1) Introduction and Contact Details of the Responsible Party

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data are all data that can be used to identify you personally.

1.2 The responsible party for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is Trivando, Am bhf Weinhübel 8, 02827 Görlitz, Germany, Email: service@trivando.de. The responsible party is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data Collection When Visiting Our Website

2.1 When using our website purely for informational purposes, we only collect data that your browser transmits to our server (so-called “server log files”). The following data is collected:

Visited page
Date and time
Amount of data
Source/reference
Browser type
Operating system
IP address (if applicable, anonymized)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the stability and functionality of the website.

2.2 This website uses SSL/TLS encryption. You can recognize an encrypted connection by “https://” and the lock symbol in the browser.

3) Hosting & Content Delivery Network

We use a provider for hosting that operates servers exclusively within the EU.
All collected data is processed on these servers.
A data processing agreement is in place.

4) Cookies

We use cookies to provide functions and improve the website.
Session cookies are deleted after closing the browser, persistent cookies remain stored longer.

The processing is carried out depending on the purpose based on Art. 6 para. 1 lit. a, b or f GDPR.

You can manage cookies in your browser; if you refuse, restrictions may occur.

5) Contacting Us

In the context of contacting us via form or email, we process personal data solely for the purpose of addressing your concern.

Legal basis:

Art. 6 para. 1 lit. f GDPR (legitimate interest),
Art. 6 para. 1 lit. b GDPR (contractual reference).

Data will be deleted as soon as they are no longer needed.

6) Data Processing When Opening a Customer Account

To open a customer account, personal data is processed in accordance with Art. 6 para. 1 lit. b GDPR.

The account can be deleted at any time.
After deletion, the data will be deleted unless there are legal retention periods.

7) Use of Customer Data for Direct Marketing

7.1 Newsletter Subscription

When subscribing to the newsletter, we regularly send information about our offers.
Your email address is a mandatory field.
A double opt-in procedure is used.
Data processing is carried out in accordance with Art. 6 para. 1 lit. a GDPR.

Unsubscribing is possible at any time.

7.2 Newsletter for Existing Customers

We send offers for similar products in accordance with § 7 para. 3 UWG.
Legal basis: Art. 6 para. 1 lit. f GDPR.

Objection is possible at any time.

7.3 CleverReach

The newsletter is sent via CleverReach GmbH & Co. KG.
Data transfer in accordance with Art. 6 para. 1 lit. f GDPR.
Tracking only with consent in accordance with Art. 6 para. 1 lit. a GDPR.
A data processing agreement is in place.

7.4 Product Availability Notification

Use of the double opt-in procedure.
Legal basis: Art. 6 para. 1 lit. a GDPR.
Unsubscribing is possible at any time.

8) Data Processing for Order Processing

8.1 Transfer to Transport Service Providers and Payment Providers

Data is transferred in accordance with Art. 6 para. 1 lit. b GDPR as far as necessary.

8.2 DHL

Email address/number is only transferred with consent in accordance with Art. 6 para. 1 lit. a GDPR.

8.3 Payment Service Providers

Amazon Pay
PayPal Checkout

Data transfer in accordance with Art. 6 para. 1 lit. b GDPR.
Credit checks are carried out for certain payment methods in accordance with Art. 6 para. 1 lit. f GDPR.

9) Web Analytics Services

9.1 Google Analytics 4

Use only with consent in accordance with Art. 6 para. 1 lit. a GDPR.
Data may be transferred to the USA.
Storage duration: 2 months.
Functions such as demographic features, Google Signals, and UserIDs can be used.

9.2 etracker (Cookie-based)

Use only with consent in accordance with Art. 6 para. 1 lit. a GDPR.
Pseudonymized analysis of user behavior.

9.3 etracker (without Cookies)

Server-based analysis.
Legal basis: Art. 6 para. 1 lit. f GDPR.

10) Page Functionalities

10.1 YouTube

Embedding of videos via Google Ireland Ltd.
Cookies are only set with consent in accordance with Art. 6 para. 1 lit. a GDPR.

10.2 Google reCAPTCHA

Serves to prevent abuse.
Cookies are only set with consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without cookies: Legal basis Art. 6 para. 1 lit. f GDPR.

10.3 Google Customer Reviews

Data transmission only occurs with consent in accordance with Art. 6 para. 1 lit. a GDPR.

11) Tools and Miscellaneous

Cookie Consent Tool

For managing cookie settings.
Technically necessary cookies are set.
Legal bases: Art. 6 para. 1 lit. f GDPR, Art. 6 para. 1 lit. c GDPR.
A data processing agreement is in place.

12) Rights of the Affected Party

Rights of the affected parties according to GDPR:
Art. 15 – Right of access
Art. 16 – Right to rectification
Art. 17 – Right to erasure
Art. 18 – Right to restriction
Art. 19 – Right to notification
Art. 20 – Right to data portability
Art. 7 para. 3 – Right to withdraw consent
Art. 77 – Right to lodge a complaint with a supervisory authority

12.2 Right to Object

You have the right to object to the processing at any time for reasons relating to your particular situation (Art. 21 para. 1 GDPR).
For direct marketing, there is a general right to object (Art. 21 para. 2 GDPR).

13) Duration of Storage of Personal Data

The duration of storage is determined by:

Legal basis
Purpose
Legal retention periods

Data will be deleted when the purpose ceases, there are no longer any retention obligations, or consent has been withdrawn.