Privacy policy
We process personal data (hereinafter mostly referred to as "data") only to the extent necessary and for the purpose of providing a functional and user-friendly website, including its content and the services offered there.
Pursuant to Art. 4 no. 1 of Regulation (EU) 2016/679, the General Data Protection Regulation (hereinafter "GDPR"), "processing" means any operation or set of operations performed on personal data, whether or not by automated means, such as collection, recording, organisation, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure or destruction.
With the following privacy notice we inform you in particular about the nature, scope, purpose, duration and legal basis of the processing of personal data, where we decide on the purposes and means of processing either alone or together with others. In addition, we inform you below about the third-party components we use for optimisation purposes and to improve the quality of use, insofar as third parties process data under their own responsibility.
Our privacy notice is structured as follows:
I. Information about us as controllers
II. Rights of users and data subjects
III. Information about the data processing
I. Information about us as controllers
The controller responsible for this website within the meaning of data protection law is:
LIVONDO GmbH
Kurt-Schumacher-Str. 22
53113 Bonn
Germany
Phone: +49 (0)228 - 289 255 - 0
Email: hello@vujo.de
II. Rights of users and data subjects
With regard to the data processing described in more detail below, users and data subjects have the right to obtain confirmation as to whether data concerning them is being processed, to information about the data processed, to further information about the data processing and to copies of the data (see also Art. 15 GDPR); to rectification or completion of incorrect or incomplete data (see also Art. 16 GDPR); to the immediate erasure of data concerning them (see also Art. 17 GDPR), or, alternatively, if further processing is necessary pursuant to Art. 17 (3) GDPR, to restriction of processing in accordance with Art. 18 GDPR; to receive the data concerning them which they have provided and to transmit this data to other providers or controllers (see also Art. 20 GDPR); to lodge a complaint with the supervisory authority if they believe that data concerning them is being processed by the provider in breach of data protection provisions (see also Art. 77 GDPR).
In addition, the provider is obliged to inform all recipients to whom data has been disclosed of any rectification or erasure of data or restriction of processing carried out on the basis of Art. 16, 17 (1) and 18 GDPR. This obligation does not apply where such notification is impossible or involves disproportionate effort. Notwithstanding this, users have a right to information about these recipients.
Pursuant to Art. 21 GDPR, users and data subjects also have the right to object to the future processing of data concerning them, provided that the data is processed by the provider in accordance with Art. 6 (1) lit. f) GDPR. In particular, an objection to data processing for the purpose of direct advertising is permissible.
III. Information about the data processing
Your data processed when using our website will be deleted or blocked as soon as the purpose of storage no longer applies, the deletion of the data does not conflict with any statutory retention obligations and no other information to the contrary is provided below in relation to individual processing procedures.
Server data
For technical reasons, in particular to ensure a secure and stable website, data is transmitted by your internet browser to us or to our web space provider. These so-called server log files record, among other things, the type and version of your internet browser, the operating system, the website from which you switched to our website (referrer URL), the pages of our website that you visit, the date and time of the respective access, and the IP address of the internet connection from which our website is used.
The data collected in this way is stored temporarily, but not together with any other data of yours.
This storage takes place on the legal basis of Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in improving the stability, functionality and security of our website.
The data is deleted after seven days at the latest, unless further storage is required for evidentiary purposes. Otherwise, the data is exempt from deletion in whole or in part until an incident has been finally clarified.
Cookies
a) Session cookies
We use cookies on our website. Cookies are small text files or other storage technologies that are stored on your device by the internet browser you use. Through these cookies, certain information about you, such as your browser or location data or your IP address, is processed to an individual extent.
This processing makes our website more user-friendly, effective and secure, as it enables, for example, the display of our website in different languages or the provision of a shopping cart function.
The legal basis for this processing is Art. 6 (1) lit. b) GDPR insofar as these cookies process data for the initiation or performance of a contract.
