Privacy Policy

Data protection declaration

Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This applies only insofar as no other information is given regarding the subsequent processing operations.

"Personal data" means any information relating to an identified or identifiable natural person.

Server Log Files

You can visit our websites without providing any personal information. Every time you access our website, usage data is transmitted through your internet browser and stored in protocol data (server log files). This stored data includes, for example, the name of the page accessed, the date and time of the request, the amount of data transferred, and the requesting provider. This data serves exclusively to ensure the trouble-free operation of our website and to improve our offering. Processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our legitimate interest in the error-free display and optimization of our website. Assigning this data to a specific person is generally not possible.

Collection and Processing When Using the Contact Form

When you use the contact form, we collect your personal data (name, email address, message text) only in the scope provided by you. The data processing serves the purpose of establishing contact. By submitting your message, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent.

You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until the revocation. We only use your email address to process your request. Your data will subsequently be deleted, provided you have not consented to further processing and use.

Customer Account

When you open a customer account, we collect your personal data in the scope specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing is carried out on the basis of Art. 6 (1) lit. b GDPR (insofar as it serves contract initiation or fulfillment) as well as Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until the revocation. Your customer account will subsequently be deleted.

Data Collection When Writing a Comment

When commenting on an article or post, we collect your personal data (name, email address, comment text) only in the scope provided by you. The processing serves the purpose of enabling commenting and displaying comments. By submitting the comment, you consent to the processing of the transmitted data. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on the consent until the revocation. Your personal data will subsequently be deleted.

When a comment is published, the name you provided (or your pseudonym) will be published. Your email address is stored for contact purposes but will not be displayed publicly.

Furthermore, when submitting the comment, your IP address is stored to prevent misuse of the comment function and to ensure the security of our information technology systems. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR due to our legitimate interest in preventing spam and legal violations. Your IP address will subsequently be deleted.

Collection, Processing, and Use of Personal Data for Orders

When placing an order, we collect and use your personal data only insofar as this is necessary to fulfill and process your order as well as to process your inquiries. The provision of data is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you. Your data will not be passed on to third parties without your explicit consent. Exceptions to this are only our service partners, whom we need to process the contractual relationship, or service providers whom we use within the scope of order processing. In addition to the recipients named in the respective clauses of this privacy policy, these include, for example, recipients in the following categories: shipping service providers, payment service providers, merchandise management service providers, service providers for order processing, web hosts, IT service providers, and dropshipping dealers. In all cases, we strictly observe legal requirements. The scope of data transmission is restricted to a minimum.

Passing on the Email Address to Shipping Companies for Shipping Status Information

We pass on your email address to the transport company as part of the contract processing, provided you have explicitly consented to this during the order process. The disclosure serves the purpose of informing you via email about the shipping status. The processing is carried out on the basis of Art. 6 (1) lit. a GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out based on the consent until the revocation.

Use of an External Merchandise Management System

We use a merchandise management system for contract processing within the framework of data processing agreements according to Art. 28 GDPR. For this purpose, the personal data collected within the scope of the order is transmitted to microtech GmbH, Arthur-Rauner-Straße 5, D-55595 Hargesheim, Germany.

Use of PayPal

All PayPal transactions are subject to the PayPal Privacy Policy. You can find it at: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user's computer system. If a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

We use technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. The processing is carried out on the basis of § 25 (2) TDDDG in conjunction with Art. 6 (1) lit. f GDPR out of our legitimate interest in providing the core functions of our website.

Furthermore, we use cookies on our website for the purpose of enabling an analysis of the surfing behavior of our page visitors as well as for marketing purposes. The processing only takes place if you have given us your express consent to do so. The legal basis in this case is § 25 (1) TDDDG in conjunction with Art. 6 (1) lit. a GDPR.

The data collected from you in this way is pseudonymized through technical precautions. Therefore, an assignment of the data to your person is no longer possible. The data is not stored together with other personal data from you.

You can revoke or adjust your consent at any time via our cookie settings (Consent Tool). Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can generally prevent the storage of cookies and the transmission of the data contained therein. Already stored cookies can be deleted at any time. However, we would like to point out that you may then not be able to use all the functions of this website to their full extent.

You can find information on how to manage (including how to deactivate) cookies in the most important browsers under the following links:

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/en-us/microsoft-edge/delete-cookies-in-microsoft-edge-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/en-US/kb/enable-and-disable-cookies-website-preferences

Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Online Presence on Social Media

We maintain online presences within social networks and platforms in order to communicate with active customers, interested parties, and users and to inform them about our services.

We point out that user data may be processed outside the European Union. This may result in risks for users because, for example, the enforcement of user rights could be made more difficult. With regard to US providers that are certified under the "EU-US Data Privacy Framework" (DPF), we point out that an adequate level of data protection exists in accordance with an adequacy decision of the EU Commission.

Furthermore, user data is generally processed for market research and advertising purposes. For example, user profiles can be created based on user behavior and the resulting user interests. The usage profiles can in turn be used, for example, to place advertisements inside and outside the platforms that presumably correspond to the users' interests. For these purposes, cookies are generally stored on the users' computers, in which the user behavior and the users' interests are stored. Furthermore, data can also be stored in the usage profiles independently of the devices used by the users (especially if the users are members of the respective platforms and are logged into them).

