1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how your personal data is handled when you use our website. Personal data is all data with which you can be personally identified.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Denise Müller, madebydenmu, Heiterwanger Str. 28, 81373 Munich, Germany, email: madebydenmu@gmx.net. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

If you simply use our website for information purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Website visited
• Date and time of access
• Amount of data sent in bytes
• Source/reference from which you accessed the site
• Browser used
• Operating system used
• IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete evidence of illegal use.

In order to make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e., small text files stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"); others remain on your device for a longer period and enable the saving of page settings (so-called "persistent cookies"). In the latter case, you can find out the storage period from the overview of your web browser's cookie settings.
If individual cookies we use also process personal data, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either for the execution of the contract, in accordance with Art. 6 (1) (a) GDPR in the case of consent given, or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

In the context of When you contact us (e.g., via contact form or email), personal data will be processed – exclusively for the purpose of processing and answering your request and only to the extent necessary for this purpose. The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 (1) (b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

In accordance with Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed to the extent necessary in each case if you provide it to us when opening a customer account. The data required to open an account can be found in the input mask of the corresponding form on our website. You can delete your customer account at any time by sending a message to the above-mentioned address of the responsible party. After deleting your customer account, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention periods that conflict with this, and we have no legitimate interest in continuing to store it.

- Mailjet
Our email newsletters are sent via the technical service provider Mailjet (Mailjet GmbH, c/o Workrepublic, Berliner Allee 26, 40212 Düsseldorf), to whom we pass on the data you provided when registering for the newsletter. This transfer is carried out in accordance with Art. 6 (1) (f) GDPR and serves our legitimate interest in the use of an effective, secure, and user-friendly newsletter system. The data you enter to subscribe to the newsletter (e.g., email address) will be stored on Mailjet's servers in the EU. Mailjet uses this information to send and statistically analyze the newsletter on our behalf. For this analysis, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. This makes it possible to determine whether a newsletter message has been opened and which links, if any, have been clicked. Technical information is also recorded (e.g., time of retrieval, IP address, browser type, and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; direct personal reference is excluded. This data is used exclusively for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of the recipients. If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, Mailjet may use this data itself in accordance with Art. 6 (1) (f) GDPR based on its own legitimate interest in tailoring and optimizing the service to meet your needs, as well as for market research purposes, for example, to determine which countries the recipients come from. However, Mailjet does not use the data of our newsletter recipients to contact them directly or to pass them on to third parties.
We have concluded a data processing agreement with Mailjet, under which we oblige Mailjet to protect our customers' data and not to pass it on to third parties.
Mailjet's privacy policy can be viewed here: https://www.mailjet.de/privacy-policy/

7.1 To the extent that it is necessary for contract processing for delivery and payment purposes, the personal data we collect will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) (b) GDPR.

If we provide you with a data processing agreement based on a corresponding contract If we owe updates for goods with digital elements or for digital products, we process the contact details you provided when placing your order (name, address, email address) in order to inform you personally about upcoming updates within the legally stipulated period via a suitable communication channel (e.g., by post or email) within the scope of our statutory information obligations pursuant to Art. 6 (1) (c) GDPR. Your contact details will be used strictly for the purpose of notifying you about updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

7.2 Use of special service providers for order processing and fulfillment

- Billbee
Order processing is carried out by the service provider "Billbee" (Billbee GmbH, Arolser Str. 10, 34477 Twistetal). Name, address, and any other personal data will be passed on to Billbee in accordance with Art. 6 (1) (b) GDPR exclusively for the purpose of processing the online order. Your data will only be passed on to the extent that this is actually necessary for the processing of the order. Details regarding Billbee's data protection and its privacy policy can be found on the Billbee website at "billbee.io".

