Privacy policy
The controller responsible for data processing is:
K-Innovations GmbH
Hasselborner Str. 19-21
35647 Waldsolms
Germany
Phone: 06475 2009870
Mail: service@ironbrothers-shop.com
We are pleased that you are interested in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about how your data is handled.
1. Access data and hosting
You can visit our websites without providing any personal information. Each time a web page is accessed, the web server only stores a so-called server log file automatically, which contains for example the name of the requested file, your IP address, the date and time of the request, the volume of data transferred and the requesting provider (access data), and which documents the request.
This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving what we offer. In accordance with Art. 6 (1) sentence 1 lit. f GDPR this serves to protect our legitimate interests, which prevail in a balancing of interests, in a correct presentation of what we offer. All access data is deleted no later than seven days after the end of your visit to the site.
Hosting services provided by a third party
As part of processing on our behalf, a third-party provider performs the hosting and presentation of the website for us. All data collected in the course of using this website or in the forms provided for that purpose in the online shop, as described below, is processed on its servers. Processing on other servers only takes place within the scope explained here.
This service provider is based in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
2. Data collection and use for contract processing, for contact and when opening a customer account
We collect personal data when you voluntarily provide it to us in the course of your order or when contacting us (e.g. by contact form or e-mail). Mandatory fields are marked as such, because in those cases we absolutely need the data for contract processing or to handle your enquiry, and you cannot send the order or the enquiry without providing it. Which data is collected can be seen from the respective input forms. We use the data you provide in accordance with Art. 6 (1) sentence 1 lit. b GDPR for contract processing and to handle your enquiries.
Insofar as you have given your consent to this in accordance with Art. 6 (1) sentence 1 lit. a GDPR by deciding to open a customer account, we use your data for the purpose of opening the customer account.
Once the contract has been fully processed or your customer account has been deleted, your data is restricted for further processing and deleted after the retention periods under tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, which is permitted by law and about which we inform you in this statement. Your customer account can be deleted at any time, either by a message to the contact option described below or via a function provided for that purpose in the customer account.
3. Transfer of data
For the fulfilment of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR we pass your data on to the shipping company commissioned with the delivery, insofar as this is necessary to deliver the goods ordered. Depending on which payment service provider you select in the order process, we pass the payment data collected for that purpose on to the credit institution commissioned with the payment and, where applicable, to payment service providers commissioned by us, or to the selected payment service, in order to process payments. In some cases the selected payment service providers also collect this data themselves, if you create an account with them. In that case you have to log in with your access data at the payment service provider during the order process. The privacy policy of the respective payment service provider applies in this respect.
We also use an external merchandise management system for order and contract processing. The transfer of data or processing taking place in this respect is based on processing on our behalf.
The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle the shipping for us (drop shipping).
Transfer of data to shipping service providers
If you have given us your express consent to this during or after your order, we pass your telephone number on to the selected shipping service provider on the basis of that consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR, so that it can contact you before delivery in order to announce or arrange the delivery.
Consent can be withdrawn at any time by a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After withdrawal we delete the data you provided for that purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, which is permitted by law and about which we inform you in this statement.
DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany
Transfer of data to debt collection agencies
For the fulfilment of the contract in accordance with Art. 6 (1) sentence 1 lit. b GDPR we pass your data on to a commissioned debt collection agency, insofar as our payment claim has not been settled despite a previous reminder. In that case the claim is collected directly by the debt collection agency. In addition, the transfer serves to protect our legitimate interests, which prevail in a balancing of interests, in effectively asserting or enforcing our payment claim in accordance with Art. 6 (1) sentence 1 lit. f GDPR.
4. E-mail newsletter
E-mail advertising with newsletter subscription
If you subscribe to our newsletter, we use the data required for this or provided separately by you in order to send you our e-mail newsletter regularly on the basis of your consent in accordance with Art. 6 (1) sentence 1 lit. a GDPR.
You can unsubscribe from the newsletter at any time, either by a message to the contact option described below or via a link provided for that purpose in the newsletter. After you unsubscribe we delete your e-mail address from the recipient list, unless you have expressly consented to further use of your data or we reserve the right to use the data beyond that, which is permitted by law and about which we inform you in this statement.
The newsletter is sent by a service provider as part of processing on our behalf, to whom we pass your e-mail address for that purpose.
