Data protection

General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. Detailed information on the subject of data protection can be found in our data protection declaration listed below this text.

Data collection on our website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the legal notice of this website.

How do we collect your data?
On the one hand, your data is collected when you communicate it to us. This can, for example, be data that you enter into a contact form.

Other data are automatically recorded by our IT systems when you visit the website. This is mainly technical data (e.g. internet browser, operating system or time the page was viewed). This data is collected automatically as soon as you enter our website.

What do we use your data for?
Some of the data is collected to ensure that the website is error-free and to smoothly process a purchase. Other data can be used to analyze your user behaviour.

What rights do you have with regard to your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of data protection. You also have the right to lodge a complaint with the competent supervisory authority.

Analysis tools and third-party tools
When you visit our website, your surfing behavior can be statistically evaluated. This is done primarily with cookies and so-called analysis programmes. Your surfing behavior is usually analyzed anonymously; the surfing behaviour cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find details on this in our data protection declaration under the heading “Third-party modules and analysis tools”.

You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

2. Customer account & orders

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation. Your customer account will then be deleted.

Collection, processing and transfer of personal data for orders.
When you place an order, we only collect and process your personal data insofar as this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you.

Your data will be passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal requirements. The amount of data transmission is limited to a minimum. The legal basis for the transfer of data is Art. 6 Paragraph 1 lit. b GDPR.

Age verification process
In the case of ordering age-restricted goods, we ensure that you have reached the legally required minimum age for the goods in question in accordance with the applicable youth protection law. We use an age verification procedure for this, with which we can ensure your personal identification (age verification) and, if necessary, authentication. For this purpose we use the service FRASPY Age Check & Identity Check, Andreas van Loock, TOOLPIXX, Nettetalstraße 24, D-56745 Rieden.

For the purpose of checking the required minimum age, some of your personal data will be transmitted to the above service provider. This data processing takes place in accordance with Art. 6 Paragraph 1 lit. f GDPR on the basis of our legitimate interests, which are predominant in the context of a weighing up of interests, in ensuring an offer that is compliant with youth protection law and also in compliance with the legal provisions on the protection of minors.

Contact, reviews & newsletter

Use of the e-mail address for sending newsletters
We use your e-mail address, regardless of the contract processing, exclusively for our own advertising purposes for sending the newsletter, provided you have expressly consented to this or are already listed with us in a business relationship or as an existing customer (§7 Para. 3 German Law against Unfair Competition (UWG)). In accordance with the statutory provisions, we primarily use your previous purchase data and interest data for the selection of advertising purposes, from which we derive your product interests taking into account your purchase activities. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent or the purchase in our webshop. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by sending us an informal message without incurring any costs other than the transmission costs according to the basic tariffs (e.g. internet connection costs, postage). Your e-mail address will then be removed from the mailing list.

Your data will be passed on to a service provider for e-mail marketing as part of order processing. It will not be passed on to other third parties.

Payment service provider

Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find them at
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of Stripe
On our website we offer, among other things, payment via Stripe and the associated payment methods. The provider of these payment services is

Stripe Payments Europe Ltd
Block 4, Harcourt Centre
Harcourt Road
Dublin 2

If you choose to pay via Stripe, the payment details you have entered will be transmitted to Stripe.

Your data is transmitted to Stripe on the basis of Art. 6 Paragraph 1 lit. a GDPR (consent) and Art. 6 Paragraph 1 lit. b GDPR (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past. All data required for payment processing are used exclusively for the execution of the payments and are transmitted via the “SSL” method. Stripe is PCI DSS certified. Stripe transfers, processes and, if necessary, stores personal data outside the EU. Stripe is subject to the Safe Harbour Agreement. Information on Stripe’s data protection is available here: https://stripe.com/de/privacy.

3. GENERAL NOTES AND MANDATORY INFORMATION

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission via the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

Note on the responsible body

The responsible body for data processing on this website is:

udoq America Inc.
1710 Bucks Club Drive
30005 Alpharetta, GA, USA

Represented by Managing Director Marcus Kuchler
Contact: Telephone: 089-28809212
Email: shop@udoq.com
Internet address: www.udoq.com

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, e-mail addresses, etc.).

Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke consent you have already given at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing carried out before the revocation remains unaffected by the revocation.

