Privacy Policy

PRIVACY POLICY

1) INFORMATION ABOUT THE COLLECTION OF PERSONAL DATA AND CONTACT DETAILS OF THE CONTROLLER

1.1

We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data includes all information with which you can be personally identified.

1.2

The controller responsible for the data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is LondonFigure. The controller for the processing of personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

1.3

For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the lock icon in your browser’s address bar.

2) DATA COLLECTION WHEN VISITING OUR WEBSITE

When using our website purely for informational purposes, meaning you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • The website you visited
  • Date and time of access
  • Amount of data transmitted in bytes
  • Source/reference from which you reached the site
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

Data processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. This data is not shared or otherwise used. However, we reserve the right to retrospectively review server log files if there are concrete indications of unlawful use.

3) COOKIES

To make your visit to our website more appealing and to enable the use of certain functions, we use cookies on various pages. Cookies are small text files that are stored on your device. Some of the cookies we use are deleted after the end of your browser session (i.e., after you close your browser) and are referred to as session cookies. Other cookies remain on your device, allowing us or our partner companies (third-party cookies) to recognize your browser during your next visit (persistent cookies).

When cookies are used, they collect and process specific user information, such as browser and location data or IP address values, to varying extents. Persistent cookies are automatically deleted after a predefined period, which may vary depending on the cookie.

Some cookies help streamline the ordering process by storing preferences (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If cookies implemented by us process personal data, the processing is carried out either in accordance with Art. 6(1)(b) GDPR for contract execution or in accordance with Art. 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best functionality of the website and a customer-friendly and efficient browsing experience.

In some cases, we collaborate with advertising partners who help us make our online offerings more interesting for you. For this purpose, cookies from partner companies may also be stored on your device when you visit our website (third-party cookies). If we work with the aforementioned advertising partners, you will be informed separately about the use of such cookies and the specific information collected in the respective sections below.

Cookie Management

Please note that you can configure your browser to notify you whenever cookies are set and to allow you to decide on a case-by-case basis whether to accept them, exclude cookies for specific cases, or generally disable them. Every browser manages cookie settings differently. The help menu of your browser explains how to adjust your cookie settings. Below are links to cookie management instructions for common browsers:

Please note that disabling cookies may limit the functionality of our website.

4) CONTACTING US

When you contact us (e.g., via a contact form or email), personal data is collected. The specific data collected in the case of a contact form is evident from the respective form itself. This data is stored and used solely for the purpose of responding to your inquiry and for the associated technical administration. The legal basis for processing this data is our legitimate interest in answering your inquiry in accordance with Art. 6(1)(f) GDPR. If your contact aims at concluding a contract, then the additional legal basis for processing is Art. 6(1)(b) GDPR.
Your data will be deleted after your inquiry has been fully processed, provided that it can be inferred from the circumstances that the matter has been conclusively resolved and there are no statutory retention obligations to the contrary.

5) DATA PROCESSING WHEN OPENING A CUSTOMER ACCOUNT AND FOR CONTRACT EXECUTION

In accordance with Art. 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the purpose of executing a contract or opening a customer account. The specific data collected can be seen from the respective input forms. You may delete your customer account at any time by sending a message to the above-mentioned address of the controller.
We store and use the data you provide for contract execution. After the contract has been fully executed or your customer account has been deleted, your data will be restricted for further use and deleted after the expiration of tax and commercial retention periods, unless you have explicitly consented to further use of your data or we are legally permitted to continue using the data, which we inform you about in this statement.

6) USE OF YOUR DATA FOR DIRECT ADVERTISING

6.1 Subscription to Our Email Newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing additional information is voluntary and will be used to personalize the newsletter.
We use the double opt-in procedure to send newsletters. This means that we will only send you a newsletter via email once you have explicitly confirmed that you consent to receiving newsletters. We will then send you a confirmation email, asking you to confirm your consent by clicking on a link.

