1. Responsible
2. Privacy Officer
3. Technical operation of our website
4. Detection and defence of attacks against our website
5. Creation of a customer account
6. Orders
7. Payment service provider
8. Customer service
9. Email newsletter
10. Warning about data transfer to third countries
11. Tools for analysing the use of our website
12. Advertising services
13. Reviews.io and ratings
14. WhatsApp chat
15. Links to our social media sites
16. Privacy notice for our Facebook page
17. Shipping
18. Your rights
19. Explanation of various terms
Name | Storage period | Domain | Description |
mpCookieBanner | 1 year | misspompadour. com | Stores whether the Consent Banner has already been displayed to the user |
mpCookieSettings | 1 year | misspompadour. com | Saves the user's settings for the Consent Banner |
mpPinterestButton | 1 year | misspompadour. com | Stores whether the user has consented to the display of the Pinterest "Pin-it" button via 2-click solution |
mpYoutubeVideos | 1 year | misspompadour. com | Stores whether the user has agreed to the embedding of Youtube videos |
Name | Storage period | Domain | Description |
timezone | 30 days | misspompadour. com | Detection of the correct timezone of the user. |
csrf[frontend. account. login] | Session | misspompadour. de | Security cookie for the login to the customer account. |
csrf[frontend. account. register. save] | Session | misspompadour. com | Security cookie for the registration in the shop. |
csrf[frontend. checkout. line-item. add] | Session | misspompadour. com | Security cookie for adding products to the shopping cart. |
csrf[*] | Session | misspompadour. com | Security cookies for core functions of the shop system. |
session* | Session | misspompadour. com | Identifies the session of a user |
AWSALBTGCORS | 7 days | misspompadour. de | Ensures the technical functionality of the shop during high system loads. Part of Amazon Web Services Elastic Load Balancing, which always connects users to the same server if necessary. |
AWSALBTG | 7 days | misspompadour. com | Ensures the technical functionality of the shop under high system load. Part of Amazon Web Services Elastic Load Balancing, which always connects users to the same server if necessary. |
Name | Storage period | Domain | Description |
_mpParams | 1 year | misspompadour. com | This cookie allows us to identify your visitor source (referrer URL) when you place a new order |
If you register for and use our bonus programme, we process the data you provide and the interactions you have with our website or app in order to set up and manage your bonus programme account, to credit or redeem points and to enable you to use the services we offer in connection with the bonus programme. In the bonus programme account, in addition to the data that you provided when setting up the account, further data is processed that arises in connection with the use of the account, such as which interactions for which points are awarded were carried out, when points were redeemed and when points expire. The legal basis for the corresponding processing of your data is Art. 6 para. 1 lit. b) DSGVO. This data related to the bonus programme account is stored until the customer account is deleted. If we are legally obliged to store the data for a longer period of time (e.g. to fulfil accounting obligations or legally required proofs) or if we are legally entitled to store the data for a longer period of time (e.g. due to an ongoing legal dispute against the owner of a bonus programme account), the data will be deleted after the storage obligation or authorisation has expired.
Name | Storage period | Domain | Description |
paypalplus_session_v2 | Session | misspompadour. com | Contains data for the payment transaction of an order. |
Name | Storage period | Domain | Description |
thx_global_guid | 5 years | online-metrix. net | Used to detect and prevent fraud. |
thx_guid | 5 years | online-metrix. net | Used to detect and prevent fraud. |
Name | Storage period | Domain | Description |
thx_global_guid | 5 years | online-metrix. net | Used to detect and prevent fraud. |
thx_guid | 5 years | online-metrix. net | Used to detect and prevent fraud. |
Name | Storage period | Domain | Description |
CognitoIdentityServiceProvider. * | 7 days | scalapay. com | Contains data for the payment transaction of an order. |
_iub_cs-* | 1 year | scalapay. com | Consent Banner settings for Scalapay. |
Your data will be deleted after your enquiry has been dealt with, unless we are legally obliged to store it for a longer period. In this case, the deletion takes place after the expiry of the corresponding obligation.
