Privacy policy

Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for entering into a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This only applies insofar as no other information is provided for the processing operations described below. "Personal data" means all information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.
Each time you access our website, usage data is transmitted to us or our web host/IT service provider by your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the accessed page, date and time of access, IP address, amount of data transferred, and the requesting provider. Processing is based on Art. 6(1)(f) GDPR due to our legitimate interest in ensuring the uninterrupted operation of our website and in improving our services.

Your data may be transmitted to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision from the EU Commission exists for Canada. For the USA, an adequacy decision under the Trans-Atlantic Data Privacy Framework (TADPF) is in place. Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the Standard Contractual Clauses of the EU Commission.

Contact

Data Controller

You may contact us if desired. The data controller for data processing is:
Karsten Fröiland
An der Alster 6, 20099 Hamburg, Germany
Phone: +49 40 237 24 33 312
Email: kontakt@wobie.de

Initiated Contact by Email

If you initiate contact with us by email, we collect your personal data (name, email address, message content) only to the extent you provide it. The data processing serves the purpose of handling and responding to your contact request.
If the contact relates to pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or concerns an existing contract between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR, as it serves our legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
We use your email address only to respond to your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data (name, email address, message content) only to the extent you provide it. The data processing serves the purpose of contacting us.
If the contact relates to pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or concerns an existing contract between you and us, this data processing is based on Art. 6(1)(b) GDPR.
If the contact is made for other reasons, this data processing is based on Art. 6(1)(f) GDPR, as it serves our legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.
We use your email address only to respond to your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

Orders

Collection, Processing, and Transfer of Personal Data for Orders

When placing an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and handle your inquiries. The provision of the data is required for entering into a contract. Failure to provide the data means that no contract can be concluded. The processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.
Your data may be transferred to shipping companies, dropshipping or fulfillment providers, payment service providers, service providers for order processing, and IT service providers. In all cases, we strictly observe legal requirements. The scope of data transfer is limited to the minimum necessary.

Your data may be transferred to third countries outside the EU, in particular to Canada and the USA, and processed there. An adequacy decision from the EU Commission exists for Canada. For the USA, an adequacy decision under the Trans-Atlantic Data Privacy Framework (TADPF) is in place. Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the Standard Contractual Clauses of the EU Commission.

Advertising

Use of Email Address for Sending Newsletters

We use your email address to send information and offers via newsletter, provided you have given your explicit consent. The data processing serves exclusively the purpose of advertising communication. For this purpose, we process your email address as well as any other data you may have voluntarily provided when registering for our newsletter.

The processing is based on Art. 6(1)(a) GDPR with your consent. You may revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent until the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
Even after removal from the mailing list, we may continue to store your email address in a so-called blacklist to prevent you from receiving newsletter emails from us in the future. This storage is based on Art. 6(1)(f) GDPR, as it serves our legitimate interest and yours in preventing the reuse of your email address for sending our newsletter. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation.

Use of Email Address for Direct Advertising

We use your email address, obtained in connection with the sale of a product or service, to send electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to such use. Providing the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded.
The processing is based on Art. 6(1)(f) GDPR, as it serves our legitimate interest in direct advertising. You may object to the use of your email address for this purpose at any time by contacting us. The contact details for exercising your objection can be found in the imprint. You may also use the designated link in the advertising email. This will incur no costs other than transmission costs according to the basic tariffs.

Inventory Management

Use of an External Inventory Management System

We use an inventory management system for contract processing within the framework of order processing. For this purpose, the personal data collected during your order is transmitted to Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.

This processing is carried out as part of an order processing agreement.

Payment Service Providers

Use of PayPal Checkout

On our website, we use the payment service PayPal Checkout provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449 Luxembourg; "PayPal"). The processing of data serves the purpose of enabling you to pay via this payment service. When you select and use PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data necessary for payment processing is transmitted to PayPal in order to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR.

Cookies may be stored to allow recognition of your browser. This data processing is carried out based on Art. 6(1)(f) GDPR, due to our legitimate interest in offering customer-oriented payment options. You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(f) GDPR.

Credit Card via PayPal, Direct Debit via PayPal & “Pay Later” via PayPal

For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit check using mathematically-statistical procedures with credit agencies. PayPal transmits the personal data required for this credit check to a credit agency and uses the resulting information about the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship.

The credit report may include probability scores (“score values”) calculated using scientifically recognized mathematical-statistical methods, which may include address data. Your legitimate interests are taken into account according to legal requirements.

