Privacy Policy

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies insofar as no other information is provided in the following processing operations.
“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our website without providing any personal information.
Each time our website is accessed, usage data is transmitted to us or to our web host / IT service provider by your internet browser and stored in log data, so-called server log files. This stored data includes, for example, the name of the page accessed, date and time of access, IP address, amount of data transferred and the requesting provider.
The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the trouble-free operation of our website and improving our offer.

Contact

Controller

Please contact us if you wish. The controller responsible for data processing is:
Titkov Igor
Ortsieker weg 79
32049 Herford
Germany
Phone: 052213469275
Email: igor@ionn.de

Customer Contact by Email

If you contact us by email on your own initiative, we collect your personal data, name, email address and message text, only to the extent provided by you. The data processing serves the purpose of handling and responding to your contact request.
If the contact serves the implementation of pre-contractual measures, for example advice in case of purchase interest or preparation of an offer, or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and Processing When Using the Contact Form

When using the contact form, we collect your personal data, name, email address and message text, only to the extent provided by you. The data processing serves the purpose of making contact.
If the contact serves the implementation of pre-contractual measures, for example advice in case of purchase interest or preparation of an offer, or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6 para. 1 lit. f GDPR.
We use your email address only to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Customer Account and Orders

Customer Account

When opening a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal. Your customer account will then be deleted.

Collection, Processing and Transfer of Personal Data for Orders

When placing an order, we collect and process your personal data only insofar as this is necessary for the fulfilment and processing of your order and for handling your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR and is necessary for the performance of a contract with you.
Your data may be passed on, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly observe the legal requirements. The scope of data transmission is limited to the minimum necessary.

Reviews and Advertising

Data Collection When Writing a Comment or Review

When commenting on or reviewing an item or post, we collect your personal data, name, email address and comment text, only to the extent provided by you. The processing serves the purpose of enabling comments/reviews and displaying comments/reviews.

By submitting the comment/review, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal. Your personal data will then be deleted.

Shopauskunft Customer Review

We use the review tool “shopauskunft.de” of Händlerbund Management AG, Kohlgartenstraße 11 - 13, 04315 Leipzig, “Shopauskunft”, on our website.
After your order, we would like to ask you to review and comment on your purchase from us. For this purpose, we will contact you by email using the technical system “Rechtssichere Bewertungsanfrage (RBA)”. In doing so, we process the data relating to your order, order number/invoice number, purchase value and shipping costs, as well as your email address. Where applicable, we also use this data for the purpose of verifying your review.
The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent, provided that you have expressly agreed to the transfer of your data and to receiving the review request.
You can withdraw your consent at any time using the corresponding link in the email or by notifying us, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
Further information on data protection when using Shopauskunft can be found at:
https://www.shopauskunft.de/datenschutz.

Use of the Email Address for Sending Newsletters

We use your email address to send information and offers by newsletter, provided that you have expressly consented to this. The data processing serves exclusively the purpose of advertising communication. For this purpose, we process your email address and, where applicable, further data that you voluntarily provided when subscribing to our newsletter.
The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite removal from the mailing list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.

Use of the Email Address for Sending Direct Advertising

We use your email address, which we received in connection with the sale of goods or services, for the electronic sending of advertising for our own goods or services similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising your objection can be found in the legal notice. You can also use the link provided for this purpose in the advertising email. No costs other than transmission costs according to the basic tariffs will arise.

Shipping Service Providers and Inventory Management

Transfer of the Email Address to Shipping Companies for Shipment Status Information

We pass on your email address to the transport company as part of contract processing, provided that you have expressly consented to this during the ordering process. The transfer serves the purpose of informing you by email about the shipping status. The processing is carried out on the basis of Art. 6 para. 1 lit. a GDPR with your consent. You can withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.

Use of an External Inventory Management System

We use an inventory management system for contract processing within the scope of order processing. For this purpose, your personal data collected as part of the order is transmitted to OXID.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Payment Service Providers and Credit Information

Use of PayPal Check-Out

We use the payment service PayPal Check-Out of PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal L-2449 Luxembourg, “PayPal”, on our website. The data processing serves the purpose of being able to offer you payment via the payment service. When selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Cookies may be stored which allow your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in providing a customer-oriented offer of various payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.

Credit Card via PayPal, Direct Debit via PayPal and “Pay Later” via PayPal

For individual payment methods such as credit card via PayPal, direct debit via PayPal or “Pay Later” via PayPal, PayPal reserves the right to obtain credit information, where applicable, on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of payment default for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit information may include probability values, score values, calculated on the basis of scientifically recognised mathematical-statistical procedures, which may include address data in the calculation. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit checking for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when PayPal makes advance payments.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method requested by you. Failure to provide the data means that the contract cannot be concluded with the payment method selected by you.

