Privacy Policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we explain how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Alexander Heigold, Alexander Heigold Versandhandel, Eugen-Kübler-Straße 8, 74538 Rosengarten, Germany, tel.: +4979120410603, email: info@speickshop.de. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when you visit our website

2.1 If you use our website for information purposes only, meaning that you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website's server (known as “server log files”). When you access our website, we collect the following data, which are technically necessary for us to display the website to you:

  • The website of ours that you visit
  • The date and time of access
  • The amount of data transmitted in bytes
  • The source/referrer from which you reached the page
  • The browser used
  • The operating system used
  • The IP address used (where applicable, in anonymised form)

Processing is carried out under Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data are not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries sent to the controller), this website uses SSL or TLS encryption. You can recognise an encrypted connection by the string “https://” and the padlock symbol in your browser's address bar.

3) Hosting & content delivery network

To host our website and display its content, we use a provider that supplies its services, either itself or through selected subcontractors, exclusively on servers within the European Union.

All data collected on our website are processed on these servers, unless different data recipients are specified below for particular processing activities.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

4) Cookies

To make visiting our website attractive and enable certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (“session cookies”), while others remain on your device for longer and allow website settings to be saved (“persistent cookies”). In the latter case, you can find the storage period in your web browser's cookie settings overview.

If individual cookies we use also process personal data, processing is carried out under Article 6(1)(b) GDPR for the performance of the contract, under Article 6(1)(a) GDPR where consent has been given, or under Article 6(1)(f) GDPR to safeguard our legitimate interests in providing the best possible functionality of the website and a customer-friendly and effective website experience.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to refuse cookies in certain cases or altogether.

Please note that refusing cookies may limit the functionality of our website.

5) Contacting us

5.1 When you contact us (e.g. using a contact form or by email), personal data are processed exclusively for the purpose of handling and answering your enquiry and only to the extent necessary for that purpose.

The legal basis for processing these data is our legitimate interest in answering your enquiry under Article 6(1)(f) GDPR. If your enquiry relates to a contract, Article 6(1)(b) GDPR provides an additional legal basis for processing. Your data will be deleted once it is apparent from the circumstances that the matter has been fully resolved, provided that no statutory retention obligations prevent deletion.

5.2 – Microsoft

To send transactional emails, meaning event-related messages triggered by a specific user interaction (such as conclusion of a contract, registration or a password reset), we use the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA.

On the basis of our legitimate interest in effective and user-friendly email communication, we disclose the data you provide when performing such a user action to this provider under Article 6(1)(f) GDPR so that it can send emails on our behalf.

We have entered into a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

6) Data processing when opening a customer account

Under Article 6(1)(b) GDPR, personal data are also collected and processed to the extent necessary when you provide them to us when opening a customer account. The data required to open an account are shown in the input fields of the relevant form on our website.

You may have your customer account deleted at any time by sending a message to the controller at the address given above. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through the account have been fully performed, no statutory retention periods prevent deletion and we no longer have a legitimate interest in continuing to store the data.

7) Use of customer data for direct marketing

7.1 Brevo

Our email newsletters and other promotional email communications are sent through the following provider: Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany.

On the basis of our legitimate interest in effective and user-friendly email marketing, we disclose the data you provide when subscribing to this provider under Article 6(1)(f) GDPR so that it can send emails on our behalf.

Exclusively on the basis of your express consent under Article 6(1)(a) GDPR, we also reserve the right to carry out statistical analyses of the success of email campaigns using web beacons or tracking pixels in the emails sent. These can measure opening rates and specific interactions with newsletter content. Device information (e.g. the time of access, IP address, browser type and operating system) is also collected and analysed, but is not combined with other datasets.

You may withdraw your consent to email tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider that protects our website visitors' data and prohibits disclosure to third parties.