The processing of users' personal data is based on our legitimate interests in effective information for users and communication with users pursuant to Art. 6 (1) lit. f. GDPR. If the users are asked by the respective providers for consent to data processing (i.e., declaring their consent, e.g., by checking a box or confirming a button), the legal basis for processing is Art. 6 (1) lit. a., Art. 7 GDPR.

For a detailed description of the respective processing and the opt-out options, please refer to the providers' linked information below. Also in the case of requests for information and the assertion of user rights, we point out that these can be asserted most effectively with the providers. Only the providers have access to the users' data and can directly take appropriate measures and provide information. Should you nevertheless require assistance, you can contact us.

Meta / Facebook / Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) - Privacy Policy: https://www.facebook.com/about/privacy/, Opt-Out: https://www.facebook.com/settings?tab=ads, DPF certified.
Google / YouTube (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) – Privacy Policy: https://policies.google.com/privacy, Opt-Out: https://adssettings.google.com/authenticated, DPF certified.
X / Twitter (Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, Ireland) - Privacy Policy: https://twitter.com/en/privacy, Opt-Out: https://twitter.com/personalization, DPF certified.
Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland) – Privacy Policy: https://policy.pinterest.com/en/privacy-policy.
LinkedIn (LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland) - Privacy Policy: https://www.linkedin.com/legal/privacy-policy, Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out, DPF certified.
Xing (New Work SE, Am Strandkai 1, 20457 Hamburg, Germany) - Privacy Policy / Opt-Out: https://privacy.xing.com/en/privacy-policy.

Use of Google Analytics (Google Analytics 4)

We use the web analytics service Google Analytics of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. The data processing serves the purpose of analyzing this website and its visitors. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website usage and internet usage to the website operator. The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

Google Analytics uses cookies. The processing is carried out exclusively on the basis of your consent according to § 25 (1) TDDDG and Art. 6 (1) lit. a GDPR. You can revoke your consent at any time via our consent banner.

We use Google Analytics 4. In this version, IP addresses are standardly shortened upon collection and are not logged or stored. Your data may be transmitted to the USA. The parent company Google LLC is certified under the "EU-US Data Privacy Framework" (DPF), which ensures an adequate level of data protection for potential data transfers to the USA. You can prevent the collection of data generated by the cookie and related to your use of the website to Google as well as the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=en.

Clarity

This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://learn.microsoft.com/en-us/clarity/faq (hereinafter "Clarity").

Clarity is a tool for analyzing user behavior on this website. Clarity records, in particular, mouse movements and creates a graphic representation of which part of the website users scroll to most frequently (heatmaps). Clarity can also record sessions so that we can view site usage in the form of videos. Furthermore, we receive information about general user behavior within our website.

Clarity uses technologies that allow the recognition of the user for the purpose of analyzing user behavior (e.g., cookies or use of device fingerprinting). Your personal data is stored on Microsoft's servers (Microsoft Azure Cloud Service) in the USA.

The use of the aforementioned service is based exclusively on Art. 6 (1) lit. a GDPR and § 25 TDDDG, provided that corresponding consent has been obtained. The consent is revocable at any time.

The company is certified under the "EU-US Data Privacy Framework" (DPF). Every company certified under the DPF commits to complying with these data protection standards. Further information on this can be obtained from the provider under the following link: https://www.dataprivacyframework.gov/participant/6474.

Data Processing Agreement: We have concluded a Data Processing Agreement (DPA) for the use of the above-mentioned service. This legally required contract ensures that they process the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

Use of YouTube

We use the function for embedding YouTube videos of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website.

The function displays videos stored on YouTube in an iFrame on the website. The option "Extended data protection mode" is activated. As a result, YouTube does not store any information about visitors to the website. Only when you watch a video is information transmitted to YouTube and stored there. The data processing is carried out on the basis of your consent according to Art. 6 (1) lit. a GDPR. You can revoke this consent at any time.

Further information on the collection and use of data by YouTube and Google can be found in the privacy policy at: https://policies.google.com/privacy.

Duration of Storage

After full contract processing, the data is initially stored for the duration of the warranty period, then taking into account statutory, especially tax and commercial law retention periods (according to HGB and AO), and then deleted after the expiry of the period, provided you have not consented to further processing and use.

Rights of the Data Subject

If the legal requirements are met, you have the following rights according to Art. 15 to 21 GDPR: right to information, correction, deletion, restriction of processing, data portability, as well as the right to object to processing.

Furthermore, according to Art. 21 (1) GDPR, you have the right to object to processing based on Art. 6 (1) f GDPR, as well as to processing for the purpose of direct marketing.

Please contact us if you have any questions. You will find our contact details in our legal notice (Impressum).

You can reach our Data Protection Officer directly at: Pierre Bartholmeus (datenschutz@phoenix-budo.de).

Right to Lodge a Complaint with the Supervisory Authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

Last updated: May 6, 2026