Cart

All products

Privacy Policy

Privacy statement

Responsible for data processing:
TOPREGAL GmbH
Industriestrasse 3
70794 Filderstadt
Germany

philipp.schmitt@topregal.com

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below we inform you in detail about the handling of your data.

1. Access data and hosting

You can visit our websites without providing any personal information. With every website visit, the web server automatically stores a so-called server log file, which contains the name of the requested file, your IP address, date and time of access, transferred data volume as well as the requesting provider (access data), and records the visit.

This access data is evaluated exclusively for the purpose of ensuring trouble-free operation of the site and improving our services. According to art. 6 para. 1 sentence 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in a correct presentation of our offer. All access data will be deleted at the latest seven days after the end of your page visit.

Third-party hosting services
In the context of processing on our behalf, a third party provides us with the services of hosting and displaying our website. All data collected within the context of using this website or the forms provided in our online shop is processed on the third party’s servers as described below. Data is only processed on other servers within the context described here.

This service provider is located within a country of the European Union or the European Economic Area.

2. Data collected and used for contract execution, making contact and opening a customer account

We collect personal data when you voluntarily provide us with it in connection with your order or when contacting us (e.g. by contact form or email). Mandatory fields are marked as such, because in these cases we need the data to execute the contract and/or to contact you; you cannot place an order or contact us without providing us with this information. Which data is collected can be seen from the respective forms. We use the data provided by you according to art. 6 para. 1 s. 1 lit. b of the GDPR to execute the contract and process your enquiries.
If you have given your consent to this in accordance with art. 6 para. 1 s. 1 lit. a of the GDPR by deciding to open a customer account, we will use your data for the purpose of opening a customer account.
After complete execution of the contract or deletion of your customer account, your data will be restricted for further processing and deleted at the end of the tax and commercial retention periods, unless you have expressly consented for your data to be used further or we reserve the right to use the data for any other purpose that is permitted by law and about which we inform you in this notice. Your customer account can be deleted at any time, either by sending a message to the contact option specified below or by using the relevant function in the customer account.

3. Sharing of your data

In order to fulfil the contract according to art. 6 para. 1 s. 1 lit. b of the GDPR, we pass on your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods ordered. Depending on which payment service provider you select in the order process, we will pass on the payment data collected for this purpose to the credit institution and payment service provider commissioned by us or to the selected payment service in order to process payments. In some cases, the selected payment service providers also collect this data themselves if you create an account there. In this case, you must register with the payment service provider using your access data during the order process. In this respect, the privacy policy of the respective payment service provider shall apply.

Sharing your data with shipping service providers
If you have given us your express consent to do so during or after placing your order, we will forward your telephone number to the selected shipping service provider based on art. 6 para. 1 s. 1 lit. a of the GDPR so that the shipping service provider can contact you before delivery for the purpose of arranging the delivery.

The consent can be revoked at any time by sending a message to the contact option specified below or directly to the contact address of the shipping service provider listed below. After revocation we will delete your data unless you have expressly consented to your data being used further or unless we reserve the right to use the data for any other purpose that is permitted by law and about which we inform you in this notice.

Beck Spedition + Logistics GmbH
Raiffeisen street 25
70794 Filderstadt
Germany

Sharing your data with debt collection companies
In order to fulfil the contract according to art. 6 para. 1 s. 1 lit. b of the GDPR, we pass on your data to a debt collection company, should our payment claim not have been settled despite a previous reminder. In this case, the debt will be collected directly by the debt collector. Furthermore, the passing on of your data serves to safeguard our overriding legitimate interests in an effective assertion or enforcement of our payment claim as per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests.

4. Electronic newsletters and postal marketing

Email marketing through newsletter subscription
If you subscribe to our newsletter, we will use the data required for this purpose or provided separately by you in order to regularly send you our electronic newsletter based on your consent according to art. 6 para. 1 s. 1 lit. a of the GDPR.

You can unsubscribe from the newsletter at any time, either by sending a message to the contact option specified below or by using the relevant link provided in the newsletter. Once you have unsubscribed, we will delete your email address from the list of recipients unless you have expressly consented to your data being used further or unless we reserve the right to use the data for any other purpose that is permitted by law and about which we inform you in this notice.

Email marketing without subscribing to the newsletter and your right of objection
On the basis of § 7 para. 3 of the Unfair Competition Act, if we receive your email address in connection with the sale of a product or service and you have not objected to this, we reserve the right to regularly email you offers for similar products to those already purchased from our range. Within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in marketing to our customers.
You can object to your email address being used for this purpose at any time by sending a message to the contact option specified below or by using the relevant link the marketing email without incurring any costs other than the basic transmission costs.

The newsletter is sent on our behalf by a service provider to whom we forward your email address for this purpose.

