Privacy Policy

Revoke consent to cookies

Data Protection Declaration

The controller responsible for data processing is:

Leuchtenland.com GmbH
Wierlings Hook 4
48249 Dülmen
Germany
Email: [email protected]

We are pleased that you are interested in our online shop. Protecting your privacy is very important to us. Below, we provide detailed information on how we handle your data.

1. Access Data and Hosting

You may visit our websites without providing any personal information. Each time a webpage is accessed, the web server automatically stores only a so-called server log file, which may include, for example, the name of the requested file, your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data), and documents the access.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the website and improving our offer. Pursuant to Art. 6(1)(f) GDPR, this serves to safeguard our legitimate interests, which prevail within the context of a balancing of interests, in the proper presentation of our offer. All access data is deleted no later than seven days after the end of your website visit.

Hosting Services Provided by a Third-Party Provider

As part of processing on our behalf, a third-party provider provides us with services for hosting and displaying the website. This serves to safeguard our legitimate interests, which prevail within the context of a balancing of interests, in the proper presentation of our offer. All data collected as part of the use of this website or in forms provided for this purpose in the online shop, as described below, is processed on its servers. Processing on other servers only takes place within the scope explained here.

This service provider is based in a country within the European Union or the European Economic Area.

2. Data Collection and Use for Contract Processing, Contacting Us and Use of the Online Withdrawal Form

We collect personal data if you voluntarily provide it to us as part of your order, when contacting us (e.g. via contact form, email, telephone, fax or letter) or when using our electronic withdrawal form. Mandatory fields are marked as such because, in these cases, we require the data in order to process the contract, handle your contact request or receive and process your withdrawal, and you cannot submit the order, contact request or withdrawal notification without providing this information. The data collected can be seen from the respective input forms.

We use the data provided by you in accordance with Art. 6(1)(b) GDPR for contract processing and to handle your enquiries, including enquiries relating to and the processing of any existing warranty claims, claims arising from service disruptions, and any statutory update obligations. Where you have given your consent in accordance with Art. 6(1)(a) GDPR by deciding to open a customer account, we use your data for the purpose of opening the customer account and storing your data for future orders on our website.

After the contract has been fully processed or your customer account has been deleted, your data will be restricted for further processing and deleted after expiry of the retention periods under tax and commercial law, unless you have expressly consented to further use of your data or we reserve the right to further use your data in a manner permitted by law and about which we inform you in this policy. Your customer account may be deleted at any time, either by sending a message to the contact option described below or by using the function provided for this purpose in the customer account.

Processing of Data When Using the Online Withdrawal Form

If you use our electronic withdrawal form via the “Withdraw from contract” button, we process the personal data entered by you, in particular your name, your email address and information required to identify the relevant contract, such as an order number or contract number.

Processing is carried out exclusively for the purpose of receiving, handling and processing your declared withdrawal from the contract, and to fulfil our legal obligation to confirm receipt of your withdrawal to you without undue delay on a durable medium. The legal basis is Art. 6(1)(c) GDPR in conjunction with Section 356a of the German Civil Code (BGB).

Providing this data is necessary so that we can assign your withdrawal to the relevant contract and process it properly. After the withdrawal has been fully processed and the retention periods under tax and commercial law have expired, this data will be deleted, unless statutory retention obligations or other legal reasons require longer storage.

Customer Relationship Management Greyhound

For the processing of customer enquiries, service cases and declarations received via our online withdrawal form, we use the technologies described below from GREYHOUND Software GmbH & Co. KG, Segelfliegerweg 53, 49324 Melle, Germany (“Greyhound”).

When you contact us (e.g. via contact form, email, telephone, fax or letter), as well as when you use our online withdrawal form, the information provided by you is stored, organised and read out for processing in our customer relationship management system Greyhound. This serves the structured and chronological processing of your enquiry or declaration and the optimisation of our internal service processes. Personal data, insofar as it is provided by you, in particular surname, first name, email address, communication content and, in the case of withdrawal, additionally the information required for contract assignment, is transmitted to Greyhound, stored there and processed exclusively for organisational and processing purposes.

Where the processing of your data serves the implementation of pre-contractual measures, the performance of a contract or the handling of warranty claims or claims arising from service disruptions, it is carried out on the basis of Art. 6(1)(b) GDPR. Where processing takes place in connection with a withdrawal declared via the online withdrawal form, the legal basis is Art. 6(1)(c) GDPR in conjunction with Section 356a BGB. Where other general enquiries are concerned that do not directly serve contract initiation or contract processing, processing is carried out on the basis of Art. 6(1)(f) GDPR due to our legitimate interest in the efficient organisation of our customer service, the fastest possible processing of your request and the optimisation of our service offering.

