Privacy policy

We appreciate your interest in our online store. Protecting your privacy is very important to us. Below, we provide detailed information about how we handle your data. Since changes in the law or changes to our business processes may require us to update this Privacy Policy, we ask that you review this Privacy Policy regularly.

You can also manage your personal cookie settings for this website via the menu at the following link: Cookie Management

1. Scope and Data Controller; Data Protection Officer

This Privacy Policy applies to the website of the “aevor” online store, which is accessible at the domain “www.aevor.com” and its various subdomains (hereinafter referred to as “our website”).

The controller within the meaning of the EU General Data Protection Regulation (hereinafter: GDPR) and other national data protection laws of the member states, as well as other data protection regulations, is:

, a GmbH Vitalisstraße 67
50827 Cologne
Email: info@aevor.com

You can reach our Data Protection Officer using the following contact information:

Data Protection Officer for the FOND OF Group
Vitalisstraße 67
50827 Cologne
Email: datenschutz@fondof.de

2. Principles of Data Processing

Personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your name, age, address, phone number, date of birth, email address, IP address, or user behavior. Information for which we cannot establish a connection to you (or can do so only with disproportionate effort), e.g., through anonymization of the information, is not personal data.

The processing of personal data (e.g., collection, retrieval, use, storage, or transmission) always requires a legal basis or your consent.

Processed personal data will be deleted as soon as the purpose of the processing has been fulfilled and there are no longer any legally required retention obligations to be met.

If we process your personal data in order to provide certain services, we will inform you below about the specific processes, the scope and purpose of the data processing, the legal basis for the processing, and the respective retention period.

3. Specific Data Processing Operations

3.1 Provision and Use of the Website

When you access and use our website, we collect the personal data that your browser automatically transmits to our server. This information is temporarily stored in a so-called log file.

When you use our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure its stability and security:

IP address of the requesting computer
Date and time of access
Name and URL of the retrieved file
Website from which the access originated (referrer URL)
the browser you are using and, if applicable, your computer's operating system, as well as the name of your Internet service provider

The legal basis for the aforementioned data processing—specifically, the retrieval of stored information from your device—is Section 25(2)(2) of the Telecommunications and Telemedia Data Protection Act (hereinafter: TTDSG). The subsequent processing of your personal data is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. The processing of the aforementioned data is necessary for the provision of a website and thus serves to safeguard a legitimate interest of our company.

Hosting by a third-party provider

As part of processing on our behalf, our hosting service provider, “Shopify”—Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland—provides website hosting and display services for us. All data collected through the use of this website or via the forms provided in the online store, as described below, is processed on its servers. Processing on other servers takes place only within the scope explained in this statement.

In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the United States and Canada. The European Court of Justice has determined that the United States and Canada do not provide a level of data protection that is adequate under EU standards. The transfer of data to Canada is covered by an adequacy decision issued by the European Commission pursuant to Article 45 of the GDPR. Due to the lack of an adequacy decision and in the absence of appropriate safeguards regarding data transfers to the United States, there is a particular risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes, possibly without any legal recourse.
To ensure adequate protection of your personal data in the event of its transfer to such so-called third countries, we have entered into so-called EU-U.S. Standard Contractual Clauses with the service provider. In addition, whenever possible, we maintain communication with the service provider to ensure the protection of your personal data through any additional measures that may be necessary.

For more information about Shopify's data processing practices, please see Shopify's Privacy Policy.

3.2 Creating a Customer Account

We collect your data when you provide it to us as part of your order. When you place an order, a customer account is automatically created in our system. Required fields are marked as such because we absolutely need this information to create your customer account, and you will not be able to complete the account creation process without providing it.

The following data is collected when creating a customer account:

Title (optional)
Name (Billing and Package Recipient)
Address (Billing and Shipping Address)
Email address
Phone number (optional; only for orders within Germany)

We process the data you provide in accordance with Article 6(1), first sentence, subparagraph (b) of the GDPR for the purpose of contract fulfillment.

Once your customer account has been completely deleted, your data will be restricted for further processing and deleted after the retention periods required by tax and commercial law have expired, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond these periods in a manner that is permitted by law and about which we inform you in this statement.

You can delete your customer account at any time by sending a message using the contact information provided above.

3.3 Purchase of Goods

3.3.1 Purchase Process

On our website, we offer you the option to purchase our products by providing personal information. The information required for this is entered into a form, transmitted to us, and stored. Required fields are marked as such because we absolutely need this information to open a customer account, and you will not be able to complete the account opening process without providing it. Data will only be disclosed to third parties in the cases listed below.

The following data is collected as part of the ordering process:

Title (optional)
Name (Billing and Package Recipient)
Address (Billing and Shipping Address)
Email address
Payment Information
Phone number (optional; only for deliveries within Germany)

The legal basis for the processing of your personal data required to fulfill a sales contract concluded with us is Article 6(1)(b) of the GDPR.

Once the contract has been fully fulfilled and the purchase price has been paid in full, your data will be blocked from further use and deleted after the retention periods required by tax and commercial law have expired, unless you have expressly consented to the continued use of your data. Data may be retained beyond these periods in individual cases if required by law.

3.3.2 Payment by Credit Card or PayPal

If you select a payment method (credit card or PayPal), your personal data will be forwarded to "Shopify Payments," the payment service provider we have engaged, and to the financial institution or online payment service responsible for processing the payment. In some cases, the selected payment service providers may also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider using your login credentials during the ordering process. The privacy policy of the respective payment service provider applies in this regard.