By activating the confirmation link, you grant us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When registering for the newsletter, we store your IP address, as provided by your Internet Service Provider (ISP), as well as the date and time of registration. This is done to trace any possible misuse of your email address.
The data collected during the newsletter registration process is used solely for promotional purposes through the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by contacting the controller mentioned at the beginning of this policy.
Once you unsubscribe, your email address will be promptly removed from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve the right to use the data in a legally permitted manner, which we inform you about in this statement.

6.2 Sending Email Newsletters to Existing Customers

If you have provided your email address when purchasing goods or services from us, we reserve the right to regularly send you offers for similar goods or services from our product range via email. For this purpose, we are not required to obtain separate consent from you. The data processing is based solely on our legitimate interest in personalized direct advertising according to Art. 6(1)(f) GDPR.

If you initially objected to the use of your email address for this purpose, no emails will be sent. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. This will only incur transmission costs according to the base rates. Once we receive your objection, the use of your email address for advertising purposes will cease immediately.

7) DATA PROCESSING FOR ORDER HANDLING

7.1 Data Sharing for Contract Fulfillment

The personal data we collect will be shared with the shipping company entrusted with the delivery as part of contract processing, provided this is necessary for the delivery of the goods. Your payment details will be shared with the authorized credit institution as part of the payment process, provided this is necessary for processing payments. If we use payment service providers, you will be explicitly informed of this below. The legal basis for data sharing is Art. 6(1)(b) GDPR.

7.2 Use of Payment Service Providers

  • PayPal
    If you choose to pay via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “instalment payment” via PayPal, your payment details will be shared with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment process. This data sharing is based on Art. 6(1)(b) GDPR and is only carried out to the extent necessary for payment processing.

For payment methods such as credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account” or “instalment payment” via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be shared with credit agencies in accordance with Art. 6(1)(f) GDPR, based on PayPal’s legitimate interest in determining your creditworthiness. The credit report may include probability values (so-called score values). Score values are calculated using a scientifically recognized mathematical-statistical method and may include address data.
For more information about data protection, including the credit agencies used, please refer to PayPal’s privacy policy:
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this data processing at any time by notifying PayPal. However, PayPal may still be entitled to process your personal data if necessary for contractual payment processing.

  • SOFORT
    If you choose the "SOFORT" payment method, payment processing will be carried out by SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"). As part of the order process, we will share your information, along with details of your order, with SOFORT in accordance with Art. 6(1)(b) GDPR.
    SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be shared for the purpose of payment processing and only to the extent necessary.
    For more information about SOFORT’s privacy policy, please visit:
    https://www.klarna.com/sofort/datenschutz

8) CONTACT FOR REVIEW REMINDERS

We may use your email address to send a one-time reminder to submit a review of your order for the rating system we use, provided you have given us your explicit consent during or after your order in accordance with Art. 6(1)(a) GDPR.
You can revoke your consent at any time by contacting the controller responsible for data processing.

9) USE OF SOCIAL MEDIA: SOCIAL PLUGINS

9.1 Facebook Plugins with Shariff Solution

Our website uses social plugins (“plugins”) from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”).

To enhance the protection of your data when you visit our website, these buttons are not directly integrated as plugins. Instead, they are embedded using an HTML link. This ensures that when you visit a page on our website containing such buttons, no connection is made to Facebook’s servers. If you click on the button, a new browser window will open and direct you to Facebook’s page, where you can interact with the plugins (potentially after logging in).

Facebook Inc., located in the USA, is certified under the EU-U.S. Privacy Shield Framework, which guarantees compliance with EU data protection standards.

For more details on the purpose and scope of Facebook’s data collection, as well as the subsequent processing and use of your data by Facebook, and your rights and privacy settings, please refer to Facebook’s privacy policy:
https://www.facebook.com/policy.php

9.2 Google+ Plugins with Shariff Solution

Our website uses social plugins (“plugins”) from the Google+ social network, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

To enhance the protection of your data when you visit our website, these buttons are not directly integrated as plugins. Instead, they are embedded using an HTML link. This ensures that when you visit a page on our website containing such buttons, no connection is made to Google’s servers. If you click on the button, a new browser window will open and direct you to Google+’s page, where you can interact with the plugins (potentially after logging in).