Your data will be deleted in Greyhound as soon as the respective matter has been finally processed and no statutory retention obligations prevent deletion. Where data also relates to contract documents that are relevant under commercial or tax law, deletion takes place after expiry of the respective statutory retention periods.

We have concluded a data processing agreement with Greyhound in accordance with Art. 28 GDPR, under which we oblige the company to protect our customers’ data and not to disclose it to third parties without authorisation. Processing takes place in Germany.

The applicable privacy provisions of GREYHOUND Software GmbH & Co. KG can be accessed on the Greyhound website.

3. Data Transfers

For the purpose of fulfilling the contract in accordance with Art. 6(1)(b) GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the ordered goods. In addition to shipping companies based in Germany, we also use a shipping service provider whose registered office is in a country outside the European Union. Personal data is transmitted to this company only to the extent necessary for the performance of the contract.

The same applies to the transfer of data to our manufacturers or wholesalers in cases where they handle shipping on our behalf (drop-shipping business).

Depending on which payment service provider you select during the order process, we pass on the payment data collected for this purpose to the credit institution commissioned with the payment and, where applicable, to payment service providers commissioned by us or to the selected payment service. In some cases, the selected payment service providers also collect this data themselves if you create an account with them. In this case, you must log in to the payment service provider during the order process using your access data. In this respect, the privacy policy of the respective payment service provider applies.

Data Disclosure to Shipping Service Providers

If you have given us your express consent during or after your order, we will, on the basis of this consent in accordance with Art. 6(1)(a) GDPR, pass on your email address and telephone number to the selected shipping service provider so that they can contact you prior to delivery for the purpose of delivery notification or coordination.

Consent may be withdrawn at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After withdrawal of consent, we will delete your data provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to further use your data in a manner permitted by law and about which we inform you in this policy.

DPD Deutschland GmbH
Wailandtstraße 1
63741 Aschaffenburg
Germany

DHL Paket GmbH
Sträßchensweg 10
53113 Bonn
Germany

GE Transport und Logistik GmbH
Hans-Böckler-Straße 11
59348 Lüdinghausen
Germany

United Parcel Service Deutschland S.à r.l. & Co. OHG
Görlitzer Straße 1
41460 Neuss
Germany

shipcloud GmbH
Heinz-Fangman-Straße 2-4, Haus 4
42287 Wuppertal
Germany

Data Disclosure for the Purpose of Age Verification

If your order includes goods whose sale is subject to age restrictions, we ensure, by using a reliable procedure involving a personal identity and age check, that the customer has reached the required minimum age. For this purpose, the SCHUFA Identity Check is used on our website. This service is operated by SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany.

In order to ensure the required minimum age, individual personal data, such as name, address and date of birth, is transmitted to SCHUFA Holding AG within this framework. A so-called identity check with Q-Bit is then carried out, which has been positively evaluated for age verification by the Commission for the Protection of Minors in the Media (KJM).

In accordance with Art. 6(1)(f) GDPR, the data transfer serves to safeguard our legitimate interests, which prevail within the context of a balancing of interests, in ensuring that our offer complies with youth protection law and in complying with the statutory provisions on the protection of minors. No credit check is carried out in this respect.

After the contract has been fully processed and after expiry of the retention periods under tax and commercial law, your data processed for this purpose will be deleted, unless you have expressly consented to further use of your data or we reserve the right to further use your data in a manner permitted by law and about which we inform you in this policy.

Support with Occhio Warranty Registration Upon Request

Registration for the Occhio care 5-year warranty is generally carried out directly via the website of Occhio GmbH.

If you request our support with this or expressly instruct us to carry out the warranty registration on your behalf, we process the personal data required for this purpose, in particular your name, your contact details and product- and purchase-related information, and transmit this data to Occhio GmbH, Wiener Platz 7, 81667 Munich, Germany.

Processing and transmission are carried out exclusively for the purpose of supporting or carrying out the Occhio care warranty registration at your request. The legal basis is Art. 6(1)(b) GDPR, insofar as processing is necessary for the performance of the support service requested by you.

If you complete the warranty registration directly via Occhio’s website, Occhio processes your data under its own responsibility under data protection law. Further information on data processing by Occhio can be found in Occhio’s privacy notices and warranty terms.