This service provider is based in the USA and is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield.

Postal marketing and your right of objection
Furthermore, we reserve the right to use your first and last name as well as your postal address for the purposes of our own marketing, e.g. to send you interesting offers and information about our products by postal mail. As per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in marketing to our customers.

Postal marketing is handled on our behalf by a service provider to whom we forward your data for this purpose.
You can object to your data being stored and used for these purposes at any time by sending a message to the contact person specified below.

5. Use of data for processing payments

Credit checks
In line with art. 22 para. 2 lit. a of the GDPR, if we make any advance payments, e.g. for purchases on account, it is necessary to obtain identity and credit information from specialised service providers (credit agencies) so that the contract can be concluded. For this purpose, we share your personal data required for a credit check to the following company(s):

Creditreform Boniversum GmbH
Hellersbergstrasse 11
41460 Neuss

Appropriate measures to protect your rights, freedoms and legitimate interests are taken into account. You have the possibility of expressing your point of view and challenging the decision by contacting the contact option specified below.

After complete execution of the contract, we will delete your data used for this purpose unless you have expressly consented to your data being used further or unless we reserve the right to use the data for any other purpose that is permitted by law and about which we inform you in this notice.


6. Integration of the Trusted Shops Trustbadge

Trusted Shops widgets are integrated on this website to display Trusted Shops services (e.g. seal of approval, collected ratings) and to offer Trusted Shops products to shoppers after an order has been placed.

This serves to protect our legitimate interests in optimal marketing by enabling secure shopping, which prevail in the context of a balancing of interests, in accordance with Art. 6 para. 1 p. 1 lit. f GDPR. The trust badge and the services advertised with it are an offer of Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany, with whom we are jointly responsible for data protection pursuant to Art. 26 of the GDPR. Within the scope of this data protection notice, we inform you in the following about the essential contractual contents in accordance with Art. 26 (2) of the GDPR.

The trust badge is provided as part of a joint responsibility by a US CDN provider (content delivery network). An appropriate level of data protection is ensured by standard data protection clauses and other contractual measures. Further information on the data protection of Trusted Shops GmbH can be found in their data protection declaration.

.

When the Trustbadge is called up, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of the call-up, the amount of data transferred and the requesting provider (access data) and documents the call-up. The IP address is anonymised immediately after collection so that the stored data cannot be assigned to you personally. The anonymised data is used in particular for statistical purposes and for error analysis.

After the order has been completed, your email address, which has been hashed using a cryptological one-way function, is transmitted to Trusted Shops GmbH. The legal basis is Art. 6 para. 1 p. 1 lit. f GDPR. This serves to check whether you are already registered for services with Trusted Shops GmbH and is therefore necessary for the fulfilment of our and Trusted Shops' overriding legitimate interests in the provision of the buyer protection linked to the specific order in each case and the transactional evaluation services in accordance with Art. 6 para. 1 p. 1 lit. f GDPR. If this is the case, further processing will be carried out in accordance with the contractual agreement between you and Trusted Shops. If you have not yet registered for the services, you will subsequently be given the opportunity to do so for the first time. Further processing after registration also depends on the contractual agreement with Trusted Shops GmbH. If you do not register, all transmitted data will be automatically deleted by Trusted Shops GmbH and a reference to a person is then no longer possible.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6 para. 1 lit. f GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA by standard data protection clauses and further contractual measures, and in the case of Israel by an adequacy decision.

In the context of the joint responsibility existing between us and Trusted Shops GmbH, please prefer to contact Trusted Shops GmbH with data protection questions and to assert your rights using the contact options provided in the data protection information linked above. Irrespective of this, however, you can always contact the data controller of your choice. Your enquiry will then, if necessary, be passed on to the other responsible person for a response.

7. Cookies and web analytics

In order to make visiting our website attractive and to enable the use of certain functions, to display suitable products or for market research, we use cookies on various pages. As per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in optimising the presentation of our offer. Cookies are small text files that are automatically stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal device and enable us to recognise your browser when you next visit (persistent cookies). How long the cookies are stored for can be found in your web browser’s cookie settings overview. You can set your browser so that you are informed about the setting of cookies and decide whether to accept and/or reject them individually in certain cases or whether to reject them in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. These can be found for the respective browsers under the following links:

Internet Explorer™
Safari™
Chrome™
Firefox™
Opera™
If cookies are not accepted, the functionality of our website may be restricted.