Third-Party Providers

When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. To carry out this payment method, the data may then be passed on by PayPal to the respective provider. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Local third-party providers may include, for example:
Apple Pay, Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland
Google Pay, Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Invoice Purchase via PayPal

When paying using the invoice purchase payment method, the data required for payment processing is first transmitted to PayPal. To carry out this payment method, the data is then transmitted by PayPal to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, “Ratepay”, in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Ratepay may obtain credit information on the basis of mathematical-statistical procedures, probability or score values, using credit agencies according to the procedure described above. The data processing serves the purpose of credit checking for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Ratepay makes advance payments. Further information on data protection and which credit agencies Ratepay uses can be found at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/.

Further information on data processing when using PayPal can be found in the corresponding privacy policy at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Klarna Payment Options

We use the payment service of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, “Klarna”, on our website. When selecting and using payment via Klarna, the data required for payment processing is transmitted to Klarna in order to fulfil the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Cookies may be stored which allow your browser to be recognised. The resulting data processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in providing a customer-oriented offer of various payment methods. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.

“Pay Later” Invoice, “Pay Now” Payment by Direct Debit, Credit Card, Instant Transfer, “Financing” Instalment Purchase

For individual payment methods such as “Pay Later” invoice, “Pay Now” payment by direct debit, credit card, instant transfer, and “Financing” instalment purchase, Klarna reserves the right to obtain credit information, where applicable, on the basis of mathematical-statistical procedures using credit agencies.
For this purpose, Klarna transmits the personal data required for a credit check, such as first name and surname, address, gender, email address, IP address and data related to the order, to a credit agency for the purpose of identity and credit checks and uses the information received about the statistical probability of payment default for a balanced decision on the establishment, implementation or termination of the contractual relationship. The credit information may include probability values, score values, calculated on the basis of scientifically recognised mathematical-statistical procedures, which may include address data in the calculation. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit checking for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in protection against payment default when Klarna makes advance payments. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract with the payment method requested by you. Failure to provide the data means that the contract cannot be concluded with the payment method selected by you.
Further information, in particular to which credit agencies Klarna passes on your personal data, can be found at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.

General information about Klarna can be found at: https://www.klarna.com/de/. Your personal data is processed by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna’s privacy policy at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we point out that you may then not be able to use all functions of this website to their full extent.

You can find information on how to manage and disable cookies in the most important browsers under the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated below in this privacy policy, we use only technically necessary cookies for the purpose of making our offer more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognised again after a page change.

The use of cookies or comparable technologies is based on Section 25 para. 2 TDDDG. The processing of your personal data is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offer.
You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data.

Plug-ins and Other Services

Use of Google Maps

We use the function for embedding Google Maps of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, “Google”, on our website.
This function enables the visual display of geographical information and interactive maps. When pages containing embedded Google Maps are accessed, Google also collects, processes and uses data from visitors to the websites.
Your data may also be transferred to the USA. An adequacy decision of the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework, TADPF. Google is certified under the TADPF and has thereby committed itself to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
Further information on the collection and use of data by Google can be found in Google’s privacy policy at https://www.google.com/privacypolicy.html. There, in the privacy centre, you also have the option to change your settings so that you can manage and protect your data processed by Google.

Use of YouTube

We use the function for embedding YouTube videos of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, “YouTube”, on our website. YouTube is a company affiliated with Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA, “Google”.
The function displays videos stored on YouTube in an iFrame on the website. The “extended data protection mode” option is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information transmitted to YouTube and stored there. Your data may also be transferred to the USA. An adequacy decision of the EU Commission exists for the USA, the Trans-Atlantic Data Privacy Framework, TADPF. YouTube is certified under the TADPF and has thereby committed itself to complying with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent on the basis of Section 25 para. 1 sentence 1 TDDDG in conjunction with Art. 6 para. 1 lit. a GDPR. The processing of your personal data is carried out with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until withdrawal.
Further information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy can be found in YouTube’s privacy policy at https://www.youtube.com/t/privacy.

Rights of Data Subjects and Storage Duration

Duration of Storage

After complete processing of the contract, the data will initially be stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial law retention periods, and will then be deleted after the expiry of the period, unless you have consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.
In addition, under Art. 21 para. 1 GDPR, you have the right to object to processing based on Art. 6 para. 1 lit. f GDPR, as well as to processing for direct advertising purposes.

Right to Lodge a Complaint with the Supervisory Authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.

You may lodge a complaint, among others, with the supervisory authority responsible for us, which can be reached using the following contact details:

Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen
Postfach 20 04 44
40102 Düsseldorf
Phone: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de

Right to Object

If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 para. 1 lit. f GDPR, you have the right, for reasons arising from your particular situation, to object to such processing at any time with effect for the future.
After an objection has been made, the processing of the data concerned will be terminated unless we can prove compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

If personal data processing is carried out for direct advertising purposes, you may object to this processing at any time by notifying us. After the objection has been made, we will stop processing the data concerned for direct advertising purposes.

Last updated: 11 April 2026