The following data is transmitted to the payment service provider and the participating financial institutions as part of the payment processing:

Name of the Invoice Recipient
Phone number
Email address
Billing Address
Shipping Address
Order Number
Credit or debit card number (if applicable)
Account Number
Bank Code
Invoice Amount

When processing your personal data that is necessary to fulfill a purchase contract concluded with us—in particular, for payment processing—Article 6(1)(b) of the GDPR serves as the legal basis. This also applies to processing operations necessary to carry out precontractual measures. In some cases, we may also be legally required to transfer your data in accordance with the implementation of strong customer authentication under Directive EU 2015/2366 (PSD 2) or the Act Implementing the Second Payment Services Directive (Payment Services Implementation Act—ZDUG). To the extent that we are legally obligated to transfer such data, Article 6(1)(c) of the GDPR, in conjunction with the relevant provisions of Directive (EU) 2015/2366 (PSD 2) or the Payment Services Implementation Act (ZDUG) serves as the legal basis.

If you choose to pay via “PayPal” during the ordering process, your personal data will be transmitted to PayPal via the payment service provider Shopify Payments, as described above. PayPal is a service provided by PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal acts as an online payment service provider and escrow agent and offers buyer protection services.

The personal data transmitted to PayPal typically includes first name, last name, address, email address, IP address, or other data necessary for payment processing. Personal data related to the specific order (such as the number of items, item number, invoice amount, taxes, and other billing information) is also required to fulfill the purchase agreement.

This is in line with our legitimate interest in offering an efficient and secure payment method (Art. 6(1)(f) GDPR). In this context, we transfer the aforementioned data to PayPal to the extent necessary for the performance of the contract (Art. 6(1)(b) GDPR).

PayPal also reserves the right to collect personal information from the buyer. According to PayPal, this may include the following information:

Name
Address
Phone number
Email
Account Number

PayPal may share your personal data with affiliated companies, service providers, or subcontractors to the extent necessary to fulfill its contractual obligations or where the data is processed on its behalf.

The personal data we provide to PayPal may be shared by PayPal with credit reporting agencies. The purpose of this sharing is to verify identity and creditworthiness. PayPal uses the results of the creditworthiness check, taking into account the statistical probability of default, to determine whether to provide the respective payment method. The credit report may contain probability values (so-called “score” values). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method.

You can see which credit reporting agencies are involved here.

You have the option to withdraw your consent to the processing of your personal data at any time by notifying PayPal. However, withdrawing your consent does not affect the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal, provided that the personal data must be processed, used, or transferred for the purpose of processing payments in accordance with the contract.

You can view PayPal's privacy policy here.

3.3.3 Delivery by a Shipping Company

To fulfill the contract in accordance with Article 6(1)(b) of the GDPR, we share your data with the shipping company responsible for delivery, to the extent necessary to deliver the ordered goods. If you have given us your explicit consent during or after placing your order for the purpose of delivery notification or coordination, we will, on this basis and in accordance with Article 6(1), first sentence, (a) of the GDPR, share your email address and phone number with the selected shipping provider so that it can contact you prior to delivery to notify you of the delivery or coordinate delivery details.

Consent may be revoked at any time by sending a message to the contact information provided above or directly to the shipping service provider at the contact address listed below:

DHL Paket GmbH
10 Sträßchensweg
53113
Bonn

Upon revocation, we will delete the data you provided for this purpose, unless required by law to retain it.

3.4 Returns

You can return the items you ordered from our online store to us within 30 days. You can access our returns portal through our online store. In this portal, you can initiate a return. To do so, please send the items back to us after filling out the online form with your name, customer number, order number, and information about the items being returned.

The processing of the return is part of the performance of the contract; therefore, the legal basis for our processing as the data controller is Article 6(1)(b) of the GDPR.

In addition, a return label must be generated. You can do this on our returns portal at

For more information, please visit this page: Privacy Policy (dhl.de)

3.5 Complaint Form

You can file a complaint about purchased items through our website. To process your complaint, we will collect your first and last name, your address, your email address, and information about the item in question.

This is done as part of the performance of the contract pursuant to Article 6(1)(b) of the GDPR.

We will retain your data for as long as necessary for the complaint process and will subsequently delete it, unless tax or commercial law retention periods require us to retain it for a longer period.

3.6 Dealer Search / Store Finder

On our website, you can use our Store Finder to find out which retailers near you carry our products. For our Store Finder, we use software provided by the service provider Storemapper, Storemapper, 5201 Eden Ave Suite 300 Edina, Minnesota 55436, USA. This is a cloud-based platform for managing location-based content, such as address data.

You can find the nearest retailer carrying our products without providing any personal information. If you consent to location tracking, we will show you the nearest retailer based on your detected location.

The legal basis for location tracking is your consent and, therefore, Article 6(1)(a) of the GDPR.

Your data will be deleted as soon as it is no longer needed to fulfill the purposes for which it was collected, or if you withdraw your consent and there are no legal retention periods that prevent this.