4. Email Newsletter and Postal Advertising

Email Advertising with Newsletter Registration

If you subscribe to our newsletter, we use the personal data required for this purpose or separately provided by you, in particular your email address and, where applicable, your name, in order to send you our email newsletter on a regular basis.

Registration for our newsletter takes place using the double opt-in procedure. This means that, after registering, you will receive an email in which you must confirm your subscription once again. Only after this confirmation will your email address be added to the newsletter distribution list.

We use the email marketing platform Maileon to send our newsletter. The provider and processor is XQueue GmbH, Christian-Pless-Str. 11–13, 63069 Offenbach am Main, Germany. We have concluded a data processing agreement with XQueue GmbH pursuant to Art. 28 GDPR. XQueue GmbH processes your personal data exclusively in accordance with our instructions and for the purpose of sending the newsletter as well as the associated statistical analysis.

For the purpose of optimising our newsletter dispatch, we statistically evaluate whether and when newsletters are opened and which links are clicked. For this purpose, technical information in particular, such as the time of access, IP address, browser and device information as well as opening and click behaviour, may be processed. These evaluations serve to better adapt the content and dispatch of our newsletter to the interests of the recipients.

The legal basis for sending the newsletter and the associated statistical analysis is your consent pursuant to Art. 6(1)(a) GDPR.

You may withdraw your consent to receiving the newsletter and to the associated processing of your data at any time with effect for the future. You can unsubscribe at any time using the unsubscribe link at the end of each newsletter or by sending a message to the contact details provided in this Privacy Policy or in the legal notice.

After you unsubscribe, your data will be deleted from the active newsletter distribution list. Any further storage will only take place insofar as this is legally required or insofar as we are permitted or obliged to store individual data for the purpose of documenting your consent, your withdrawal or ensuring that you do not receive any further newsletters.

Postal Advertising and Your Right to Object

Furthermore, we reserve the right to use your first and last name and your postal address for our own advertising purposes, for example to send interesting offers and information about our products by post. Pursuant to Art. 6(1)(f) GDPR, this serves to safeguard our legitimate interests, which prevail within the context of a balancing of interests, in addressing our customers for advertising purposes.

The advertising mailings are provided by a service provider as part of processing on our behalf, to whom we pass on your data for this purpose. You may object to the storage and use of your data for these purposes at any time by sending a message to the contact option described below.

5. Use of Data for Payment Processing

Credit Check

If we make advance performance, for example in the case of purchase on invoice, it is necessary for the conclusion of the contract in accordance with Art. 22(2)(a) GDPR to obtain identity and credit information from specialised service companies, namely credit agencies. For this purpose, we transmit your personal data required for a credit check to the following company/companies:

Creditreform Boniversum GmbH
Hellersbergstraße 11
41460 Neuss
Germany

Appropriate measures to safeguard your rights, freedoms and legitimate interests are taken into account. You have the opportunity to present your point of view and contest the decision by contacting the contact option described below. After the contract has been fully processed, your data processed for this purpose will be deleted, unless you have expressly consented to further use of your data or we reserve the right to further use your data in a manner permitted by law and about which we inform you in this policy.

6. Cookies and Web Analytics

We use cookies and similar technologies on our website. Some of these are technically necessary in order to provide our website and its basic functions, in particular for page navigation, use of the shopping cart, storage of your privacy settings and ensuring the security and stability of our website.

The use of technically necessary cookies and similar technologies is based on Art. 6(1)(f) GDPR in conjunction with Section 25(2) TDDDG, insofar as these are necessary for the provision of our online offering and the functions expressly requested by you. Where processing is necessary for the implementation of pre-contractual measures or for the performance of a contract, it is additionally based on Art. 6(1)(b) GDPR.

We only use cookies and similar technologies that are not technically necessary if you have given us your consent to do so. This applies in particular to technologies used for statistics, reach measurement, error analysis, personalised advertising, retargeting and the integration of external content and services. The legal basis in this respect is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You may withdraw or change your consent at any time with effect for the future via the cookie settings. In addition, you can configure your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or exclude the acceptance of cookies in whole or in part. If technically necessary cookies are disabled, the functionality of our website may be restricted.

Use of Google Analytics 4 for Web Analytics

Where you have given us your consent, we use Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

Google Analytics 4 uses cookies and similar technologies to statistically evaluate the use of our website and to improve our offer. In particular, information about your usage behaviour, your end device, your browser, approximate location information and interactions with our website may be processed.

Processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Where personal data is transmitted to Google servers in the USA and processed there, this is done on the basis of the data protection safeguards provided for this purpose. Where the respective recipient is certified accordingly, the transfer may be based on the EU-U.S. Data Privacy Framework. In addition, Standard Contractual Clauses may apply.

You may withdraw your consent at any time with effect for the future via the cookie settings. Google also states that, in Google Analytics, IP addresses of users from the EU, Switzerland and the United Kingdom are not logged or stored.

Further information on data processing by Google Analytics can be found in Google’s privacy notices.

Use of Sentry

For the collection and recording of errors, we use the Sentry system of Functional Software, Inc., 45 Fremont Street, 8th Floor, San Francisco, CA 94105, USA. We use the self-hosted version of Sentry. In our case, our service provider WEBiDEA, Köpenickerstraße 325, Haus 40, 12555 Berlin, Germany, hosts Sentry. The Sentry plugin provides a code-based system in the frontend and backend for collecting and recording errors (PR1), with visualisation options. Cookies are stored on your end device in this process. The following personal data is processed through the use of Sentry:

Data may be transmitted to our service provider WEBiDEA in this process. The servers of our service provider are located in Germany. We have concluded a data processing agreement with our service provider within the meaning of Art. 28(3) GDPR. We use Sentry for visualisation and as a direct system for collecting and recording errors. If you do not give us consent in accordance with Art. 6(1) sentence 1(a) GDPR to the use of Sentry, no cookies will be stored on or read from your device. The data processing described in the preceding paragraphs will not take place.

Google reCAPTCHA

We use Google reCAPTCHA on our website to protect our forms and other input areas against abusive automated access, spam and bot requests. In particular, the IP address, browser and device information and other usage data required for abuse detection may be processed.

Where reCAPTCHA is used for the technically necessary protection of our website and our forms, processing is carried out on the basis of Art. 6(1)(f) GDPR in conjunction with Section 25(2) TDDDG. Where reCAPTCHA is only loaded after your consent via our consent management tool, the legal basis is Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

Since 2 April 2026, in connection with the customer data processed by reCAPTCHA, we have been the sole controller; Google processes this data in this respect as a processor under the Google Cloud Terms and the Cloud Data Processing Addendum.

Where personal data is transmitted to countries outside the European Union or the European Economic Area in this process, this is done on the basis of the data protection safeguards provided for this purpose. Google refers in particular to the Cloud Data Processing Addendum for this purpose; in addition, Standard Contractual Clauses may apply.

7. Online Marketing

Google Ads Remarketing

We use Google Ads to advertise this website in Google search results and on third-party websites. Where you have given us your consent to do so in accordance with Art. 6(1) sentence 1(a) GDPR, the so-called remarketing cookie from Google is set when you visit our website. This cookie automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. Once the purpose no longer applies and we have discontinued the use of Google Ads Remarketing, the data collected in this context will be deleted.

Further data processing only takes place if you have agreed with Google that your web and app browsing history may be linked by Google to your Google account and that information from your Google account may be used to personalise ads that you see on the web. If, in this case, you are logged into Google while visiting our website, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups.

Where information is transmitted to Google servers in the USA and processed there, this is done on the basis of the data protection safeguards provided for this purpose. Where the respective recipient is certified accordingly, the transfer may be based on the EU-U.S. Data Privacy Framework. In addition, Standard Contractual Clauses provided by Google may apply.

You may withdraw your consent at any time with effect for the future by disabling the remarketing cookie via this link. In addition, you can obtain information about the setting of cookies from the Digital Advertising Alliance and adjust settings accordingly.

AdRoll Retargeting

Through our advertising partner AdRoll Advertising Limited, Level 6, 1, Burlington Plaza, Burlington Road, Dublin 4, Ireland, we advertise this website in search results and on third-party websites. Where you have given us your consent to do so in accordance with Art. 6(1) sentence 1(a) GDPR, a cookie from these providers or their partners is automatically set when you visit our website. This cookie enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you have visited. Once the purpose no longer applies and we have discontinued the use of AdRoll Retargeting, the data collected in this context will be deleted.

You may withdraw your consent at any time with effect for the future by disabling the retargeting cookie by clicking on one of the following links: https://app.adroll.com/optout/safari

Alternatively, you can disable the use of cookies by third-party providers by visiting the opt-out page of the Network Advertising Initiative.

Awin Affiliate Programme

Our website participates in the affiliate programme of AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany. This is an affiliate system in which publishers integrate advertising materials on their websites and we can use cookies or similar technologies to determine whether an order has been placed via such an affiliate link.

