Privacy Policy

1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Tanja Schott, geekyfeels, c/o COCENTER, Koppoldstr. 1, 86551 Aichach, Germany, Tel.: 015904736485, E-mail: mail@geekyfeels.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to subsequently check the server log files if there are specific indications of unlawful use.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to us). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

3) Hosting & Content Delivery Network

We use a provider to host our website and display the content of the pages, who provides its services either itself or through selected subcontractors exclusively on servers within the European Union.

All data collected on our website is processed on these servers.

We have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

4) Cookies

To make your visit to our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after you close the browser (so-called “session cookies”), others remain on your device longer and enable the saving of page settings (so-called “persistent cookies”). The duration of storage of persistent cookies can be found in your web browser's cookie settings overview.

If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of the contract, in accordance with Art. 6(1)(a) GDPR in the case of consent given, or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.

You can configure your browser to inform you about the setting of cookies and decide individually on their acceptance or to exclude the acceptance of cookies for certain cases or in general.

Please note that the functionality of our website may be limited if cookies are not accepted.

5) Contacting Us

When contacting us (e.g., via contact form or email), personal data is processed exclusively for the purpose of processing and responding to your inquiry and only to the extent necessary.

The legal basis for processing these data is our legitimate interest in responding to your request pursuant to Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once it is clear from the circumstances that the matter in question has been conclusively clarified and provided there are no legal retention obligations.

6) Use of Customer Data for Direct Advertising

6.1 Subscription to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required for sending the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to ensure that you only receive the newsletter if you have expressly confirmed your consent to the newsletter being sent by clicking a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration to trace any possible misuse of your email address at a later time. The data collected during newsletter registration is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned above. After you unsubscribe, your email address will be promptly deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use data beyond this scope where permitted by law and as explained in this statement.

6.2 Our email newsletters are sent via the following provider:
UAB “MailerLite”, J. Basanavičiaus 15, LT-03108 Vilnius, Lithuania.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when signing up for the newsletter to this provider in accordance with Art. 6(1)(f) GDPR so that they can send the newsletter on our behalf.

Subject to your express consent in accordance with Art. 6(1)(a) GDPR, the provider also carries out a statistical evaluation of newsletter campaigns using web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with newsletter content. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and evaluated but not merged with other data sources. You may revoke your consent to newsletter tracking at any time with future effect.

We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

7) Data Processing for Order Fulfillment

7.1 To the extent necessary for contract processing for delivery and payment purposes, the personal data we collect will be passed on to the contracted transport company and the contracted financial institution in accordance with Art. 6(1)(b) GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will use the contact details you provided during the order (name, address, email address) to inform you personally about upcoming updates within the legally required period via a suitable communication channel (e.g., by post or email) in accordance with our legal obligations under Art. 6(1)(c) GDPR. Your contact data will be strictly used for notifications about updates we owe and processed only to the extent necessary for this purpose.

For processing your order, we also work with the following service provider(s) who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

7.2 Use of Payment Service Providers (Payment Services)
- PayPal

This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you choose a payment method offered by the provider, where you pay in advance, the payment data you provide during the ordering process (including name, address, bank and card information, currency, and transaction number) and information about the contents of your order will be passed on to the provider in accordance with Art. 6(1)(b) GDPR. The data is only shared for payment processing and only to the extent necessary for this purpose.

If you choose a payment method in which we make advance payments, you will also be asked during the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, and possibly alternative payment method data).

To protect our legitimate interest in determining your ability to pay in such cases, we transmit this data to the provider for the purpose of a credit check in accordance with Art. 6(1)(f) GDPR. The provider uses your submitted personal data and other data (e.g., shopping cart, invoice amount, order history, payment experience) to assess whether the selected payment method can be granted with regard to payment and/or default risks.

The credit report may include probability values (so-called score values). If score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical method. Address data is also included in the score calculation, among other things.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.

7.3 Electronic Termination Option for Long-Term Contracts with Consumers

Consumers who have entered into contracts for paid long-term obligations (e.g., subscription contracts) via this website have the option to terminate them via an electronic button in accordance with the applicable termination periods.

Clicking the button leads to a confirmation page, where the consumer can provide further details about the termination, clearly identify themselves, and then declare the termination electronically.

The collection and transmission of personal data to us in this context is carried out in accordance with Art. 6(1)(b) GDPR and only to the extent necessary for proper termination processing. The provided personal data is also used under Art. 6(1)(b) GDPR to confirm electronically the receipt and effective date of the termination. Another legal basis is Art. 6(1)(c) GDPR. We are legally obliged to provide an electronic termination option for paid long-term contracts concluded through electronic commerce.