This service provider is based in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
5. Use of data for payment processing
Instalment purchase
If you select the payment method „Ratenkauf" (instalment purchase) and give the data protection consent required for this in accordance with Art. 6 (1) sentence 1 lit. a GDPR, personal data (first name, surname, address, e-mail, telephone number, date of birth, IP address, gender) is transmitted together with the data required to process the transaction (item, invoice amount, due dates, total amount, invoice number, taxes, currency, order date and order time) to our partner Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm for the purposes of processing this payment method.
In order to verify the identity and creditworthiness of the customer, our partner makes enquiries and obtains information from publicly accessible databases and credit agencies. For the providers from which information and, where applicable, creditworthiness information based on mathematical and statistical procedures is obtained, as well as for further details on the processing of your data after transmission to our partner Klarna Bank AB (publ), please see its privacy policy, which you can find here: https://www.klarna.com/de/datenschutz/
Our partner Klarna Bank AB (publ) uses the information received about the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship. You have the option of contacting our partner Klarna Bank AB (publ) to state your point of view and to contest the decision.
The consent to the transfer of data given in the order process can be withdrawn towards us at any time with effect for the future, without giving any reason.
6. Cookies and web analysis
In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use so-called cookies on various pages, insofar as you have given your consent to this in accordance with Art. 6 (1) sentence 1 lit. a GDPR.
Cookies are small text files that are stored automatically on your device. Some of the cookies we use are deleted again at the end of the browser session, that is after you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognise your browser on your next visit (persistent cookies). You can find the storage period in the overview in the cookie settings of your web browser. You can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally. If cookies are not accepted, the functionality of our website may be limited. Every browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™
You can also withdraw your consent at any time by a message to the contact option described in this privacy policy.
DoubleClick-Cookie
Insofar as you have given your consent to this in accordance with Art. 6 (1) sentence 1 lit. a GDPR, this website also uses the so-called DoubleClick cookie for advertising purposes as part of the use of Google Analytics (see below), which allows your browser to be recognised when you visit other websites. The information automatically generated by the cookie about your visit to this website is generally transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is truncated before transmission within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The anonymised IP address transmitted by your browser as part of Google Analytics is not merged with other Google data. Google will use this information to compile reports on website activity and to provide further services connected with the use of the website. Google may also transfer this information to third parties, insofar as this is required by law or insofar as third parties process this data on behalf of Google. Once the purpose no longer applies and we stop using Google DoubleClick, the data collected in this context is deleted.
Google DoubleClick is a service provided by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). Insofar as information is transmitted to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can withdraw your consent at any time with effect for the future by deactivating the DoubleClick cookie via this link . You can also visit the Digital Advertising Alliance to find out about the setting of cookies and make settings for it. Finally, you can configure your browser so that you are informed about the setting of cookies and can decide individually whether to accept them, or exclude the acceptance of cookies in certain cases or generally. If cookies are not accepted, the functionality of our website may be limited.
Use of Google (Universal) Analytics for web analysis
Insofar as you have given your consent to this in accordance with Art. 6 (1) sentence 1 lit. a GDPR, this website uses Google (Universal) Analytics for the purpose of website analysis. The web analysis service is provided by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). Google (Universal) Analytics uses methods that allow an analysis of your use of the website, such as cookies. The information automatically collected about your use of this website is generally transmitted to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is truncated before transmission within the member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there. The anonymised IP address transmitted by your browser as part of Google Analytics is in principle not merged with other Google data. Once the purpose no longer applies and we stop using Google Analytics, the data collected in this context is deleted.
Insofar as information is transmitted to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can withdraw your consent at any time with effect for the future by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de. This prevents the collection of the data generated by the cookie and relating to your use of the website (including your IP address) as well as the processing of this data by Google.
As an alternative to the browser plug-in you can click <a href=""javascript:gaOptout()"">this link</a> to prevent collection by Google Analytics on this website in the future. In doing so an opt-out cookie is placed on your device. If you delete your cookies, you will be asked for your consent again.
7. Online marketing
Google Ads Remarketing
Through Google Ads we advertise this website in the Google search results and on third-party websites. For this purpose the so-called remarketing cookie from Google is set when you visit our website, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. This serves to protect our legitimate interests, which prevail in a balancing of interests, in optimally marketing our website in accordance with Art. 6 (1) sentence 1 lit. a GDPR. Once the purpose no longer applies and we stop using Google Ads Remarketing, the data collected in this context is deleted.
