Privacy Policy

Unless stated otherwise below, the provision of your personal data is neither legally nor contractually obligatory, nor required for the conclusion of a contract. You are not obliged to provide your data. Not providing it will have no consequences. This only applies as long as the processing procedures below do not state otherwise. "Personal data" is any information relating to an identified or identifiable natural person.

Server log files

You can use our websites without submitting personal data. Every time our website is accessed, user data is transferred to us or our web hosts / IT service providers by your internet browser and stored in server log files. This stored data includes, for example, the name of the site called up, date and time of the request, the IP address, the amount of data transferred and the provider making the request. The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the smooth operation of our website as well as improving our services.

Contact

Responsible person

Contact us at any time. The person responsible for data processing is: EvoBrands GmbH, Zum Galgenknapp 32, 33378 Rheda-Wiedenbrück, Deutschland, +49 5242 9939003, mail@zukono.de.

Proactive contact of the customer by e-mail

If you make contact with us proactively via e-mail, we shall collect your personal data (name, e-mail address, message text) only to the extent provided by you. The purpose of the data processing is to handle and respond to your contact request. If the initial contact serves to implement pre-contractual measures (e.g. consultation in the case of purchase interest, order creation) or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR. If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you carried out on the basis of Article 6(1)(f) GDPR. We will only use your e-mail address to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we will only collect your personal data (name, e-mail address, message text) in the scope provided by you. The data processing is for the purpose of making contact. If the initial contact serves to implement pre-contractual measures or concerns an agreement already concluded between you and us, this data processing takes place on the basis of Article 6(1)(b) GDPR. If the initial contact occurs for other reasons, this data processing takes place on the basis of Article 6(1)(f) GDPR for the purposes of our overriding, legitimate interest in handling and responding to your request. In this case, on grounds relating to your particular situation, you have the right to object at any time to this processing of personal data concerning you carried out on the basis of Article 6(1)(f) GDPR. We will only use your e-mail address to process your request. Your data will subsequently be deleted, unless you have agreed to further processing and use.

Collection and processing when using the withdrawal button

If you have entered into a contract via our website, we provide you with a withdrawal function (withdrawal button) through which you can submit your notice of withdrawal immediately. When you use the withdrawal function, we collect your personal data (name, e-mail address, details identifying the contract or part of the contract you wish to withdraw from, and the date and time of sending the notice of withdrawal) only to the extent that you have provided them. If the contact relates to a contract already concluded between you and us, this data processing is carried out on the basis of Article 6(1)(b) GDPR. Otherwise, data processing is carried out on the basis of Article 6(1)(c) GDPR, as we are legally obliged to provide you with a withdrawal function on our website. We use your e-mail address solely for the purpose of processing your notice of withdrawal. Your data will subsequently be deleted in accordance with statutory retention periods, provided you have not consented to further processing and use.

Customer account & Orders

Customer account

When you open a customer account, we will collect your personal data in the scope given there. The data processing is for the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You can withdraw your consent at any time by contacting us, without affecting the legality of the processing carried out with your consent up to the withdrawal. Your customer account will then be deleted.

Collection, processing and transfer of personal data in orders

When you submit an order, we only collect and use your personal data insofar as this is necessary for the fulfilment and handling of your order as well as the processing of your queries. The provision of data is necessary for the conclusion of a contract. Failure to provide it will prevent the conclusion of any contract. The processing occurs on the basis of Article 6(1)(b) GDPR. Your data will be shared, for example, with shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing, and IT service providers. In every case we comply strictly with legal requirements. The scope of data transmission is restricted to a minimum.

Reviews & Advertising

Data collection when you post a comment or a review

When you comment on / review an article or post, we collect your personal data (name, e-mail address, comment text) only in the scope provided by you. The processing serves to allow you to comment / review and to display comments / reviews. By submitting the comment / review, you agree to the processing of the transmitted data (Article 6(1)(a) GDPR with your consent). You can withdraw your consent at any time by contacting us. When your comment / review is published, only the name you have entered will be published. In addition, your IP address will be saved in order to prevent misuse of the comment or review function; it will subsequently be deleted.

