Privacy Policy

Responsible for Data Processing:

Simon Neuhaus
c/o Grosch Postflex #1888
Emsdettener Str. 10
48268 Greven
Germany

customer service@cutnetch.de
Tel: +49 160 831 76 71

We are grateful for your interest in our online shop. The protection of your privacy is very important to us. Below we provide you with detailed information on how we handle your data.

1. Access Data and Hosting

You can visit our websites without providing personal information. Whenever a website is accessed, the web server automatically saves a so-called server log file that, for example, contains the name of the requested file, your IP address, date and time of access, amount of data transferred, and the requesting provider (access data) and documents the access. This access data is evaluated exclusively for the purpose of ensuring a trouble-free operation of the site and improving our offer. This serves to protect our legitimate interests in an accurate presentation of our offer, in accordance with Art. 6 (1) (1) lit. f GDPR. All access data will be deleted at the latest seven days after the end of your visit to our website.

Hosting

The services for hosting and presenting the website are partially provided by our service providers as part of a processing on our behalf. Unless otherwise explained in this privacy policy, all access data and all data collected in forms provided on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy.

Our service providers are located and/or use servers in the following countries for which the European Commission has established an adequate level of data protection through a decision: Canada

Our service providers are located and/or use servers in the USA and other countries outside of the EU and EEA. No adequacy decision from the European Commission exists for these countries. Our cooperation with them is based on the European Commission's standard data protection clauses.

2. Data Processing for Contract Performance and Contact Purposes

2.1 Contract Performance Data Processing

For the purpose of contract performance (including inquiries about and processing of any warranty and performance claims, as well as any legal updating requirements), in accordance with Art. 6 (1) (1) (b) of the GDPR, we collect personal data if you voluntarily provide it to us as part of your order. Required fields are marked as such, as in these cases we need the data for the contract performance and cannot send the order without this information. Which data is collected can be seen from the respective input forms.

Further information on the processing of your data, including the transfer to our service providers for the purpose of order, payment, and shipping processing, can be found in the following sections of this privacy policy. After full performance of the contract, your data will be restricted for further processing and deleted after the expiration of the tax and commercial retention periods, in accordance with Art. 6 (1) (1) (c) of the GDPR, unless you have explicitly consented to further use of your data in accordance with Art. 6 (1) (1) (a) of the GDPR or we reserve the right to use the data beyond that which is legally permitted, which we inform you of in this statement.

2.2 Customer Account

If you have given your consent in accordance with Art. 6 (1) (1) (a) of the GDPR by deciding to open a customer account, we use your data for the purpose of opening a customer account and storing your data for future orders on our website. You can delete your customer account at any time either by sending a message to the contact option described in this privacy policy or through a function provided in the customer account. After deletion of your customer account, your data will be deleted, unless you have explicitly consented to further use of your data in accordance with Art. 6 (1) (1) (a) of the GDPR or we reserve the right to use the data beyond that which is legally permitted, which we inform you of in this statement.

2.3 Contact

In the course of customer communication, we collect data for processing your inquiries, requests, and orders by email, telephone or the contact form on our website. The processing of this data is based on Art. 6 (1) (1) (f) of the GDPR and serves our legitimate interest in effective and efficient customer communication and response. The data collected for this purpose will be deleted as soon as it is no longer necessary for the purpose for which it was collected, unless you have explicitly consented to further use of your data in accordance with Art. 6 (1) (1) (a) of the GDPR or we reserve the right to use the data beyond that which is legally permitted, which we inform you of in this statement.

3. Data Processing for Shipping Processing

In order to fulfill the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR, we will provide your data to the shipping service provider responsible for delivery, as far as this is necessary for the delivery of ordered goods.

4. Data Processing for Payment Processing

In our online shop, we work with the following partners for payment processing: technical service providers, banks, payment service providers.

