2. Privacy Officer
3. Technical operation of our website
4. Detection and defence of attacks against our website
5. Creation of a customer account
7. Payment service provider
8. Customer service
9. Email newsletter
10. Warning about data transfer to third countries
11. Tools for analysing the use of our website
12. Advertising services
13. Reviews.io and ratings
14. WhatsApp chat
15. Links to our social media sites
16. Privacy notice for our Facebook page
18. Your rights
19. Explanation of various terms
|mpCookieBanner||1 year||misspompadour. com||Stores whether the Consent Banner has already been displayed to the user|
|mpCookieSettings||1 year||misspompadour. com||Saves the user's settings for the Consent Banner|
|mpPinterestButton||1 year||misspompadour. com||Stores whether the user has consented to the display of the Pinterest "Pin-it" button via 2-click solution|
|mpYoutubeVideos||1 year||misspompadour. com||Stores whether the user has agreed to the embedding of Youtube videos|
|timezone||30 days||misspompadour. com||Detection of the correct timezone of the user.|
|csrf[frontend. account. login]||Session||misspompadour. de||Security cookie for the login to the customer account.|
|csrf[frontend. account. register. save]||Session||misspompadour. com||Security cookie for the registration in the shop.|
|csrf[frontend. checkout. line-item. add]||Session||misspompadour. com||Security cookie for adding products to the shopping cart.|
|csrf[*]||Session||misspompadour. com||Security cookies for core functions of the shop system.|
|session*||Session||misspompadour. com||Identifies the session of a user|
|AWSALBTGCORS||7 days||misspompadour. de||Ensures the technical functionality of the shop during high system loads. Part of Amazon Web Services Elastic Load Balancing, which always connects users to the same server if necessary.|
|AWSALBTG||7 days||misspompadour. com||Ensures the technical functionality of the shop under high system load. Part of Amazon Web Services Elastic Load Balancing, which always connects users to the same server if necessary.|
|_mpParams||1 year||misspompadour. com||This cookie allows us to identify your visitor source (referrer URL) when you place a new order|
If you register for and use our bonus programme, we process the data you provide and the interactions you have with our website or app in order to set up and manage your bonus programme account, to credit or redeem points and to enable you to use the services we offer in connection with the bonus programme. In the bonus programme account, in addition to the data that you provided when setting up the account, further data is processed that arises in connection with the use of the account, such as which interactions for which points are awarded were carried out, when points were redeemed and when points expire. The legal basis for the corresponding processing of your data is Art. 6 para. 1 lit. b) DSGVO. This data related to the bonus programme account is stored until the customer account is deleted. If we are legally obliged to store the data for a longer period of time (e.g. to fulfil accounting obligations or legally required proofs) or if we are legally entitled to store the data for a longer period of time (e.g. due to an ongoing legal dispute against the owner of a bonus programme account), the data will be deleted after the storage obligation or authorisation has expired.
|paypalplus_session_v2||Session||misspompadour. com||Contains data for the payment transaction of an order.|
|thx_global_guid||5 years||online-metrix. net||Used to detect and prevent fraud.|
|thx_guid||5 years||online-metrix. net||Used to detect and prevent fraud.|
|__stripe_sid||Session||misspompadour.com||Used to identify the session in the checkout with Stripe.|
|__stripe_mid||1 year||misspompadour.co.uk||Used to identify the user in the checkout with Stripe.|
|session-token||1 year||amazon.com||Contains a token to identify the session in the checkout for Amazon Pay|
|session-id-*||1 year||amazon.com||Contains additional information such as the time the session was initialised|
|apay-session-set||1 year||misspompadour.com||Contains additional information to identify the checkout session for Amazon Pay|
Your data will be deleted after your enquiry has been dealt with, unless we are legally obliged to store it for a longer period. In this case, the deletion takes place after the expiry of the corresponding obligation.
For various services which are used on our website with your consent or which process data via our website (e. g. for advertising purposes), you will find a warning in this data protection notice that data may be transferred to third countries.
In the event of a data transfer to a third country, your personal data will leave the local scope of the GDPR. In individual cases, a level of data protection may apply in the third country that does not meet the requirements of the GDPR. For some countries, e. g. Switzerland, there is a so-called adequacy decision. In the opinion of the EU Commission, the level of data protection in these states meets the requirements of the GDPR. They are therefore considered safe for data protection purposes. For other countries, in particular the USA, there is no such decision, as in these countries there is no level of protection for your personal data that corresponds to that of the GDPR. In the case of a data transfer to a third country, it is therefore possible that your personal data will be transferred to a country, e. g. the USA, for which there is no level of data protection that is compatible with the GDPR.
