option to revoke your consent to the processing of your personal data at any time to PayPal. However, the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation, insofar as the personal data must be processed, used or transmitted for payment processing in accordance with the contract.


You can access PayPal's privacy policy self-service portal. There we process in particular your first and last name, e-mail address and address data, which we forward to DHL via interface. In this context, your data will only be stored by us for the purpose of forwarding and will then be deleted. DHL is the responsible party for further data processing.


You can find more information on this page: Data protection (dhl.de)


3.5 Complaint form


Via our website you have the option to complain about purchased items. For the processing of your complaint, we process your first and last name, your address, your e-mail address and information about the claimed item.


This happens as part of the fulfillment of the contract according to Art. 6 para. 1 lit. b) DSGVO.


We store your data as long as this is necessary for the complaint process and then delete it, unless tax or commercial law retention periods require longer storage.


3.6 Retailer search / Store finder / Event finder


On our website you can use our Storefinder to find out from which retailer in your area you can buy our articles or at which location certain events take place. For our Storefinder, we use the software of the service provider Storemapper, Storemapper, 5201 Eden Ave Suite 300 Edina, Minnesota 55436, USA. This is a cloud platform for managing location-based content, such as address data.


You have the option to find the nearest retailer of our goods without providing personal data. If you consent to the location determination, we will show you the nearest retailer based on the determined location.


The legal basis for the location determination is your consent and thus Art. 6 para. 1 lit. a) DSGVO.


Your data will be deleted as soon as it is no longer required to achieve the purposes for which it was collected or if you revoke your consent and there are no statutory retention periods to the contrary.


3.7 Prize Competitions


Every now and then we offer you the opportunity to participate in prize competitions on our social media websites on Instagram. In addition, the terms of use and data protection provisions of the respective online platforms apply. As a matter of principle, we collect and process personal data of the participants in the prize competition only insofar as this is necessary for participating in the competition and its processing. When participating in prize competitions, we first process the following data from the participants: Name of the Instagram account We process the aforementioned data of the participants to carry out the competition, in particular to determine the prize and to notify the winners. After the winners have been determined, we will then process the following data from the participants: Name, age and address We process the aforementioned data of the participants to carry out the prize competition, in particular to determine whether the participants are also eligible to participate and to send the prizes. If the above data is not provided, it will not be possible to send the prizes. The aforementioned data processing for the purpose of participation in the prize competition is carried out in accordance with Art. 6 Para. 1 lit. b) DSGVO. As soon as a prize competition has ended and the winners have been drawn, notified and the prizes have been sent, your personal data will be deleted. This does not affect the relevant statutory retention periods. During the legal retention period, your personal data will be blocked and will not be used for any other data processing. We do not pass on the participants' data to third parties unless this is necessary for the processing of the competition (e.g. for sending prizes etc.). In some cases, we use external service providers to process data. These have been carefully selected and commissioned by us. They are bound by our instructions and are regularly monitored.


3.8 The Use of social media plugins


So-called social plugins ("plugins") of the social networks Instagram and Pinterest are used on our website. These services are operated by the companies Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) and by Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street Dublin 2, Ireland).


When you visit our website that contains such a plugin, your browser establishes a direct connection to the servers of Instagram and Pinterest. The content of the plugin is transmitted directly to your browser by the respective provider and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged into the respective network. This information (including your IP address) is transmitted by your browser directly to a server of the respective social network and stored there. If you are logged in to one of the providers via your account, the providers can directly assign the visit to our website to your profile on Instagram and Pinterest. If you interact with the plugins, for example by clicking the "Instagram" button, the corresponding information is also transmitted directly to a server of the providers and stored there. This information will also be published on the social network, Instagram or Pinterest account and displayed there to your contacts.


For further information on the purpose and scope of data collection and further data processing operations and the use of the data by the providers, as well as your rights in this regard and setting options for protecting your data and privacy, please refer to the data protection notices of the respective providers:


Privacy policy of Instagram


Privacy policy of Pinterest


If you do not want the various providers to directly assign the data collected via our website to your respective account, you must log out of the corresponding service before visiting our website. You can also completely prevent the loading of Instagram plugins with add-ons for your browser, e.g. with the script blocker "NoScript".