7.2 Product availability notifications by email

For items that are temporarily unavailable, you may register to receive email notifications about product availability. We will then send you a one-off email about the availability of the item you selected. The only mandatory information needed to send this notification is your email address. Providing further data is voluntary; such data may be used to address you personally. We use the double opt-in procedure to send these emails. This ensures that you only receive a notification after you have expressly confirmed your consent by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you consent to our use of your personal data under Article 6(1)(a) GDPR. We store the IP address assigned by your internet service provider (ISP), together with the date and time of registration, so that any misuse of your email address can be traced at a later stage. The data we collect when you register for our product availability email notification service are used strictly for that purpose.

You may unsubscribe from availability notifications at any time by sending an appropriate message to the controller named at the beginning of this policy. After you unsubscribe, your email address will be deleted from the mailing list set up for this purpose without delay, unless you have expressly consented to further use of your data or we reserve the right to further use that is permitted by law and explained in this policy.

8) Data processing for order fulfilment

8.1 To the extent necessary to perform the contract for delivery and payment purposes, the personal data we collect are disclosed to the commissioned transport company and the commissioned bank under Article 6(1)(b) GDPR.

If we are contractually obliged to provide you with updates for goods with digital elements or for digital products, we process the contact details you supplied when placing your order in order to inform you personally as part of our statutory information obligations under Article 6(1)(c) GDPR. Your contact details are used strictly for notifications about updates we are obliged to provide and are processed for this purpose only to the extent required for the respective notification.

8.2 Use of payment service providers

Mollie

This website offers one or more online payment methods provided by: Mollie B.V., Keizersgracht 126, 1015 CW Amsterdam, Netherlands.

If you select a payment method from this provider under which you pay in advance (such as payment by credit card), the payment data you provide during the ordering process (including your name, address, bank and payment card details, currency and transaction number), together with information about the contents of your order, are disclosed to the provider under Article 6(1)(b) GDPR. In this case, your data are disclosed solely for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

PayPal

This website offers one or more online payment methods provided by: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method from this provider under which you pay in advance, the payment data you provide during the ordering process (including your name, address, bank and payment card details, currency and transaction number), together with information about the contents of your order, are disclosed to the provider under Article 6(1)(b) GDPR. In this case, your data are disclosed solely for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

If you select a payment method under which we supply before receiving payment, you will also be asked during the ordering process to provide certain personal data (first and last name, street, house number, postcode, town or city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To safeguard our legitimate interest in establishing your ability to pay in such cases, we disclose these data to the provider for a credit check under Article 6(1)(f) GDPR. Based on the personal data you provide and other data (such as your shopping basket, invoice amount, order history and payment experience), the provider checks whether the payment option you selected can be granted in view of payment and/or bad-debt risks.

The credit report may contain probability values (“scores”). Where scores are included in the credit report, they are based on a scientifically recognised mathematical and statistical procedure. Address data, among other information, are used to calculate these scores.

You may object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may remain entitled to process your personal data if this is necessary to process the payment in accordance with the contract.

9) Online marketing

Brevo Tracker

This website uses the software-based marketing service of the following provider to deliver and synchronise various customer management services: Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

The service enables automated processing of feed activities, management of advertising across the marketing channels used, analysis of the success of marketing measures, and centralised email marketing and contact management.

To perform these various functions, cookies are used, meaning small text files stored locally in your web browser's cache on your device, which enable us to analyse your use of the website. These cookies collect certain information, such as your IP address, location and the time at which you access the page.

All processing described above, in particular setting cookies to read information on the device used, is carried out only if you have given us your express consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

Other legal bases for processing that apply to specific service functions (such as the requirement for express consent under Article 6(1)(a) GDPR when sending newsletters) remain unaffected.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

10) Web analytics services

10.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables analysis of your use of our website.

By default, Google Analytics 4 sets cookies when you visit the website. These are stored on your device as small text elements and collect certain information. This information includes your IP address, although Google truncates its final digits to rule out direct identification of an individual.

The information is transmitted to Google servers and processed there. It may also be transferred to Google LLC, which is based in the USA.

Google uses the information collected on our behalf to analyse your use of the website, compile reports on website activity for us and provide further services relating to website and internet use. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. Data collected through Google Analytics 4 are stored for two months and then deleted.