Google LLC, located in the USA, is certified under the EU-U.S. Privacy Shield Framework, which guarantees compliance with EU data protection standards.

For more details on the purpose and scope of Google’s data collection, as well as the subsequent processing and use of your data by Google, and your rights and privacy settings, please refer to Google’s privacy policy:
https://www.google.com/intl/de/policies/privacy/

 

9.3 Instagram Plugin with Shariff Solution

Our website uses social plugins ("plugins") from the online service Instagram, operated by Instagram LLC, 1601 Willow Rd, Menlo Park, CA 94025, USA ("Instagram").

To enhance the protection of your data when visiting our website, these buttons are not fully integrated as plugins but are instead embedded using an HTML link. This ensures that when you visit a page of our website that contains such buttons, no connection is made to Instagram's servers. If you click on the button, a new browser window will open and load the Instagram page, where you can interact with the plugins (potentially after logging in).

Instagram LLC, located in the USA, is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with EU data protection standards.

For more information on the purpose and scope of Instagram's data collection, further processing, and use of your data, as well as your rights and privacy settings, please see Instagram's privacy policy:
https://help.instagram.com/155833707900388/

10) ONLINE MARKETING

10.1 DoubleClick by Google

This website uses the online marketing tool DoubleClick by Google, operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("DoubleClick").

DoubleClick uses cookies to display relevant ads, improve campaign performance reports, or prevent users from seeing the same ad multiple times. Using a cookie ID, Google records which ads are displayed in which browser and ensures they are not shown repeatedly. The processing is based on our legitimate interest in optimizing the marketing of our website in accordance with Art. 6(1)(f) GDPR.

Additionally, DoubleClick can use cookie IDs to track conversions related to ad requests. For example, this occurs when a user views a DoubleClick ad and later visits the advertiser's website using the same browser and makes a purchase. According to Google, DoubleClick cookies do not contain any personally identifiable information.

When these marketing tools are used, your browser automatically connects to Google's server. We have no control over the scope or further use of the data collected through this tool by Google and are informing you according to our knowledge: Through the integration of DoubleClick, Google receives information that you visited the relevant section of our website or clicked on one of our ads. If you are registered with a Google service, Google may associate the visit with your account. Even if you are not registered or logged in, it is possible that the provider may determine and store your IP address.

If you wish to opt out of this tracking process, you can disable cookies for conversion tracking by adjusting your browser settings to block cookies from the domain www.googleadservices.com (https://www.google.de/settings/ads). Note that this setting will be deleted if you clear your cookies. Alternatively, you can visit the Digital Advertising Alliance at www.aboutads.info to learn about cookie settings and make adjustments. Finally, you can configure your browser to notify you when cookies are being set and decide individually to accept or reject them or block cookies altogether. Please note that disabling cookies may limit the functionality of our website.

Google LLC, based in the USA, is certified under the EU-U.S. Privacy Shield Framework, which ensures compliance with EU data protection standards.

For more information on the privacy policy of DoubleClick by Google, visit:
https://www.google.de/policies/privacy/

 

10.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and its associated Conversion Tracking feature provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

We use Google AdWords to draw attention to our attractive offers on external websites through targeted advertising (so-called Google AdWords). This allows us to analyze the success of individual advertising campaigns, helping us ensure that you receive relevant ads, improve the appeal of our website, and fairly allocate advertising costs.

A cookie for Conversion Tracking is set when a user clicks on a Google AdWords ad. Cookies are small text files stored on your computer. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages on our website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google AdWords customer receives a unique cookie, preventing tracking across different websites of AdWords customers.

The information collected using the Conversion Cookie is used to create conversion statistics for AdWords customers who have opted for Conversion Tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged for Conversion Tracking. However, they do not receive information that can personally identify users.

If you do not wish to participate in tracking, you can block this usage by disabling the Google Conversion Tracking cookie in your browser settings. This will exclude you from the Conversion Tracking statistics.

We use Google AdWords based on our legitimate interest in targeted advertising in accordance with Art. 6(1)(f) GDPR.