We use Elev. io, a service provided by Elevio Pty Ltd, Level 1, 2 Mill Place , Melbourne, Victoria 3000, Australia to provideyou with answers to frequently asked questions / FAQs about our service in context. Elev. io only collects user information on our behalf when you actively submit it to us via the contact form on the help pages provided by Elev. io. Elev. io, is committed to using this data only for direct service delivery in our context. The information collected by Elev. io is generally stored on an Elev. io server in Australia, Elev. io complies with the provisions of the GDPR when processing personal data. As an Australian company, Elev. io is subject to the requirements of the Australian Privacy Act 1988 (Cth). The legal basis for the processing of data is your consent pursuant to Art. 6 para. 1 lit. a DSGVO and our legitimate interest pursuant to Art. 6 para. 1 lit. f) DSGVO to provide you with easy access to help topics. You can findmore information in the Elev. io privacy policy.
To confirm your subscription to the newsletter, you must click on the confirmation link in the verification email that we send you after your subscription. When you click on the link provided in the verification message, we process the date and time of the click, the content of the message sent to you and the email address used. This is done in order to be able to prove that you have subscribed to the newsletter and confirmed your consent. The legal basis for this processing is Art. 6 para. 1 lit. c) DSGVO, as we are legally obliged to be able to prove your consent.
We delete your personal data related to the newsletter subscription when you unsubscribe. Data that we need as proof that you have subscribed to the newsletter will be deleted after the expiry of the limitation period for corresponding obligations to provide proof.
If you purchase a product or service via our website or app, we will send you our email newsletter on the basis of Section 7 (3) of the German Unfair Competition Act (UWG) and Article 6 (1) (f) of the German Data Protection Act (DSGVO). For this purpose, we use the email address you provided during the purchase. You can unsubscribe from the newsletter at any time with future effect, e.g. by using the unsubscribe link mentioned in the newsletters
We individualise the dispatch and content of our newsletter on the basis of Art. 6 Para. 1 lit. f) DSGVO on the basis of your purchases made with us in order to offer you products that we assume are of interest to you
We send postal advertising to our customers on the basis of a weighing of interests in accordance with Art. 6 (1) (f) DSGVO. You can object to the corresponding use of your data at any time. Our legitimate interest in this is to inform our customers about our offers.
For various services which are used on our website with your consent or which process data via our website (e. g. for advertising purposes), you will find a warning in this data protection notice that data may be transferred to third countries.
In the event of a data transfer to a third country, your personal data will leave the local scope of the GDPR. In individual cases, a level of data protection may apply in the third country that does not meet the requirements of the GDPR. For some countries, e. g. Switzerland, there is a so-called adequacy decision. In the opinion of the EU Commission, the level of data protection in these states meets the requirements of the GDPR. They are therefore considered safe for data protection purposes. For other countries, in particular the USA, there is no such decision, as in these countries there is no level of protection for your personal data that corresponds to that of the GDPR. In the case of a data transfer to a third country, it is therefore possible that your personal data will be transferred to a country, e. g. the USA, for which there is no level of data protection that is compatible with the GDPR.
By concluding so-called standard contractual clauses, the GDPR allows you to agree that the contractual partner, e. g. the parent company in the USA, must comply with the requirements of the GDPR for the corresponding data processing, even if these would otherwise not apply to the contractual partner. This is intended to contractually create a level of data protection that corresponds to that of the GDPR, so that data subjects are not placed in a worse position than if their personal data were processed in the EU.
However, contracts only bind the parties to them and not third parties such as government agencies. Therefore, in one country, e. g. the US, government agencies may have the right to access personal data of EU citizens, even if this violates their rights. These accesses can be very broad and can all relate to all your data that is processed there. They can be done without a judge or similar having to order them. They can be secret, so that you don't know about these accesses. And you may have no way to defend yourself against access and any use of your data, especially in a court of law. Furthermore, the data subject rights to which you are entitled under the GDPR (e. g. information, deletion) may also not exist or may not be enforced. The data processed in this way may also be combined with other data concerning you from other sources, for example to create a profile about you.