By concluding so-called standard contractual clauses, the GDPR allows you to agree that the contractual partner, e. g. the parent company in the USA, must comply with the requirements of the GDPR for the corresponding data processing, even if these would otherwise not apply to the contractual partner. This is intended to contractually create a level of data protection that corresponds to that of the GDPR, so that data subjects are not placed in a worse position than if their personal data were processed in the EU.
However, contracts only bind the parties to them and not third parties such as government agencies. Therefore, in one country, e. g. the US, government agencies may have the right to access personal data of EU citizens, even if this violates their rights. These accesses can be very broad and can all relate to all your data that is processed there. They can be done without a judge or similar having to order them. They can be secret, so that you don't know about these accesses. And you may have no way to defend yourself against access and any use of your data, especially in a court of law. Furthermore, the data subject rights to which you are entitled under the GDPR (e. g. information, deletion) may also not exist or may not be enforced. The data processed in this way may also be combined with other data concerning you from other sources, for example to create a profile about you.
This possible use of your data could, but does not have to, be associated with disadvantages for you. Since government agencies in third countries in particular are not subject to EU law or German law, it is not possible to specify exactly what disadvantages these might be. Disadvantages can therefore be of any nature, e. g. economic or political. For example, you may not be allowed to enter a country, or your data may be used against you in foreign criminal proceedings. The disadvantages can be very serious in individual cases
We cannot give a general answer as to how high the risks presented are in individual cases. We can only point out that the decisive question is which service, and therefore which company, has access to your data in connection with your use of our website. Furthermore, it is decisive which personal data is affected by this. On our website, it is - in our opinion - only about the possible processing of personal data in third countries in connection with advertising services such as Google, Microsoft or Facebook. This will be data on which website you visited and when, how long you stayed on this website, from where the access took place, which end device or which software (browser, app) was used for this purpose, which interactions you carried out on the website, if this is transmitted to the operator of the service (e. g. the purchase of a product after clicking on an advertisement). Please read the information on the respective services) and, if applicable, further data that the respective operator processes. For this, we refer you to the respective data protection information of the services. You will find the links to these in these data protection notices in the explanation of the respective service.
You must weigh up for yourself whether giving your consent and possibly transferring it to a third country could create a situation for you that you do not want to live with. In this case, please do not give your consent to the use of these services.
If you do not wish to give your consent to the use of certain or all services or the storage of cookies, this will not have any disadvantages for you on our website. All our offers are available to our customers under the same conditions, regardless of whether they give their consent or not. Of course, you can revoke your consent at any time with effect for the future. The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.
You can revoke your consent at any time with effect for the future here. The return policy of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the return policy.
In addition, the services offer you the possibility to object to the use in general, and not only for our website. Please refer to the information provided for the respective services.
Google Analytics processes the following data about the use of our website:
We have deactivated the functions in Google Analytics that would allow Google or another third party to use data as the responsible party.
No personal profiles are created; the corresponding statistics only contain summarised data that do not allow any conclusions to be drawn about a specific person.
The evaluations created by Google Analytics enable us to understand how our website is used and which advertising measures have what success. This allows us to optimise our website (in particular its structure, content, functions) and advertising measures and thus our business success. Based on your consent, the legal basis for the processing is Art. 6 para. 1 lit. a) DSGVO. In Google Analytics, we have set a storage period of 14 months for the personal data concerned. The deletion of data whose retention period has been reached takes place automatically once a month.
In the context of commissioned processing, Google is entitled to engage subcontractors. A list of these subcontractors can be found at https://privacy.google.com/businesses/subprocessors/.
In the course of Google Ireland Limited's activities, data may be exported to a third country within the meaning of Article 44 of the GDPR. Google Ireland Limited states that it will only do so if the applicable requirements are met.
Google only offers a so-called browser plugin as a website-wide function for opting out of the use of Google Analytics. You can find information about this here.
The information generated by this about your use of this website is usually transferred to a Google server in the USA and stored there. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and has thus undertaken to comply with European privacy principles. Both Google and US government agencies have access to your data. Your data may be linked by Google to other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google may have about you.
