1) Introduction and Contact Information of the Responsible Party
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The responsible party for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Trivando, Am bhf Weinhübel 8, 02827 Görlitz, Germany, Email: service@trivando.de. The responsible party for processing is the natural or legal person who alone or jointly with others decides on the purposes and means of processing personal data.
2) Data Collection When Visiting Our Website
2.1 When using our website purely for informational purposes, we only collect data that your browser transmits to our server (so-called “server log files”). The data collected includes:
Visited page
Date and time
Data volume
Source/reference
Browser type
Operating system
IP address (possibly anonymized)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the stability and functionality of the website.
2.2 This website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” and the lock symbol in the browser.
3) Hosting & Content Delivery Network
We use a provider for hosting that operates servers exclusively within the EU. All collected data is processed on these servers. A data processing agreement is in place.
4) Cookies
We use cookies to provide functions and improve the website. Session cookies are deleted after closing the browser, persistent cookies remain stored longer.
Processing is carried out depending on the purpose based on Art. 6 para. 1 lit. a, b, or f GDPR.
You can manage cookies in the browser; restrictions may occur if rejected.
5) Contact
In the context of contacting us via form or email, we process personal data solely for handling your request.
Legal basis:
Art. 6 para. 1 lit. f GDPR (legitimate interest),
Art. 6 para. 1 lit. b GDPR (contractual reference).
Data is deleted as soon as it is no longer needed.
6) Data Processing When Opening a Customer Account
To open a customer account, personal data is processed in accordance with Art. 6 para. 1 lit. b GDPR.
The account can be deleted at any time. After deletion, the data is deleted unless there are legal retention periods.
7) Use of Customer Data for Direct Advertising
7.1 Newsletter Subscription
When subscribing to the newsletter, we regularly send information about our offers. The mandatory information is your email address. The double opt-in procedure is used. Data processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR.
Unsubscription is possible at any time.
7.2 Newsletter for Existing Customers
We send offers for similar products in accordance with § 7 para. 3 UWG. Legal basis: Art. 6 para. 1 lit. f GDPR.
Objection is possible at any time.
7.3 CleverReach
Newsletter dispatch is carried out via CleverReach GmbH & Co. KG. Data transfer in accordance with Art. 6 para. 1 lit. f GDPR. Tracking only with consent in accordance with Art. 6 para. 1 lit. a GDPR. A data processing agreement is in place.
7.4 Product Availability Notification
Use of the double opt-in procedure. Legal basis: Art. 6 para. 1 lit. a GDPR. Unsubscription is possible at any time.
8) Data Processing for Order Handling
8.1 Transfer to Transport Service Providers and Payment Providers
Data is transferred in accordance with Art. 6 para. 1 lit. b GDPR as far as necessary.
8.2 DHL
Email address/number is only transferred with consent in accordance with Art. 6 para. 1 lit. a GDPR.
8.3 Payment Service Providers
Amazon Pay
PayPal Checkout
Data transfer in accordance with Art. 6 para. 1 lit. b GDPR. Credit check is carried out for certain payment methods in accordance with Art. 6 para. 1 lit. f GDPR.
PayPal Privacy Policy: https://www.paypal.com/de/legalhub/paypal/privacy-full
9) Web Analytics Services
9.1 Google Analytics 4
Use only with consent in accordance with Art. 6 para. 1 lit. a GDPR. Data may be transferred to the USA. Storage duration: 2 months. Features such as demographic characteristics, Google Signals, and UserIDs can be used.
9.2 etracker (Cookie-based)
Use only with consent in accordance with Art. 6 para. 1 lit. a GDPR. Pseudonymized analysis of user behavior.
9.3 etracker (without Cookies)
Server-based analysis. Legal basis: Art. 6 para. 1 lit. f GDPR.
10) Page Functionalities
10.1 YouTube
Embedding of videos via Google Ireland Ltd. Cookies are only set with consent in accordance with Art. 6 para. 1 lit. a GDPR.
10.2 Google reCAPTCHA
Serves to prevent misuse. Cookies are only set with consent in accordance with Art. 6 para. 1 lit. a GDPR. Without cookies: Legal basis Art. 6 para. 1 lit. f GDPR.
10.3 Google Customer Reviews
Data transfer only with consent in accordance with Art. 6 para. 1 lit. a GDPR.
11) Tools and Miscellaneous
Cookie Consent Tool
For managing cookie settings. Technically necessary cookies are set. Legal bases: Art. 6 para. 1 lit. f GDPR, Art. 6 para. 1 lit. c GDPR. A data processing agreement is in place.
12) Rights of the Data Subject
Rights of the data subject in accordance with GDPR: Art. 15 – Access Art. 16 – Rectification Art. 17 – Erasure Art. 18 – Restriction Art. 19 – Notification Art. 20 – Data Portability Art. 7 para. 3 – Withdrawal of Consent Art. 77 – Complaint to a Supervisory Authority
12.2 Right to Object
You have the right to object to processing at any time for reasons arising from your particular situation (Art. 21 para. 1 GDPR). For direct advertising, a general right to object applies (Art. 21 para. 2 GDPR).
13) Duration of Storage of Personal Data
The storage duration is determined by:
Legal basis
Purpose
Legal retention periods
Data is deleted when the purpose ceases to apply, no retention obligations exist, or consent has been withdrawn.