This possible use of your data could, but does not have to, be associated with disadvantages for you. Since government agencies in third countries in particular are not subject to EU law or German law, it is not possible to specify exactly what disadvantages these might be. Disadvantages can therefore be of any nature, e. g. economic or political. For example, you may not be allowed to enter a country, or your data may be used against you in foreign criminal proceedings. The disadvantages can be very serious in individual cases
We cannot give a general answer as to how high the risks presented are in individual cases. We can only point out that the decisive question is which service, and therefore which company, has access to your data in connection with your use of our website. Furthermore, it is decisive which personal data is affected by this. On our website, it is - in our opinion - only about the possible processing of personal data in third countries in connection with advertising services such as Google, Microsoft or Facebook. This will be data on which website you visited and when, how long you stayed on this website, from where the access took place, which end device or which software (browser, app) was used for this purpose, which interactions you carried out on the website, if this is transmitted to the operator of the service (e. g. the purchase of a product after clicking on an advertisement). Please read the information on the respective services) and, if applicable, further data that the respective operator processes. For this, we refer you to the respective data protection information of the services. You will find the links to these in these data protection notices in the explanation of the respective service.
You must weigh up for yourself whether giving your consent and possibly transferring it to a third country could create a situation for you that you do not want to live with. In this case, please do not give your consent to the use of these services.
If you do not wish to give your consent to the use of certain or all services or the storage of cookies, this will not have any disadvantages for you on our website. All our offers are available to our customers under the same conditions, regardless of whether they give their consent or not. Of course, you can revoke your consent at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can revoke your consent at any time with effect for the future here. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until revocation.
In addition, the services offer you the possibility to object to the use in general, and not only for our website. Please refer to the information provided for the respective services.
Google Analytics processes the following data about the use of our website:
We have deactivated the functions in Google Analytics that would allow Google or another third party to use data as the responsible party.
No personal profiles are created; the corresponding statistics only contain summarised data that do not allow any conclusions to be drawn about a specific person.
The evaluations created by Google Analytics enable us to understand how our website is used and which advertising measures have what success. This allows us to optimise our website (in particular its structure, content, functions) and advertising measures and thus our business success. Based on your consent, the legal basis for the processing is Art. 6 para. 1 lit. a) DSGVO. In Google Analytics, we have set a storage period of 14 months for the personal data concerned. The deletion of data whose retention period has been reached takes place automatically once a month.
In the context of commissioned processing, Google is entitled to engage subcontractors. A list of these subcontractors can be found at https://privacy. google. com/businesses/subprocessors/.
In the course of Google Ireland Limited's activities, data may be exported to a third country within the meaning of Article 44 of the GDPR. Google Ireland Limited states that it will only do so if the applicable requirements are met.
Google only offers a so-called browser plugin as a website-wide function for opting out of the use of Google Analytics. You can find information about this here.
Please note our warnings regarding third countries, as Google Analytics may process personal data in countries that do not have a level of data protection that meets the standards of the GDPR.
Your consent can be revoked at any time here with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Name | Storage period | Domain | Description |
_ga | 2 years | misspompadour. com | Used to distinguish individual users from each other. |
_ga_* | 2 years | misspompadour. com | Used to distinguish individual users from each other. |
_gid | 24 hours | misspompadour. com | Used to distinguish individual users from each other. |
_gat_* | 1 minute | misspompadour. com | Used to throttle the rate of server requests. |
As part of the order processing, Google is entitled to use subcontractors. A list of these subcontractors can be found at https://privacy. google. com/businesses/subprocessors/.
Within the scope of the activities of Google Ireland Limited, data may be exported to a third country within the meaning of Art. 44 DSGVO. Google Ireland Limited states that it will only do so if the applicable requirements are met.