If the processing does not serve the initiation or performance of a contract, our legitimate interest lies in improving the functionality of our website. The legal basis in that case is Art. 6 (1) lit. f) GDPR.
These session cookies are deleted when you close your internet browser.
b) Third-party cookies
Our website may also use cookies from partner companies with whom we cooperate for the purposes of advertising, analysis or the functionality of our website.
For details, in particular on the purposes and legal bases for the processing of such third-party cookies, please refer to the information below.
c) Consent, withdrawal and removal
We only use cookies and comparable technologies that are not necessary for the operation of our website after you have given us your consent. We obtain this consent via a consent banner that appears when you first visit our website. There you can make your selection by purpose.
You may withdraw or change your consent at any time with effect for the future in accordance with Art. 7 (3) GDPR. To do so, open the cookie settings via the corresponding button on our website.
Irrespective of this, you can prevent or restrict the storage of cookies through a setting in your internet browser and delete cookies already stored at any time. The steps required depend on your browser; please refer to its help function for details. If you prevent or restrict the storage of cookies, this may mean that not all functions of our website can be used.
Consent management
To obtain, manage and record your consent to non-essential cookies, we use the consent management function of our shop system. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
When you first visit our website, a notice appears in which you decide about the use of cookies. Your decision is stored together with an identifier on your device so that the notice is not displayed to you again on every page view. To determine the country from which you access our website, your IP address is processed; the applicable consent rules depend on this.
As long as you have not given consent, the analysis and marketing services described below are not loaded and do not set any cookies.
The legal basis for the use of the consent management function itself is Art. 6 (1) lit. c) GDPR, as we are legally obliged to obtain consent and to be able to demonstrate it. Access to your device for the purpose of storing your decision is permitted without consent under Section 25 (2) no. 2 TDDDG, as it is strictly necessary to provide the service you have expressly requested.
You may withdraw or change your consent at any time with effect for the future. To do so, use the cookie settings at the bottom of every page of our website.
Contract processing
The data you transmit in order to make use of our range of goods and/or services is processed by us for the purpose of performing the contract and is necessary for that purpose. Conclusion and performance of the contract are not possible without the provision of your data.
The legal basis for the processing is Art. 6 (1) lit. b) GDPR.
We delete the data once the contract has been fully performed, but must observe the retention periods under tax and commercial law.
As part of the performance of the contract, we pass on your data to the transport company commissioned with the delivery of the goods or to the financial service provider, insofar as the transfer is necessary for the delivery of the goods or for payment purposes.
The legal basis for the transfer of the data is then Art. 6 (1) lit. b) GDPR.
Customer account / registration function
If you create a customer account with us via our website, we will collect and store the data you enter during registration (for example your name, your address or your email address) exclusively for pre-contractual services, for the performance of the contract or for the purpose of customer care (for example to provide you with an overview of your previous orders with us or to offer you a wish list function). At the same time, we store the IP address and the date and time of your registration. This data is not passed on to third parties.
During the further registration process, your consent to this processing is obtained and reference is made to this privacy notice. The data collected in this context is used exclusively for the provision of the customer account.
Insofar as you consent to this processing, Art. 6 (1) lit. a) GDPR is the legal basis for the processing.
If the opening of the customer account also serves pre-contractual measures or the performance of a contract, the legal basis for this processing is additionally Art. 6 (1) lit. b) GDPR.
You may withdraw the consent you have given us to open and maintain the customer account at any time with effect for the future in accordance with Art. 7 (3) GDPR. To do so, you only need to inform us of your withdrawal.
The data collected in this context will be deleted as soon as the processing is no longer necessary. In this respect, we must observe the retention periods under tax and commercial law.
Newsletter
If you subscribe to our free newsletter, the data requested from you for this purpose, namely your email address and, optionally, your name and address, is transmitted to us. At the same time, we store the IP address of the internet connection from which you access our website as well as the date and time of your registration. During the further registration process, we will obtain your consent to receive the newsletter, describe the content specifically and refer to this privacy notice. We use the data collected in this context exclusively for sending the newsletter; it is therefore not passed on to third parties.