3.7 Contests

On our social media pages, particularly Instagram, we occasionally offer you the chance to participate in contests. The terms of use and privacy policies of the respective online platforms also apply. We generally collect and process personal data from contest participants only to the extent necessary for participation in the contest and its administration. When participants enter the sweepstakes, we initially process the following data from them: Instagram account name. We process the participants’ data described above to conduct the sweepstakes, in particular to determine the winners and notify them. After the winners have been determined, we then process the following data from participants: name, age, and address. We process the participants’ data listed above to conduct the contest, in particular to verify whether participants are eligible to enter and to send out the prizes. If the above data is not provided, it will not be possible to send the prizes. The data processing described above for the purpose of participating in the sweepstakes is carried out in accordance with Article 6(1)(b) of the GDPR. Once a sweepstakes has ended and the winners have been drawn, notified, and the prizes sent, your personal data will be deleted. This does not affect applicable statutory retention periods. During the statutory retention period, your personal data will be blocked and will not be subject to any other data processing. We do not disclose participants’ data to third parties unless this is necessary for the administration of the contest (e.g., to send out prizes, etc.).

3.8 Use of Social Media Plug-Ins

Our website uses so-called social plugins (“plugins”) from the social networks Instagram and Pinterest. These services are operated by Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland) and Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor Fenian Street, Dublin 2, Ireland).

When you visit our website, which contains such a plugin, your browser establishes a direct connection to the servers of Instagram and Pinterest. The plugin’s content is transmitted directly from the respective provider to your browser and integrated into the page. By integrating the plugins, the providers receive the information that your browser has accessed the corresponding page of our website, even if you do not have a profile or are not currently logged in to the respective network. This information (including your IP address) is transmitted directly from your browser to a server operated by the respective social network and stored there. If you are logged in to one of these platforms via your account, the providers can directly associate your visit to our website with your profile on Instagram and Pinterest. If you interact with the plugins—for example, by clicking the “Instagram Button”—the corresponding information is also transmitted directly to a server operated by the provider and stored there. This information is also published on the social network—specifically on your Instagram, Facebook, or Pinterest account—and displayed to your contacts there.

For more information on the purpose and scope of data collection, further data processing activities, and the use of data by the providers, as well as your rights in this regard and the settings available to protect your data and privacy, please refer to the privacy policies of the respective providers:

Instagram's Privacy Policy.

Pinterest's Privacy Policy.

If you do not want the various providers to directly associate the data collected through our website with your respective account, you must log out of the relevant service before visiting our website. You can also completely prevent Instagram plugins from loading by using browser add-ons, such as the script blocker“NoScript.”

3.9 Embedding YouTube Videos

We embed YouTube videos on our website (a process known as "framing"). We do this to illustrate the content of individual subpages. As soon as you click on the video to play it, data is transmitted to the operator of YouTube. This is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Ireland Ltd. can track the following information, among other things, regardless of whether you are signed in to your YouTube account or not:

How long you stayed on a website
IP address
Where you clicked
Which page you came from
Which page you visited next
Which websites and apps you've visited in the past

Please note that we do not have any specific information from the service provider regarding the scope of data processing described above. If you are logged into your YouTube account, you allow YouTube to associate your browsing behavior directly with your personal profile. You can prevent this by logging out of your YouTube account. The legal basis for any associated storage of information on your device and its subsequent retrieval is Section 25(1), Sentence 1 of the TTDSG. You may revoke this consent at any time for the future by disabling cookies in your browser settings or in our Cookie Consent Manager. The subsequent processing of your personal data is based on your expressly granted consent pursuant to Article 6(1)(a) of the GDPR. You may revoke this consent at any time for the future by disabling cookies in your browser settings or in our Cookie Consent Manager. In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the United States. The European Court of Justice has determined that the United States is a country with a level of data protection that is insufficient by EU standards. Due to the lack of an adequacy decision and in the absence of appropriate safeguards, there is a particular risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes, possibly without any legal recourse. To ensure adequate protection of your personal data in the event of its transfer to such so-called third countries, we have entered into so-called EU-U.S. Standard Contractual Clauses with the service provider. In addition, whenever possible, we maintain communication with the service provider to ensure the protection of your personal data through any additional measures that may be necessary.

For more information, please see our Cookie Consent Manager.

3.10 Ways to Contact Us

Visitors to our website can use the options listed below to contact us. In each case, we process specifically the personal data that you provide to us in this context.

As part of the options listed below, the Ultimate AI Bot, developed by Ultimate Enterprises Oy (Address: Erottajankatu 15-17, 00130 Helsinki, Finland), is used to support customer service in handling various customer inquiries. The Ultimate AI Bot generates either longer or shorter responses as needed. In addition, it collects topics requested by customers and extracts frequently asked questions from archived conversations with customer service. This data can be used to improve the Ultimate AI Bot. The Ultimate AI Bot is connected to the Zendesk ticketing system as well as the Shopify store platform, enabling it to provide information on order status or processing status. The Ultimate AI Bot will use the data you provide exclusively in accordance with our instructions and for the purpose of improving its own service.

The legal basis for using the Ultimate AI Bot is the legitimate interest, pursuant to Article 6(1)(f) of the GDPR, in fast, technical customer communication that is available at all times. If you have questions about your order and the Ultimate AI Bot responds, Article 6(1)(b) of the GDPR serves as the legal basis for data processing.

For more information about data processing by Ultimate.ai, please see Ultimate.ai's Privacy Policy at: https://www.ultimate.ai/security-privacy

3.10.1 Contact Form

To address your inquiry, you can reach us via the contact form (“Contact”) on our website, which is designed for electronic communication. In doing so, we process the personal data you provide to us during the interaction. This includes, in particular, your first and last name, your email address, and the message field. We use the Zendesk ticketing system—a customer service platform provided by Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA—to process customer inquiries. The contact form is provided by “Typeform” (TYPEFORM SL, C/Bac de Roda, 163 (Local) 08018 Barcelona, Spain) and is linked to our Zendesk ticket system, meaning that Typeform is also a recipient of your personal data.