Use of Google (Universal) Analytics for web analytics
This website uses Google (Universal) Analytics for website analysis. The web analysis service is provided by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland(www.google.com). As per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in optimising the presentation of our offer. Google (Universal) Analytics uses methods that allow an analysis of the use of the website by you, such as cookies. The information automatically collected about your use of this website is usually transferred to a Google server in the USA and stored there. By activating IP anonymisation on this website, the IP address is shortened before transmission within the member states of the European Union or in other states entered into a contractual agreement with the European Economic Area. Only in exceptional circumstances is the full IP address transmitted to a Google server in the USA to be shortened there. The anonymous IP address transmitted by your browser as part of Google Analytics is not generally merged with other Google data. The data collected in this context will be deleted after the purpose and end of our use of Google Analytics.


Where information has been transmitted to and stored on Google servers located in the United States, the US company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield.

You can prevent Google from collecting the data generated by the cookie and related to your use of the website (including your IP address) and Google from processing this data by downloading and installing the browser plug-in available under the following link: https://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plug-in, you can click this link to prevent Google Analytics from collecting data from this website in the future. When doing so, an opt-out cookie will be stored on your terminal device. If you delete your cookies, you must click the link again.

Use of Mouseflow
This website uses Mouseflow, a web analysis tool of Mouseflow ApS, Flaesketorvet 68, 1711 Copenhagen, Denmark, to capture randomly selected individual visits (only with anonymous IP addresses). This results in a protocol of mouse movements, mouse clicks and keyboard interaction, with the intention of reproducing individual visits to this website at random as so-called session replays and evaluating them in the form of so-called heat maps and deriving potential improvements for this website. The cookie generated by Mouseflow is deleted after a period of 90 days. The data collected by Mouseflow is not personal, will not be disclosed to third parties and is stored for a period of 3 months. The data collected is stored and processed within the EU. If you do not wish Mouseflow to collect your data, you can object to this on all websites that use Mouseflow by clicking on the following link:
https://mouseflow.de/opt-out
 

8. Online marketing

Google Ads remarketing
We use Google Ads to advertise this website in Google search results and on third-party websites. When you visit our website, the so-called remarketing cookie is set by Google, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. As per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in optimising the promotion of our website. The data collected in this context will be deleted after the purpose and end of our use of Google Ads remarketing.

Additional data will only be processed if you have consented to Google linking your web and app browsing history to your Google account and using information from your Google account to personalise ads you see on the web. In this case, if you are logged in to Google during your visit to our website, Google will use your information in conjunction with Google Analytics data to create and define target audience lists for cross-device remarketing. Google will temporarily link your personal data with Google Analytics data in order to form target groups.

Google Ads is a service offered by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland(www.google.com).
Where information has been transmitted to and stored on Google servers located in the United States, the US company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield.

You can deactivate the remarketing cookie via this link . You can also contact the Digital Advertising Alliance to find out about the use of cookies and to configure your settings.

Userlike live chat tool
If you use the live chat tool to contact us, the data you voluntarily enter (name, email address, message) will be processed by us in accordance with art. 6 para. 1 s. 1 lit. b of the GDPR for the purpose of answering your enquiry within the scope of contract processing. Furthermore, the use of this tool serves to safeguard our overriding legitimate interests in communicating with our customers in an effective and improved manner as per art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests. The data are deleted subsequently.
The third-party service provider Userlike handles the live chat tool on our behalf. All data collected during the use of the chat tool is processed on Userlike’s servers.

Google reCAPTCHA
For the purpose of preventing misuse of our web forms and protecting us from spam, we use the Google reCAPTCHA service for some forms on this website. Google reCAPTCHA is a service offered by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.com). By asking for a manual entry, this service prevents automated software (so-called bots) from carrying out abusive activities on the website. In line with art. 6 para. 1 s. 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in protecting our website from being misused and in ensuring trouble-free operation of our online presence.

Google reCAPTCHA uses a code embedded in the website, a so-called JavaScript, to check methods that allow analysis of your use of the website, such as cookies. The information automatically collected about your use of this website, including your IP address, is usually transferred to a Google server in the USA and stored there. In addition, other cookies stored in your browser by Google services are evaluated by Google reCAPTCHA.
Personal data entered into the fields of the respective form are not read or stored.

Where information has been transmitted to and stored on Google servers located in the United States, the US company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield.

You can prevent Google from collecting the data generated by JavaScript and/or the cookie and related to your use of the website (including your IP address) and Google from processing this data by disabling JavaScript or the use of cookies in your browser settings. Please note that this may limit the functionality of our website for your use.

Further information on Google’s data privacy policy can be found here.

Google Fonts
This website incorporates the script code “Google Fonts”. Google Fonts is a service offered by Google Ireland Limited, a company incorporated and operated under Irish law with its registered office at Gordon House, Barrow Street, Dublin 4, Ireland. (www.google.com). In line with art. 6 para s. 1 lit. f) of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in presenting the contents of our website in a standardised manner. In this context, a connection is established between the browser you use and the Google servers. This provides Google with the insight that our website has been visited via your IP address.
Where information has been transmitted to and stored on Google servers located in the United States, the US company Google LLC is certified under the EU-US Privacy Shield. A current certificate can be viewed here . As a result of this agreement between the USA and the European Commission, the latter has established an adequate level of data protection for companies certified under this privacy shield. Further information about the Google’s data processing can be found in Google’s privacy policy .