8) Online Marketing

Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, text files that are stored on your computer and allow an analysis of your use of the website. In addition, Google AdSense uses so-called "web beacons" (small invisible graphics) to collect information, enabling simple actions such as visitor traffic on the website to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transmitted to and stored on a Google server. This may also involve transmission to Google LLC servers in the USA.

Google uses this information to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser within the scope of Google AdSense will not be merged with other Google data. Google may transfer the collected information to third parties if required by law or if third parties process this data on behalf of Google. All processing described above, including accessing information on the device via cookies and/or web beacons, only takes place if you have given us your express consent under Art. 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit to the website.

You can revoke your consent at any time with future effect by deactivating this service via the "Cookie Consent Tool" provided on the website.

For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission.

Google’s privacy policy is available at: https://www.google.de/policies/privacy/

9) Site Functionalities

9.1 YouTube

This website uses plugins for displaying and playing videos from the following provider:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transferred to: Google LLC., USA

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers to load the plugin. In doing so, certain information, including your IP address, is transmitted to the provider.

If video playback is started via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent misuse.

If you are logged into a user account with the provider during your visit, your data will be directly associated with your account when you click on a video. If you do not want the association with your account, you must log out before clicking the play button.

All processing described above, in particular the setting of cookies to read information on the device used, is carried out only if you have given us your express consent under Art. 6(1)(a) GDPR. You may revoke your consent at any time with future effect by deactivating this service via the “Cookie Consent Tool” provided on the website.

For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

9.2 Google Web Fonts

This site uses web fonts from the following provider to ensure consistent font display:
Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you access a page, your browser loads the required web fonts into its cache to display texts and fonts correctly, establishing a direct connection to the provider’s servers. Certain browser information, including your IP address, is transmitted to the provider.

Data may also be transferred to: Google LLC, USA

The processing of personal data in connection with the provider of the fonts only occurs if you have given us your express consent in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect by deactivating this service via the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font will be used by your computer.

For data transfers to the USA, the provider is certified under the EU-US Data Privacy Framework, ensuring compliance with the European data protection level based on an adequacy decision by the European Commission.

10) Tools and Miscellaneous

10.1 - Billbee

For handling our accounting, we use the cloud-based accounting software service of the following provider:
Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany.

The provider processes incoming and outgoing invoices and, if applicable, our company’s banking transactions in order to automatically record invoices, match them with transactions, and generate financial accounting from them in a partially automated process.

If personal data is processed in this context, the processing is based on our legitimate interest in efficient organization and documentation of our business transactions.

10.2 Cookie Consent Tool

This website uses a so-called "Cookie Consent Tool" to obtain effective user consents for consent-requiring cookies and cookie-based applications. The "Cookie Consent Tool" is displayed to users when they access the site in the form of an interactive interface, where they can give their consent for certain cookies and/or cookie-based applications by ticking a box. Only if such consent is given will any cookies requiring consent be set on the respective user device.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.

If, in individual cases, personal data such as the IP address is processed for storage, assignment, or logging of cookie settings, this processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly cookie consent management and thus in a legally compliant design of our website.

Another legal basis for processing is Art. 6(1)(c) GDPR. As the controller, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

If necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.

Further information about the provider and the setting options for the Cookie Consent Tool can be found directly in the corresponding user interface on our website.

11) Rights of the Data Subject

11.1 Under the applicable data protection law, you have the following rights with regard to the processing of your personal data by us as the controller (rights of access and intervention), with reference to the legal basis for the individual exercise requirements:

- Right of access pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to notification pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw consent given pursuant to Art. 7(3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST WITHIN A BALANCING OF INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE, OR DEFEND LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

12) Duration of Storage of Personal Data

The duration of the storage of personal data is determined based on the respective legal basis, the purpose of processing, and—if applicable—also based on the respective statutory retention period (e.g., commercial and tax retention periods).

When processing personal data based on explicit consent pursuant to Art. 6(1)(a) GDPR, the data concerned will be stored until you revoke your consent.

If there are statutory retention periods for data that are processed in the context of legal or quasi-legal obligations based on Art. 6(1)(b) GDPR, such data will be routinely deleted after expiration of the retention periods, provided it is no longer required for contract fulfillment or initiation and/or we no longer have a legitimate interest in continued storage.

When processing personal data on the basis of Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.

When processing personal data for direct advertising purposes based on Art. 6(1)(f) GDPR, such data will be stored until you exercise your right to object pursuant to Art. 21(2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

This English translation is provided for informational purposes only. The legally binding version is the original German text.