4.1 Data Processing for Transaction Processing

Depending on the selected payment method, we will provide the data necessary for processing the payment transaction to our technical service providers, who act on our behalf as order processors, or to the commissioned banks or to the selected payment service provider, as far as this is necessary for processing the payment. This serves the fulfillment of the contract in accordance with Art. 6 Para. 1 S. 1 lit. b GDPR. In part, the payment service providers collect the data required for processing the payment themselves, for example on their own website or through a technical integration in the ordering process. In this case, the privacy policy of the respective payment service provider applies.
If you have any questions about our partners for payment processing and the basis of our cooperation with them, please contact the contact options described in this privacy policy.

4.2 Data Processing for the Purpose of Fraud Prevention and Optimization of Our Payment Processes

If necessary, we provide our service providers with additional data that they use together with the data necessary for processing the payment as our order processors for the purpose of fraud prevention and optimization of our payment processes (e.g. invoicing, handling of disputed payments, support for accounting). This serves, in accordance with Art. 6 Para. 1 S. 1 lit. f GDPR, to safeguard our predominantly legitimate interests in securing against fraud and in an efficient payment management.

4.3 Identity and Credit Check for Klarna Payment Services Selection

Klarna Direct Debit, Purchase on Invoice via Klarna, Klarna Installment Purchase
If you choose the payment services of Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as Klarna), we ask for your consent in accordance with Art. 6 para. 1 sentence 1 lit. a DSGVO, that we may transmit the data necessary for processing the payment and an identity and credit check to Klarna. In Germany, the credit information agencies mentioned in Klarna's Privacy Policy can be used for the identity and credit check. Klarna uses the information received about the statistical probability of default for a balanced decision on the establishment, performance or termination of the contract relationship. You can revoke your consent at any time by sending a message to the contact options mentioned in this privacy policy. This may result in us not being able to offer you certain payment options. You can also revoke your consent for this use of personal data at any time towards Klarna.

4.4 Identity and Credit Check with PayOne for Invoice Payment Option

If you choose the invoice payment option (offered through PayOne GmbH, Lyoner Str. 9, 60528 Frankfurt a. M., Germany (hereinafter referred to as PayOne)), we ask for your consent under Article 6 (1) (1) lit. a GDPR for us to transmit the data necessary for payment processing and identity and credit check to PayOne. In Germany, the credit information companies mentioned in PayOne's Privacy Policy can be used for the identity and credit check. PayOne will use the information obtained about the statistical probability of a payment default for a balanced decision on establishing, performing or terminating the contract. You can revoke your consent at any time by sending a message to the contact options described in this privacy policy. This may result in us not being able to offer certain payment options to you.

5. Advertising via Email

Email Newsletter with Subscription and Newsletter Tracking

If you subscribe to our newsletter, we will use the data required for this or separately provided by you to regularly send you our email newsletter based on your consent under Article 6 (1) (1) lit. a GDPR. Unsubscribing from the newsletter is possible at any time and can be done either by sending a message to the contact options described below or through a link provided in the newsletter. After unsubscribing, we will delete your email address from the recipient list, unless you have explicitly consented to further use of your data according to Article 6 (1) (1) lit. a GDPR or we reserve the right to use the data beyond that which is permitted by law and inform you of this in this statement.

Please be advised that when sending our newsletter, we will analyze your user behavior. To do this, we will also analyze your interaction with our newsletter by measuring, storing and evaluating open rates and click rates for the purpose of designing future newsletter campaigns (“newsletter tracking”).

For this analysis, the emails sent contain single-pixel technologies (e.g., so-called web beacons, tracking pixels) stored on our website. In particular, we link the following "newsletter data" for the analysis:

  • the page from which the page was requested (so-called referrer URL),
  • the date and time of the request,
  • the description of the type of web browser used,
  • the IP address of the computer making the request,
  • the email address,
  • the date and time of registration and confirmation

and the single-pixel technologies with your email address or IP address and possibly an individual ID. Links included in the newsletter may also contain this ID.

If you do not want newsletter tracking, you can unsubscribe from the newsletter at any time, as described earlier.

The information will be stored as long as you have subscribed to the newsletter.

6. Cookies and Other Technologies

6.1 General Information

To make your visit to our website attractive and to enable the use of certain functions, we use various technologies on different pages, including so-called cookies. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies).