The legal basis for this is Art. 6 (1) lit. a) GDPR.
You may withdraw your consent to receive the newsletter at any time with effect for the future in accordance with Art. 7 (3) GDPR. To do so, you only need to inform us of your withdrawal or use the unsubscribe link contained in every newsletter.
Contact requests / contact options
If you contact us via the contact form or by email, the data you provide will be used to process your enquiry. Providing this data is necessary in order to process and answer your enquiry; without it, we cannot answer your enquiry, or can do so only to a limited extent.
The legal basis for this processing is Art. 6 (1) lit. b) GDPR.
Your data will be deleted once your enquiry has been conclusively answered and no statutory retention obligations prevent deletion, as may be the case for any subsequent contract processing.
Withdrawal form
On the "Declare withdrawal" page we provide a form with which you can declare your withdrawal directly. The form is provided by 401layers UG (haftungsbeschränkt), Dorothea-Erx.-Str. 1a, 40721 Hilden, Germany, hereinafter "401layers", and is loaded in an embedded frame from the address euwiderrufsbutton.de.
When you open this page, your IP address and information about your device and browser are transmitted to 401layers. If you submit the form, the details you enter are also processed, in particular your name, your address, your email address, the order number and the date of the order.
The legal basis is Art. 6 (1) lit. c) GDPR, as we are legally obliged to provide you with a means of withdrawal and to accept your withdrawal, as well as Art. 6 (1) lit. b) GDPR for processing the withdrawal.
The frame is loaded exclusively on this page, not on the other pages of our website.
Further information is available from 401layers at
https://euwiderrufsbutton.de/privacypolicy
hCaptcha
To protect our forms against automated entries, our shop system uses the hCaptcha service provided by Intuition Machines, Inc., 1065 SW 8th St #704, Miami, FL 33130, USA, hereinafter "hCaptcha".
hCaptcha is loaded as soon as you interact with a form on our website, for example the contact form. In doing so, your IP address, information about your device and browser and your behaviour on the page are transmitted to hCaptcha and evaluated there in order to distinguish automated access from human input.
The legal basis is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in the security of our website and in preventing unwanted, automated entries.
hCaptcha processes the data in the United States of America. According to its own information, the provider is certified under the EU-US Data Privacy Framework, for which an adequacy decision of the European Commission of 10 July 2023 exists; in addition, it bases the transfer on the European Commission's standard contractual clauses.
Further information is available from hCaptcha at
https://www.hcaptcha.com/privacy
Payment methods
a) Shopify Payments
To process card payments as well as the payment methods Apple Pay, Google Pay and Klarna, we use Shopify Payments, a payment service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
If you select one of these payment methods, the payment data you enter as well as your name, address, email address, order value and order number are transmitted to Shopify Payments and processed there to handle the payment and to prevent fraud.
The legal basis is Art. 6 (1) lit. b) GDPR. In addition, there is a legitimate interest in preventing fraud pursuant to Art. 6 (1) lit. f) GDPR.
b) Klarna
We offer Klarna as a payment method, a service of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, hereinafter "Klarna".
If you select Klarna as your payment method, you will be redirected to Klarna to complete the payment. You complete the order itself in our shop; Klarna does not take over the entire ordering process. Klarna processes the data required for payment processing under its own responsibility, including your name, address, email address, date of birth, order value and order number. For payment methods with deferred payment, Klarna also carries out an identity and credit check and takes into account probability values regarding your future payment behaviour.
The legal basis is Art. 6 (1) lit. b) GDPR and, in addition, Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in offering secure payment options.
Further information is available from Klarna at
https://www.klarna.com/international/privacy-policy/
c) PayPal
We offer PayPal as a payment method, a service of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg, hereinafter "PayPal".