We also use the Google Signals service in this context. Google Signals enables cross-device tracking. Your data can thus be analysed across devices if you have activated "personalised advertising" in your account settings and your end devices are linked to your Google account. This makes it possible to identify on which device you search for products and later return to complete purchases on another device such as a tablet. The cross-device reports generated in this context contain aggregated data only. We thus only receive statistics generated on the basis of Google Signals. To prevent data collection and storage by Google Signals across devices, you can deactivate the "personalised ads" function in the settings of your Google account. Formore information, please visit https://support.google.com/ads/answer/2662922?hl=de. For more information on data processing and privacy on Google Signals, please visit https://support.google.com/analytics/answer/7532985?hl=de.
Your consent can be revoked at any time here with effect for the future. The return policy of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the return policy.
|_ga||2 years||misspompadour. com||Used to distinguish individual users from each other.|
|_ga_*||2 years||misspompadour. com||Used to distinguish individual users from each other.|
|_gid||24 hours||misspompadour. com||Used to distinguish individual users from each other.|
|_gat_*||1 minute||misspompadour. com||Used to throttle the rate of server requests.|
As part of the order processing, Google is entitled to engage subcontractors. A list of these subcontractors can be found at https://privacy.google.com/businesses/subprocessors/.
In the course of the activities of Google Ireland Limited, data may be exported to a third country within the meaning of Article 44 of the GDPR. Google Ireland Limited states that it will only do so if the applicable requirements are met.
Google only offers a so-called browser plugin as a website-wide function for opting out of the use of Google Analytics. Information on this can be found here.
Your data may be transferred to the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself in accordance with the TADPF and is thus obliged to comply with European privacy principles.
Your consent can be revoked at any time here with effect for the future. The return policy of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the return policy.
|_gaexp||Up to 90 days||misspompadour. com||Determines whether a user is included in a particular experiment or not and contains the expiry date of the experiment. The storage period depends on the length of the experiment.|
|_opt_awcid||24 hours||misspompadour. com||Used for campaigns associated with Google Ads customer IDs|
|_opt_awmid||24 hours||misspompadour. com||Used for campaigns associated with Google Ads Campaign IDs|
|_opt_awgid||24 hours||misspompadour. com||Used for campaigns associated with Google Ads Group IDs|
|_opt_awkid||24 hours||misspompadour. com||Used for campaigns associated with Google Ads criteria IDs|
|_opt_utmc||24 hours||misspompadour. com||Stores the last `utm_campaign` URL parameter|
|_hjid||1 year||misspompadour. com||Used to distinguish users from each other.|
|_hjTLDTest||Session||misspompadour. com||Used to ensure the use of Hotjar across subdomains.|
|_hjFirstSeen||Session||misspompadour. co. uk||Used to identify a user's first session.|
|_hjAbsoluteSessionInProgress||30 minutes||misspompadour. co. uk||Used to identify a user's first page view during a session.|
|_hjRecordingEnabled||Session||misspompadour. co. uk||Used as soon as a recording is started.|
|_hjIncludedInSessionSample||Session||misspompadour. co. uk||Used to track a user's assignment to a recording or test.|
|_hjRecordingLastActivity||Session||misspompadour. com||Stored in session storage. Updated when the a recording is started and data is transferred to Hotjar via a websocket.|
|hjViewportId||Session||misspompadour. com||Stores the user's screen resolution and dimensions|
|kameleoonVisitorCode||1 year||misspompadour. com||Used to distinguish users from each other.|
In order to advertise the services we offer and thus to acquire customers, we use the following services on the basis of your consent, which can be revoked at any time. The legal basis for this is Art. 6 para. 1 lit. a) DSGVO. The return policy of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the return policy. You can revoke your consent here. The return policy of consent does not affect the lawfulness of the processing carried out on the basis of consent up to the return policy.
In addition, the services offer you the possibility to object to their use in general, and not only for our website. We point this out in the respective services.
