We collect and process this data in order to ensure the trouble-free operation of our website and to be able to recognise, ward off and pursue any misuse of our services. Furthermore, we use the collected data for statistical purposes, for example to evaluate which end devices and browsers are used to access our shop, in order to continuously adapt and improve our offer to the needs of the users on this basis. This data processing is based on Article 6(1)(f) DSGVO.

We will delete all of the above personal data no later than twelve months after it has been collected.

3 When you place an order with us
When you place an order in our shop, we process your name, delivery address and e-mail address as you provide them during the ordering process. If you voluntarily provide additional data when placing your order (e.g. a different billing address or a telephone number), we also process this data.
We process this data electronically for the proper fulfilment of the contract, in particular for delivery, invoicing, booking payments and processing returns and complaints. This data processing is based on Article 6(1)(b) DSGVO.
We keep this data until all mutual claims arising from the respective contractual relationship with you have been settled in full and the retention periods under commercial and tax law to which we are subject have expired.
For a contract to be concluded between you and us, it is necessary for us to receive your name, delivery address and e-mail address. The necessity of providing this data results from legal regulations (e.g. § 312i para. 1 item 3 BGB, § 14 para. 4 UStG). Therefore, you cannot conclude a contract with us without providing this data.
When deciding on the conclusion of a contract, we refrain from automated decision-making and profiling.

4. customer account
You can optionally create a customer account in our online shop. The data required for this and processed by us can be found in the input mask for opening the customer account. The customer account is set up exclusively at your request. The legal basis is therefore your consent in accordance with Article 6(1)(a) DSGVO. We keep the personal data associated with the customer account until you delete the customer account or you ask us to delete it. For personal data from contracts already concluded, the retention periods as set out in the section "When you order from us" apply, irrespective of the existence of the customer account.

5 Delivery and payment
Insofar as we send physical goods on the basis of the purchase contract, we transmit the name and address of the recipient and, insofar as you have consented to this, your e-mail address, to Deutsche Post (Deutsche Post AG, 53113 Bonn), DHL (DHL Paket GmbH, 53113 Bonn), Hermes (Hermes Germany GmbH, 22419 Hamburg), GLS (General Logistics Systems Germany GmbH & Co. OHG, 36286 Neuenstein) or DPD (DPD Deutschland GmbH, 63741 Aschaffenburg) as shipping service providers, for the purpose of delivering the shipment, including, if applicable, prior email notification of the expected delivery time, and for the purpose of any return of your shipment to us on the basis of Article 6(1)(b) DSGVO.
For the payment of your purchase, the payment service provider chosen by you collects and processes your name, your e-mail address, your card or account number and/or other data, insofar as necessary for the payment method chosen by you in each case. In this respect, the contract and data protection provisions of the payment service provider you have chosen apply in addition.
When we receive a payment, we process the data provided to us by the payment service provider.
When we receive a transfer to our account, we process in particular the name of the transferring account holder, the account number (IBAN and BIC) and the purpose of use transmitted.
The processing is based on Article 6(1)(b) DSGVO. We keep this data stored until all mutual claims arising from the respective contractual relationship with you have been settled in full and the retention periods under commercial and tax law to which we are subject have expired.

6 Obtaining the "DP-Lamp" app
You cannot obtain our app directly from us, but only via the Apple App Store (Apple Inc., 1 Apple Park Way, Cupertino, CA 95014, USA) or via the Google Play Store from Google (Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA). The contract and data protection conditions of Apple and Google apply to the purchase of our app via the Apple App Store or the Google Play Store. Neither Apple nor Google transmit personal data to us in connection with the purchase or use of the app.
You can find more information about data protection at Apple at www.apple.com/legal/privacy/de-ww/.
For more information about Google's privacy policy, please visit policies.google.com/privacy.

