1) Information on the Collection of Personal Data and Contact Details of the Data Controller
1.1 We appreciate your visit to our website and thank you for your interest. Below, we inform you about the processing of your personal data when you use our website. Personal data refers to any information that can be used to personally identify you.
1.2 The data controller responsible for processing personal data on this website, pursuant to the General Data Protection Regulation (GDPR), is Velorano. The data controller is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the lock symbol in your browser’s address bar.
2) Data Collection When Visiting Our Website
When you use our website solely for informational purposes, without registering or otherwise providing us with information, we only collect data that your browser automatically transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
-
The website you visited
-
Date and time of access
-
Amount of data transferred in bytes
-
Referrer URL from which you accessed the page
-
Browser used
-
Operating system used
-
IP address used (possibly anonymized)
The processing is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, aimed at improving the stability and functionality of our website. There is no further disclosure or use of this data. However, we reserve the right to retrospectively check the server log files if there are concrete indications of unlawful use.
3) Cookies
To make your visit to our website more attractive and to enable certain functions, we use cookies on various pages. Cookies are small text files stored on your device. Some cookies we use are deleted after the browser session ends (session cookies). Other cookies remain stored on your device and allow us or our partner companies (third-party cookies) to recognize your browser on subsequent visits (persistent cookies). Cookies may collect user information such as browser and location data, as well as IP address values, to varying degrees.
Some cookies simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a future visit). If personal data is processed through some of the cookies we use, this processing is carried out in accordance with Article 6(1)(b) GDPR (performance of a contract) or Article 6(1)(f) GDPR (legitimate interests in optimal website functionality and user-friendly design).
In certain cases, we cooperate with advertising partners to make our internet offering more interesting to you. In such cases, partner cookies (third-party cookies) are stored on your device during your visit. You will be informed separately about the use of these cookies and the scope of data collected.
Please note that you can set your browser to inform you about cookie settings and to allow, restrict, or reject cookies individually or in general. Each browser manages cookie settings differently, which is explained in the browser’s help menu. Links to instructions for popular browsers:
-
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
-
Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
-
Chrome: https://support.google.com/chrome/answer/95647?hl=en
-
Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please be aware that the functionality of our website may be limited if you do not accept cookies.
4) Contacting Us
When you contact us (e.g., via contact form or email), personal data is collected. The data collected when filling out a contact form is displayed on the respective form. This data is stored and used exclusively to respond to your inquiry or to establish contact and for related technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry pursuant to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, Article 6(1)(b) GDPR additionally applies. Your data will be deleted after your request has been fully processed, provided there are no statutory retention obligations.
5) Data Processing When Opening a Customer Account and for Contract Execution
In accordance with Article 6(1)(b) of the GDPR, we process personal data you provide to us for the performance of a contract or when opening a customer account. The specific data collected is listed in the relevant input forms. You may request the deletion of your customer account at any time by sending a message to the contact address of the data controller.
The data you provide will be stored and used for the purpose of contract execution. After full completion of the contract or after deletion of your account, the data will be blocked with regard to fiscal and commercial retention periods. Once these retention periods have expired, the data will be deleted unless you have explicitly consented to further use or a legal basis exists for continued processing.
6) Use of Your Data for Direct Marketing
6.1 Subscription to Our Newsletter
When subscribing to our email newsletter, you will regularly receive information about our offers. Only your email address is mandatory; additional data is optional and used for personalized addressing. The newsletter is sent via a double opt-in procedure: you will receive a confirmation email with a link which you must activate to give your consent.
Your data is used exclusively for marketing via the newsletter. You can unsubscribe at any time via a link in the newsletter or by sending a message to the responsible party. After unsubscribing, we will delete your email address unless you have consented to further use or we are legally obligated to retain the data.
6.2 Sending Newsletters to Existing Customers
If you provided your email address when making a purchase, we may regularly send you offers for similar products or services. No separate consent is required for this, as it is based on our legitimate interest (Article 6(1)(f) GDPR). If you object, we will immediately stop sending such emails. You can object at any time by contacting the address provided.
7) Data Processing for Order Fulfillment
Personal data necessary for contract fulfillment will be shared with the shipping company and payment service providers, as required.
Payment Processing via PayPal
When making payments via PayPal, we share your payment data with PayPal pursuant to Article 6(1)(b) GDPR. PayPal may perform a creditworthiness check, processing personal data in accordance with Article 6(1)(f) GDPR. Details are available in PayPal’s privacy policy: PayPal Privacy Policy.