All processing described above, in particular setting cookies on the device used, takes place only if you have given us your express consent under Article 6(1)(a) GDPR.

Without your consent, Google Analytics 4 is not used during your visit. You may withdraw your consent at any time with effect for the future. To do so, please disable this service using the cookie consent tool provided on the website.

We have entered into a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information about Google Analytics 4 is available at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites.

Demographics

Google Analytics 4 uses the special “demographics” feature to produce statistics about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers, allowing target groups for marketing activities to be identified. However, the collected data cannot be attributed to a specific person and are deleted after being stored for two months.

Google Signals

As an extension to Google Analytics 4, Google Signals may be used on this website to produce cross-device reports. If you have enabled personalised advertising and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics under Article 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including models of cross-device conversions. We do not receive personal data from Google, but only statistics. If you wish to stop cross-device analysis, you can disable “Personalised advertising” in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de.

Further information about Google Signals is available at: https://support.google.com/analytics/answer/7532985?hl=de.

UserIDs

As an extension to Google Analytics 4, the “UserIDs” feature may be used on this website. If you have consented to the use of Google Analytics 4 under Article 6(1)(a) GDPR, created an account on this website and sign in to that account on different devices, your activities, including conversions, can be analysed across devices.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

10.2 Google Tag Manager

This website uses Google Tag Manager, a service provided by: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter “Google”).

Google Tag Manager provides the technical basis for combining various web applications, including tracking and analytics services, and configuring, managing and making them subject to conditions through a single user interface. Google Tag Manager itself does not store information on users' devices or read information from them. Nor does the service carry out independent data analyses. However, when you access a page, Google Tag Manager transmits your IP address to Google, where it may be stored. It may also be transmitted to servers of Google LLC in the USA.

This processing takes place only if you have given us your express consent under Article 6(1)(a) GDPR. Without this consent, Google Tag Manager is not used during your visit. You may withdraw your consent at any time with effect for the future. To do so, please disable this service in the cookie consent tool provided on the website.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Further legal information about Google Tag Manager is available at https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de.

11) Retargeting/remarketing and conversion tracking

11.1 Google Ads Remarketing

This website uses retargeting technology provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

For this purpose, Google sets a cookie in the browser on your device that automatically enables interest-based advertising using a pseudonymous cookie ID and the pages you have visited. The information collected generally also includes your IP address.

Further data processing takes place only if you have agreed with Google that your internet and app browsing history may be linked to your Google account and that information from your Google account may be used to personalise advertisements you view on the web. If you are signed in to Google while visiting our website in this case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to create audiences. The use of Google Ads Remarketing may also involve the transfer of personal data to servers of Google LLC in the USA.

All processing described above, in particular setting cookies to read information on the device used, is carried out only if you have given us your express consent under Article 6(1)(a) GDPR. Without this consent, retargeting technology is not used during your visit.

You may withdraw your consent at any time with effect for the future. To do so, please disable this service in the cookie consent tool provided on the website.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

Details of the processing initiated by Google and how Google handles data from websites are available here: https://policies.google.com/technologies/partner-sites.

Further information about Google's privacy provisions is available at https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/.

11.2 Google Ads Conversion Tracking

This website uses the “Google Ads” online advertising programme and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers through advertisements (known as Google AdWords) on external websites. Using advertising campaign data, we can determine how successful individual advertising measures are. Our aim is to show you advertising that interests you, make our website more interesting for you and achieve fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an advertisement placed by Google. Cookies are small text files stored on your device. These cookies generally expire after 30 days and are not used to identify individuals. If a user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the advertisement and was redirected to that page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Google Ads customers. The information collected using the conversion cookie, which also includes your IP address, is used to create conversion statistics for Google Ads customers who have opted to use conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page containing a conversion tracking tag. However, they do not receive information that allows users to be identified personally. The use of Google Ads may also involve the transfer of personal data to servers of Google LLC in the USA.

Details of the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites are available here: https://policies.google.com/technologies/partner-sites.