A connection to PayPal servers is established as soon as you open our checkout page in order to display the payment button. In doing so, your IP address and information about your device and browser are transmitted to PayPal. If you select PayPal as your payment method, you will be redirected to PayPal, where your payment data as well as your name, address, order value and order number are processed by PayPal under its own responsibility.
The legal basis is Art. 6 (1) lit. b) GDPR and, in addition, Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in offering secure payment options.
Further information is available from PayPal at
https://www.paypal.com/uk/webapps/mpp/ua/privacy-full
d) Shop Pay
As an accelerated payment method we offer Shop Pay, a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.
A connection to Shop Pay servers at the address shop.app is established as soon as you open our website. If you use Shop Pay, the delivery and payment details stored with Shop Pay are used to process the order. An identifier is stored on your device for recognition purposes.
The legal basis is Art. 6 (1) lit. b) GDPR.
e) Apple Pay and Google Pay
If you select Apple Pay, the data required for payment processing is transmitted to Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. If you select Google Pay, it is transmitted to Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The payment itself is processed via Shopify Payments.
The legal basis is Art. 6 (1) lit. b) GDPR.
Shopify (shop software and web analysis)
a) Shopify shop software
We use "Shopify" to host our shop system as well as to present our offers and process contracts.
The legal basis is Art. 6 (1) lit. b) GDPR (initiation and performance of a contract).
"Shopify" is the service of a group of companies consisting of Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., Shopify (USA) Inc., Shopify Commerce Singapore Pte. Ltd. and Shopify International Limited.
As we are based in the European Economic Area (EEA), the processing is carried out by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland, hereinafter "Shopify".
Due to the group structure, however, it cannot be ruled out that processing also takes place in Canada and the USA, that is, outside the EEA. For the transfer of data to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
Shopify processes the following data on our behalf:
Name, billing address and, where applicable, delivery address, email address, payment data, company name where applicable, telephone number where applicable, IP address, information about orders, information about the merchant shops supported by Shopify that you visit, as well as information about your device and your internet browser.
Shopify provides further data protection information at
https://www.shopify.com/legal/privacy
b) Shopify web analysis
Insofar as we also use Shopify's web analysis service on our website, Shopify stores cookies on your device via your internet browser. Further information such as the location, time or frequency of your visit to our website is transmitted to a Shopify server via these cookies and evaluated there.
The legal basis is your consent pursuant to Art. 6 (1) lit. a) GDPR in conjunction with Section 25 (1) TDDDG.
Recording of events via Shopify Customer Events
We do not integrate the analysis and marketing services described below individually into the source code of our website, but via the "Customer Events" function of our shop system Shopify. Events such as viewing a page, viewing a product, adding an item to the cart, starting the checkout and completing an order are recorded and passed on to the services integrated in each case.
Unless expressly stated otherwise below, the legal basis is your consent pursuant to Art. 6 (1) lit. a) GDPR in conjunction with Section 25 (1) TDDDG.
Google Analytics 4
We use Google Analytics version 4 on our website. This is a web analysis service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google". Our measurement ID is G-LSP6Y0TJ03.
The service is used to analyse how our website is used. Among other things, it records the pages visited, the time and duration of the visit, the website from which you reached us, information about your device and browser, your approximate location and events triggered such as product views and orders. A random identifier is assigned and stored on your device in order to recognise your browser.
The legal basis is your consent pursuant to Art. 6 (1) lit. a) GDPR in conjunction with Section 25 (1) TDDDG.
Google also processes the data in the United States of America. An adequacy decision of the European Commission of 10 July 2023 exists for transfers there under the EU-US Data Privacy Framework; Google is certified under this framework.
The usage data stored by Google is deleted after the retention period set in our Google Analytics account has expired. This period is 2 months for event data and 14 months for user-level data. The period for user-level data starts again when the same user is active again.
