Privacy Policy

1) Information about the collection of personal data and contact details of the controller

1.1

We are pleased that you are visiting our website and thank you for your interest.
Below we inform you about how we handle your personal data when using our website.
Personal data is any information that can be used to personally identify you.

1.2

The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is COZI STORE.
The controller of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3

This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (such as orders or inquiries).
You can recognize an encrypted connection by the designation “https://” and the lock icon in the address bar of your browser.

2) Data collection when visiting our website

When you use our website for informational purposes only, i.e. without registering or providing us with information, we only collect the data that your browser sends to our server (so-called server log files ).
When you visit our website, we collect the following data, which is technically necessary to display the website:

  • The website visited
  • Date and time of access
  • Amount of data sent in bytes
  • The source/reference from which you arrived at the page
  • The browser used
  • The operating system used
  • The IP address used (anonymized if possible)

Processing is carried out on the basis of Article 6 paragraph 1 sub f GDPR, based on our legitimate interest in improving the stability and functionality of our website.
The data will not be passed on or otherwise used.
However, we reserve the right to check the server log files subsequently if there are concrete indications of unlawful use.

3) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages.
Cookies are small text files that are stored on your device.

Some cookies are automatically deleted after you close your browser (so-called session cookies ).
Other cookies remain on your device and make it possible to recognize your browser on your next visit ( persistent cookies ).
When cookies are placed, certain user data, such as browser and location data and IP addresses, may be processed, depending on the cookie.
Persistent cookies are automatically deleted after a predefined period, which may vary per cookie.

Cookies can be used, among other things, to store settings that simplify the ordering process (for example, remembering the contents of a shopping cart for a later visit).
Where personal data is also processed by individual cookies, this is done on the basis of Article 6 paragraph 1 sub b GDPR (performance of a contract) or Article 6 paragraph 1 sub f GDPR (legitimate interest in a properly functioning, user-friendly website).

We may work with advertising partners who help us make our online offering more interesting.
In that case, when you visit our website, cookies from partner companies may also be stored on your hard drive (third-party cookies).
If we work with such partners, we will inform you separately about the use and purpose of those cookies.

You can set your browser to inform you about the placing of cookies, decide on a case-by-case basis whether to accept them, or disable the use of cookies altogether.
How this is done varies by browser and is explained in your browser's help menu.
More information can be found here:

Please note: refusing cookies may limit the functionality of our website.

4) Contact us

When you contact us (for example via a contact form or by email), we collect personal data.
Which data is collected is shown in the relevant form.
The data will only be used to answer your question and for the associated technical administration.

The legal basis for this is our legitimate interest in answering your question (Art. 6 para. 1 lit. f GDPR).
If your contact request is aimed at concluding a contract, the additional legal basis is Article 6(1)(b) GDPR.
Your data will be deleted once your request has been fully processed, unless legal retention obligations apply.

5) Data processing when opening a customer account and for the execution of a contract

Personal data is collected and processed when you provide it to us to execute a contract or to create a customer account (Art. 6 para. 1 lit. b GDPR).
The data collected is apparent from the relevant input form.

You can have your customer account deleted at any time by sending a message to the person responsible mentioned above.
We use the information you provide to execute the agreement.
After complete processing of the contract or deletion of your customer account, your data will be blocked, taking into account tax and commercial law retention periods, and deleted after these periods have expired, unless you have expressly consented to further use of your data or we are legally entitled to further data processing, about which we inform you in this declaration.

6) Use of your data for direct advertising

6.1 Signing up for our email newsletter

When you sign up for our newsletter, you will regularly receive information about our offers.
The only mandatory information for sending the newsletter is your email address; other information is voluntary and will only be used to contact you personally.

We use the double opt-in process to send the newsletter:
You will only receive newsletters after you have indicated in a confirmation email that you wish to receive them.
By clicking the confirmation link, you consent to the use of your personal data in accordance with Article 6 paragraph 1 sub a GDPR.

When you register, your IP address, date and time are also stored to demonstrate misuse of your email address.
The data will only be used for sending the newsletter and will not be provided to third parties.

You can unsubscribe at any time via the unsubscribe link in the newsletter or by contacting the person responsible.
After you unsubscribe, your email address will be deleted immediately, unless you give permission for further use or we are legally entitled to further processing.

6.2 Newsletter to existing customers

If you provided your email address when making a purchase, we may use it to send you offers for similar products or services.
No separate consent is required for this; this is done on the basis of our legitimate interest in personalized direct marketing (Art. 6 para. 1 lit. f GDPR).

You can unsubscribe at any time free of charge by contacting the person responsible or via the unsubscribe link in the email.
After you unsubscribe, we will immediately stop using your email address for promotional purposes.