In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the United States. The European Court of Justice has determined that the United States has a level of data protection that is insufficient by EU standards. Due to the lack of an adequacy decision and in the absence of appropriate safeguards, there is a particular risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes, possibly without any legal recourse. To ensure adequate protection of your personal data in the event of its transfer to such so-called third countries, we have entered into so-called EU-U.S. Standard Contractual Clauses with the service provider. In addition, whenever possible, we maintain communication with the service provider to ensure the protection of your personal data through any additional measures that may be necessary.

The legal basis for the possible storage of information on your device and its subsequent retrieval is Section 25(2)(2) of the TTDSG. The subsequent processing of your personal data is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. If your contact is intended to conclude a sales contract, the legal basis is Article 6(1)(b) of the GDPR.

For the protection of your personal data, please refrain from providing us with any special categories of personal data as defined in Article 9(1) of the GDPR (for example, health data).

Using the contact form is entirely optional, and you are, of course, welcome to contact us through other channels (e.g., email or phone).

The information provided and the correspondence with our Service Desk will be stored for follow-up questions and future contact; once the purpose for which it was stored no longer applies, it will be deleted in accordance with data protection regulations, provided that no statutory retention periods prevent this.

3.10.2 Contact Form (Support - Widget)

If you would like to contact us via “Support,” we offer you the option to reach out to us directly from the homepage of our online store using the contact form. In addition to your name and email address, we process the data you provide to us through this channel. To process customer inquiries submitted through this contact option, we also use the Zendesk ticketing system, a customer service platform provided by Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA.

The legal basis for the associated storage of information on your device and its subsequent retrieval is Section 25(2)(2) of the TTDSG. The subsequent processing of your personal data is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR. If your contact is intended to conclude a sales contract, the legal basis is Article 6(1)(b) of the GDPR.

The provider “Zendesk” also has access to the personal data you provide to us through this contact option.

For the protection of your personal data, please refrain from providing us with any special categories of personal data as defined in Article 9(1) of the GDPR (for example, health data).

Using the contact form is entirely optional, and you are, of course, welcome to contact us through other means (e.g., email or phone).

3.10.3 Email

We offer you the option to submit your inquiry to us via email. In addition to your email address, we process the information and data you provide to us through this channel. We also use the Zendesk ticketing system—a customer service platform provided by Zendesk Inc., 989 Market Street #300, San Francisco, CA 94102, USA—to process customer inquiries via email.

For the protection of your personal data, please refrain from providing us with special categories of personal data as defined in Article 9(1) of the GDPR (for example, health data) through this channel without separate encryption.

In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the United States. The European Court of Justice considers the United States to be a country with a level of data protection that is insufficient by EU standards. Zendesk Inc. is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information, please visit the provider’s website at the following link.

In addition, whenever possible, we maintain communication with the service provider to ensure the protection of your personal data by implementing any additional measures that may be necessary.

For more information about Zendesk's data processing practices, please see Zendesk's Privacy Policy.

4. Data Sharing

We will only share your personal information with third parties if:

You have given your explicit consent for this purpose pursuant to Article 6(1)(a) of the GDPR
this is permitted by law and necessary under Article 6(1)(b) of the GDPR to fulfill a contractual relationship with you
there is a legal obligation to disclose the information pursuant to Article 6(1)(c) of the GDPR
Disclosure pursuant to Article 6(1)(f) of the GDPR to safeguard legitimate business interests, as well as to assert, exercise, or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in preventing the disclosure of your data.

You can find out which data processing activities this applies to in each specific case below the description of the respective data processing activity.

Furthermore, due to legal requirements, we are obligated in certain cases to disclose your personal data to third parties. This is the case, for example, if there is suspicion of a criminal offense or misuse of our website. In such cases, we are required to disclose your data to the appropriate law enforcement authorities. In addition, your data is stored exclusively in our database and on our servers or those of our data processors.

5. Data Processing for Advertising Purposes

5.1 Email Marketing with Newsletter Subscription

We offer the aevor newsletter service. With your consent, you can subscribe to our newsletter, through which we’ll keep you informed about products, events, contests, and current offers.

How do I sign up?

To send our newsletter, which requires registration, we use the so-called double opt-in process; that is, we will not send you a newsletter until you have expressly consented to our activating the newsletter service. You must also confirm that the email address you provided belongs to you. To this end, we will send you a confirmation email and ask you to click on a link contained in that email to confirm that you are the owner of the email address you provided.

What data is collected, and how is it collected?

When you subscribe to a newsletter, we automatically store your IP address and the times of your subscription and confirmation. This allows us to verify that you actually subscribed and, if necessary, detect any misuse of your email address.

The only required information for receiving the newsletter is your email address. Providing any additional, separately marked information is voluntary and is used to address you personally. We use the data collected in this process exclusively for sending the requested information and offers.

To continuously improve your shopping experience and protect you from unnecessary advertising, we use the information you provide and automatically generated data to create personalized advertisements tailored to you and your interests. For example, we use email delivery and read receipts, your order history, the date and time of your visit to the website, and the product pages you’ve visited. Analyzing and evaluating this information allows us to send you personalized advertising. Our goal is to make our advertising more useful and interesting for you. In this way, we aim to avoid indiscriminate advertising and send you only advertisements—such as newsletters or product recommendations via email—that align with your interests.