Please note that the consent you have given relates to two matters:
|MUID||392 days||bing. com||Contains a randomly generated user ID. Using this ID, Microsoft can recognise the user anonymously across different websites and display personalised advertising.|
|_uetsid||1 tag||misspompadour. com||Contains a unique, non-personally identifiable ID that is used to identify a visitor to our website|
|_uetvid||16 days||misspompadour. com||Contains a unique, non-personally identifiable ID used to identify a visitor to our website|
|IDE||1 year||doubleclick. net||Contains a randomly generated user ID. Using this ID, Google can recognise the user across different websites and display personalised advertising.|
|RUL||1 year||doubleclick. net||Used to track whether ads have been displayed and to increase the efficiency of ads.|
|test_cookie||15 minutes||doubleclick. net||Is set as a test to check whether the browser allows cookies to be set. Does not contain any identification features.|
|_gcl_au||90 days||misspompadour. com||Used to distinguish individual users from each other.|
|NID||182 days||google. com||Used to store preferences and other information about the user. This includes, in particular, the preferred language, the number of search results to be displayed on the page and the decision whether or not to activate Google's SafeSearch filter.|
|DV||7 minutes||google. com||Used to store preferences and other information about the user. This includes, in particular, the preferred language, the number of search results to be displayed on the page and the decision whether or not to activate Google's SafeSearch filter.|
|CONSENT||20 years||google. com||This cookie is used to store the user's preferences and other information. This includes in particular the preferred language, the number of search results to be displayed on the page and the decision whether or not to activate Google's SafeSearch filter.|
|AID||3 months||google. com||Used to enable targeted advertising.|
|1P_JAR||1 month||google. com||Collects website statistics and tracked conversion rates.|
|uid||1 year||criteo. com||Contains a randomly generated user ID. Based on this ID, Criteo can recognise the user across different websites and display personalised advertising.|
|_fbp||90 days||misspompadour. com||Used to distinguish individual users from each other.|
|fr||90 days||facebook. com||Used to distinguish individual users from each other.|
|ATN||2 years||atdmt. com||Contains a randomly generated user ID. This ID allows Facebook to recognise the user across different websites and serve personalised ads.|
|_pin_unauth||1 year||misspompadour. com||Is a first-party cookie that groups actions for users who cannot be identified by Pinterest.|
|_pinterest_ct_ua||1 year||pinterest. com||Identical to _pin_unauth, but as a third-party cookie.|
|_pinterest_sess||1 year||pinterest. com||Is the cookie for logging into Pinterest. It contains user IDs, authentication tokens and timestamps. When users log out, the authentication tokens are deleted, but the cookies remain. We use the logged out user IDs to optimise usage and measurability.|
|_pinterest_ct||Session||pinterest. com||Contains a user ID and the timestamp when the cookie was created.|
|_pinterest_ct_rt||Session||pinterest. com||Identical to _pinterest_ct|
|_derived_epik||Session||pinterest. com||Placed by the Pinterest tag when a match is detected without cookies being present, e. g. with Enhanced Match.|
With your consent, we use the advertising services of TikTok, a service provided by TikTok Technology Limited, a company incorporated in the Republic of Ireland with its registered office at 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
We use this feature to display our advertisements on TikTok to individuals who have visited our website or who we believe may be interested in our offerings and therefore our advertisements. Furthermore, TikTok allows us to measure the effectiveness of our advertisements by determining whether a person was redirected to our website after clicking on a corresponding advertisement
In terms of privacy law, TikTok acts in part for us as a processor and in part we are jointly responsible with them in accordance with Art. 26 DSGVO. In all other respects, TikTok alone is responsible for the corresponding processing of personal data. You will find a description of the respective legal responsibility here under Part B, Item 1.4. Of the services listed there (as of December 2022), we use services a), b), c), d) and i). You will also find the agreements concluded by us with TikTok in this respect under the above link.
You can revoke your consent to the use of TikTok on our site at any time with future effect by clicking here Link to Consent Layer. The return policy of the consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the return policy.
Please note our warnings regarding third countries, as TikTok may process personal data in countries that do not have a level of privacy that meets the standards of the GDPR. Your data may be transferred to third countries, such as the USA. For the USA, there is an adequacy decision of the EU Commission, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified according to the TADPF. The transfer of data to the USA and to third countries without an adequacy decision is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed here.
|_ttp||13 months||misspompadour.com||Contains an anonymous user ID. Used to display ads relevant to the user.|
|_tt_enable_cookie||13 months||misspompadour.co.uk||Saves that cookies have been set by TikTok|
Order-relevant data (contact and delivery data) can be transmitted to our shipping partner for shipping processing.
For express delivery of orders, we work together with dropp in Berlin, Hamburg and Munich in order to be able to offer you fast delivery within the next few hours. This shipping service provider receives the following data from us for the execution of the respective order:
We work with our shipping partner exporto GmbH to ship your order to Switzerland.
Switzerland - Shipping within Germany:
Register court: Freiburg Local Court
Register number: HRB 721808
VAT number: DE331284697
Switzerland - Shipping within Switzerland:
exporto Schweiz GmbH
VAT: CHE-130.123.814 VAT
Phone: +49 7531 3027860