Google LLC, based in the USA, is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with EU data protection standards.

For further details on Google's privacy policy, visit: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by configuring your browser settings or downloading and installing the browser plugin available at:
https://www.google.com/settings/ads/plugin?hl=de

Please note that disabling cookies may limit some functionalities of this website.

11) Web Analytics Services

Google (Universal) Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," which are text files stored on your computer, to help analyze how users interact with the website. Information generated by the cookie about your use of the website (including the shortened IP address) is typically transferred to and stored on a Google server in the USA.

This website exclusively uses Google Analytics with the "_anonymizeIp()" extension to ensure IP anonymization and exclude direct personal identification. This means that Google truncates your IP address within EU member states or other contracting parties to the Agreement on the European Economic Area before transmission. Only in exceptional cases is the full IP address sent to a Google server in the USA and truncated there.

In these exceptional cases, processing is carried out based on our legitimate interest in statistical analysis of user behavior for optimization and marketing purposes, in accordance with Art. 6(1)(f) GDPR.

On our behalf, Google uses this information to evaluate your use of the website, compile reports on website activity, and provide additional services related to website and internet usage. The IP address transmitted by your browser within the scope of Google Analytics is not merged with other Google data.

Options to Disable Google Analytics

You can prevent the storage of cookies by adjusting your browser settings. However, please note that some website functionalities may not work fully if cookies are disabled.

To prevent data collection by Google Analytics (including your IP address) and the processing of this data, download and install the browser plugin available at:
https://tools.google.com/dlpage/gaoptout?hl=de

Alternatively, on mobile devices or as an alternative to the browser plugin, click the following link to set an opt-out cookie that will prevent Google Analytics from collecting your data on this website in the future:
Google Analytics Deactivate

This opt-out cookie works only in this browser and for this domain. If you delete cookies in your browser, you must click the link again.

Google LLC, based in the USA, is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with EU data protection standards.

Additionally, this website uses Google Analytics for cross-device analysis of visitor flows via a User ID. When a page is first accessed, a unique, permanent, and anonymized ID is assigned to the user, enabling cross-device tracking of interactions. The User ID does not contain any personal data and is not transmitted to Google.

You can object to the cross-device tracking using the User ID at any time with effect for the future by disabling Google Analytics across all systems you use (e.g., another browser or mobile device).

Further information on Universal Analytics can be found here:
https://support.google.com/analytics/answer/2838718?hl=de&ref_topic=6010376

12) Retargeting/Remarketing/Recommendation Advertising

Facebook Custom Audience via Pixel Method

This website uses the “Facebook Pixel” by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). With explicit consent, this enables tracking of user behavior after they view or click on a Facebook ad. The procedure helps evaluate the effectiveness of Facebook ads for statistical and market research purposes and can assist in optimizing future advertising campaigns.

The collected data is anonymized for us, meaning we cannot identify users. However, Facebook stores and processes the data, allowing it to be connected to individual user profiles. Facebook may use this data for its own advertising purposes in accordance with its Data Usage Policy. This enables Facebook and its partners to show advertisements on and off Facebook. A cookie may also be saved on your computer for this purpose.

These processing activities occur only with your explicit consent under Art. 6(1)(a) GDPR.

Consent to using the Facebook Pixel can only be given by users over 13 years old. If you are younger, we request you obtain permission from your legal guardians.

Facebook Inc., located in the USA, is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with EU data protection standards.

To disable cookies on your computer, adjust your browser settings to prevent cookies from being stored or delete already stored cookies. Disabling all cookies may limit the functionality of some features on our website. You can also opt out of cookie use by third-party providers like Facebook at the Digital Advertising Alliance.

Google AdWords Remarketing

Our website utilizes Google AdWords Remarketing to advertise on Google search results and third-party websites. This service is provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”).

To achieve this, Google sets a cookie in your browser, enabling interest-based advertisements using a pseudonymous cookie ID based on the pages you visited. Processing is conducted based on our legitimate interest in optimal marketing of our website, per Art. 6(1)(f) GDPR.