We use the Klaviyo newsletter software (Klaviyo Inc., 125 Summer St, Floor 6, Boston, MA 02111, USA) to provide, manage, and send the newsletter. Klaviyo is prohibited from disclosing your data to third parties without authorization or from using it for any purpose other than sending newsletters.

The legal basis for processing data after a user subscribes to the newsletter is Article 6(1)(a) of the GDPR, provided the user has given consent. If you do not wish to receive personalized advertising, you may withdraw your consent to the newsletter service at any time with future effect (see below). If your child is under 16 years of age, we collect your children’s personal data, following your consent in accordance with Article 6(1)(a) of the GDPR in conjunction with Article 8(1) of the GDPR, only in connection with your subscription to the newsletter for the purpose of tailoring the newsletter to provide you with age-appropriate information and product recommendations. You may also revoke this consent at any time with future effect (see below).

In this context, personal data may be transferred to the United States in connection with Klaviyo. The European Court of Justice has determined that the United States is a country with a level of data protection that is insufficient by EU standards. Due to the lack of an adequacy decision and in the absence of appropriate safeguards, there is a particular risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes, possibly without any legal recourse. To ensure adequate protection of your personal data in the event of its transfer to such so-called third countries, we have entered into so-called EU-U.S. Standard Contractual Clauses with the service provider. In addition, whenever possible, we maintain communication with the service provider to ensure the protection of your personal data through any additional measures that may be necessary.

You can find more information about the provider here.

How do I log out?

You may revoke your consent to receive the newsletter and unsubscribe at any time. You can revoke your consent by clicking the link provided in every newsletter email, by sending an email to info@aevor.com, or by sending a message using the contact information listed in the legal notice. Your email address, as well as your title and name (if provided), will be stored for as long as you remain subscribed to the newsletter. Once you unsubscribe from the newsletter, your email address and other data will be deleted.

5.2 Email Marketing Without Subscribing to the Newsletter and Your Right to Object

If we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right to periodically send you offers via email for products from our product range that are similar to those you have already purchased, in accordance with Section 7(3) of the German Unfair Competition Act (UWG).

This serves to protect our legitimate interests in sending promotional communications to our customers, which prevail following a balancing of interests. The legal basis is therefore Article 6(1)(f) of the GDPR.

You may object to this use of your email address at any time by sending a message using the contact information provided above or via a link provided for this purpose in the promotional email, without incurring any costs other than the transmission costs charged at standard rates.

We use the email marketing platform Klaviyo, headquartered at 125 Summer St, 6th Floor, Boston, MA 02111, USA, to provide, process, and send the newsletter. Klaviyo is prohibited from disclosing your data to third parties without authorization or from using it for any purpose other than sending newsletters.

You can find more information here.

5.3 Direct Mail Advertising and Your Right to Object

In addition, we reserve the right to use your first and last name as well as your mailing address for our own promotional purposes, such as sending you interesting offers and information about our products by mail.

This serves to protect our legitimate interests—which, following a balancing of interests, are deemed to prevail—in sending promotional communications to our customers, in accordance with Article 6(1), first sentence, subparagraph (f) of the GDPR.

You may object to the storage and use of your data for these purposes at any time, effective for the future, by sending a message to the contact address provided above.

5.4 Personalization Through Customer Match / Customer Match for Online Audiences (Google, Pinterest, TikTok, Meta)

We use custom audiences as a targeting option on various platforms (Google, Pinterest, TikTok, and Meta) to exclude you from personalized ads on these platforms. To do this, we upload encrypted lists of email addresses of existing customers or newsletter subscribers to these platforms. The goal is to exclude you from ads on the respective platforms so that you receive only ads that are relevant to you and tailored to your interests. This improves your user experience; as a newsletter subscriber or existing customer, you will not receive ads intended for a different target audience.

We upload encrypted (hashed) lists of email addresses to the providers' respective advertising systems.

The providers compare these hash values with the email addresses of their registered users to identify matches. If a match is found, the user is added to a custom audience and may receive targeted advertising from us or—depending on the setting we’ve selected—be excluded from advertising.

As soon as the verification process is complete, the providers immediately delete the transmitted hash values.

The services we use are:

Google Customer Match
Provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
For more information on data processing by Google, click here: https://policies.google.com/privacy. Google’s Terms of Service can be found here: https://support.google.com/google-ads/answer/9805516
Pinterest Customer List Targeting
Provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland.
For more information on data processing at Pinterest, click here: https://policy.pinterest.com/de/privacy-policy. The Terms of Use for advertising data can be found at the following link: https://policy.pinterest.com/de/ad-data-terms
TikTok Custom Audiences
Provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.
For more information on data processing at TikTok, please visit: https://www.tiktok.com/legal/privacy-policy. The Terms of Use can be found at https://ads.tiktok.com/i18n/official/policy/custom-audience-terms
Facebook Custom Audiences
Provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.
For more information on Facebook’s data processing in connection with Custom Audiences, please visit: https://www.facebook.com/legal/terms/data_security_terms. The Terms of Use for Custom Audiences can be found at the following link: https://www.facebook.com/legal/terms/customaudience

Facebook's general terms and conditions for data processing can be found at https://www.facebook.com/legal/terms/dataprocessing and at https://www.facebook.com/privacy/policy.

We process your email address based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR in order to increase the effectiveness of our advertising efforts and provide you with relevant advertisements.