The data processing serves the purpose of credit checking for contract initiation. This processing is based on Art. 6(1)(f) GDPR, due to our legitimate interest in protection against payment defaults when PayPal advances funds. You have the right, for reasons arising from your particular situation, to object at any time to this processing by notifying PayPal. Providing these data is necessary for the conclusion of the contract using your chosen payment method. Failure to provide it will result in the contract not being concluded with the selected payment method.

Third-Party Providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Art. 6(1)(b) GDPR. For executing this payment method, PayPal may transmit the data to the respective provider. This processing is also based on Art. 6(1)(b) GDPR. Local third-party providers may include:

Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
Google Pay (Google Ireland Limited, Gordon House, 4 Barrow Street, Dublin, D04 E5W5, Ireland)

Invoice Purchase via PayPal

When paying via invoice, the necessary data for payment processing is first transmitted to PayPal. To execute this payment method, PayPal transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR. Ratepay may perform a credit check using mathematically-statistical procedures (probability/score values) with credit agencies as described above. The processing serves the purpose of credit checking for contract initiation and is based on Art. 6(1)(f) GDPR due to our legitimate interest in preventing payment defaults if Ratepay advances funds. Further information about data protection and which credit agencies Ratepay uses can be found at:

For more information about data processing when using PayPal, see PayPal’s privacy policy:

http://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of Klarna Payment Options

On our website, we use the payment service Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna"). When selecting and using Klarna, the data necessary for payment processing is transmitted to Klarna to fulfill the contract with you using the chosen payment method. This processing is based on Art. 6(1)(b) GDPR.

“Pay Later” (Invoice), “Pay Now” (Direct Debit, Credit Card, Instant Transfer), “Financing” (Installment Purchase)

For certain payment methods such as “Pay Later” (invoice), “Pay Now” (direct debit, credit card, instant transfer), or “Financing” (installment purchase), Klarna may perform a credit check using mathematically-statistical procedures with credit agencies. Klarna transmits the personal data required for this check—including first and last name, address, gender, email address, IP address, and order-related data—for identity and credit verification. The received information about the statistical probability of payment default is used for a balanced decision regarding the establishment, execution, or termination of the contractual relationship.

Credit reports may include probability scores (“score values”) calculated using scientifically recognized mathematical-statistical procedures, which may incorporate address data. Your legitimate interests are considered in accordance with legal requirements.

The data processing serves the purpose of credit checking for contract initiation. This processing is based on Art. 6(1)(f) GDPR, due to our legitimate interest in protecting against payment defaults when Klarna advances funds. You have the right, for reasons arising from your particular situation, to object at any time to this processing by notifying Klarna. Providing these data is necessary for concluding the contract using your chosen payment method. Failure to provide them will prevent the contract from being concluded with the selected payment method.

Further information, including which credit agencies Klarna shares your personal data with, can be found at:

http://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

General information about Klarna is available at:

http://www.klarna.com/de/

Your personal data is processed by Klarna in accordance with applicable data protection regulations and Klarna’s privacy policy:

http://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or on the user’s computer system by the internet browser. When a user visits a website, a cookie can be stored on the user’s operating system. This cookie contains a unique character string that allows the browser to be identified when the website is visited again.

You can find information on how to manage (including disable) cookies in the most common browsers at the following links:

Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless stated otherwise in this privacy policy, we only use technically necessary cookies to make our website more user-friendly, efficient, and secure. Cookies also allow our systems to recognize your browser even after switching pages and to provide you with services. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser can be recognized after switching pages.

The use of cookies or similar technologies is based on § 25(2) TDDDG. The processing of your personal data is based on Art. 6(1)(f) GDPR due to our legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offerings. You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data under Art. 6(1)(f) GDPR.

Use of the Shopify Consent Tool (Shopify Privacy & Compliance)

On our website, we use the consent tool “Shopify Privacy & Compliance” provided by Shopify International Ltd.(Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify"). Shopify is affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The tool allows you to give consent for data processing on the website, particularly the setting of cookies, and to exercise your right of withdrawal for consents already given. The processing of data serves the purpose of obtaining and documenting the necessary consents for data processing, thereby fulfilling legal obligations. Cookies may be used for this purpose. User information, including your IP address, may be collected and transmitted to Shopify.

Your data may be transmitted to third countries outside the EU, particularly to Canada and the USA, and processed there. For Canada, an adequacy decision by the EU Commission exists. For the USA, an adequacy decision of the EU Commission exists under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer is based on contractual obligations comparable to the standard contractual clauses of the EU Commission.