All processing described above, in particular setting cookies to read information on the device used, is carried out only if you have given us your express consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

You may also permanently object to cookies being set by Google Ads Conversion Tracking by downloading and installing the Google browser plug-in available at the following link: https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de.

Please note that certain functions of this website may be unavailable or available only to a limited extent if you have disabled cookies.

Google's privacy provisions can be viewed at https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

12) Website functionality

12.1 ShopVote graphics

Our website incorporates graphic elements from the following provider to display external customer reviews and/or an externally awarded quality seal: Blickreif GmbH, Schulstraße 46, 80634 München, Germany.

When you access a page on our website containing such graphic elements, your browser establishes a direct connection to the provider's servers to load the elements correctly. In doing so, certain browser information, including your IP address, is transmitted to the provider.

Where personal data are also processed, this takes place under Article 6(1)(f) GDPR on the basis of our legitimate interest in optimally marketing our products and presenting our website attractively.

12.2 – Google reCAPTCHA

This website uses the CAPTCHA service provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transferred to Google LLC, USA. To display the CAPTCHA window, the provider uses “Google Fonts”, which are fonts loaded from Google over the internet. This does not involve processing any information beyond the information mentioned above that is already transmitted to Google through the reCAPTCHA functionality.

The service checks whether an entry is made by a natural person or abusively through machine-based and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is carried out by a human rather than an automated bot, the provider collects the IP address of the device used, identification data concerning the browser and operating system type, and the date and duration of the visit, and transmits these to its servers for analysis. Cookies, meaning small text files stored in the device's browser, may be used for this purpose.

If the processing described above is based on cookies, these are set only if you have given us your express consent under Article 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future by disabling this service in the cookie consent tool provided on the website.

If the processing described above takes place without cookies, the legal basis is our legitimate interest in establishing individual accountability on the internet and preventing abuse and spam under Article 6(1)(f) GDPR.

We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

13) Tools and miscellaneous

Cookie consent tool

This website uses a cookie consent tool to obtain valid user consent for cookies and cookie-based applications that require consent. The tool is displayed to users when they access the page as an interactive interface on which consent to certain cookies and/or cookie-based applications can be given by ticking boxes. When the tool is used, all cookies/services requiring consent are loaded only if the respective user has given the relevant consent by ticking the boxes. This ensures that such cookies are set on the user's device only when consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data are processed in this context.

If, in individual cases, personal data (such as the IP address) are processed in order to store, assign or record cookie settings, this takes place under Article 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly cookie consent management and, consequently, in ensuring that our website complies with the law.

Article 6(1)(c) GDPR provides an additional legal basis for processing. As the controller, we are legally obliged to make the use of cookies that are not technically necessary dependent on the respective user's consent.

Where necessary, we have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the settings available in the cookie consent tool can be found directly in the relevant interface on our website.

14) Rights of the data subject

14.1 Applicable data protection law grants you the following rights as a data subject in relation to the controller's processing of your personal data (rights of access and intervention). Please refer to the legal basis cited for the conditions governing the exercise of each right:

  • Right of access under Article 15 GDPR;
  • Right to rectification under Article 16 GDPR;
  • Right to erasure under Article 17 GDPR;
  • Right to restriction of processing under Article 18 GDPR;
  • Right to be informed under Article 19 GDPR;
  • Right to data portability under Article 20 GDPR;
  • Right to withdraw consent under Article 7(3) GDPR;
  • Right to lodge a complaint under Article 77 GDPR.

14.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST FOLLOWING A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Duration of storage of personal data

The duration for which personal data are stored depends on the respective legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data are processed on the basis of express consent under Article 6(1)(a) GDPR, the data concerned are stored until you withdraw your consent.

If statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Article 6(1)(b) GDPR, these data are routinely deleted after the retention periods expire, provided that they are no longer required to perform or initiate a contract and/or we no longer have a legitimate interest in continuing to store them.

Where personal data are processed on the basis of Article 6(1)(f) GDPR, they are stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data are processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, they are stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise stated elsewhere in this policy in relation to specific processing situations, stored personal data are otherwise deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.

Last updated: 26 September 2026, 14:50:38