Further information is available from Google at
https://policies.google.com/privacy
Google offers a browser add-on for deactivation at
https://tools.google.com/dlpage/gaoptout
Google Ads with conversion tracking and remarketing
We use Google Ads on our website, an advertising service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google". Our advertising ID is AW-482232148.
We use Google Ads for three purposes. First, we measure whether a visit to our website came about through one of our ads and whether it resulted in an order (conversion tracking). Second, our ads may be shown to you again on other websites if you have already visited our website (remarketing). Third, audiences are built from this data.
For this purpose, an identifier is stored on your device when you visit our website, and information about the pages visited, products viewed, the order value and the order number is transmitted to Google. The processing takes place across devices if you are signed in to a Google account.
The legal basis is your consent pursuant to Art. 6 (1) lit. a) GDPR in conjunction with Section 25 (1) TDDDG.
Google also processes the data in the United States of America. An adequacy decision of the European Commission of 10 July 2023 exists for transfers there under the EU-US Data Privacy Framework; Google is certified under this framework.
You can change your settings for personalised advertising at
https://adssettings.google.com/authenticated
Further information is available from Google at
https://policies.google.com/technologies/ads
Enhanced conversions and AdNabu
After an order has been completed, we additionally transmit information about you to Google so that Google can attribute an order to an advertisement previously displayed. Google refers to this function as enhanced conversions. The information transmitted comprises your email address, your telephone number and the first name, last name, street, house number, postcode, town, region and country from your delivery address. Before transmission, this information is converted into a hash value in your browser using a cryptographic procedure.
This is implemented technically via the AdNabu service of AdNabu Global, Inc., 2035 Sunset Lake Rd, Suite B-2, Newark, Delaware 19702, USA, hereinafter "AdNabu". AdNabu additionally receives the order number, the order value, the currency, the address of our website that was called up as well as an identifier for our shop and our Google Ads account. This data is transmitted to an AdNabu server in the United States of America.
The legal basis is your consent pursuant to Art. 6 (1) lit. a) GDPR in conjunction with Section 25 (1) TDDDG, which at the same time covers the transfer to the United States of America pursuant to Art. 49 (1) lit. a) GDPR.
Further information is available from AdNabu at
https://www.adnabu.com/privacy
Google Merchant Center
We transmit information about our products to the Google Merchant Center of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google", so that our products can be displayed in Google's services. Our merchant ID is 285287213.
In addition, a Merchant Center badge showing ratings of our shop is embedded on our website. When you open a page containing this badge, a connection to Google servers is established and a sandboxed frame is loaded from google.com. In doing so, your IP address and information about your device and browser are transmitted to Google. At the same time, information about the use of our website is transmitted to Google under the ID MC-WH7ECBS36P.
The legal basis is your consent pursuant to Art. 6 (1) lit. a) GDPR in conjunction with Section 25 (1) TDDDG.
Google also processes the data in the United States of America. An adequacy decision of the European Commission of 10 July 2023 exists for transfers there under the EU-US Data Privacy Framework; Google is certified under this framework.
Google Fonts
Our website uses Google Fonts to display external fonts. This is a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter "Google".
To enable the display of certain fonts on our website, a connection to a Google server is established when our website is accessed. In doing so, your IP address as well as information about your device and browser is transmitted to Google.
The legal basis is your consent pursuant to Art. 6 (1) lit. a) GDPR in conjunction with Section 25 (1) TDDDG, as Google Fonts is loaded on our website together with the Merchant Center badge.
Google also processes the data in the United States of America. An adequacy decision of the European Commission of 10 July 2023 exists for transfers there under the EU-US Data Privacy Framework; Google is certified under this framework.
Further information is available from Google at
https://developers.google.com/fonts/faq/privacy
Meta pixel
We use the Meta pixel on our website, a service of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, hereinafter "Meta". Our pixel ID is 513054596091304.