7.3 Use of payment service providers (payment services)

- giropay
When paying via "giropay," payment processing is carried out by giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to which we pass on the information you provided during the ordering process, along with information about your order. Your data will be passed on in accordance with Art. 6 (1) (b) GDPR exclusively for the purpose of payment processing and only to the extent necessary for this purpose. You can find further information about giropay GmbH's privacy policy at the following website address: https://www.giropay.de/rechtliches/datenschutzerklaerung
- PayPal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, we will pass your payment data on to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check regarding the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit check may contain probability values ​​(so-called score values). To the extent that score values ​​are included in the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. For further information on data protection, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Stripe
If you choose a payment method from the payment service provider Stripe, payment processing will be carried out via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process, along with information about your order (name, address, account number, bank sort code, credit card number (if applicable), invoice amount, currency, and transaction number) in accordance with Art. 6 (1) (b) GDPR. Further information on Stripe's privacy policy can be found at the URL https://stripe.com/de/privacy#translation.
Stripe reserves the right to conduct a credit check based on mathematical and statistical procedures in order to safeguard its legitimate interest in determining the user's ability to pay. Stripe may transmit the personal data required for a credit check and received during payment processing to selected credit agencies, which Stripe will disclose to users upon request. The credit report may contain probability values ​​(so-called score values). To the extent that score values ​​are included in the credit report, these are based on a scientifically recognized mathematical and statistical procedure. The calculation of the scores includes, among other things, but not exclusively, address data. Stripe uses the result of the credit check regarding the statistical probability of default to decide on the eligibility to use the selected payment method.
You can object to this processing of your data at any time by sending a message to Stripe or the commissioned credit agencies.
However, Stripe may still be entitled to process your personal data if this is necessary for contractual payment processing.

Shopvote Graphics
We have integrated ShopVote graphics on this website to display our ShopVote seal and any collected and/or aggregated ratings.
This serves to safeguard our legitimate interests, which prevail in the context of a balancing of interests, in the optimal marketing of our offering in accordance with Art. 6 (1) (s) GDPR. 1 lit. f GDPR. The ShopVote graphics and the services advertised therein are provided by Blickreif GmbH, Schulstraße 46, 80634 Munich.
When you access the ShopVote graphics, the web server automatically saves a so-called server log file, which contains, for example, your IP address, the date and time of access, the amount of data transferred, and the source of the access (access data), and documents the access. This access data is not evaluated and is automatically overwritten no later than seven days after your visit to the site. No other personal data is collected or stored by the ShopVote graphics.

- Debitoor
For accounting purposes, we use the cloud-based accounting software from Debitoor GmbH, Grunerstr. 13, 10179 Berlin (“Debitor”). Debitoor processes incoming and outgoing invoices as well as, if applicable, our company's bank transactions in order to automatically record invoices, match them to transactions, and create financial accounting in a semi-automated process.
If personal data is also processed, the processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in the efficient organization and documentation of our business transactions.
Further information about Debitoor, the automated processing of data, and the data protection regulations can be found at https://debitoor.de/datenschutz
- Lexoffice
For accounting purposes, we use the cloud-based accounting software "lexoffice" from Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9. 79111 Freiburg.
Lexoffice processes incoming and outgoing invoices, as well as, if applicable, our company's bank transactions, in order to automatically record invoices, match them to transactions, and create financial accounting in a semi-automated process.
If personal data is also processed, the processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the efficient organization and documentation of our business transactions.
Further information about lexoffice, the automated processing of data, and the data protection regulations can be found at https://www.lexoffice.de/datenschutz/

10.1 The applicable data protection law grants you the following rights vis-à-vis the controller: regarding the processing of your personal data, the following data subject rights (rights to information and intervention), whereby reference is made to the stated legal basis for the respective conditions for exercising these rights:

• Right to information pursuant to Art. 15 GDPR;
• Right to rectification pursuant to Art. 16 GDPR;
• Right to erasure pursuant to Art. 17 GDPR;
• Right to restriction of processing pursuant to Art. 18 GDPR;
• Right to information pursuant to Art. 19 GDPR;
• Right to data portability pursuant to Art. 20 GDPR;
• Right to withdraw consent granted pursuant to Art. 7 (3) GDPR;
• Right to lodge a complaint pursuant to Art. 77 GDPR.

10.2 RIGHT OF OBJECTION

IF WE IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH FUTURE EFFECT.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. FURTHER PROCESSING REMAINS, HOWEVER, IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH ADVERTISING. YOU CAN EXERCISE YOUR RIGHT OF OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT OF OBJECTION, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

The duration of storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g., retention periods under commercial and tax law).

When personal data is processed on the basis of express consent in accordance with Art. 6 (1) (a) GDPR, this data will be stored until the data subject revokes his or her consent.

If statutory Retention periods for data processed within the framework of legal or quasi-legal obligations based on Art. 6 (1) (b) GDPR: This data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in further storage.

When processing personal data on the basis of Art. 6 (1) (f) GDPR, this data will be stored until the data subject exercises his or her right of objection pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights, and freedoms of the data subject, or the processing serves to assert, exercise, or defend legal claims.

When processing personal data For the purposes of direct marketing on the basis of Art. 6 (1) (f) GDPR, these data will be stored until the data subject exercises his or her right of objection pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this statement regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.