Privacy Policy

Unless otherwise stated below, providing your personal data is neither legally nor contractually required, nor necessary for concluding a contract. You are not obliged to provide the data. Non-provision has no consequences. This applies only insofar as no other indication is made for the following processing operations.

“Personal data” means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing personal information.
Each time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log files (so-called server log files). These stored data include, for example, the name of the accessed page, date and time of access, IP address, amount of data transferred, and the requesting provider.
The processing is based on Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in ensuring trouble-free operation of our website and improving our offer.

Contact

Person responsible
Please contact us if desired. The person responsible for data processing is:
Kerstin Sessler-Mikeska
Franz-Kirrmeier-Str. 19, 67346 Speyer
kerstin@mikeska-lab.com

Customer-Initiated Contact by Email

If you contact us proactively by email, we collect your personal data (name, email address, message content) only to the extent you provide it. Data processing serves to handle and respond to your inquiry. If the contact serves to carry out pre-contractual measures (e.g., advice on purchase interest, offer preparation) or concerns an existing contract between you and us, processing is based on Art. 6 (1) lit. b GDPR.
If contact occurs for other reasons, processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right to object at any time, for reasons arising from your particular situation, to the processing of your personal data based on Art. 6 (1) lit. f GDPR.
We use your email address only to handle your inquiry. Your data will then be deleted after observing statutory retention periods, unless you have consented to further processing and use.

Collection and Processing when Using the Contact Form

When you use the contact form, we collect your personal data (name, email address, message content) only to the extent you provide it. Data processing serves the purpose of contacting you. If contact serves to carry out pre-contractual measures or concerns an existing contract, processing is based on Art. 6 (1) lit. b GDPR.
If contact occurs for other reasons, processing is based on Art. 6 (1) lit. f GDPR due to our overriding legitimate interest in handling and responding to your request. You have the right to object as described above.

Customer Account and Orders
Customer Account

When opening a customer account, we collect your personal data to the extent indicated there. Processing serves to improve your shopping experience and simplify order processing. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You may revoke consent at any time without affecting the lawfulness of processing based on consent prior to revocation. Your customer account will then be deleted.

Collection, Processing, and Transfer of Personal Data for Orders

When ordering, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing data is required for contract conclusion. Failure to provide data means no contract can be concluded. Processing is based on Art. 6 (1) lit. b GDPR and necessary for contract fulfillment.
Data is passed on, for example, to chosen shipping companies and dropshipping providers, payment service providers, order processing service providers, and IT service providers. We strictly observe legal requirements. Data transmission is limited to a minimum.

Advertising
Use of Email Address for Newsletter

We use your email address exclusively for sending newsletters for our own advertising purposes if you have explicitly consented. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You can revoke consent at any time without affecting the lawfulness of processing prior to revocation. You can unsubscribe anytime via the link in the newsletter or by contacting us. Your email address will then be removed from the distribution list. Data is passed to an email marketing service provider as part of order processing. No further third-party transfers occur.

Use of Email Address for Direct Advertising

We use your email address obtained during the sale of goods or services to send advertising for our own goods or services similar to those you purchased, unless you object. Providing your email address is required for contract conclusion. Failure to provide means no contract. Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in direct advertising. You can object anytime by contacting us or via the link in the advertising email at no cost except transmission fees.

Shipping Service Providers and Inventory Management

Transfer of Email Address to Shipping Companies to Inform About Shipping Status
We pass your email address to the shipping company during order processing if you have expressly consented during ordering. This serves the purpose of informing you by email about shipping status. Processing is based on Art. 6 (1) lit. a GDPR with your consent. You may revoke consent at any time without affecting prior processing.

Payment Service Providers
Use of PayPal Express

We use the payment service PayPal Express (PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L2449 Luxembourg). Processing enables payment via PayPal Express. PayPal collects data (e.g., IP address, device type, OS, browser, location) when accessing the site, possibly via cookies to recognize your browser.
Processing is based on Art. 6 (1) lit. f GDPR due to our legitimate interest in offering various payment options. You have the right to object anytime for reasons related to your situation.
Payment data necessary for processing are transmitted to PayPal to fulfill the contract, based on Art. 6 (1) lit. b GDPR. More info at PayPal Privacy Policy.

Use of PayPal Check-Out

Similar to PayPal Express, the payment service collects data, possibly sets cookies for browser recognition, and processes data based on Art. 6 (1) lit. f GDPR. You have the right to object as above. Payment data is transmitted to PayPal based on Art. 6 (1) lit. b GDPR.

Credit Card via PayPal, Direct Debit via PayPal & “Pay Later” via PayPal
PayPal may conduct credit checks using mathematical-statistical methods and credit agencies. Data required for credit checks is transmitted to credit agencies, and scoring values are used. Your interests are protected under legal provisions. Processing serves contract initiation and fraud prevention based on Art. 6 (1) lit. f GDPR. You may object to this processing by contacting PayPal. Data provision is required for contract conclusion with the chosen payment method; otherwise, contract conclusion is not possible.

Third-Party Providers

When selecting a third-party payment method, the data required for payment processing will be transmitted to PayPal. This processing is carried out on the basis of Article 6(1)(b) GDPR. In order to process the selected payment method, PayPal may subsequently transmit this data to the respective payment service provider. This further processing is also based on Article 6(1)(b) GDPR.