3.9 Embedding YouTube videos


We embed YouTube videos on our website (so-called framing). In this way, we would like to illustrate the content of individual sub-pages. As soon as you click on the video to play it, data is transmitted to the operator of YouTube. This is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.


Google Ireland Ltd. may track the following, among other things, whether or not you are logged into your YouTube account:


    1. How long you stayed on a web page
    2. IP address
    3. Where you clicked
    4. From which side you came
    5. Which page you accessed next
    6. Which websites and apps you have accessed in the past

Please note that we do not have clear information from the service provider on the above scope of data processing. If you are logged into your YouTube account, you enable YouTube to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of your YouTube account. Legal basis for the possible linked storage of information on your terminal device and its subsequent readout according to § 25 para. 1 p. 1 TTDSG. You can revoke this consent for the future at any time by deactivating the cookies in your browser settings or in our cookie content manager. The following processing of your personal data is based on your expressly given consent according to Art. 6 para. 1 lit. a) DSGVO. You can revoke this consent at any time by deactivating the cookies in your browser settings or in our cookie content manager for the future. In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. The USA is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. In particular, due to the lack of an adequacy decision and without appropriate safeguards, there is a risk that your data may be processed by U.S. authorities for control and for monitoring purposes, possibly without legal remedies. In order to be able to ensure adequate protection of your personal data in case of transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the service provider. Furthermore, where possible, we are in exchange with the service provider to ensure the protection of your personal data with any additional measures that may be required.


You can find more information in our Cookie Consent Manager.


3.10 Contact options


Visitors to our website can use the options listed below to contact us. In each case, we process in particular those personal data that you provide to us in this context.


3.10.2 E-mail


We offer you the possibility to send us your request by e-mail. In addition to your e-mail address, we process the information and data that you provide to us in this way. We use the ticket system Zendesk, a customer service platform of Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA, to process customer inquiries.


The legal basis for any associated storage of information on your terminal device and its subsequent readout is Section 25 para. 2 No. 2 TTDSG. The following processing of your personal data is based on our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO. If your contact is directed towards the conclusion of a purchase contract, the legal basis is Art. 6 para. 1 lit. b) DSGVO.


For your own protection of your personal data, please refrain from providing us in particular with special categories of personal data within the meaning of Art. 9 para. 1 DSGVO (for example: health data) via this without separate encryption.


In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. The USA is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. In particular, due to the lack of an adequacy decision and without appropriate safeguards, there is a risk that your data may be processed by U.S. authorities for control and for monitoring purposes, possibly also without legal remedies. In order to be able to ensure adequate protection of your personal data in case of transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the service provider. Furthermore, where possible, we are in exchange with the service provider to ensure the protection of your personal data with any additional measures that may be required.


The data provided and the message history with our service desk will be stored for follow-up questions and subsequent contacts and, after the purpose of storage has ceased to apply, deleted in accordance with data protection law, insofar as there are no statutory retention periods to the contrary.


For more information about Zendesk's data processing, please see Zendesk's Privacy Policy.


3.10.3 Contact form


You can reach us by contact form to clarify your request. In doing so, we process the personal data that you provide to us during the call. We use the ticket system Zendesk, a customer service platform of Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA, to process customer inquiries.


The legal basis for any associated storage of information on your terminal device and its subsequent readout is Section 25 para. 2 No. 2 TTDSG. The following processing of your personal data is based on our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO. If your contact is directed towards the conclusion of a purchase contract, the legal basis is Art. 6 para. 1 lit. b) DSGVO.


For your own protection of your personal data, please refrain from informing us in particular of special categories of personal data within the meaning of Art. 9 para. 1 DSGVO (for example: health data) about this.


In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. The USA is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. In particular, due to the lack of an adequacy decision and without appropriate safeguards, there is a risk that your data may be processed by U.S. authorities for control and for monitoring purposes, possibly also without legal remedies. In order to be able to ensure adequate protection of your personal data in case of transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the service provider. Furthermore, where possible, we are in exchange with the service provider to ensure the protection of your personal data with any additional measures that may be required.