In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the United States. The European Court of Justice has determined that the United States has a level of data protection that is insufficient by EU standards. Due to the lack of an adequacy decision and in the absence of appropriate safeguards, there is a particular risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes, possibly without any legal recourse. In order to ensure adequate protection of your personal data in the event of its transfer to such so-called third countries, we have entered into so-called EU-U.S. Standard Contractual Clauses with the service provider.

Meta Platforms, Inc. is certified under the “EU-US Data Privacy Framework” (DPF). In addition, whenever possible, we maintain communication with the service provider to ensure the protection of your personal data through any additional measures that may be necessary.

6. Cookies and Web Analytics

We use cookies on our website. Cookies are small files that we send to the browser on your device when you visit our website, where they are stored.

Some features of our website cannot be provided without the use of technically necessary cookies. Other cookies, however, enable us to perform various analyses. For example, cookies can recognize the browser you are using when you visit our website again and transmit various pieces of information to us. Among other things, cookies help us make our website more user-friendly and effective for you by, for example, tracking your use of our website and identifying your preferred settings (such as country and language settings). If third parties process information via cookies, they collect this information directly through your browser. Cookies do not cause any damage to your device. They cannot execute programs and do not contain viruses.

Our website uses various types of cookies, the nature and function of which are explained in more detail below.

Function 1: Essential (or technically necessary) cookies

These cookies are required for technical reasons so that you can visit our website and use the features we offer. In addition, these cookies help ensure that the website is used securely and in compliance with regulations.

Function 2: Marketing Cookies

Advertising cookies (from third-party providers) allow us to display various offers tailored to your interests. These cookies can track users’ web activity over an extended period of time. You may recognize these cookies on the various devices you use. Furthermore, certain cookies allow you to connect to your social networks and share content from our website within those networks.

The legal basis for the use of technically necessary cookies to store information on your device and subsequently read it is Section 25(2)(2) of the TTDSG. The subsequent processing of your personal data is based on our legitimate interest pursuant to Article 6(1)(f) of the GDPR.

We require your consent for cookies that are not technically necessary, or so-called third-party cookies. If you have given us your consent based on a notice we provided on the website (“cookie banner”) , the lawfulness of the associated storage of information on your device and its subsequent retrieval is governed by Section 25(1), sentence 1 of the TTDSG. You may revoke this consent at any time for the future by disabling cookies in your browser settings or in our Cookie Consent Manager.

The subsequent processing of your personal data is based on your explicit consent pursuant to Article 6(1)(a) of the GDPR. You may also revoke this consent at any time for the future by disabling cookies in your browser settings or in our Cookie Consent Manager.

As soon as the data transmitted to us via cookies is no longer necessary to achieve the purposes described above, this information will be deleted, particularly when cookies are disabled. Further storage may occur in individual cases if required by law. You can manage your cookie settings using the options listed below or by configuring your browser settings.

Most browsers are set by default to accept cookies. However, you can configure your browser to accept only certain cookies or none at all. Please note, however, that you may no longer be able to use all features of our website if cookies are disabled on our website through your browser settings. You can also use your browser settings to delete cookies already stored in your browser or to view their storage duration. Furthermore, you can set your browser to notify you before cookies are stored. Since different browsers may function differently, please consult your browser’s help menu for configuration options. If you would like a comprehensive overview of all third-party access to your web browser, we recommend installing plug-ins specifically designed for this purpose.

For more information about the specific cookies we use, please refer to our Cookie Consent Manager. You can also manage your consent there. Manage your consent: Manage your consent

On our website, we use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany), a cloud-based business intelligence solution. Klar extracts, stores, and processes data from our online store and marketing data sources on our behalf. The legal basis for this processing is our legitimate interest in improving our product offerings for our users, in accordance with Article 6(1)(f) of the GDPR. For more information, please refer to the privacy policy on Klar’s website.

7. Gift Certificates

We use the data provided when ordering gift certificates to verify and process the order, as well as to send and redeem the gift certificate. This also includes the documentation and processing of data related to the redemption of the gift certificate. The following data is processed in connection with the purchase of gift certificates and payment processing using a gift certificate:

Date Issued
Voucher Value
Coupon Code
Name of the Invoice Recipient
Billing Address
credit card number, if applicable
Account Number
Bank Code
Date of Voucher Redemption
Name of the person redeeming the voucher
Remaining balance on the gift card

8. Sending rating reminders via email

We offer you the opportunity to leave reviews for our products. If we have received your email address in connection with the sale of a product or service and you have not objected, we reserve the right to send you a reminder via email to leave a product review.

The email contains a button that redirects you to the product review page. There, you can rate the product you purchased on a scale of 1 to 5 stars and provide details about your experience with the product in the text field. Submitting a review by entering this information is voluntary; your personal data will not be processed until you submit the information. You can submit the product review using the first name you provided to us or anonymously. If you have decided to submit a review, it will be published in our online store below the product listing alongside your first name, unless you have chosen to submit your review anonymously.

To provide, process, and send review reminders via email, we use the services of the software providers Klaviyo, Klaviyo Inc., 125 Summer St, 6th Floor, Boston, MA 02111, USA, and Reviews.io, 29–35 Forresters Building, St. Nicholas Place, Leicester, LE1 4LD, United Kingdom.

When using Review.io, personal data may be transferred to countries outside the EU/EEA, in particular to the United States, Switzerland, or the United Kingdom. To ensure adequate protection of your personal data in the event of its transfer to such so-called third countries, we have entered into so-called EU-U.S. Standard Contractual Clauses with the provider. The European Court of Justice considers the United States to be a country with a level of data protection that is insufficient by EU standards. Due to the lack of an adequacy decision and in the absence of appropriate safeguards, there is a particular risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes, possibly without any legal recourse. In addition, we maintain constant communication with the provider, whenever possible, to ensure the protection of your personal data through any additional measures that may be necessary. You can find more information about the provider here.