We use such technologies that are essential for the use of certain functions of our website (e.g. shopping cart function). These technologies collect and process IP address, time of visit, device and browser information, and information about your use of our website (e.g. information about the contents of the shopping cart). This is based on a balancing of interests in favor of our predominant legitimate interest in an optimized presentation of our offer in accordance with Art. 6 (1) (f) GDPR.

In addition, we use technologies to fulfill the legal obligations to which we are subject (e.g. to provide evidence of consents to the processing of your personal data) and for web analysis and online marketing. Further information on this, including the legal basis for processing the data, can be found in the following sections of this privacy policy.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™

If you have consented to the use of these technologies in accordance with Art. 6 para. 1 s. 1 lit. a GDPR, you can revoke your consent at any time by sending a message to the contact options described in the privacy policy. Alternatively, you can also visit the following link: https://www.cookiebot.com/. If cookies are not accepted, the functionality of our website may be limited.

6.2 Cookiebot Consent Management Platform

On our website, we use Cookiebot to inform you about the cookies and other technologies that we use on our website and to obtain, manage, and document your consent for the processing of your personal data by these technologies, as required by Art. 6 para. 1 (1) c GDPR in order to fulfill our legal obligation under Art. 7 para. 1 GDPR to be able to demonstrate your consent for the processing of your personal data. Cookiebot is provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark, who processes your data on our behalf.
After you submit your cookie declaration on our website, Cookiebot's web server stores your anonymized IP address, date and time of your declaration, browser information, the URL from which the declaration was sent, information on your consent behavior, and an anonymous random key. In addition, a cookie is used that contains information on your consent behavior and key. Your data will be deleted after twelve months, unless you have explicitly consented to further use of your data in accordance with Art. 6 para. 1 (1) a GDPR or if we reserve the right to use the data beyond that, which is legally permitted and which we will inform you of in this declaration.

7. Use of Cookies and Other Technologies for Web Analysis and Advertising Purposes

If you have given your consent in accordance with Art. 6 para. 1 (1) a GDPR, we use the following cookies and other technologies from third parties on our website. The data collected in this context will be deleted after the purpose of the respective technology has been served and its use has ended by us. You can revoke your consent at any time with effect for the future. You will find further information on your right to withdraw your consent in the section "Cookies and Other Technologies." You will find further information, including the basis of our cooperation with each provider, under the individual technologies. If you have any questions about the providers and the basis of our cooperation with them, please contact us using the contact options described in this privacy policy.

7.1 Use of Google Services for Web Analysis and Advertising Purposes

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) as described below. Information about your use of our website that is automatically collected through the Google technologies is generally transferred to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA and stored there. No adequacy decision by the European Commission is available for the USA. Our collaboration with them is based on standard data protection clauses of the European Commission. If your IP address is collected through the Google technologies, it will be shortened before storage on Google's servers by activating IP anonymization. In exceptional cases, the full IP address is transmitted to a server of Google and shortened there. Unless otherwise indicated for the individual technologies, data processing is based on an agreement on joint responsibility under Art. 26 GDPR that is concluded for each technology. You can find further information about data processing by Google in the Google Privacy Policy.

Google Analytics

For the purpose of web page analysis, data (IP address, time of visit, device and browser information, and information about your use of our website) is automatically collected and stored with Google Analytics, from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. Your IP address is not generally combined with other data from Google. Data processing is based on an agreement for commissioned data processing by Google.

Google Fonts

For uniform display of content on our website, data (IP address, time of visit, device and browser information) is collected through the script code "Google Fonts," transmitted to Google, and then processed by Google. We have no influence on this subsequent data processing.

YouTube Video Plugin

For the integration of third-party content, data (IP address, time of visit, device and browser information) is collected through the YouTube video plugin used in the extended privacy mode we use, transmitted to Google, and then processed by Google. We have no influence on this subsequent data processing.