Any processing of data beyond that only takes place if you have agreed with Google that your web and app browsing history may be linked by Google to your Google account and that information from your Google account may be used to personalise the adverts you see on the web. If, in that case, you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data in order to create and define target group lists for cross-device remarketing. For this purpose your personal data is temporarily linked by Google with Google Analytics data in order to form target groups.
Google Ads is a service provided by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de).
Insofar as information is transmitted to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can deactivate the remarketing cookie via this link . You can also visit the Digital Advertising Alliance to find out about the setting of cookies and make settings for it.
Microsoft Advertising
Through Microsoft Advertising we advertise this website in the Bing, Yahoo and MSN search results and on third-party websites. Insofar as you have given us your consent to this in accordance with Art. 6 (1) sentence 1 lit. a GDPR, a cookie is set automatically when you visit our website, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. Once the purpose no longer applies and we stop using Microsoft Advertising, the data collected in this context is deleted.
Microsoft Advertising is a service provided by Microsoft Corporation (www.microsoft.com). Microsoft Corporation has its headquarters in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
You can withdraw your consent at any time with effect for the future by deactivating the remarketing cookie via this link . You can also visit the Digital Advertising Alliance to find out about the setting of cookies and make settings for it.
Amazon affiliate programme
Our website takes part in the Amazon affiliate programme. This is offered by Amazon Europe Core S.à r.l. (Société à responsabilité limitée), 5 Rue Plaetis, L-2338 Luxembourg (hereinafter „Amazon"). It is a so-called affiliate system, designed to provide a medium for websites by means of which advertising cost reimbursement can be earned through placing adverts and links to Amazon. This serves to protect our legitimate interests, which prevail in a balancing of interests, in optimising and commercially exploiting our online offering in accordance with Art. 6 (1) lit. f) GDPR.
By means of cookies, Amazon can track the course of the respective order and in particular see that you clicked the respective link and then ordered the product on Amazon. You can prevent the setting of cookies by our contractual partners or our website at any time by configuring your internet browser accordingly. Cookies that have already been set can also be deleted at any time via the internet browser or other software programs. You can find further information on data processing at Amazon here.
Google Maps
This website uses Google Maps for the visual presentation of geographical information. Google Maps is a service provided by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). This serves to protect our legitimate interests, which prevail in a balancing of interests, in an optimised presentation of what we offer and in making our locations easy to find in accordance with Art. 6 (1) sentence 1 lit. f) GDPR.
When Google Maps is used, Google transmits and processes data about website visitors' use of the Maps functions, which may in particular include the IP address and location data. We have no influence on this data processing. Insofar as information is transmitted to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield.
To deactivate the Google Maps service and thus prevent the transmission of data to Google, you have to deactivate the JavaScript function in your browser. In that case Google Maps cannot be used, or can only be used to a limited extent.
You can find further information about data processing by Google in the privacy notices of Google. The terms of use for Google Maps contain detailed information on the map service.
The data processing takes place on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here here.
Google Fonts
The script code „Google Fonts" is embedded on this website. Google Fonts is a service provided by Google Ireland Limited, a company registered and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.de). This serves to protect our legitimate interests, which prevail in a balancing of interests, in a consistent presentation of the content on our website in accordance with Art. 6 (1) lit. f) GDPR. In this context a connection is established between the browser you are using and Google's servers. This means Google learns that our website has been accessed from your IP address.
Insofar as information is transmitted to Google servers in the USA and stored there, the American company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . On the basis of this agreement between the USA and the European Commission, the latter has determined an adequate level of data protection for companies certified under the Privacy Shield. You can find further information about data processing by Google in the privacy notices from Google.
8. Social media
Use of social plugins from Facebook, Twitter, Instagram, Pinterest
So-called social plugins („plugins") from social networks are used on our website.
If you access a page of our website that contains such a plugin, your browser establishes a direct connection to the servers of the respective social network. The content of the plugin is transmitted by the respective provider directly to your browser and embedded in the page. Through the embedding of the plugins the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in. This information (including your IP address) is transmitted by your browser directly to a server of the respective provider (possibly in the USA) and stored there. If you are logged in to one of the services, the providers can directly assign the visit to our website to your profile in the respective social network. If you interact with the plugins, for example by pressing the „Like" or the „Share" button, the corresponding information is likewise transmitted directly to a server of the providers and stored there. The information is also published in the social network and shown there to your contacts. This serves to protect our legitimate interests, which prevail in a balancing of interests, in optimally marketing what we offer in accordance with Art. 6 (1) sentence 1 lit. f GDPR.