7) Data processing for the processing of orders

7.1 Delivery and payment

For the execution of the agreement, we pass on personal data to the transport company that carries out the delivery, insofar as this is necessary for the delivery.
For the payment, we pass on your payment details to the relevant payment service provider or bank, also to the extent necessary.
The legal basis for this is Article 6 paragraph 1 sub b GDPR (performance of a contract).

7.2 Use of payment services

PayPal

When paying via PayPal , credit card via PayPal , direct debit via PayPal or (if offered) “Purchase on account” or “Payment in instalments via PayPal”, we pass on your payment details to PayPal (Europe) S.à rl et Cie, SCA, 22–24 Boulevard Royal, L-2449 Luxembourg .
The transfer takes place on the basis of Article 6 paragraph 1 letter b GDPR and only to the extent necessary for payment.

PayPal may perform a credit check for some payment methods.
For this purpose, your data may be forwarded to credit agencies (Art. 6 para. 1 lit. f GDPR, legitimate interest in assessing payment risks).
More information about this can be found in PayPal's privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing by sending a message to PayPal, but PayPal may continue to process your data if this is necessary for payment processing.

8) Reminder of assessment

We may use your email address to send you a one-time reminder to leave a review of your order, provided you have given us explicit consent to do so during or after your purchase (Art. 6 para. 1 lit. a GDPR).
You can revoke this consent at any time by contacting the person responsible.

9) Use of social media – Social plugins

9.1 Facebook Plugins (Shariff Solution)

Our website uses plug-ins from the social network Facebook (Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA).
To protect your privacy, these buttons are not loaded directly, but via an HTML link (the so-called Shariff solution).
A connection to Facebook's servers is only established when you click the button.

When you click the button, a new window opens on the Facebook page, where you can interact (after logging in).
Facebook Inc. is certified under the EU-US Privacy Shield , which guarantees an adequate level of protection.
Learn more: https://www.facebook.com/policy.php

9.2 Google+ Plugins (Shariff Solution)

Our website uses plug-ins from Google+ (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA).
The Shariff solution is also used here, so that data is only sent to Google when the button is clicked.
Google LLC is also certified under the Privacy Shield .
More information: https://www.google.com/intl/de/policies/privacy/

9.3 Instagram Plugins (Shariff Solution)

Our website uses plug-ins from Instagram (Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA).
The plug-ins are integrated via an HTML link, so data is only exchanged with Instagram when you click on it.
Instagram LLC is also certified under the Privacy Shield .
Learn more: https://help.instagram.com/155833707900388/

10) Online marketing

10.1 DoubleClick by Google

This website uses DoubleClick by Google (Google LLC, USA).
DoubleClick uses cookies to deliver relevant ads, improve reporting on ad campaigns, and prevent you from seeing the same ad multiple times.

The processing is based on our legitimate interest in optimal marketing of our website (Art. 6 para. 1 lit. f GDPR).
By using cookies, Google can determine which ads are shown in which browsers and measure conversions (e.g. when a user makes a purchase after seeing an ad).
According to Google, these cookies do not contain any personal data.

Your browser automatically connects to Google's server.
If you are logged in to Google, the visit can be linked to your account.
Even without an account, Google can record your IP address.

You can refuse participation in this tracking process by disabling cookies from the domain
www.googleadservices.com
to block them or by using the Digital Advertising Alliance settings ( www.aboutads.info).
Please note that disabling cookies may limit the functionality of the website.

More information: https://www.google.de/policies/privacy/

10.2 Google AdWords Conversion Tracking

We use Google AdWords to refer to our offers with advertisements on external websites and to measure the effectiveness of campaigns.
The conversion cookie is set when a user clicks on a Google ad and usually loses its validity after 30 days.
It is not used for personal identification.

When you visit certain pages and the cookie is still active, Google and we can recognize that you were referred via an advertisement.
The collected information is used to create conversion statistics, without identifying individual users.

You can block the use by disabling the conversion tracking cookie in your browser settings.
We use Google AdWords based on our legitimate interest in targeted advertising (Art. 6 para. 1 lit. f GDPR).

More information: https://www.google.de/policies/privacy/
and a browser plug-in to block cookies:
https://www.google.com/settings/ads/plugin?hl=de

11) Web analysis services

Google (Universal) Analytics

This website uses Google Analytics , a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").
Google Analytics uses so-called cookies (text files stored on your computer) to analyze how users use the website.
The information generated by the cookie about your use of this website (including the shortened IP address) is usually transmitted to a Google server in the USA and stored there.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()" , which ensures anonymization of the IP address by shortening it and thus excludes direct identification.
Only in exceptional cases will the full IP address be sent to a Google server in the USA and shortened there.
Processing is carried out on the basis of Art. 6 paragraph 1 letter f GDPR, based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

Google uses this information on our behalf to compile reports on website activity and to provide other services relating to website activity.
The IP address transmitted by your browser within the framework of Google Analytics will not be combined with other data from Google.