7.2 Use of Microsoft Services for Web Analysis and Advertising Purposes

We use the technologies of Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland (“Microsoft”). The data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR. The information about your use of our website that is automatically collected by the Microsoft technologies is usually transferred to a server of Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA and stored there. There is no adequacy decision by the European Commission for the USA. Our cooperation with them is based on the standard data protection clauses of the European Commission. Further information about data processing by Microsoft can be found in the Microsoft Privacy Statement.

Microsoft Advertising

For advertising purposes in Bing, Yahoo, and MSN search results and on third-party websites, when you visit our website, the so-called Microsoft Advertising Remarketing cookie is set, which automatically enables interest-based advertising through the collection and processing of data (IP address, time of visit, device and browser information, and information about your use of our website) and by means of a pseudonym cookie ID and based on the pages you have visited.

For website analysis and event tracking, we measure your subsequent usage behavior through Microsoft Advertising Universal Event Tracking (UET) if you arrived at our website through a Microsoft Advertising advertisement. For this purpose, cookies can be used and data (IP address, time of visit, device and browser information, and information about your use of our website based on events specified by us, such as visiting a website or signing up for a newsletter) can be collected and pseudonym usage profiles can be created using these data.As long as your internet-enabled devices are linked to your Microsoft account and you have not disabled the "Interest-based Advertising" setting in your Microsoft account, Microsoft can create reports on your usage behavior (especially cross-device user numbers), even if you switch devices, known as "Cross-Device Tracking". Personal data is not processed by us in this regard, we only receive statistics created based on Microsoft UET.

7.3 Use of Facebook Services for Web Analytics and Advertising Purposes

Facebook Analytics

As part of Facebook's business tools, statistics about visitor activities on our website are created based on data collected through the Facebook Pixel. The data processing is based on an agreement for contract processing by Facebook (by Meta). Your analysis is for the optimal representation and marketing of our website.

Facebook Ads (Ad Manager)

We advertise for this website on Facebook (by Meta) and other platforms through Facebook Ads. We determine the parameters of each advertising campaign. Facebook (by Meta) is responsible for the exact implementation, especially the decision on the placement of ads for individual users. Unless otherwise specified for the individual technologies, the data processing is based on an agreement between jointly responsible parties according to Art. 26 GDPR. The joint responsibility is limited to the collection of data and its transmission to Meta Platforms Ireland. The subsequent data processing by Meta Platforms Ireland is not covered by this.

7.4 Other Providers of Web Analytics and Online Marketing Services

Use of Amazon Services for Online Marketing

Through our advertising partner Amazon Europe Core S.à.r.l., 5 Rue Plaetis, L-2338 Luxembourg ( "Amazon"), we market space for advertisements from third parties on Amazon. These ads are displayed in various places on this website. By means of cookies, Amazon can track the progress of each order and in particular can determine that you have clicked on the respective advertisement and then ordered the product. To this end, data (IP address, time of visit, device and browser information, and information about your use of our website) is collected, transmitted to Amazon, and processed by Amazon. We have no influence on this data processing. The data processing is based on an agreement between jointly responsible parties according to Art. 26 GDPR. The information automatically collected by Amazon about your use of our website is generally transmitted to a server of Amazon, Inc., 410 Terry Ave. North, Seattle, WA 98109-5210, USA and is stored there. No adequacy decision of the European Commission is in place for the USA. Our collaboration with them is based on the European Commission's standard data protection clauses.

8. Social Media

8.1 Social Plugins from Facebook (by Meta), Twitter, Instagram (by Meta), Pinterest

Social buttons from social networks are used on our website. These are only embedded into the page as HTML links, so that no connection to the server of the respective provider is established when our website is called up. If you click on one of the buttons, the website of the respective social network opens in a new window of your browser. There you can, for example, activate the like or share button.

8.2 Our Online Presence on Facebook (by Meta), Twitter, Instagram (by Meta), Youtube

If you have given your consent to the respective social media operator under Art. 6(1) 1 lit. a DSGVO, your data will be automatically collected and stored for market research and advertising purposes when visiting our online presences on the social media mentioned above, from which usage profiles are created using pseudonyms. These can be used to display ads within and outside the platforms that are presumably in line with your interests. For this purpose, cookies are usually used. For detailed information on the processing and use of data by the respective social media operator, as well as a contact option and your related rights and settings to protect your privacy, please refer to the data protection information of the provider linked below. If you still need help with this, you can contact us.