Payment Processing via SOFORT
For payments made via SOFORT, your data will be shared with SOFORT GmbH (part of the Klarna Group) solely for payment processing purposes, in compliance with Article 6(1)(b) GDPR. More information can be found here: Klarna SOFORT Privacy.
10.2 Use of Google AdWords Conversion Tracking
This website uses the online advertising program "Google AdWords" and within Google AdWords, the Conversion Tracking service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google"). We use Google AdWords to promote our attractive offers on external websites via advertising materials (so-called Google AdWords). Based on data from the advertising campaigns, we can determine how successful the individual advertising activities are. Our goal is to show you advertisements that are relevant to you, to make our website more interesting for you, and to ensure fair billing of advertising costs.
The conversion tracking cookie is set when a user clicks on a Google AdWords advertisement. Cookies are small text files stored on your computer system. These cookies typically expire after 30 days and do not serve for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can see that the user clicked on the advertisement and was redirected to this page. Each Google AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of AdWords customers. The information obtained with the help of the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Customers receive the total number of users who clicked on their advertisement and were redirected to a page with a conversion tracking tag. However, they do not receive any information that personally identifies users. If you do not wish to participate in tracking, you can disable the cookie for Google conversion tracking via your internet browser settings. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising in accordance with Article 6(1)(f) of the General Data Protection Regulation (GDPR).
Google LLC, headquartered in the United States, is certified under the EU-US Privacy Shield, which ensures compliance with the EU's level of data protection.
You can permanently disable cookies for advertising preferences by preventing them via your browser settings or by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=en
Please note that certain functions of this website may be unavailable or limited if you have disabled the use of cookies.
11) WEB ANALYTICS SERVICES
Google (Universal) Analytics
This website uses Google Analytics, a web analytics service from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses so-called "cookies," text files stored on your computer, which allow analysis of your use of the website. The information generated by the cookie about your use of this website (including your IP address anonymized by the "_anonymizeIp()" function) is usually transmitted to and stored on a Google server in the United States. This website uses Google Analytics only with the "_anonymizeIp()" extension, which ensures IP address anonymization by truncation and excludes direct personal identification.
Google, on our behalf, will use this information to evaluate your use of the website, compile reports on website activity, and provide other services related to website and internet use. The IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. You can prevent the storage of cookies by selecting the appropriate settings in your browser; however, please note that you may not be able to use all features of this website fully in that case. Additionally, you can prevent Google from collecting and processing the data generated by the cookie about your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en
This website also uses Google Analytics for overarching visitor flow analysis via a User ID. Upon the first visit to a page, a unique, permanent, and anonymized ID is assigned to the user, set across devices. This enables the assignment of interaction data from different devices and sessions to a single user. The User ID contains no personal data and does not transmit any to Google. You may object to the data collection and storage via the User ID at any time with future effect by disabling Google Analytics on all systems you use, e.g., in another browser or on your mobile device.
You can perform this deactivation using a browser plugin from Google (https://tools.google.com/dlpage/gaoptout?hl=en). Alternatively, you may click the following link to set an opt-out cookie that prevents data collection by Google Analytics on this website in the future (this opt-out cookie works only in this browser and only for this domain; if you delete your cookies in this browser, you must click the link again): Disable Google Analytics
For more information on Universal Analytics, see: https://support.google.com/analytics/answer/2838718?hl=en&ref_topic=6010376
12) RETARGETING / REMARKETING / RECOMMENDATION ADVERTISING
Facebook Custom Audience via the Pixel Method
This website uses the "Facebook Pixel" from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, United States ("Facebook"). With explicit consent, it allows tracking users’ behavior after they have viewed or clicked a Facebook advertisement. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising campaigns.
The collected data is anonymous to us and does not provide insight into user identities. However, Facebook stores and processes the data, linking it to the respective user profile and using it for its own advertising purposes, in accordance with Facebook’s privacy policy.
You can allow Facebook and its partners to display ads on and off Facebook. A cookie may also be stored on your computer for these purposes. These processes take place only after explicit consent, in accordance with Article 6(1)(a) GDPR.
Consent to the use of the Facebook Pixel may only be given by users over 13 years of age. If you are younger, we ask you to obtain consent from your legal representatives. Facebook Inc., based in the US, is certified under the EU-US Privacy Shield, ensuring compliance with the EU’s privacy protection standards.