You may object at any time to the processing of your personal data in connection with the review reminder via email and the use of the email address you provided. You can object by clicking the link included in each email, by sending an email to info@aevor.com, or by contacting us using the contact information provided in the legal notice. If you decide to delete your review, we will delete all personal data, including your first name, your email address, and the associated review. You may also notify us of this at any time by sending an email to the address mentioned above.

9. Hyperlinks and Other Linked Elements to Third-Party Websites

Our website contains so-called hyperlinks and other linked elements to websites operated by third parties. When you click on these hyperlinks, you will be redirected directly from our website to the third-party website. You can tell this has happened, among other things, by the change in the URL.

We cannot be held responsible for the confidential handling of your data on third-party websites, as we have no control over whether these companies comply with data protection regulations. This applies in particular to links to our social media channels on Instagram, Facebook, Pinterest, and TikTok. Please refer directly to these websites for information on how these platforms handle your personal data.

With regard to certain processing operations, we are joint controllers under Article 26 of the GDPR, together with, in particular, Facebook and Instagram.

In cases where we are jointly responsible for processing with the operator, you can find the key details regarding joint processing here: https://www.facebook.com/legal/terms/page_controller_addendum

In addition to FOND OF GmbH, the following companies are responsible for the corporate websites:

Facebook (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
Instagram (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland)
Pinterest (Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland)
TikTok (TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland)

However, you use the platforms at your own risk, particularly the interactive features (e.g., commenting, sharing, liking, videos, images). We reserve the right to delete illegal, racist, or otherwise offensive comments shared on our pages. This includes, for example, comments that infringe on rights or constitute hate speech, as well as suggestive comments or images/videos.

All posts you publish on our site will remain accessible within your account indefinitely, unless we delete them due to an update to the underlying topic, a legal violation, or a violation of our guidelines, or unless you delete the post yourself.

We have no control over the deletion of your personal data by the platforms. The privacy policies of the respective platforms apply in this regard.

In this context, personal data may be transferred to countries outside the EU/EEA, in particular to the United States. The European Court of Justice has determined that the United States has a level of data protection that is insufficient by EU standards. Due to the lack of an adequacy decision and in the absence of appropriate safeguards, there is a particular risk that your data may be processed by U.S. authorities for monitoring and surveillance purposes, possibly without any legal recourse. To ensure adequate protection of your personal data in the event of its transfer to such so-called third countries, we have entered into so-called EU-U.S. Standard Contractual Clauses with the service provider. Meta Platforms, Inc. is certified under the “EU-US Data Privacy Framework” (DPF). In addition, we maintain communication with the service provider whenever possible to ensure the protection of your personal data through any additional measures that may be necessary.

In particular, the following personal data may be processed:

User Content

Date of Birth

Profile Information

Profile picture

Usage Data

Device Information

Smartphone-related information, if applicable

First and Last Name

Internet service provider

IP address

On these accounts, we post and share current offers, new products, contests, and the latest trends related to satch. We also collect data for statistical purposes to further develop and optimize our content and make satch’s offerings more appealing. The data required for this is processed and provided by the respective providers. The legal basis for data processing is Article 6(1)(f) of the GDPR. Data processing is carried out in the interest of our communication and public relations efforts. We have no influence over the presentation, scope, nature, or purpose of data processing by the social media platform. In addition, your personal data is processed for market research, communication, and advertising purposes. Based on your usage behavior and the resulting interests, usage profiles—such as your habits, personal relationships, preferences, etc.—may be created. This enables, among other things, the display of interest-based advertisements and personalized product recommendations both within and outside the platforms that are presumed to correspond to your interests. This is typically done using cookies stored on your computer to analyze your usage behavior. Regardless of this, your usage profiles may also store data that is not collected directly from your devices. Data is stored and analyzed across devices; this applies in particular, but not exclusively, when you are registered as a member and logged in to the respective platforms. As previously stated, we have no control over the companies’ web tracking methods.

If you have created a user profile on one of the social networks listed above, the means, scope, and purposes of the processing of personal data on those social networks are primarily determined by the respective platforms. When you are logged into your respective account, you allow the providers to link your browsing behavior directly to your personal profile. In addition, the company may be able to determine your username—and, in some cases, even your name—from the transmitted data and associate this information with your personal user account on the social media service. You can prevent this by logging out of the respective account.

You can also contact us through our social media accounts. In this case, we process the data you provide to us in order to handle your inquiry. To this end, your data may also be forwarded to the department responsible for your inquiry. This department may also be a third party.

For more information about your options to object and the processing of your data by these platforms, please see the links below:

Facebook
Privacy Policy:https://www.facebook.com/about/privacy/

Opt-out:https://www.facebook.com/settings?tab=adsandhttp://www.youronlinechoices.com

Instagram
Privacy Policy:https://help.instagram.com/519522125107875

Opt-out:http://www.networkadvertising.org/managing/opt_out.aspandhttp://www.youronlinechoices.com

Pinterest
Privacy Policy:https://policy.pinterest.com/en/privacy-policy

Opt-out:https://help.pinterest.com/en/article/personalization-and-data

TikTok

Opt-out: https://support.tiktok.com/de/account-and-privacy/personalized-ads-and-data/personalization-and-data

Meta Platforms, Inc. is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards for data processing in the United States. Every company certified under the DPF commits to adhering to these data protection standards. For more information, please visit the provider’s website at the following link.