With the Meta pixel we measure the effectiveness of our ads on Facebook and Instagram and can show you ads there again if you have visited our website. This records the pages visited, products viewed, items added to the cart, the start of the checkout and the completion of an order including the order value, as well as your IP address and information about your device and browser. If you are logged in to Facebook or Instagram, Meta can assign this information to your account there.
The legal basis is your consent pursuant to Art. 6 (1) lit. a) GDPR in conjunction with Section 25 (1) TDDDG.
Meta also processes the data in the United States of America. An adequacy decision of the European Commission of 10 July 2023 exists for transfers there under the EU-US Data Privacy Framework; Meta is certified under this framework.
Further information is available from Meta at
https://www.facebook.com/privacy/policy
You can change your advertising settings at
https://www.facebook.com/settings?tab=ads
Trusted Shops
We use services of Trusted Shops AG, Subbelrather Strasse 15C, 50823 Cologne, Germany, hereinafter "Trusted Shops", on our website. The trust badge with buyer protection, the display of customer reviews and the collection of reviews after an order are integrated.
When you access our website, a connection to Trusted Shops servers is established in order to display the trust badge and the reviews. In doing so, your IP address and information about your device and browser are transmitted to Trusted Shops.
The legal basis for displaying the trust badge and the reviews is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in a transparent presentation of our customers' satisfaction and in providing buyer protection.
If you complete an order and make use of the buyer protection, or if you consent to a review request, we transmit your email address and the order data to Trusted Shops. In this respect, the legal basis is Art. 6 (1) lit. b) GDPR or your consent pursuant to Art. 6 (1) lit. a) GDPR.
Further information is available from Trusted Shops at
https://www.trustedshops.eu/legal-notice/privacy/
Facebook and Instagram company pages
To promote our products and services and to communicate with prospective and existing customers, we operate company pages on the Facebook and Instagram platforms. On these social media platforms we are jointly responsible together with Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
Meta's data protection officer can be reached via a contact form at
https://www.facebook.com/help/contact/540977946302970
We have regulated the joint responsibility in an agreement on the respective obligations within the meaning of the GDPR. This agreement, which sets out the mutual obligations, is available at
https://www.facebook.com/legal/terms/page_controller_addendum
The legal basis for the resulting processing of personal data is Art. 6 (1) lit. f) GDPR. Our legitimate interest lies in the analysis, communication, sales and promotion of our products and services.
The legal basis may also be your consent pursuant to Art. 6 (1) lit. a) GDPR given to the platform operator. In accordance with Art. 7 (3) GDPR, you may withdraw this consent at any time with effect for the future by notifying the platform operator.
When you visit our company pages, Meta records your IP address as well as further information that is present on your device in the form of cookies. This information is used to provide us, as the operator of the pages, with statistical information about the use of our pages. Further information is available from Meta at
https://www.facebook.com/legal/terms/information_about_page_insights_data
The personal data collected about you in this context is processed by Meta and may be transferred to countries outside the European Union. Meta describes in general terms which information it receives and how it is used in its data policy, which also contains information on how to contact Meta and on the settings options for advertisements:
https://www.facebook.com/privacy/policy
Links to social media via graphic or text link
We also promote our presence on the social networks listed below on our website. They are embedded via a linked graphic of the respective network. Using this linked graphic prevents a connection to the servers of the respective social network from being established automatically when a page containing such a link is opened. Only when you click on the graphic are you forwarded to the service of the respective social network.
Once you have been forwarded, the respective network records information about you. It cannot be ruled out that such data is processed in the United States of America.
Initially, this concerns data such as your IP address, the date, the time and the page visited. If you are logged into a user account of the respective network at that time, the network operator may be able to assign the collected information about your specific visit to your personal account. If you interact via a "share" button of the respective network, this information may be stored in your user account and, where applicable, published. If you wish to prevent the information collected from being assigned directly to your user account, you must log out before clicking on the graphic.
The networks concerned are Facebook, Instagram, YouTube and Pinterest.