The data processing is carried out to fulfill a legal obligation based on Art. 6(1)(c) GDPR. More information on data protection at Shopify can be found at:

https://www.shopify.com/de/legal/datenschutz

Analytics / Advertising Tracking / Affiliate

Use of Google Analytics 4

We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, 4 Barrow Street, Dublin 4, Ireland; "Google") on our website.

The processing of data serves the purpose of analyzing this website and its visitors as well as marketing and advertising purposes. Google uses the information obtained on behalf of the operator of this website to evaluate your use of the website, compile reports on website activities, and provide other services related to website and internet usage to the website operator.

The IP address is shortened by Google within member states of the European Union or in other parties to the Agreement on the European Economic Area before further processing.

We also use Google Signals, which enables cross-device tracking. Your data can be analyzed across devices if you have enabled “personalized ads” in your account settings and linked your devices to your Google account. This allows recognition of which device you searched for products on and later completed purchases on another device, such as a tablet.

Cross-device reports created in this context contain only aggregated data. We therefore only receive statistics based on Google Signals. To prevent cross-device data collection and storage via Google Signals, you can deactivate the “personalized ads” feature in your Google account settings. More information is available at:
https://support.google.com/ads/answer/2662922?hl=de

Detailed information on data processing and privacy regarding Google Signals is available at:
https://support.google.com/analytics/answer/7532985?hl=de

The information generated about your use of this website is usually transmitted to and stored on a Google server in the United States. An adequacy decision by the EU Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under TADPF and is thus obligated to comply with European data protection principles. Both Google and U.S. authorities may access your data.

More information on terms of use and privacy can be found at:
https://policies.google.com/technologies/partner-sites
https://policies.google.com/privacy?hl=de&gl=de

Use of Shopify Statistics

We use the statistics and analysis functions of Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; "Shopify") on our website as part of a data processing agreement. Shopify is affiliated with Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The processing of data serves the purpose of analyzing this website and its visitors. Data is stored for marketing and optimization purposes and provided in reports, analyses, and statistics. The following device information may be collected and processed: browser information, IP address, time zone, and some cookies installed on your device. Information about visited pages, products, referrer URLs (websites you visited before our website), and interaction with the website is also collected using cookies, web beacons, tags, and pixels.

Your data may be transferred to third countries outside the EU, particularly Canada and the USA, and processed there. An adequacy decision by the EU Commission exists for Canada. For the USA, an adequacy decision of the EU Commission exists under the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under TADPF. This data transfer is based on contractual obligations comparable to the standard contractual clauses of the EU Commission.

The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of processing carried out based on consent prior to its revocation.

Further information about Shopify’s privacy practices:

Privacy: https://www.shopify.com/de/legal/datenschutz
Data Processing Agreement (DPA): https://www.shopify.com/de/legal/dpa
Cookies used: https://www.shopify.com/de/legal/cookies

Use of Meta Pixel

We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Meta").

Meta and we are joint controllers for the data collected and transmitted to Meta when using this service. The legal basis is an agreement between us and Meta regarding joint processing of personal data, which defines responsibilities. The agreement is available at:
https://dede.facebook.com/legal/terms/businesstools

The application serves the purpose of targeted advertising for visitors on Facebook and Instagram and for conversion tracking. When you visit the website, the Meta Pixel establishes a direct connection to Meta servers, transmitting which pages you visited. Meta assigns this information to your Facebook and/or Instagram account.

The processing of your personal data is based on your consent under Art. 6(1)(a) GDPR, which you may revoke at any time without affecting the lawfulness of processing prior to revocation.

More information and privacy settings:
https://www.facebook.com/about/privacy/

Use of Google Ads Conversion Tracking

We use Google Ads and conversion tracking on our website. The service is provided by Google Ireland Limited(Gordon House, 4 Barrow Street, Dublin 4, Ireland).

When you click on a Google ad, a cookie for conversion tracking is stored on your device. Cookies are not personally identifiable. Conversion tracking allows us to measure how many users clicked an ad and were redirected to a page with a conversion tag.

Your data may be transmitted to Google servers in the USA. Google is certified under TADPF.

Further information and Google privacy policy:
https://www.google.de/policies/privacy/

Use of Google AdSense

We use Google AdSense provided by Google Ireland Limited (Gordon House, 4 Barrow Street, Dublin 4, Ireland) to serve personalized advertisements.

Data collected through AdSense may be transmitted to servers in the USA. Google is certified under TADPF.

More information and privacy policies:
https://www.google.com/policies/technologies/ads/
https://www.google.de/policies/privacy/

Use of Google Remarketing / Similar Audiences

We use Google Remarketing / Similar Audiences provided by Google Ireland Limited to analyze visitor behavior and interests. Cookies collect anonymized data and track interactions.