10. Privacy Notice Regarding the Use of WhatsApp

You can contact us via WhatsApp and start a conversation. We are the controller, as defined in Article 4(7) of the GDPR, for any subsequent data processing in connection with WhatsApp. To provide and use WhatsApp, we utilize the software solution provided by Charles GmbH, Gartensstr. 86-87, 10115 Berlin, under a data processing agreement. Charles stores all personal data within the EU. As an official WhatsApp partner, Charles uses the WhatsApp Business API, which means that, within the scope of our responsibility, neither any other third parties nor WhatsApp have access to the content of your communications.

Your use of WhatsApp is governed solely by the agreements you have entered into with WhatsApp. In accordance with WhatsApp’s Terms of Service, we have your phone number and username on file because you contacted us. We use this and other information you have provided to recognize you and your preferences and to respond to your WhatsApp messages. The legal basis for this is your consent to be contacted in accordance with Article 6(1)(a) of the GDPR. In addition, we send you newsletters via WhatsApp, provided you have given us your consent to do so.

You may revoke any consent you have already given at any time, effective for the future. Under the GDPR, you also have the right to access, rectify, transfer, and erase your personal data, as well as the right to restrict or object to certain processing activities. You also have the option to file a complaint with the supervisory authority responsible for you.

For more information, please refer to our data processors:

Charles GmbH: https://www.hello-charles.com/de-de/wiki/whatsapp-newsletter/

WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland: https://www.whatsapp.com/legal/privacy-policy-eea

11. Clarity

This website uses Clarity. The provider is Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland, https://docs.microsoft.com/en-us/clarity/ (hereinafter “Clarity”).

Clarity is a tool for analyzing user behavior on this website. In particular, Clarity tracks mouse movements and creates a graphical representation of which parts of the website users scroll to most frequently (heat maps). Clarity can also record sessions, allowing us to view page usage in the form of videos. In addition, we receive information about general user behavior on our website.

Clarity uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting). Your personal data is stored on Microsoft’s servers (Microsoft Azure Cloud Service) in the United States.

To the extent that consent has been obtained, the use of the aforementioned service is based exclusively on Article 6(1)(a) of the GDPR and Section 25 of the TTDSG. Consent may be revoked at any time. If consent has not been obtained, the use of this service is based on Article 6(1)(f) of the GDPR; the website operator has a legitimate interest in effective user analysis. Further details on Clarity’s data protection practices can be found here: https://docs.microsoft.com/en-us/clarity/faq.

The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/s/participant-search/participant-detail?contact=true&id=a2zt0000000KzNaAAK&status=Active

Order Processing

We have entered into a Data Processing Agreement (DPA) for the use of the service mentioned above. This is a contract required under data protection law that ensures the service provider processes the personal data of our website visitors only in accordance with our instructions and in compliance with the GDPR.

12. Sure

We use the services of Klar (Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany) on our website. Klar collects, processes, and stores data on this website and its subpages for the purposes of audience measurement and statistical analysis on our behalf.

This survey is conducted on the following legal basis:

If the user has given consent in accordance with Article 6(1), first sentence, subparagraph (a) of the GDPR and § 25(1), first sentence of the TTDSG, the data to be processed is collected on a user-specific basis.

Different cookies are used for the various types of data collection mentioned above to ensure that each type of data collection is carried out properly.

Cookie Opt-Out

To object to Klar's use of your data in principle, please use this LINK.

This will set a cookie named "do_not_track" from the domain "aevor.com." Please do not delete this cookie, as otherwise we cannot guarantee that you will not be tracked by Klar.

You can find information about data protection and Klar's use of data on the following website: [https://www.getklar.com/data-protection]

13. Your Rights

As a data subject, you have the following rights:

pursuant to Article 15 of the GDPR, the right to request information, to the extent specified therein, regarding your personal data that we process;
pursuant to Article 16 of the GDPR, the right to request, without delay, the rectification of inaccurate personal data or the completion of your personal data stored by us;
Pursuant to Article 17 of the GDPR, you have the right to request the erasure of your personal data stored by us, unless further processing

to exercise the right to freedom of expression and information;
to comply with a legal obligation;
for reasons of public interest, or
is necessary to assert, exercise, or defend legal claims;

Pursuant to Article 18 of the GDPR, you have the right to request the restriction of the processing of your personal data, provided that

you dispute the accuracy of the data;
the processing is unlawful, but you object to its erasure;
we no longer need the data, but you need it to assert, exercise, or defend legal claims, or
You have objected to the processing pursuant to Article 21 of the GDPR;

pursuant to Article 20 of the GDPR, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transmitted to another controller;
Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you may contact the supervisory authority in your usual place of residence, your place of work, or where our company is headquartered.

If you have any questions regarding the collection, processing, or use of your personal data, or if you wish to request information, correction, restriction, or deletion of data, or to revoke any consent you may have given, or to object to a specific use of your data, please contact our Data Protection Officer listed above.

Right to Object

To the extent that we process personal data as described above to safeguard our legitimate interests, which prevail following a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. To the extent that the processing is carried out for other purposes, you have the right to object only if there are grounds arising from your particular situation. Once you have exercised your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims. This does not apply if the processing is carried out for direct marketing purposes. In that case, we will no longer process your personal data for this purpose.