Right of appeal to the competent supervisory authority
In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the competent supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

Right to data portability
You have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to a third party in a common, machine-readable format. If you request the direct transfer of the data to another person responsible, this will only be done if it is technically feasible.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the website operator, this site uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, their origin and recipient and the purpose of the data processing and, if necessary, a right to correct, block or delete this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of personal data.

Objection to advertising e-mails
We hereby object to the use of the contact data published in the context of the legal notice obligation for sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.

4. DATA COLLECTION ON OUR WEBSITE

Google Login / Sign-In
We offer you the opportunity to register and log in on AMBOSS with Google Sign-In. This takes place exclusively with your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR. Google Sign-In is a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. An additional registration or login is therefore not necessary. To log in or register, you will be redirected to the Google site, where you can log in with your usage data. This will link your Google profile or your Google e-mail address and our service. Through the link, we automatically receive the following data from Google Ireland Limited:

First and Last Name

Email address

Your Google user ID (if different from your e-mail address)

Of these data, we only use those that are named under section 3 and that are used to complete the user profile. This information is essential for our services to be able to identify you.

For more information on Google Sign-In and privacy settings, please refer to the data protection information (https://policies.google.com/privacy) and the terms of use (https://policies.google.com/terms) from Google Ireland Limited.

Facebook Connect
On this website it is possible to register via the Facebook account.

Facebook Connect is a service from Facebook, Inc. The use of Facebook Connect is subject to Facebook’s data protection conditions and terms of use.

When using Facebook Connect, Facebook profile data and public data on Facebook from your Facebook profile are transmitted to us. Conversely, data may be transferred from us to your Facebook profile. Your transmitted data will be stored and processed by us for the purpose of registration on our site.

By registering on our website via Facebook Connect, you consent to the transfer of profile data from your Facebook profile to us and the transfer of data on the use of our website to Facebook. The data that is available as public data in your Facebook profile is transmitted. We would like to point out that following the changes to Facebook’s data protection conditions and terms of use, the “friends list” of the Facebook profile owner may also be transferred if this has been marked as “public” in the Facebook privacy settings.

The legal basis for using the service is Art. 6 I f GDPR – legitimate interest. Our legitimate interest in using this service is to enable users to easily share content on Facebook.

For more information, see: https://www.facebook.com/about/privacy/your-info-on-other

Cookies
Some of the internet pages use the so-called cookies. Cookies do not damage your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognise your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general, and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions you require (e.g. shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in the storage of cookies for the technically error-free and optimized provision of its services. If other cookies (e.g. cookies for analyzing your surfing behaviour) are stored, these will be treated separately in this data protection declaration.

Third party hosting services
As part of processing on our behalf, a third-party provider provides us with the services for hosting and displaying the website. This serves to safeguard our legitimate interests, which are predominant in the context of a weighing of interests, in a correct presentation of our offer. All data that is collected as part of the use of this website or in the forms provided in the online shop as described below are processed on its servers. Processing on other servers only takes place within the framework explained here. This service provider is located within a country of the European Union or the European Economic Area.

Server log files
The provider of the pages automatically collects and stores information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
• This data will not be merged with other data sources.

The basis for data processing is Art. 6 Paragraph 1 lit. b GDPR, which allows the processing of data for the fulfillment of a contract or pre-contractual measures.

Contact form
If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions. We do not pass on this data without your consent.

The processing of the data entered in the contact form takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. All you need to do is send us an informal message by e-mail. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Data transfer to shipping service providers
If you have given us your express consent during or after your order, we will forward your e-mail address to the selected shipping service provider on the basis of this, so that they can contact you prior to delivery for the purpose of announcing or coordinating the delivery. The consent can be revoked at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
DHL Paket GmbH
Am Dreistock 11
97318
Kitzingen

5. ANALYSIS TOOLS & ADVERTISING

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are saved on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behaviour in order to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address will only be sent to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Use of Google Adwords Conversion Tracking

We use the online advertising programme “Google AdWords” and conversion tracking as part of Google AdWords. Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you click on an advertisement placed by Google, a conversion tracking cookie will be placed on your computer. These cookies lose their validity after 30 days, contain no personal data and are therefore not used for personal identification.
If you visit certain Internet pages on our website and the cookie has not yet expired, we and Google can see that you clicked on the ad and were redirected to this page. Every Google AdWords customer receives a different cookie. This means that there is no way that cookies can be tracked via the websites of AdWords customers.
The information that is obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. Here, customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.
If you do not want to participate in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (deactivation option). You will then not be included in the conversion tracking statistics. You can find more information and Google’s privacy policy at: http://www.google.com/policies/technologies/ads/, http://www.google.de/policies/privacy/

Use of the remarketing or “similar target groups” function of Google Inc.