The data provided and the message history with our service desk will be stored for follow-up questions and subsequent contacts and, after the purpose of storage has ceased to apply, deleted in accordance with data protection law, insofar as there are no statutory retention periods to the contrary.


For more information about Zendesk's data processing, please see Zendesk's Privacy Policy.


4. Data transfer


We will only share your personal information with third parties if:


    1. you have given your express consent to this in accordance with Art. 6 Para. 1 lit. a) DSGVO
    2. this is legally permissible and necessary according to Art. 6 para. 1 lit. b) DSGVO for the fulfillment of a contractual relationship with you
    3. according to Art. 6 para. 1 lit. c) DSGVO a legal obligation for the transfer exists
    4. the disclosure is necessary in accordance with Art. 6 para. 1 f) DSGVO for the protection of legitimate business interests, as well as for
    5. the assertion, exercise or defense of legal claims and there is no reason to assume that you have an overriding legitimate interest in the non-disclosure of your data.

Which data processing is concerned in the specific case can be found below the respective data processing described.


Furthermore, we are obliged by law in certain cases to disclose your personal data to third parties. This is the case, for example, if there is suspicion of a criminal offense or misuse of our website. We are then obliged to pass on your data to the relevant law enforcement authorities. In addition, your data is stored exclusively in our database and on our servers or those of our order processors.


5. Data processing for advertising purposes


5.1 E-mail advertising with newsletter registration


We offer you the pinqponq newsletter service. With your consent, you can subscribe to our newsletter, with which we inform you about product news, events, prize competitions and current offers.


How do I register?


For the dispatch of our newsletter requiring registration, we use the so-called double opt-in procedure, i.e. we will only send you a newsletter if you have previously expressly consented that we should activate the newsletter service. In addition, you must confirm that the e-mail address you have provided belongs to you. For this purpose, we will send you a notification e-mail and ask you to confirm that you are the owner of the e-mail address provided by clicking on a link contained in this e-mail.


What data is collected and how? When you register for a newsletter, we automatically save your IP address and the times of registration and confirmation. This allows us to prove that you have actually registered and, if necessary, to detect misuse of your e-mail address.


The only mandatory data for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and will be used to address you personally. We use the resulting data exclusively for sending the requested information and offers.


In order to continuously improve your shopping experience and to protect you from unnecessary advertising, we use the information you provide and automatically generate to design individual advertising tailored to you and your interests. For example, we use confirmations of receipt and reading of e-mails, your order history, date and time of your visit to the homepage or product pages that you have visited. The analysis and evaluation of this information enables us to send you individualized advertising. Our goal in doing so is to make our advertising more useful and interesting to you. In this way, we want to prevent indiscriminate advertising and only send you advertising, for example in the form of newsletters or product recommendations in e-mails, which corresponds to your interests.


For the provision, processing and dispatch of the newsletter, we use the newsletter software Klaviyo, Klaviyo Inc., headquarter in 125 Summer St Floor 6 Boston, MA 02111 USA. Klaviyo is prohibited from disclosing your data to third parties without authorization or from using it for purposes other than sending newsletters.


The legal basis for the processing of the data after registration for the newsletter by the user is Art. 6 para. 1 lit. a) DSGVO if the user has given his consent. If you do not wish to receive individual advertising, you can revoke your consent to the newsletter service at any time with effect for the future (see below). If your child has not reached the age of 16, we collect personal data of your children, after giving your consent in accordance with Art. 6 para. 1 a) DSGVO in conjunction with Art. 8 para. 1 DSGVO, only in connection with the order of the newsletter for the purpose of customizing the newsletter to send you age-appropriate information and product recommendations. You can also revoke this consent at any time with effect for the future (see below).


In this context, personal data may be transferred to Klaviyo in the USA. The USA is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. In particular, due to the lack of an adequacy decision and without appropriate safeguards, there is a risk that your data may be processed by U.S. authorities for control and for monitoring purposes, possibly also without legal remedies. In order to be able to ensure adequate protection of your personal data in case of transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the service provider. Furthermore, where possible, we are in exchange with the service provider to ensure the protection of your personal data with any additional measures that may be required.