Use of Trustpilot

We use the "Trustpilot" rating system from Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark; "Trustpilot") on our website. Trustpilot enables us to obtain customer reviews and display them. After placing an order, you can receive an invitation to submit a review. The following data may be processed, among others: e-mail address, name, information about your device and location, information about your Trustpilot user account, information about the product purchased, the content of your review and the star rating. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. Further information: https://de.legal.trustpilot.com/for-reviewers/end-user-privacy-terms.

Use of the e-mail address for sending newsletters

We use your e-mail address to send you information and offers by newsletter, provided you have expressly consented to this. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent. You can unsubscribe from the newsletter at any time. Your e-mail address will then be removed from the mailing list. Despite removal, we may store your e-mail address in a so-called blacklist to prevent you from receiving future newsletters (Article 6(1)(f) GDPR).

Use of rapidmail

We use the service of rapidmail GmbH (Wentzingerstraße 21, 79106 Freiburg im Breisgau; "rapidmail") for newsletter dispatch within the framework of order processing. We pass on the information provided during newsletter registration (e-mail address, first and last name, if applicable) to rapidmail. In order to evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. The processing is carried out on the basis of Article 6(1)(f) GDPR. Further information: https://www.rapidmail.de/datenschutz.

Use of the e-mail address for availability notifications

We offer an availability notification service. If an item is temporarily unavailable, you can enter your e-mail address on the item in question and be informed when it becomes available. The processing is carried out on the basis of Article 6(1)(a) GDPR with your consent, which you can withdraw at any time.

Shipping service providers & Merchandise management

Forwarding of your e-mail address to shipping companies

We forward your e-mail address to the transport company in the course of contractual processing, provided you have explicitly agreed to this in the order process, in order to inform you about the shipping status (Article 6(1)(a) GDPR with your consent). You can withdraw your consent at any time.

Use of an external merchandise management system

We use a merchandise management system in the course of order processing. For this purpose, your personal data collected in the course of the order will be transmitted to EvoBrands GmbH, Zum Galgenknapp 32, 33378 Rheda-Wiedenbrück. The processing serves the fulfilment of the contract concluded with you (Article 6(1)(b) GDPR).

Use of artificial intelligence (AI) systems

We use software-based systems with artificial intelligence (AI) to optimise our business processes, to handle customer enquiries efficiently and to maintain our product data.

Nature and scope of the processing

Depending on the workflow, different data are transmitted to the service providers named below:

E-mail classification & customer service: When you send us an e-mail or message, its text content is analysed automatically so that your request can be assigned to the right department more quickly.
Address correction: To avoid delivery errors, the shipping addresses you enter are checked automatically for accuracy and completeness.
Content generation: When creating product texts or marketing content, we primarily process anonymised product data. Should personal data be included, this is done only to the extent strictly necessary.

Legal basis

The processing of your data is based on our legitimate interest in the fast, error-free and efficient handling of orders and customer enquiries pursuant to Art. 6(1)(f) GDPR. Where the address check directly serves the performance of a contract (e.g. the correct delivery of your order), the legal basis is Art. 6(1)(b) GDPR.

Service providers used and data transfer

We use the interfaces (APIs) of the following providers:

OpenAI: OpenAI Ireland Limited, 1st Floor, Zone 2, The One Lime Street, Dublin 2, Ireland. Data may be transferred to the parent company OpenAI OpCo, LLC (USA). The transfer is safeguarded by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework. We use business/API services for which, according to the provider, data are not used to train AI models.
Google Gemini: Google Cloud EMEA Limited, 70 Sir John Rogerson's Quay, Dublin 2, Ireland. Data may be transferred to the USA (safeguarded by the EU Standard Contractual Clauses and the EU-US Data Privacy Framework). In the enterprise environment we use, the data are not used to train Google's public models.

Payment service providers

Use of the payment service provider Stripe

On our website we use the Stripe payment service of Stripe Payments Europe Ltd (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland). By selecting and using Stripe, the data required for payment processing is transmitted to Stripe (Article 6(1)(b) GDPR). If required, Stripe reserves the right to obtain a credit report on the basis of mathematical-statistical procedures (Article 6(1)(f) GDPR). For reasons arising from your particular situation, you have the right to object to this processing at any time by notifying Stripe. All Stripe transactions are subject to the Stripe privacy policy: https://stripe.com/de/privacy.