To disable the use of cookies on your computer, you can configure your internet browser to prevent future cookies or delete existing cookies. Disabling all cookies may impair some functions on our website. You can also disable third-party cookies like Facebook’s at the Digital Advertising Alliance’s website: https://www.aboutads.info/choices/
Google AdWords Remarketing
Our website uses the features of Google AdWords Remarketing, allowing us to advertise for this website in Google search results and on external websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). For this purpose, Google places a cookie in your browser, enabling interest-based advertising based on the pages you have visited. Processing is based on our legitimate interest in optimal marketing of our website under Article 6(1)(f) GDPR.
Further data processing occurs only if you have consented to Google linking your internet and app browser history with your Google account and using information from your Google account to personalize ads you see online. If you are logged into Google during your visit, Google uses your data along with Google Analytics data to create and define audience lists for cross-device remarketing. Your personal data is temporarily linked with Google Analytics data to create audiences.
You can permanently disable cookies for advertising settings by downloading and installing the browser plugin available here: https://www.google.com/settings/ads/onweb/. You can also find information and change settings regarding third-party cookie placement at the Digital Advertising Alliance website: www.aboutads.info. Finally, you can configure your browser to notify you about cookie placement and decide individually whether to accept cookies or to exclude cookies in certain cases or in general. If you reject cookies, website functionality may be limited. Google LLC, based in the USA, is certified under the EU-US Privacy Shield, ensuring compliance with EU privacy protection standards.
More information and Google’s privacy policy concerning advertising can be found here: https://www.google.com/policies/technologies/ads/
13) RIGHTS OF THE DATA SUBJECT
13.1 The applicable data protection law grants you extensive rights concerning the processing of your personal data, which we inform you about below:
-
Right of access under Article 15 GDPR: You have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of processed data, recipients or categories of recipients to whom your data has or will be disclosed, the planned storage period or criteria for determining it, the existence of rights to correction, deletion, restriction, objection, complaint to a supervisory authority, origin of your data if not collected from you, existence of automated decision-making including profiling, and meaningful information about the logic and scope and intended consequences of such processing, as well as your right to be informed about safeguards under Article 46 GDPR regarding data transfer to third countries;
-
Right to rectification under Article 16 GDPR: You have the right to immediate correction of inaccurate data concerning you and/or completion of incomplete data stored by us;
-
Right to erasure under Article 17 GDPR: You may request deletion of your personal data subject to Article 17(1) GDPR conditions. This right does not apply if processing is necessary for freedom of expression and information, legal obligations, public interest, or establishment, exercise, or defense of legal claims;
-
Right to restriction of processing under Article 18 GDPR: You may request restriction of processing if the accuracy of your data is disputed, if you object to deletion due to unlawful processing and request restriction instead, if you need data for legal claims, after data is no longer needed for the purpose, or if you object for reasons related to your specific situation and it is not yet decided whether legitimate reasons outweigh yours;
-
Right to notification under Article 19 GDPR: If you have exercised rights of correction, erasure, or restriction, we must inform all recipients of your data about this correction, deletion, or restriction, unless impossible or disproportionate. You have the right to be informed about these recipients;
-
Right to data portability under Article 20 GDPR: You have the right to receive your data provided to us in a structured, commonly used, machine-readable format or request transfer to another controller, insofar as technically feasible;
-
Right to withdraw consent under Article 7(3) GDPR: You may withdraw consent to data processing at any time with future effect. Upon withdrawal, we will delete the relevant data immediately unless further processing is legally justified without consent. Withdrawal does not affect the lawfulness of processing prior to withdrawal;
-
Right to lodge a complaint under Article 77 GDPR: If you believe processing violates GDPR, you may file a complaint with a supervisory authority, particularly in your country of residence, work, or where the alleged violation occurred.
13.2 RIGHT TO OBJECT
If we process your personal data based on a legitimate interest balancing test, you have the right to object to processing for reasons related to your specific situation at any time. Upon objection, we will cease processing your data unless we can demonstrate compelling legitimate grounds overriding your interests, rights, and freedoms, or if processing relates to legal claims.
If your data is processed for direct marketing, you have the right to object at any time to such processing. Upon objection, we will stop processing your data for direct marketing purposes.
DATA RETENTION PERIOD
The retention period for personal data is determined based on statutory retention periods (e.g., commercial and tax law retention obligations). After expiration, data is routinely deleted unless still required for contract execution or if we have a legitimate interest in further storage.