You can find more information about the provider here.


How do I log out?


You can revoke your consent to the sending of the newsletter at any time and unsubscribe from the newsletter. You can declare the revocation by clicking on the link provided in each newsletter e-mail or by e-mail to info@pinqponq.com or by sending a message to the contact details provided in the imprint. Your e-mail address and optionally title and name will be stored as long as you have subscribed to the newsletter. After unsubscribing from the newsletter, your e-mail address and other data will be deleted.


5.2 E-mail advertising without newsletter registration and your right of objection


If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right, on the basis of Section 7 para 3 of the German Unfair Competition Act (UWG), to regularly send you e-mail offers for products similar to those you have already purchased from our range.


This serves to protect our legitimate interests in addressing our customers in an advertising manner, which outweigh our interests. The legal basis is therefore Art. 6 para. 1 lit. f) DSGVO.


You can object to this use of your e-mail address at any time by sending a message to the contact option described above or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates.


For the provision, processing and dispatch of the newsletter, we use the newsletter software Klavyio, Klaviyo Inc., headquarter in 125 Summer St, floor 6 Boston, MA 02111, USA. Klaviyo is prohibited from disclosing your data to third parties without authorization or from using it for purposes other than sending newsletters.


In this context, personal data may be transferred to Klavyio in the USA. The USA is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. In particular, due to the lack of an adequacy decision and without appropriate safeguards, there is a risk that your data may be processed by U.S. authorities for control and for monitoring purposes, possibly also without legal remedies. In order to be able to ensure adequate protection of your personal data in case of transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the service provider. Furthermore, where possible, we are in exchange with the service provider to ensure the protection of your personal data with any additional measures that may be required.


You can find more information here.


5.3 Postal advertising and your right of objection


Furthermore, we reserve the right to use your first and last name as well as your postal address for our own advertising purposes, e.g. to send you interesting offers and information about our products by mail.


This serves to protect our legitimate interests in an advertising approach to our customers, which outweigh our interests in the context of a balancing of interests pursuant to Art. 6 para. 1 p. 1 lit. f) DSGVO.


You can object to the storage and use of your data for these purposes at any time with effect for the future by sending a message to the contact option described above.


6. Cookies and web analytics


We use cookies on our website. Cookies are small files that are sent by us to the browser of your terminal device during your visit to our website and stored there.


Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. Cookies are, for example, able to recognize the browser you use when you visit our website again and to transmit various information to us. With the help of cookies, we can, among other things, make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly from your browser. Cookies do not cause any damage to your end device. They cannot execute programs or contain viruses.


Various types of cookies are used on our website, the type and function of which are explained in more detail below.


Function 1: Essential (or technically necessary) cookies

These cookies are required for technical reasons so that you can visit our website and use functions offered by us. In addition, these cookies contribute to a safe and compliant use of the website.


Function 2: Marketing cookies

Advertising cookies (third party) allow you to view various offers that match your interests. Via these cookies, the web activities of users can be recorded over a longer period of time. You may recognize the cookies on different end devices used by you. Furthermore, certain cookies allow us to connect to your social networks and share content from our website within your networks.


The legal basis for the use of technically necessary cookies for the linked storage of information on your terminal device and its subsequent readout is Section 25 para. 1 No. 2 TTDSG. The following processing of your personal data is based on our legitimate interest according to Art. 6 para. 1 lit. f) DSGVO.


For non-technically necessary cookies or so-called third-party cookies, we require your consents. If you have given us your consents for the use of a non-technically necessary cookie on the basis of a notice ("cookie banner") issued by us on the website, the permissibility for the associated storage of information on your terminal device and its subsequent reading is governed by Section 25 para. 1 sentence 1 TTDSG. You can revoke this consent for the future at any time by deactivating cookies in your browser settings or in our Cookie Consent Manager.


The following processing of your personal data is based on your explicit consent pursuant to Art. 6 para. 1 a) DSGVO. You can also revoke this consent for the future at any time by deactivating cookies in your browser settings or in our cookie content manager.