7. "DP-Lamp" app use
You can use our DP-Lamp app on your end devices and link it to our products. The data required for this and processed by us result from the input mask in the app installation process and for the simultaneous opening or linking of your customer account. The processing of your data is carried out for the provision of our services offered within the scope of the app use (online storage, customer and device management, device control, fault detection) and thus on the basis of Article 6 (1) letter b DSGVO for the fulfilment of the claims arising from the respective contractual relationship.
a) When linking the app with the respective device and the app-supported control of the device, your end device transmits the following information to our server: Features to identify the respective user (e.g. IP address) and the device (QR code, device ID, serial number, software version), the app (software versions) and the devices on which you have installed the app (type of end device used e.g. smartphone or tablet PC, manufacturer, OS version of the end device, device ID), as well as further information on the temporal use of our service and app settings.
b) When you use our app, your end device transmits the following information to our server: Device ID, operating system version, IP address, time of app use. We collect and process this data to ensure the trouble-free operation of the app and to be able to recognise, ward off and prosecute misuse of our services. Furthermore, we use the collected data for statistical purposes, for example to evaluate with which end devices and operating systems our app is used, in order to continuously adapt and improve our offer to the needs of the users on this basis. This data processing is based on Article 6(1)(f) DSGVO.
We delete all of the above-mentioned personal data 14 days after it has been collected.
c) To use the app, your terminal device must grant access to certain functions:
-- Internet access: Internet access is necessary so that the app can carry out the assignment of your device, monitoring of necessary functions (e.g. wifi functions and filter change), linking to your customer account and our online services.
-- Camera: The use of the camera is necessary for the recognition of QR codes, but no data is collected or stored by us.

8. order processor
To support our merchandise management (order management, invoicing, accounting, delivery and, if necessary, returns processing), we use the services of Pickware GmbH, Goebelstr. 21, 64293 Darmstadt, to which we transfer the data mentioned in the section "When you order from us" for order processing in accordance with Article 28 DSGVO.
For the operation of our website on the Internet, we use the technical services of Hetzner (Hetzner Online GmbH, 91710 Gunzenhausen) as a processor in accordance with Article 28 DSGVO.

9. contacting us
If you use a contact form or chat function on our website, we process the data you enter in the process; in addition to your message, this may include your name and e-mail address.
If you send us a message by e-mail, we store your message with the sender data transmitted with it (name, e-mail address and, if applicable, further information added by your e-mail program and the transmitting servers). For the receipt, storage and sending of e-mails, we use an e-mail provider who acts for us as a processor in accordance with Article 28 DSGVO.
The legal basis for this data processing is our legitimate interest in answering your message and also being able to respond to any follow-up questions from you (Article 6(1)(f) DSGVO). We will delete the data collected with your message no later than twelve months after the last communication with you regarding your request, subject to the provision in the following paragraph.
If you send us a legally relevant statement regarding the contractual relationship (e.g. a revocation or a complaint), the legal basis for the processing is also Article 6(1)(b) DSGVO, regardless of the transmission channel. In such a case, we will delete the data related to your declaration as soon as all mutual claims arising from the contractual relationship have been finally settled and the retention periods under commercial and tax law have expired.

10 Newsletter
If you have subscribed to our newsletter, we will inform you by e-mail about new offers and features of our shop. You will not receive more than one newsletter per week. You can informally object to the use of your e-mail address for advertising purposes at any time without incurring any costs other than the transmission costs according to the basic rates.
This data processing is based on your consent in accordance with Article 6(1)(a) DSGVO. If you revoke your consent to the use of your e-mail address for advertising purposes, we will delete your e-mail address from our newsletter distribution list.

11 Use of cookies
Insofar as you have consented to the use of cookies, we place one or more "cookies" on your terminal device. A cookie is a small text file which enables us to recognise your terminal device when you visit our shop again at a later date. With the help of cookies, we can temporarily store the contents of your shopping basket, but also analyse certain user behaviour, e.g. which products you look at, how long you stay on our site and when and how often you return to our shop. Furthermore, we can use cookies to store your consent to cookie use and, if applicable, other marketing or analysis methods. Cookies stored by us will be deleted no later than twelve months after your last visit to our shop.
This data processing is carried out on the basis of Article 6 (1) (f) DSGVO for the purpose of better aligning our product range with the wishes of our shop visitors and optimising the functions of our shop and the efficiency of advertising measures.
Regardless of whether you have consented to the use of cookies on our website, you can prevent cookies from being placed by going to the cookie settings of your internet browser and objecting to the placing of cookies there for our site or for all websites. There you can also delete cookies that have already been placed.

12. google services
We use certain services from Google for our shop. If you visit our shop from a location in the European Union, Norway, Iceland, Liechtenstein or Switzerland, "Google" is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, otherwise Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.
Insofar as services are provided by Google LLC in the USA, Google has undertaken to comply with the data protection law of the European Union within the framework of the EU-US Privacy Shield Agreement.
General information on data use by Google can be found at Google at https://policies.google.com/technologies/partner-sites ("How we use data from websites or apps on or in which our services are used").