Your data may be transmitted to servers of Google LLC in the USA. Google is certified under TADPF.

More information:
https://www.google.com/privacy/ads/

Use of Awin Partner Program

We use the Awin partner program of AWIN AG (Eichhornstraße 3, 10785 Berlin, Germany). Clicking a partner link sets a conversion tracking cookie. Fingerprinting may also be used to recognize your device.

Your data may be transferred to third countries such as the USA. No EU adequacy decision exists for the USA. Transfers are based on standard contractual clauses:
https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de

Use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. You may revoke consent at any time.

Plugins and Miscellaneous

Use of Google Tag Manager

We use the Google Tag Manager provided by Google Ireland Limited (Gordon House, 4 Barrow Street, Dublin 4, Ireland; "Google") on our website.

This application manages JavaScript tags and HTML tags, which are used, in particular, to implement tracking and analytics tools. The processing of data serves the purpose of customizing and optimizing our website. The Google Tag Manager itself does not store cookies and does not process personal data. However, it allows the triggering of additional tags that may collect and process personal data.

Further information about terms of use and privacy can be found here:
https://www.google.com/intl/en/tagmanager/terms.html

Use of YouTube

We use the function to embed YouTube videos provided by Google Ireland Limited (Gordon House, 4 Barrow Street, Dublin 4, Ireland; "YouTube"). YouTube is affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").

The feature displays videos hosted on YouTube in an iFrame on our website. The “enhanced privacy mode” is activated, meaning YouTube does not store information about website visitors unless a video is played. Once you watch a video, information is transmitted to and stored by YouTube.

Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under TADPF and therefore obligated to comply with European data protection principles.

The use of cookies or similar technologies is based on your consent under § 25(1) sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Personal data processing is based on your consent under Art. 6(1)(a) GDPR. You may revoke your consent at any time without affecting the lawfulness of processing prior to revocation.

More information about data collection and use by YouTube and Google, your rights, and privacy protection options can be found at:
https://www.youtube.com/t/privacy

Use of Google Fonts

We use Google Fonts provided by Google Ireland Limited (Gordon House, 4 Barrow Street, Dublin 4, Ireland; "Google") on our website.

The processing of data serves the purpose of uniform font presentation on our website. To load the fonts, a connection is established to Google servers when a page is accessed. Cookies may be used, and information such as your IP address and browser data may be transmitted to Google. These data are not linked to your Google account.

Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under TADPF and is obligated to comply with European data protection principles.

Further information about data processing and privacy:
https://www.google.de/intl/de/policies/
https://developers.google.com/fonts/faq

Use of Google Translate

We use the translation service via API integration from Google Ireland Limited (Gordon House, 4 Barrow Street, Dublin 4, Ireland).

The processing of data serves the purpose of displaying website content in other languages. To automatically display the translation, your browser connects to Google servers. Cookies may be used, and information such as your IP address, URL of the visited page, date, and time may be collected and processed.

Your data may be transmitted to the USA. An adequacy decision by the EU Commission exists for the USA under the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under TADPF and obligated to comply with European data protection principles.

More information about data collection and use by Google:
https://www.google.com/policies/privacy/

Data Subject Rights and Retention Period

Retention Period

After the complete processing of a contract, data will initially be stored for the duration of the warranty period. Subsequently, data will be retained in compliance with statutory retention periods, particularly tax and commercial law requirements, and deleted after these periods have expired, unless you have consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights under Articles 15 to 20 GDPR:

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability

Additionally, under Article 21(1) GDPR, you have the right to object to processing based on Article 6(1)(f) GDPR, as well as to processing for the purposes of direct marketing.

Right to Lodge a Complaint with the Supervisory Authority

Under Article 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is not lawful.

You can file a complaint with the authority responsible for us, which can be reached at:

Hamburg Commissioner for Data Protection and Freedom of Information
Ludwig-Erhard-Str. 22, 7th Floor
20459 Hamburg, Germany
Phone: +49 40 428544040
Fax: +49 40 428544000
E-Mail: mailbox@datenschutz.hamburg.de

Right to Object

If the processing of personal data described above is based on our legitimate interests under Article 6(1)(f) GDPR, you have the right to object to such processing at any time for reasons arising from your particular situation, with effect for the future.

After lodging an objection, processing of the relevant data will cease unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing is necessary for the establishment, exercise, or defense of legal claims.

If personal data processing is carried out for direct marketing purposes, you may object to such processing at any time by notifying us. Upon receiving your objection, we will stop processing the relevant data for direct marketing purposes.

Last updated: May 14, 2025