As soon as the data transmitted to us via the cookies is no longer required to achieve the purposes described above, this information is deleted, in particular when the cookies are deactivated. Further storage may take place in individual cases if this is required by law. The management of cookie settings is possible for you via the setting options listed below or by configuring your browser settings.


Most browsers are preset to accept cookies by default. However, you can configure your respective browser so that it only accepts certain cookies or no cookies at all. We would like to point out, however, that you may no longer be able to use all the functions of our website if cookies are deactivated by your browser settings on our website. You can also delete cookies already stored in your browser via your browser settings or have the storage period displayed. Furthermore, it is possible to set your browser to notify you before cookies are stored. Since the various browsers may differ in their respective functionalities, we ask you to use the respective help menu of your browser for the configuration options. If you want a comprehensive overview of all third-party accesses to your Internet browser, we recommend installing specially developed plug-ins for this purpose.


You can find more information about the cookies used in detail in our Cookie Consent Manager. Furthermore, you can manage your consents there: Manage your consent


We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany), a cloud-based business intelligence solution, on our website. Klar extracts, stores and processes data from our shop system and various marketing data sources on our behalf. The legal basis of the processing is our legitimate interest in improving our product offering for our users pursuant to Art. 6 (1) p. 1 lit. f DSGVO.For more information, please see the privacy policy on Klar's website.

 


7. SENDING RATING REMINDERS BY E-MAIL


We offer you the opportunity to submit reviews of our products. If we have received your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right to send you a product review reminder by e-mail.


This serves to protect our legitimate interests in an advertising approach to our customers, which outweigh our interests in the context of a balancing of interests pursuant to Art. 6 para. 1 lit. f) DSGVO.


There is a button in the email which forwards you to the product review sub-page. There you can rate the product you have purchased with stars from 1 to 5 and provide information about your experience with the respective product in accordance with the input field. Providing the rating by entering the information is voluntary; the personal data you enter is not processed until you submit the information. You can rate the product under the first name you have given us or anonymously. If you have decided to submit a review, it will be published in our online shop below the product offer next to your first name, unless you have decided to submit your review anonymously.


We use the services of the software Klaviyo, Klaviyo Inc, 125 Summer St Floor 6 Boston, MA 02111 USA and the software Reviews.io, 29-35 Forresters Building, St Nicholas Place, Leicester, LE1 4LD, United Kingdom to provide, process and send review reminders by email.


In this context, Klaviyo may transfer personal data to the USA. The USA is assessed by the European Court of Justice as a country with an inadequate level of data protection by EU standards. In particular, due to the lack of an adequacy decision and without appropriate safeguards, there is a risk that your data may be processed by US authorities for control and for monitoring purposes, possibly also without redress. In order to be able to guarantee adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the service provider. Furthermore, where possible, we are in exchange with the service provider to ensure the protection of your personal data with any additional measures that may be necessary.


In the course of using Review.io, personal data may be transferred to countries outside the EU/EEA, in particular to the USA, Switzerland or the United Kingdom. In order to be able to guarantee adequate protection of your personal data in the event of the transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the provider. The USA is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. Due to the lack of an adequacy decision and without appropriate safeguards, there is a particular risk that your data may be processed by US authorities for control and for monitoring purposes, possibly also without any legal remedy. Furthermore, where possible, we are in constant exchange with the provider to ensure the protection of your personal data with any additional measures that may be necessary. You can find more information about the provider here.


You can object to the processing of your personal data in connection with the evaluation reminder by e-mail and the use of the e-mail address provided at any time. The objection can be made by clicking on the link contained in each e-mail, by sending an e-mail to info@pinqponq.com or by sending a message to the contact details provided in the imprint. If you decide to delete your rating, we will delete all personal data including your first name, email address and the associated rating. You can also explain this to us at any time by sending an email to the previously mentioned email address.


8. hyperlinks to external websites


Our website contains hyperlinks to websites of other providers. When you activate these hyperlinks, you will be redirected from our website directly to the website of the other provider. You will recognize this, among other things, by the change of URL.