Google only offers a so-called browser plugin as a website-wide function for opting out of the use of Google Analytics. You can find information about this here.
Please note our warnings on third countries, as Google Analytics may process personal data in countries that do not have a level of data protection that meets the standards of the GDPR.
Your consent can be revoked at any time here with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
Name | Storage period | Domain | Description |
_gaexp | Up to 90 days | misspompadour. com | Determines whether a user is included in a particular experiment or not and contains the expiry date of the experiment. The storage period depends on the length of the experiment. |
_opt_awcid | 24 hours | misspompadour. com | Used for campaigns associated with Google Ads customer IDs |
_opt_awmid | 24 hours | misspompadour. com | Used for campaigns associated with Google Ads Campaign IDs |
_opt_awgid | 24 hours | misspompadour. com | Used for campaigns associated with Google Ads Group IDs |
_opt_awkid | 24 hours | misspompadour. com | Used for campaigns associated with Google Ads criteria IDs |
_opt_utmc | 24 hours | misspompadour. com | Stores the last `utm_campaign` URL parameter |
Name | Storage period | Domain | Description |
_hjid | 1 year | misspompadour. com | Used to distinguish users from each other. |
_hjTLDTest | Session | misspompadour. com | Used to ensure the use of Hotjar across subdomains. |
_hjFirstSeen | Session | misspompadour. co. uk | Used to identify a user's first session. |
_hjAbsoluteSessionInProgress | 30 minutes | misspompadour. co. uk | Used to identify a user's first page view during a session. |
_hjRecordingEnabled | Session | misspompadour. co. uk | Used as soon as a recording is started. |
_hjIncludedInSessionSample | Session | misspompadour. co. uk | Used to track a user's assignment to a recording or test. |
_hjRecordingLastActivity | Session | misspompadour. com | Stored in session storage. Updated when the a recording is started and data is transferred to Hotjar via a websocket. |
hjViewportId | Session | misspompadour. com | Stores the user's screen resolution and dimensions |
Name | Storage period | Domain | Description |
kameleoonVisitorCode | 1 year | misspompadour. com | Used to distinguish users from each other. |
Name | Storage period | Domain | Description |
MUID | 392 days | bing. com | Contains a randomly generated user ID. Using this ID, Microsoft can recognise the user anonymously across different websites and display personalised advertising. |
_uetsid | 1 tag | misspompadour. com | Contains a unique, non-personally identifiable ID that is used to identify a visitor to our website |
_uetvid | 16 days | misspompadour. com | Contains a unique, non-personally identifiable ID used to identify a visitor to our website |
Name | Storage period | Domain | Description |
IDE | 1 year | doubleclick. net | Contains a randomly generated user ID. Using this ID, Google can recognise the user across different websites and display personalised advertising. |
RUL | 1 year | doubleclick. net | Used to track whether ads have been displayed and to increase the efficiency of ads. |
test_cookie | 15 minutes | doubleclick. net | Is set as a test to check whether the browser allows cookies to be set. Does not contain any identification features. |
_gcl_au | 90 days | misspompadour. com | Used to distinguish individual users from each other. |
NID | 182 days | google. com | Used to store preferences and other information about the user. This includes, in particular, the preferred language, the number of search results to be displayed on the page and the decision whether or not to activate Google's SafeSearch filter. |
DV | 7 minutes | google. com | Used to store preferences and other information about the user. This includes, in particular, the preferred language, the number of search results to be displayed on the page and the decision whether or not to activate Google's SafeSearch filter. |
CONSENT | 20 years | google. com | This cookie is used to store the user's preferences and other information. This includes in particular the preferred language, the number of search results to be displayed on the page and the decision whether or not to activate Google's SafeSearch filter. |
AID | 3 months | google. com | Used to enable targeted advertising. |
1P_JAR | 1 month | google. com | Collects website statistics and tracked conversion rates. |
Name | Storage period | Domain | Description |