Facebook (by Meta) is offered by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland ("Meta Platforms Ireland"). The information automatically collected by Meta Platforms Ireland about your use of our online presence on Facebook (by Meta) is usually transferred to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. No adequacy decision of the European Commission is in place for the USA. Our collaboration with you is based on standard data protection clauses of the European Commission. The processing of data during a visit to a Facebook (by Meta) fan page is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 of the GDPR. Further information (Information about Page Insights data) can be found here.

Twitter is an offering from Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”). Information about your use of our online presence on Twitter that is automatically collected by Twitter is usually transmitted to a server of Twitter, Inc., 1355 Market Street, Suite 900, San Francisco, CA 94103, USA and stored there. There is no adequacy decision of the European Commission for the USA. Our collaboration with you is based on standard data protection clauses of the European Commission.

Instagram (by Meta) is an offering of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Meta Platforms Ireland”) The information about your use of our online presence on Instagram that is automatically collected by Meta Platforms Ireland is usually transmitted to a server of Meta Platforms, Inc., 1 Hacker Way, Menlo Park, California 94025, USA and stored there. There is no adequacy decision of the European Commission for the USA. Our collaboration with you is based on standard data protection clauses of the European Commission. The processing of data during a visit to an Instagram (by Meta) fan page is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 of the GDPR. Further information (Information about Page Insights data) can be found here.

YouTube is a service offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Information about your use of our online presence on YouTube, which is collected automatically by Google, is usually transmitted to a server of Google LLC, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA, and stored there. There is no adequacy decision from the European Commission for the USA. Our cooperation with them is based on the European Commission's standard data protection clauses.  

9. Contact Options and Your Rights

9.1 Your Rights

As a data subject, you have the following rights:

  • pursuant to Art. 15 GDPR, the right to demand information about your personal data processed by us to the extent indicated there;
  • pursuant to Art. 16 GDPR, the right to immediately request the correction of incorrect or completion of your personal data stored with us;
  • pursuant to Art. 17 GDPR, the right to demand the deletion of your personal data stored with us, unless further processing
    • is necessary for the exercise of the right to freedom of expression and information;
    • is necessary to fulfill a legal obligation;
    • is necessary for reasons of public interest or
    • is necessary for the assertion, exercise or defense of legal claims;
  • pursuant to Art. 18 GDPR, the right to request the restriction of the processing of your personal data, in so far as
    • you dispute the accuracy of the data;
    • the processing is unlawful, but you reject its deletion;
    • we no longer need the data, but you need it for the assertion, exercise or defense of legal claims;
    • According to Art. 21 of the GDPR, you have the right to object to the processing;
  • according to Art. 20 of the GDPR, you have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request the transmission to another controller;
  • according to Art. 77 of the GDPR, you have the right to file a complaint with a supervisory authority. As a rule, you can contact the supervisory authority of your usual place of residence or place of work or our company headquarters for this purpose.

Right to Object

Where we process your personal data as described above for the purposes of safeguarding our predominant legitimate interests, you may object to this processing with effect for the future. If the processing is for direct marketing purposes, you may exercise this right at any time as described above. If the processing is for other purposes, you have the right to object only if there are grounds relating to your particular situation.

After you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing is necessary for the establishment, exercise or defense of legal claims.

This does not apply if the processing is for direct marketing purposes. Then we will no longer process your personal data for this purpose.

9.2 Contact Options

If you have any questions about the collection, processing or use of your personal data, if you require information, correction, restriction or deletion of data, or if you wish to revoke any consent you have given or object to a specific use of data, please do not hesitate to contact us directly using the contact details in our legal disclosure.

10 CCPA - Settings

Find options to opt-out CCPA here

Privacy Policy created with the Trusted Shops legal text generator in cooperation with FÖHLISCH Lawyers Translation by ChatGPT.