We cannot accept any responsibility for the confidential handling of your data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. This applies in particular to links to our social media channels on Instagram, Facebook and Pinterest. Please inform yourself about the handling of your personal data by these companies directly on these websites.


We cannot assume any responsibility for the confidential handling of your data on third-party websites, as we have no influence on whether these companies comply with data protection regulations. This applies in particular to links to our social media channels on Instagram and Facebook and Pinterest. Please inform yourself about the handling of your personal data by these companies directly on these websites.


With regard to certain processing operations, we are jointly responsible for data protection with, in particular Facebook or Instagram according to Art. 26 DSGVO.


In addition to baesiq GmbH, the following companies are responsible for the company presences:


    1. Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland).
    2. Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
    3. Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street Dublin 2, Ireland)

However, you use the platforms on your own responsibility, especially the interactive functions (e.g. commenting, sharing, liking).


In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the USA. The USA is assessed by the European Court of Justice as a country with an inadequate level of data protection according to EU standards. In particular, due to the lack of an adequacy decision and without appropriate safeguards, there is a risk that your data may be processed by U.S. authorities for control and for monitoring purposes, possibly without legal remedies. In order to be able to ensure adequate protection of your personal data in case of transfer of personal data to such so-called third countries, we have concluded so-called EU-US standard contractual clauses with the service provider. Furthermore, where possible, we are in exchange with the service provider to ensure the protection of your personal data with any additional measures that may be required.


On the respective profiles, we publish and share current offers, new products, competitions as well as current trends about pinqponq. In addition, we collect data for statistical purposes in order to be able to further develop and optimize the content and to make the pinqponq offer more attractive. The data required for this purpose is prepared and made available by the respective providers. We have no influence on the presentation and processing of the data. In addition, your personal data is processed for market research, communication and advertising purposes. Based on your usage behavior and the resulting interests, usage profiles may be created. This allows, among other things, interest-based advertisements and personalized product recommendations to be placed within and outside the platforms that presumably correspond to your interests. This is usually done with the help of cookies that are stored on your computer to evaluate your user behavior. Independently of this, data that is not collected directly from your end devices may also be stored in your usage profiles. The storage and analysis also takes place across devices; this applies in particular, but not exclusively, if you are registered as a member and logged in to the respective platforms.


If you have set yourself a user profile on one of the above-mentioned social networks, the means, scope and purposes of the processing of personal data in the social networks are primarily determined by the respective operators. If you are logged into your respective account, you enable the providers to assign your surfing behavior directly to your personal profile. You can prevent this by logging out of the respective account.


You can find more information on the objection options and the processing of your data by these companies under the following links:


Facebook

Privacy policy: https://www.facebook.com/about/privacy/ Opt-out: https://www.facebook.com/settings?tab=ads and http://www.youronlinechoices.com


Instagram

Privacy policy: https://help.instagram.com/519522125107875 Opt-Out: http://www.networkadvertising.org/managing/opt_out.asp and http://www.youronlinechoices.com


Pinterest

Privacy policy: https://policy.pinterest.com/en/privacy-policy Opt-Out: https://help.pinterest.com/en/article/personalization-and-data

 

9.Privacy notice for the use of WhatsApp


You may use WhatsApp to contact us and start a conversation. We are the data controller within the meaning of Art. 4 No. 7 GDPR for subsequent data processing in connection with WhatsApp. For offering and using WhatsApp, we use the software solution of Charles GmbH, Gartensstr. 86-87, 10115 Berlin, under a data processing agreement. Charles stores all personal data in the EU. As an official WhatsApp partner, Charles uses the WhatsApp Business API with the consequence that within our responsibility no other third parties or WhatsApp gain access to your communication content.

Your use of WhatsApp is governed solely by the agreements you entered into with WhatsApp. According to the terms of use of WhatsApp, we have your phone number and username through your contact. We use this and other information you provide to recognize you and your preferences and to reply to your WhatsApp messages. The legal basis here is your consent to be contacted in accordance with Art. 6 (1) (a) GDPR. In addition, we will send you newsletters via WhatsApp, if you have given us your consent to do so.