uid | 1 year | criteo. com | Contains a randomly generated user ID. Based on this ID, Criteo can recognise the user across different websites and display personalised advertising. |
Name | Storage period | Domain | Description |
_fbp | 90 days | misspompadour. com | Used to distinguish individual users from each other. |
fr | 90 days | facebook. com | Used to distinguish individual users from each other. |
ATN | 2 years | atdmt. com | Contains a randomly generated user ID. This ID allows Facebook to recognise the user across different websites and serve personalised ads. |
Name | Storage period | Domain | Description |
_pin_unauth | 1 year | misspompadour. com | Is a first-party cookie that groups actions for users who cannot be identified by Pinterest. |
_pinterest_ct_ua | 1 year | pinterest. com | Identical to _pin_unauth, but as a third-party cookie. |
_pinterest_sess | 1 year | pinterest. com | Is the cookie for logging into Pinterest. It contains user IDs, authentication tokens and timestamps. When users log out, the authentication tokens are deleted, but the cookies remain. We use the logged out user IDs to optimise usage and measurability. |
_pinterest_ct | Session | pinterest. com | Contains a user ID and the timestamp when the cookie was created. |
_pinterest_ct_rt | Session | pinterest. com | Identical to _pinterest_ct |
_epik | Session | pinterest. com | Placed by JavaScript tag based on information sent by Pinterest with advertised traffic to identify user |
_derived_epik | Session | pinterest. com | Placed by the Pinterest tag when a match is detected without cookies being present, e. g. with Enhanced Match. |
With your consent, we use the advertising services of TikTok, an offering of TikTok Technology Limited, a company incorporated in the Republic of Ireland with its registered office at 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
We use this feature to display our advertisements on TikTok to individuals who have visited our website or who we believe may be interested in our offerings and therefore our advertisements. Furthermore, TikTok allows us to measure the effectiveness of our advertisements by determining whether a person was redirected to our website after clicking on a corresponding advertisement
In terms of privacy law, TikTok acts in part for us as a processor and in part we are jointly responsible with them in accordance with Art. 26 DSGVO. In all other respects, TikTok alone is responsible for the corresponding processing of personal data. You will find a description of the respective legal responsibility here under Part B, Item 1.4. Of the services listed there (as of December 2022), we use services a), b), c), d) and i). You will also find the agreements concluded by us with TikTok in this respect under the above link.
If you have an account with TikTok, you can make settings for the processing of your personal data, especially for advertising purposes. You can find the privacy policy for TikTok here
You can revoke your consent to the use of TikTok on our site at any time with future effect by clicking here Link to Consent Layer. The return policy of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the return policy.
Please note our warnings regarding third countries, as TikTok may process personal data in countries where there is no level of privacy that meets the standards of the GDPR
Name | Storage period | Domain | Description |
_ttp | 13 months | misspompadour.com | Contains an anonymous user ID. Used to display ads relevant to the user. |
_tt_enable_cookie | 13 months | misspompadour.co.uk | Saves that cookies have been set by TikTok |
Order-relevant data (contact and delivery data) can be transmitted to our shipping partner for shipping processing.
For express delivery of orders, we work together with dropp in Berlin, Hamburg and Munich in order to be able to offer you fast delivery within the next few hours. This shipping service provider receives the following data from us for the execution of the respective order:
We work with our shipping partner exporto GmbH to ship your order to Switzerland.
Switzerland - Shipping within Germany:
exporto GmbH
Max-Stromeyer-Str. 172
DE-78467 Konstanz
Register court: Freiburg Local Court
Register number: HRB 721808
VAT number: DE331284697
Switzerland - Shipping within Switzerland:
exporto Schweiz GmbH
Hafenstrasse 50C
CH-8280 Kreuzlingen
UID: CHE-130.123.814
VAT: CHE-130.123.814 VAT
Contact:
Phone: +49 7531 3027860
E-mail: info@exporto.de