9. Social media

Our online presence on Facebook, YouTube, Xing, LinkedIn

Our presence on social media serves an improved, active communication with our customers and prospects. On these platforms, we inform about our products and running special offers.
When you visit our social media channels, your data may be automatically collected and stored for market research and advertising purposes. Using pseudonyms, so-called user profiles are created from this data. These can be used, for example, to place advertisements on these platforms and elsewhere, presumably corresponding to your interests. For this purpose, cookies are usually used on your terminal device. The visitor behaviour and the interests of the users are stored in these cookies. In line with art. 6 para 1 lit. f of the GDPR within the scope of the weighing of interests, this serves to safeguard our overriding legitimate interests in optimising the presentation of our offer and in communicating effectively with our customers and prospects. If you are asked by the respective social media operators to consent to your data being processed, e.g. by ticking a checkbox, the legal basis for this type of data processing is art. 6 para. 1 lit. a of the GDPR.
If the aforementioned social media platforms have their headquarters in the USA, the following applies: The European Commission has issued an adequacy decision for the USA. This refers to the EU-US Privacy Shield. A current certificate for the respective company can be viewed here.
Detailed information on the processing and use of the data by the providers on their pages as well as a contact option, your rights in this regard and setting options to protect your privacy, in particular opt-out options, can be found on the links to their privacy policies provided below. Should you need any help in this regard, please do not hesitate to contact us.

Facebook: https://www.facebook.com/about/privacy
Data processing is carried out on the basis of an agreement between jointly responsible parties in line with art. 26 of the GDPR, which you can view here.
Further information on data processing in the context of visiting a Facebook fan page (information on Insights data) can be found here.

Google/ YouTube: https://policies.google.com/privacy?hl=en-GB

LinkedIn: https://www.linkedin.com/legal/privacy-policy

Xing: https://privacy.xing.com/en/privacy-policy

Opt-out options:

Facebook: https://www.facebook.com/settings?tab=ads

Google/ YouTube: https://adssettings.google.com/authenticated

LinkedIn: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Xing : https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/widerspruchsrecht

10. Emailing of reminders to submit product reviews

Product review reminders by Trusted Shops
If you have given us your express consent to do so during or after placing your order, we will share your email address with Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de) based on art. 6 para. 1 s. 1 lit. a of the GDPR, so that they can email you a product review reminder.

The consent can be revoked at any time by sending a message to the contact option specified below or directly to Trusted Shops.

11. Contact options and your rights

As a data subject, you have the following rights:
• in line with art. 15 of the GDPR, you have the right to request information about your personal data processed by us to the extent specified therein;
• in line with art. 16 of the GDPR, you have the right to request inaccurate or incomplete personal data stored by us to be rectified immediately;
• in line with art. 17 of the GDPR, you have the right to demand the deletion of your personal data stored by us, unless further processing is required
- for exercising the right of freedom of speech and information;
- for fulfilling a legal obligation;
- for reasons of public interest, or
- for asserting, exercising or defending any legal claims
;
• in line with art. 18 of the GDPR, you have the right to request the restriction of the processing of your personal data, insofar as
- you dispute the correctness of the data;
- the processing is unlawful, but you reject the data from being deleted;
- we no longer need the data, but you need it to assert, exercise or defend any legal claims, or
- you have lodged an objection against the processing of the data as per art. 21 of the GDPR;
• in line with art. 20 of the GDPR, you have the right to obtain the personal data you have provided to us in a structured, common and machine-readable format or to request it being transferred to another responsible party;
• in line with art. 77 of the GDPR, you have the right to lodge a complaint with a supervisory authority. As a general rule, you can contact the supervisory authority at your usual place of residence or workplace, or at our company headquarters.

If you have any questions regarding the collection, processing or use of your personal data, for access, rectification, restriction or deletion of data as well as revocation of consents given or objection to a specific use of data, please contact us directly via the contact details provided on our company details page.

Data Protection Officer:
Philipp Schmitt
Industriestrasse 3
70794 Filderstadt

philipp.schmitt@topregal.com

Right of objection
As far as we process personal data as described above within the scope of the weighing of interests to safeguard our overriding legitimate interests, you can object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. As far as processing is carried out for other purposes, you are entitled to object only if there are reasons arising from your particular situation.

After exercising your right of objection, we will not process your personal data further for these purposes unless we can prove compelling reasons for processing worthy of protection.

trusted shops light
4.57
Excellent