You can revoke consent already given at any time, with future effect. According to the GDPR, you also have the right to information, correction, portability, and deletion of your personal data, as well as the right to restrict or object to certain processing. You also have the right to complain to the responsible supervisory authority.

For more information, please take a look at our data processors:

Charles GmbH: https://www.hello-charles.com/wiki/whatsapp-newsletter/

WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.whatsapp.com/legal/privacy-policy-eea


10. Clarity


This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity/ (hereinafter referred to as "Clarity“).


Clarity is a tool for analysing user behaviour on this website. Clarity records in particular mouse movements and creates a graphical representation of which part of the website users website users scroll particularly frequently (heat maps). Clarity can also record sessions so that we can view page usage in the form of videos. We also receive information about the general general user behaviour within our website. Clarity uses technologies that enable the recognition of the user for the purpose of analysing user user behaviour (e.g. cookies or the use of device fingerprinting). Your personal data is stored on Microsoft servers (Microsoft Azure Cloud Service) in the USA.


If consent has been obtained, the above-mentioned service is used exclusively on the basis of Art. 6 para. 1 lit. a GDPR and § 25 TTDSG. Consent can be revoked at any time. If no consent has been obtained, this service is used on the basis of Art. 6 para. 1 lit. f GDPR; the website lit. f GDPR; the website operator has a legitimate interest in effective user analysis.


Further details on Clarity's data protection can be found here: https://docs.microsoft.com/en-us/clarity/faq.

The company is certified in accordance with the "EU-US Data Privacy Framework" (DPF). The DPF is an agreement between the European Union and the USA that is intended to ensure compliance with European data protection standards for data processing in the USA. Every company certified under DPF-certified company undertakes to comply with these data protection standards. Further information on this can be obtained from the provider at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detailcontact=true&id=a2zt0000000KzNaAAK&status=Active


Data processing


We have concluded a data processing agreement (DPA) for the use of the above-mentioned service. This is a contract prescribed by data protection law, which guarantees that it will only process the personal data of our website visitors in accordance with our instructions and in compliance with the GDPR


11. Your rights


As a concerned party, you have the following rights:

In addition to baesiq GmbH, the following companies are responsible for the company presences:


    1. in accordance with Art. 15 DSGVO the right to request information about your personal data processed by us to the extent specified therein;
    2. in accordance with Art. 16 DSGVO the right to demand the correction of incorrect or completion of your personal data stored by us without delay;
    3. in accordance with Art. 17 DSGVO the right to request the deletion of your personal data stored by us, unless the further processing is necessary
      1. to exercise the right to freedom of expression and information;
      2. to fulfill a legal obligation;
      3. for reasons of public interest or
      4. for the assertion, exercise or defense of legal claims;
    4. in accordance with Art. 18 DSGVO the right to request the restriction of the processing of your personal data, insofar as
      1. the accuracy of the data is disputed by you;
      2. the processing is unlawful, but you object to its erasure;
      3. we no longer need the data, but you need them to assert, exercise or defend legal claims, or
      4. you have objected to the processing pursuant to Art. 21 DSGVO;
    5. in accordance with Art. 20 DSGVO, the right to receive your personal data that you have provided to us in a structured, common and machine-readable format or to request that it be transferred to another controller;
    6. the right to complain to a supervisory authority pursuant to Art. 77 DSGVO. As a rule, you can contact the supervisory authority of your usual place of residence or workplace or our company headquarters.

If you have any questions regarding the collection, processing or use of your personal data, for information, correction, blocking or deletion of data, as well as revocation of any consent given or objection to a particular use of data, please contact our above-mentioned data protection officer.


Right of objection

Insofar as we process personal data as explained above in order to protect our legitimate interests which prevail in the context of a balancing of interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you can exercise this right at any time as described above. If the processing is carried out for other purposes, you will only have the right to object if there are reasons arising from your particular situation. After exercising your right to object, we will no longer process your personal data for these purposes unless we can demonstrate compelling legitimate reasons for the processing which override your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. This does not apply if the processing is for direct marketing purposes. In this case, we will not further process your personal data for this purpose.