Further data processing occurs only if you’ve consented to Google linking your web and app browsing history with your Google account and using this information to personalize ads. If you’re logged into Google during your visit to our website, Google will use your data in combination with Google Analytics to create and define cross-device remarketing target groups. Google temporarily links your personal data with Google Analytics data for this purpose.

Options to Disable Ad Personalization
  • Permanently disable cookies for ad personalization by downloading and installing the browser plugin available at: https://www.google.com/settings/ads/onweb/
  • Alternatively, visit the Digital Advertising Alliance to manage cookie settings.
  • You can also configure your browser to inform you about cookie placement and decide individually whether to accept cookies or exclude them in specific cases or in general. Note that disabling cookies may restrict some functionalities of our website.

Google LLC, located in the USA, is certified under the EU-U.S. Privacy Shield Framework, ensuring compliance with EU data protection standards.

Further information on Google’s advertising policies and privacy can be found here: https://www.google.com/policies/technologies/ads/

 

13. Rights of the Data Subject

13.1 Overview of Data Subject Rights

Under applicable data protection law, you have extensive rights regarding the processing of your personal data, which are outlined below:

  • Right of Access (Art. 15 GDPR): You have the right to request information about your personal data that we process, including:

    • The purposes of processing,
    • The categories of personal data being processed,
    • The recipients or categories of recipients to whom your data has been or will be disclosed,
    • The planned storage duration or criteria for determining the storage period,
    • Your right to request rectification, erasure, restriction of processing, objection to processing, or lodge a complaint with a supervisory authority,
    • The source of your data if not collected from you directly,
    • Whether automated decision-making, including profiling, exists and detailed information on the logic, implications, and potential effects of such processing, as well as your right to be informed of any safeguards for data transfer to third countries under Art. 46 GDPR.

  • Right to Rectification (Art. 16 GDPR): You have the right to request the immediate correction of inaccurate data and/or the completion of incomplete data stored by us.

  • Right to Erasure (Art. 17 GDPR): You have the right to request the deletion of your personal data when the conditions of Art. 17(1) GDPR are met. This right does not apply if processing is necessary for:

    • The exercise of the right to freedom of expression and information,
    • Compliance with a legal obligation,
    • Public interest reasons, or
    • The assertion, exercise, or defense of legal claims.

  • Right to Restriction of Processing (Art. 18 GDPR): You can request the restriction of processing of your personal data if:

    • You contest the accuracy of your data, pending verification,
    • You oppose deletion of data due to unlawful processing and instead request restriction of use,
    • You need the data for the assertion, exercise, or defense of legal claims, or
    • You have objected to processing based on your particular situation, pending the outcome of a balancing test.

  • Right to Notification (Art. 19 GDPR): If you have exercised your right to rectification, erasure, or restriction of processing, we are obligated to inform all recipients to whom your personal data was disclosed, unless this proves impossible or would involve disproportionate effort. You have the right to be informed of these recipients.

  • Right to Data Portability (Art. 20 GDPR): You have the right to receive your personal data provided to us in a structured, commonly used, and machine-readable format, or to request the transfer to another controller, if technically feasible.

  • Right to Withdraw Consent (Art. 7(3) GDPR): You have the right to withdraw your consent to the processing of your personal data at any time, with future effect. If consent is withdrawn, we will immediately erase the relevant data, unless further processing is based on another legal ground. Withdrawal does not affect the lawfulness of the processing that occurred before the withdrawal.

  • Right to Lodge a Complaint (Art. 77 GDPR): If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority, particularly in the member state of your residence, place of work, or the location of the alleged infringement.

13.2 Right to Object

If we process your personal data based on a legitimate interest, you have the right to object to the processing at any time, for reasons arising from your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing your personal data. However, further processing may be continued if we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes. In this case, we will cease processing your data for direct marketing purposes as described above.

14. Duration of Storage of Personal Data

The duration for which personal data is stored depends on the respective legal retention periods (e.g., for commercial and tax law purposes). After the retention period expires, the relevant data will be routinely deleted, unless it is no longer necessary for the fulfillment or initiation of a contract, or if we have a legitimate interest in retaining it further.