Privacy Policy

Responsible for this website is

You can reach the data protection officer by email at

We process your information to answer your requests (Art. 6 Para. 1 lit. b, f GDPR). The provision of address and telecommunication data marked as mandatory information is necessary to process and answer your request. The voluntary provision of additional data facilitates the processing of your request and enables us to provide more accurate information. We store the information from your request for three months as a rule after answering the request in case of further inquiries, unless a longer period is required for documentation reasons (Art. 6 Para. 1 lit. c, Art. 5 Para. 2 GDPR).

Our advertising partners offer you our voucher offers after your online purchase on their website. For the selection of a voucher offer that is currently interesting for you, the hash value of your email address and your IP address are transmitted to us pseudonymized and encrypted by our advertising partners (Art. 6 Para. 1 f GDPR). The pseudonymized hash value of the email address is used to take into account any objection to advertising from us (Art. 21 Para. 3, Art. 6 Para. 1 c GDPR). The IP address is used by us exclusively for data security purposes and is generally anonymized after seven days. In addition, the advertising partner transmits order number, order value with currency, postal code, gender and timestamp encrypted to loopingo for the preparation of a regionally interesting offer for you. (Art. 6 Para. 1 f GDPR) After processing the required data to create the voucher, you will receive an email to the specified email address with the voucher code (Art. 6 Para. 1 b GDPR). If you select one of our special offers, we process your data required for this to order the special offer.

Our partner online shops offer you the opportunity to participate in a shopping contest organized by us. As part of your participation, we store your email address to communicate with you. In addition, we store a pseudonymized hash value of your email address, the order number and the order value for analysis purposes, for example to improve our offer or to prevent misuse.

For sending emails, we use the Amazon Simple Email Service (AWS SES) service of Amazon Web Services EMEA SARL, 38 Avenue John F. Kennedy, L-1855 Luxembourg. In particular, email addresses and the contents of emails are processed. Processing takes place exclusively in the AWS region eu-central-1 (Frankfurt, Germany). There is a data processing agreement with AWS in accordance with Art. 28 GDPR.

The data is processed on the basis of Art. 6 Para. 1 Letter f GDPR.

The data is deleted as soon as it is no longer necessary for achieving the purpose of its collection. When providing the website, this is the case when the respective session has ended. The log files are kept directly and exclusively accessible to administrators for a maximum of 24 hours. For voucher offers or shopping contests, we store your collected data until we receive a revocation of your consent or your objection to the processing of your data for advertising purposes.

We use hCaptcha (operator: Intuition Machines, Inc.) to secure our website against automated access and misuse. hCaptcha is particularly focused on data protection and was developed to function without long-term storage of personal data. As part of the security check, the following data may be processed:

• IP address
• Technical data about browser and operating system
• Behavioral data during the verification

Data processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR (legitimate interest). Our legitimate interest lies in the security of our website and protection against abusive automated access. hCaptcha generally processes data within the EU or in geographical proximity to the user. Data transfer to third countries only takes place on the basis of EU standard contractual clauses (SCCs) in accordance with Art. 46 Para. 2 lit. c GDPR. hCaptcha is also certified under the EU-US Data Privacy Framework. Further information can be found in hCaptcha's privacy policy at: https://www.hcaptcha.com/privacy

In addition to essential cookies for storing your language settings, our website uses hCaptcha, which also sets cookies to distinguish between humans and bots. These cookies are required for security functions and cannot be deactivated. Since we only use technically necessary cookies, no explicit consent is required in accordance with Art. 5 Para. 3 of the ePrivacy Directive. For this reason, you also do not see a cookie banner on our website.

You can request information according to Art. 15 GDPR about your personal data that we process.

If the information concerning you is not (no longer) accurate, you can request a correction according to Art. 16 GDPR. If your data is incomplete, you can request completion.

You can request the deletion of your personal data according to Art. 17 GDPR.

You have the right according to Art. 18 GDPR to request a restriction of the processing of your personal data.

If you believe that the processing of your personal data violates data protection law, you have the right according to Art. 77 Para. 1 GDPR to lodge a complaint with a data protection supervisory authority of your choice.

In the event that the requirements of Art. 20 Para. 1 GDPR are met, you have the right to have data that we process automatically on the basis of your consent or in fulfillment of a contract handed over to you or to third parties. The collection of data for the provision of the website and the storage of log files are absolutely necessary for the operation of the website. They are therefore not based on consent according to Art. 6 Para. 1 Letter a GDPR or on a contract according to Art. 6 Para. 1 Letter b GDPR, but are justified according to Art. 6 Para. 1 Letter f GDPR. The requirements of Art. 20 Para. 1 GDPR are therefore not met in this respect.