The provider uses the remarketing or “similar target groups” function of Google Inc. (“Google”) on the website. Using this function, the provider can target visitors to the website with targeted advertising by displaying personalized, interest-based advertising ads for visitors to the provider’s website when they visit other websites in the Google Display Network. To carry out the analysis of website usage, which forms the basis for creating interest-based advertisements, Google uses so-called cookies. For this purpose, Google saves a small file with a sequence of numbers in the browser of the visitors to the website. This number is used to record visits to the website as well as anonymised data on the use of the website. There is no storage of personal data of the visitors to the website. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take previously accessed product and information areas into account. You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin. Alternatively, you can deactivate the use of cookies by third-party providers by calling up the deactivation page of the Network Advertising Initiative under http://www.networkadvertising.org/choices/and implementing the additional information on opt-out mentioned there. Further information on Google Remarketing and Google’s data protection declaration can be found at:http://www.google.com/privacy/ads/.

Browser Plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/gaoptout?hl=de.

Objection against data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents your data from being recorded on future visits to this website: Deactivate Google Analytics.

You can find more information on how Google Analytics handles user data in Google’s privacy policy: https://support.google.com/analytics/answer/6004245?hl=de.

Order data processing

We have concluded a contract data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Facebook Custom Audiences

We use Facebook Website Custom Audiences on our websites. For this purpose, so-called Facebook pixels are integrated on our websites. This is a Javascript code. These pixels generate a checksum (hash value) from your usage data, which is transmitted to Facebook, e.g. browser information. If available, the Facebook cookie is also addressed and your Facebook ID is transmitted. If you have a Facebook profile and log in there, you can be presented with targeted, customized advertising for products and offers based on the data transmitted by the pixels. Data from users who do not have a Facebook profile will be discarded unused by Facebook. For more information about the purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your setting options to protect your privacy, please refer to the Facebook data protection guidelines at https://de-de.facebook.com/privacy/explanation.

6. PLUGINS AND TOOLS

Google Web Fonts

This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our online offers. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s data protection declaration: https://www.google.com/policies/ privacy/.

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to save your IP address. This information is usually transmitted to and stored by Google on servers in the United States. The provider of this site has no influence on this data transfer.

The use of Google Maps is in the interest of an appealing presentation of our online offers and to make it easy to find the places we have indicated on the website. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR.

You can find more information on user data in Google’s privacy policy: https://www.google.de/intl/de/policies/privacy/.

Facebook Plugin

You will find plugins for the social network Facebook on our website. Their provider is Facebook Inc. It is based in the USA at California 94025, 1 Hacker Way, Menlo Park. The Facebook logo or the “Like-Button” on our site identifies the Facebook plug-ins in a way that is recognizable for you. Please also note the overview of the Facebook plugins on http://developers.facebook.com/docs/plugins/. When you visit our website, we establish a direct connection to the Facebook server via the plug-in. You are then switched there via your browser. For Facebook, this is linked to the information that you have visited our website with your IP address. By clicking on the Facebook “Like” button, you can link the content of our website to your profile on Facebook. For Facebook, the visit to our site can be assigned to your user account. We have no knowledge of the type of content that is transmitted to Facebook and how Facebook uses it. You can find more information on data collection and use in the Facebook data protection declaration, which you can find under http://de-de.facebook.com/policy.php. You can prevent the assignment of your visit to our site to your Facebook profile by simply logging out of your Facebook account beforehand.

Instagram Plugin

We also integrate functions of the Instagram online service on our website. The provider of these functions is Instagram Inc. It is based in the USA at CA 94025, 1601 Willow Road, Menlo Park. The Instagram button enables you to link to your Instagram account when you visit our website, provided you are logged in to Instagram. In this way, Instagram receives the information about your visit to our website and can assign this visit to your Instagram profile. We have no knowledge of the content of the information transmitted or of its use by Instagram. You can find further information on data collection and data use by Instagram in the Instagram data protection declaration under http://instagram.com/about/legal/privacy/.

7. NEWSLETTER