You can prevent the storage of cookies through your browser settings. Please be aware that you may not be able to use all the features of this website.
In addition, you can prevent the recording of data generated by cookies (including your IP address) and the processing of this data by Google by installing the browser plug-in available via this link:
https://tools.google.com/dlpage/gaoptout?hl=de

For mobile devices, you can also set an opt-out cookie via this link (this only applies to this browser and domain):
Disable Google Analytics

Google LLC is certified under the EU-US Privacy Shield , which guarantees compliance with the European data protection level.

This website also uses Google Universal Analytics for a cross-device analysis of visitor flows using a user ID.
On their first visit, each user is assigned a unique, anonymous ID that can be used across multiple devices.
The user ID does not contain any personal data and is not passed on to Google.

You can object to this collection and storage of data by disabling Google Analytics on all your devices (via the aforementioned browser plug-in or the opt-out link).

Learn more about Universal Analytics:
https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

12) Retargeting / Remarketing / Referral Marketing

Facebook Custom Audience via the pixel method

This website uses the Facebook pixel of Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).
With your permission, this allows us to track user behavior after they have seen or clicked on a Facebook ad.
This helps us statistically measure the effectiveness of advertisements and optimize future campaigns.

The collected data is anonymous to us, but Facebook can link it to user profiles and use it for its own advertising purposes in accordance with Facebook's data policy.
This allows Facebook to show advertisements both within and outside the platform, and a cookie may be placed on your device.
This processing takes place exclusively with your express consent (Art. 6 para. 1 lit. a GDPR).

Please note: Consent to use the Facebook pixel must be given only by individuals 13 years or older . Younger users require parental consent.

Facebook Inc. is certified under the EU-US Privacy Shield .
You can disable third party cookies (such as Facebook) through the Digital Advertising Alliance website:
https://www.aboutads.info/choices/

Google AdWords Remarketing

Our website uses Google AdWords Remarketing features to display ads in Google search results and on third-party websites.
Provider: Google LLC, 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To this end, Google places a cookie in your browser that enables pseudonymous, interest-based advertising based on the pages you visit.
Processing is based on our legitimate interest in optimal marketing of our website (Art. 6 para. 1 lit. f GDPR).

If you have consented to having your web and app history linked to your Google Account, Google may combine your data with Google Analytics for cross-device remarketing .
Your personal data will be temporarily linked to Google Analytics data to create target groups.

You can disable cookies for advertising via this link:
https://www.google.com/settings/ads/onweb/
or via the Digital Advertising Alliance : www.aboutads.info.

Google LLC is also certified under the EU-US Privacy Shield .
Learn more: https://www.google.com/policies/technologies/ads/

13) Rights of data subjects

Under applicable privacy legislation, you have the following rights in relation to the controller regarding the processing of your personal data:

  • Right of access (Art. 15 GDPR): You have the right to information about what data we process, its purpose, recipients, retention periods, origin of the data and any automated decision-making.
  • Right to rectification (Art. 16 GDPR): you can have inaccurate or incomplete data corrected.
  • Right to erasure (Art. 17 GDPR): You can request the erasure of your data under certain conditions, for example if it is no longer necessary or is being processed unlawfully.
  • Right to restriction of processing (Art. 18 GDPR): Under certain circumstances, you may request that we restrict the processing of your data.
  • Right to portability (Art. 20 GDPR): You can request that your data be transferred to you or another controller in a commonly used, machine-readable format.
  • Right to withdraw consent (Art. 7 para. 3 GDPR): You can withdraw your previously given consent at any time with effect for the future.
  • Right to lodge a complaint (Art. 77 GDPR): You can lodge a complaint with a supervisory authority, in particular in the EU country of your residence, place of work or place of the alleged infringement.

13.2 Right to object

If we process your personal data on the basis of a balancing of interests (Article 6 paragraph 1 letter f GDPR), you have the right to object to this processing at any time for reasons arising from your particular situation .

If you object, we will cease processing unless we can demonstrate compelling legitimate grounds which override your interests, rights and freedoms, or when the processing is necessary for the establishment, exercise or defence of legal claims.

If your personal data is processed for direct marketing purposes , you can object to this processing at any time .
In that case, we will no longer use your data for advertising purposes.

14) Duration of storage of personal data

The retention period of personal data is determined by statutory retention obligations (e.g. tax or commercial law periods).
After these periods, the data will be routinely deleted, unless they are still required for the performance of a contract or if we have a legitimate interest in further storage.