For the purpose and scope of the data collection and the further processing and use of the data by the providers on their sites, as well as a contact option and your rights and settings options in this respect for protecting your privacy, please see the providers' privacy notices:
https://www.facebook.com/policy.php
https://twitter.com/de/privacy
https://help.instagram.com/155833707900388
https://policy.pinterest.com/en/privacy-policy
https://www.whatsapp.com/legal/#privacy-policy
If you do not want the social networks to assign the data collected via our website directly to your profile in the respective service, you have to log out of the corresponding service before visiting our website. You can also prevent the plugins from loading entirely with add-ons for your browser, for example with the script blocker „NoScript“.
Our online presence on Facebook, Twitter, YouTube, Instagram, Pinterest
Our presence on social networks and platforms serves better, active communication with our customers and with people interested in us. We provide information there about our products and current special offers.
When you visit our online presences in social media, your data may be collected and stored automatically for market research and advertising purposes. From this data so-called usage profiles are created using pseudonyms. These can be used, for example, to place adverts inside and outside the platforms that presumably match your interests. For this purpose cookies are generally used on your device. These cookies store the visitor behaviour and the interests of users. In accordance with Art. 6 (1) lit. f. GDPR this serves to protect our legitimate interests, which prevail in a balancing of interests, in an optimised presentation of what we offer and in effective communication with customers and with people interested in us. If you are asked by the respective social media platform operators for consent to the data processing, for example by means of a checkbox, the legal basis of the data processing is Art. 6 (1) lit. a GDPR.
Insofar as the aforementioned social media platforms have their headquarters in the USA, the following applies: an adequacy decision by the European Commission exists for the USA. This goes back to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here .
For detailed information on the processing and use of the data by the providers on their sites, as well as a contact option and your rights and settings options in this respect for protecting your privacy, in particular options to object (opt-out), please see the providers' privacy notices linked below. If you should nevertheless need help with this, you can contact us.
Facebook: https://www.facebook.com/about/privacy/
The data processing takes place on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here here.
You can find further information on data processing in connection with visiting a Facebook fan page (information on Insights data) here.
Google/ YouTube: https://business.safety.google/privacy/
X / Twitter: https://x.com/de/privacy
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://about.pinterest.com/de/privacy-policy
Option to object (opt-out):
Facebook: https://www.facebook.com/settings?tab=ads
Google/ YouTube: https://adssettings.google.com/authenticated?hl=de
Twitter: https://twitter.com/personalization
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://www.pinterest.de/settings
9. Sending review reminders by e-mail
If you have given us your express consent to this during or after your order in accordance with Art. 6 (1) sentence 1 lit. a GDPR, we use your e-mail address to remind you to submit a review of your order via the review system we use. This consent can be withdrawn at any time by a message to the contact option described below.
10. Contact options and your rights
As a data subject you have the following rights:
- in accordance with Art. 15 GDPR the right to request information about your personal data processed by us to the extent specified there;
- in accordance with Art. 16 GDPR the right to request the immediate correction of incorrect personal data stored by us, or the completion of that data;
- in accordance with Art. 17 GDPR the right to request the deletion of your personal data stored by us, unless further processing is necessary
- to exercise the right to freedom of expression and information;
- to fulfil a legal obligation;
- for reasons of public interest or
- to assert, exercise or defend legal claims;
- in accordance with Art. 18 GDPR the right to request the restriction of the processing of your personal data, insofar as
- you dispute the accuracy of the data;
- the processing is unlawful but you object to its deletion;
- we no longer need the data but you need it to assert, exercise or defend legal claims, or
- you have objected to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format, or to request its transmission to another controller;
- in accordance with Art. 77 GDPR the right to lodge a complaint with a supervisory authority. As a rule you can contact the supervisory authority of your usual place of residence or workplace, or of our company headquarters.
If you have questions about the collection, processing or use of your personal data, about information, correction, restriction or deletion of data, or about withdrawing consent given or objecting to a particular use of data, please contact us directly using the contact details in our legal notice.