Where cookies or similar technologies that are not technically necessary are used for this purpose, processing is carried out exclusively on the basis of your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

You may withdraw your consent at any time with effect for the future via the cookie settings.

Further information on data processing by Awin can be found in the privacy notices of Awin.

Google Maps

This website uses Google Maps for the visual display of geographical information. Google Maps is a service provided by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland (www.google.de). Google Maps is integrated only with your consent in accordance with Art. 6(1)(a) GDPR in conjunction with Section 25(1) TDDDG.

When Google Maps is used, Google transmits or processes data relating to the use of the Maps functions by website visitors; this may include, in particular, the IP address and location data. We have no influence over this data processing.

Where, in connection with the use of Google Maps, personal data is transmitted to Google servers in the USA and processed there, this is done on the basis of the data protection safeguards provided for this purpose. Where the respective recipient is certified accordingly, the transfer may be based on the EU-U.S. Data Privacy Framework. In addition, Standard Contractual Clauses provided by Google may apply.

To deactivate the Google Maps service and thereby prevent data transmission to Google, you must disable the JavaScript function in your browser. In this case, Google Maps cannot be used or can only be used to a limited extent.

Further information on data processing by Google can be found in Google’s privacy notices. The terms of use for Google Maps contain detailed information on the map service.

Data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here.

Our Online Presence on Facebook, Google, Instagram and Pinterest

Our presence on social networks and platforms serves to enable better, active communication with our customers and interested parties. We provide information there about our products and current special promotions.

When you visit our online presences on social media, your data may be automatically collected and stored for market research and advertising purposes. So-called usage profiles are created from this data using pseudonyms. These may be used, for example, to display advertisements within and outside the platforms that are presumed to correspond to your interests. Cookies are generally used on your end device for this purpose. These cookies store visitor behaviour and users’ interests. Pursuant to Art. 6(1)(f) GDPR, this serves to safeguard our legitimate interests, which prevail within the context of a balancing of interests, in the optimised presentation of our offer and effective communication with customers and interested parties. If the respective social media platform operators ask you for consent to data processing, for example with the help of a checkbox, the legal basis for data processing is Art. 6(1)(a) GDPR.

Where personal data is transmitted to providers based in the USA, this is done on the basis of the data protection safeguards provided for this purpose. Where the respective recipient is certified accordingly, the transfer may be based on the EU-U.S. Data Privacy Framework. In addition, Standard Contractual Clauses or other permissible transfer mechanisms may apply.

Detailed information on the processing and use of data by the providers on their pages, as well as contact options and your rights and settings options in this regard for protecting your privacy, in particular options to object (opt-out), can be found in the privacy notices of the providers linked below. If you nevertheless require assistance in this regard, you may contact us.

Facebook: https://www.facebook.com/about/privacy/

Data processing is carried out on the basis of an agreement between joint controllers in accordance with Art. 26 GDPR, which you can view here:
https://www.facebook.com/legal/terms/page_controller_addendum

Google/ YouTube: https://policies.google.com/privacy
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://about.pinterest.com/de/privacy-policy

Opt-out option:
Facebook: https://www.facebook.com/settings?tab=ads
Google/ YouTube: https://adssettings.google.com/authenticated
Instagram: https://help.instagram.com/519522125107875
Pinterest: https://www.pinterest.de/?next=/settings/

Processing of Personal Data in Connection with Competitions

If you participate in a competition organised by us via our social media channels, we process your personal data, such as name, username, contact details and, where applicable, address for prize delivery, exclusively for the purpose of carrying out and processing the respective competition. The legal basis is Art. 6(1)(b) GDPR.

Your data will be deleted after the competition has been completed, unless statutory retention obligations exist or you have expressly consented to further use. Disclosure to third parties only takes place insofar as this is necessary for carrying out and processing the competition or we are legally obliged to do so.

Further details on data processing can be found in the terms and conditions of participation for the respective competition.

8. Contact Options and Your Rights

As a data subject, you have the following rights:

If you have any questions about the collection, processing or use of your personal data, or in the event of requests for information, rectification, restriction or deletion of data, as well as withdrawal of consent given or objection to a particular use of data, please contact the controller:

Leuchtenland.com GmbH
Wierlings Hook 4
48249 Dülmen
Germany
Email: [email protected]

Data Protection Officer:

Protekto Gruppe
Attn. Kent Schwirz
Wendenstraße 279
20537 Hamburg
Germany

Tel.: +49 40 422 369 24
[email protected]