Third-party providers may include, for example:

• Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
• giropay (Paydirekt GmbH, Stephanstr. 14–16, 60313 Frankfurt am Main, Germany)

Purchase on Account via PayPal

If you select “purchase on account” as the payment method, the personal data required for payment processing will first be transmitted to PayPal. For the purpose of completing the payment transaction, PayPal will then transfer this data to Ratepay GmbH (Franklinstraße 28–29, 10587 Berlin; „Ratepay“), in order to process the contract with you using your chosen payment method. This processing is also carried out on the basis of Article 6(1)(b) GDPR.

In some cases, Ratepay may carry out a creditworthiness check based on mathematical-statistical procedures (probability or score values) using credit reference agencies. This follows the procedure already described above. The purpose of this data processing is to assess creditworthiness for the initiation of a contractual relationship. This processing is carried out based on Article 6(1)(f) GDPR due to our legitimate interest in protecting ourselves against payment defaults when Ratepay makes advance payments.

Further details on Ratepay’s data protection policy and the credit agencies they use can be found at:
https://www.ratepay.com/legalpayment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/

For more information about how PayPal processes your data, please see PayPal’s Privacy Policy at:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

CookieS

Our website uses cookies. Cookies are small text files that are stored by the internet browser or transferred from the internet browser to the user’s computer system. When a user visits a website, a cookie can be stored on their operating system. This cookie contains a unique character string that enables the browser to be identified when the website is accessed again.

Cookies are stored on your device, giving you full control over their use. By configuring the appropriate settings in your browser, you can choose to be informed before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the contained data. Cookies that have already been saved can be deleted at any time. Please note, however, that disabling cookies may result in certain website functions not being fully available to you.

You can find out how to manage cookies (including deactivating them) in the most commonly used browsers via the following links:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-löschen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically Necessary Cookies

Unless otherwise stated in this privacy policy, we only use technically necessary cookies to make our services more user-friendly, effective, and secure. These cookies also allow our systems to recognize your browser even after navigating to a new page, and to offer you services accordingly. Some features of our website cannot function properly without the use of cookies. In these cases, it is necessary for the browser to be recognized again after a page change.

The use of cookies or comparable technologies is based on Section 25 (2) of the German Telecommunications and Telemedia Data Protection Act (TDDDG). The processing of your personal data is carried out pursuant to Article 6(1)(f) GDPR, based on our overriding legitimate interest in ensuring the optimal functionality of the website and in designing our services in a user-friendly and efficient manner.

You have the right to object at any time, for reasons arising from your particular situation, to the processing of personal data concerning you based on Article 6(1)(f) GDPR.

Analytics
Use of Google Analytics 4

We use the web analytics service Google Analytics provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; „Google“) on our website. The data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The following information, among others, may be collected: IP address, date and time of the page visit, click path, information about the browser you are using and the device you are using, pages visited, referrer URL (the website from which you accessed our website), location data, and purchasing activities. Your data may be linked by Google with other data such as your search history, your personal accounts, usage data from other devices, and any other data Google holds about you.

The IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before transmission.

Google uses technologies such as cookies, browser web storage, and tracking pixels that enable analysis of your use of the website. The use of cookies or similar technologies is based on your consent pursuant to Section 25 (1) Sentence 1 of the German Telecommunications Digital Services Data Protection Act (TDDDG) in conjunction with Art. 6 (1)(a) GDPR.

The processing of your personal data takes place based on your consent pursuant to Art. 6 (1)(a) GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out on the basis of the consent until the revocation.

The information generated about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, an adequacy decision by the EU Commission exists: the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore committed to complying with European data protection principles. Both Google and U.S. government authorities have access to your data.

Further information on terms of use and data protection can be found at:
https://policies.google.com/technologies/partner-sites
and
https://policies.google.com/privacy?hl=en&gl=en

Rights of Data Subjects and Retention Period
Retention Period

After complete contractual performance, the data will initially be stored for the duration of the warranty period, and thereafter in accordance with statutory retention periods, particularly those under tax and commercial law, and deleted after expiry of these periods, unless you have consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you are entitled under Articles 15 to 20 GDPR to the following rights: the right to access, to rectification, to erasure, to restriction of processing, and to data portability.
You also have the right to object to processing based on Article 6 (1)(f) GDPR and to processing for direct marketing purposes pursuant to Article 21 (1) GDPR.

Right to Lodge a Complaint with the Supervisory Authority

According to Article 77 GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is not lawful.
You may, for example, file a complaint with the supervisory authority responsible for us, which you can reach at the following contact details:

State Commissioner for Data Protection and Freedom of Information Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Phone: +49 711 6155410
Fax: +49 711 61554115
Email: poststelle@lfdi.bwl.de

Right to Object

If the processing of personal data listed here is based on our legitimate interest pursuant to Article 6 (1)(f) GDPR, you have the right to object to this processing at any time for reasons arising from your particular situation, with effect for the future.
After an objection has been made, the processing of the affected data will be stopped unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing serves to assert, exercise, or defend legal claims.
If the personal data is processed for direct marketing purposes, you can object to this processing at any time by notifying us. After your objection, we will stop processing the data concerned for the purpose of direct advertising.