Use of the payment method Link

On our website we use the payment service Link of Stripe Payments Europe Ltd. In order to integrate this payment service, it is necessary for Stripe to collect, store and analyse data (e.g. IP address, device type, operating system, browser type, location, language settings, date and time of the page view) when you access the website and use the payment service; cookies can be used for this purpose. The use of cookies is carried out with your consent (Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR). Further information: https://link.co/de/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are saved in a user's internet browser or by the user's internet browser on their computer system. Cookies are stored on your computer; you therefore have full control over their use. By choosing corresponding technical settings in your internet browser, you can prevent the storage of cookies and delete cookies that have already been saved. We would, however, like to point out that this may prevent you from making full use of all the functions of this website.

Using the links below, you can find out how to manage cookies in the major browsers:

Chrome: Cookies in Chrome
Microsoft Edge: Cookies in Edge
Mozilla Firefox: Cookies in Firefox
Safari: Cookies in Safari

Technically necessary cookies

Insofar as no other information is given in the data protection declaration below, we use only technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. The use is carried out on the basis of Section 25(2) TDDDG. The processing is carried out on the basis of Article 6(1)(f) GDPR due to our overriding legitimate interest. You have the right to object to this processing at any time on grounds relating to your particular situation.

Analysis & Advertising tracking

Use of Google Analytics 4

We use the Google Analytics web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analysing this website and its visitors as well as for marketing and advertising purposes. In this context, the following information may be collected, among others: IP address, date and time of the page view, click path, information about the browser and device used, pages visited, referrer URL, location data and purchase activity. The IP address is shortened beforehand by Google within the EU / EEA. The use of cookies is carried out with your consent (Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR). The information generated is usually transferred to a Google server in the USA (adequacy decision TADPF). Further information: https://policies.google.com/privacy.

Use of Google Ads conversion tracking

We use the online marketing program "Google Ads" and, within this framework, conversion tracking of Google Ireland Limited. If you click on an advert placed by Google, a cookie is placed for conversion tracking. These cookies have limited validity, contain no personal data and are not used for personal identification. The use is carried out with your consent (Article 6(1)(a) GDPR), which you can withdraw at any time.

Plug-ins and other

Use of the Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited. This application manages JavaScript and HTML tags. The Google Tag Manager itself neither stores cookies nor processes personal data through this; it does, however, enable the triggering of further tags.

Use of Google Fonts

We use Google Fonts of Google Ireland Limited on our website. In order to load the fonts, a connection to Google servers is established when the page is accessed. Among other things, your IP address is processed. The use is carried out with your consent (Section 25(1) sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR).

Use of Font Awesome

We use Font Awesome of Fonticons Inc. (307 S Main St., Suite 202, Bentonville, AR, 72712-9214 USA; "Font Awesome") on our website. In order to load the fonts and icons, a connection to Font Awesome servers is established when the page is accessed. The use is carried out with your consent (Article 6(1)(a) GDPR).

Rights of affected persons and storage duration

Duration of storage

After contractual processing has been completed, the data is initially stored for the duration of the warranty period, then in accordance with the retention periods prescribed by law, in particular tax and commercial law, and then deleted after the period has elapsed, unless you have agreed to further processing and use.

Rights of the affected person

If the legal requirements are fulfilled, you have the following rights according to Articles 15 to 20 GDPR: right to information, correction, deletion, restriction of processing and data portability. You also have a right of objection under Article 21(1) GDPR against processing based on Article 6(1)(f) GDPR, as well as against processing for the purposes of direct marketing.

Right to complain to the supervisory authority

Under Article 77 GDPR you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not carried out lawfully. Among others, you can lodge a complaint with the supervisory authority responsible for us:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
E-Mail: poststelle@ldi.nrw.de

Right to object

If the personal data processing outlined here is based on our legitimate interest under Article 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object at any time to this processing with future effect. Following an objection, the processing of the data concerned will be ended, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or the processing serves the assertion, exercise or defence of legal claims.