13 Google Analytics
We use Google Analytics, a web analytics service provided by Google. Google places cookies on your terminal device. These cookies allow Google to collect information about how you use our website. This information is transferred to a Google server, evaluated there and made available to us. The legal basis is Article 6(1)(f) DSGVO, namely our legitimate interest in evaluating and optimising our website.
We use Google Analytics with IP anonymisation activated. This means that your IP address is usually shortened within the scope of the DSGVO in such a way that it is no longer possible to draw conclusions about you from the IP. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by your browser will not be merged with other Google data. You can prevent the storage of cookies by setting your browser software accordingly.

14 Google Fonts
Our website uses fonts that are provided by Google as "Google Fonts". The Google Fonts are downloaded directly from Google when your terminal device calls up our website. Google thereby learns your IP address, your operating system, your browser type and its version and evaluates this data for its own business purposes.

15 Facebook Pixel, Custom Audience, Conversion Tracking
On our website, we use the "Facebook Pixel" service from Facebook (Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, or, if you are a resident of the USA or Canada: Facebook Inc, 1 Hacker Way, Menlo Park, CA 94025, USA). The technology makes it possible to define you and other visitors to our website as a target group ("Custom Audience") for advertisements delivered by Facebook ("Facebook Ads"). To do this, Facebook analyses your user behaviour with the help of an invisible graphic file that we integrate into our website and derives products or topics in which you are interested from this. Facebook Pixel also allows us to determine the effectiveness of Facebook Ads, namely whether and how you respond to an advertisement from us ("conversion tracking").
This data processing is carried out on the basis of Article 6(1)(f) DSGVO, namely in our legitimate interest to advertise our offers primarily to such groups of people who are likely to be interested in our products and to analyse the efficiency of the online advertising we use.
Facebook Inc. has committed to comply with European Union data protection law under the EU-US Privacy Shield Agreement.

16 Social media
Social media buttons may be displayed in our shop; they can be recognised by the logos of the social media platforms (hereinafter "platforms") (Facebook: "f" logo, Instagram: square camera). These are links to the respective platforms based in the USA. Clicking on such a link calls up the website of the respective platform, whereby the IP address of the calling up end device and the address of the page from which the link is made ("referrer") are transmitted to the called up platform in the USA. However, no data is collected or processed by us in connection with the social media buttons.

17. your rights
You have the following rights in relation to the personal data we process about you:
You have the right to ask us to confirm whether we are processing personal data relating to you. If this is the case, we will provide you with the personal data we hold about you and the further information in accordance with Article 15(1) and (2) of the GDPR.
You have the right to have inaccurate personal data relating to you corrected without delay. Taking into account the purposes of the processing, you also have the right to request the completion of incomplete personal data - also by means of a supplementary declaration.
You may request us to delete the personal data concerning you without delay under the conditions of Article 17(1) of the GDPR, insofar as their processing is not necessary in accordance with Article 17(3) of the GDPR.
You may request us to restrict the processing of your data if one of the conditions of Article 18(1) of the GDPR applies. In particular, you may request the restriction instead of deletion.
We will notify any rectification or erasure of your personal data and any restriction of processing to all recipients to whom we have disclosed personal data relating to you, unless this proves impossible or involves a disproportionate effort. We will also inform you of these recipients if you so request.
You have the right to receive the personal data you have provided to us in a structured, commonly used and machine-readable format and may request that we transfer this data to another controller without hindrance, insofar as this is technically possible.
Insofar as data processing is based on your consent, you have the right to revoke your consent at any time. The revocation of consent will not affect the lawfulness of the data processing that took place until your revocation.
RIGHT TO OBJECT: FOR REASONS ARISING OUT OF YOUR PARTICULAR SITUATION, YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU; this right to object exists in relation to that data processing which is carried out on the basis of Article 6(1)(f) of the GDPR for the purposes of safeguarding legitimate interests on our part or on the part of a third party, unless your interests or fundamental rights and freedoms requiring the protection of personal data are overriding. If you exercise your right to object, we will no longer process the data concerned unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of you, or for the establishment, exercise or defence of legal claims.
IN THE EVENT THAT WE PROCESS PERSONAL DATA FOR DIRECT MARKETING (E.G. NEWSLETTER), YOU MAY OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING, WITH THE CONSEQUENCE THAT WE WILL NO LONGER PROCESS YOUR DATA FOR SUCH PURPOSES.
If you consider that the processing of your personal data infringes the GDPR, you may lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement. This does not preclude other administrative or judicial remedies.