Política de privacidad

Privacy Policy

1. Introduction and Contact Information of the Data Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we will inform you about how we handle your personal data when using our website. Personal data refers to all data that can personally identify you.

1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ULILU GbR, Albersallee 55, 47533 Kleve, Germany, Tel.: +49 15752373205, E-mail: info@uli-lu.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer, who can be contacted as follows: "Louisa van Stein, Albersallee 55, 47533 Kleve, Tel: +49 15752373205, support@uli-lu.com"

1. Data Collection During the Visit to Our Website

2.1 When using our website purely for informational purposes, i.e., if you do not register or transmit information to us in any other way, we only collect data that your browser transmits to our web server (so-called "server log files"). When you visit our website, we collect the following data, which is technically required to display the website:

• The website visited
• Date and time of access
• Amount of data sent in bytes
• Source/referrer from which you accessed the page
• Used browser
• Used operating system
• Used IP address (possibly anonymized)

The processing takes place according to Art. 6(1) lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. No transfer or further use of the data will take place. However, we reserve the right to check the server log files later if specific indications of unlawful use arise.

2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the "https://" in the browser's address bar and the lock symbol.

1. Hosting & Content Delivery Network

3.1 Shopify

For hosting our website and displaying the page contents, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify").

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, ensuring the protection of the data of our website visitors and prohibiting unauthorized transfer to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

3.2 Cloudflare

We use a Content Delivery Network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA.

This service allows us to deliver large media files like graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing occurs to safeguard our legitimate interest in improving the stability and functionality of our website, in accordance with Art. 6(1) lit. f GDPR. We have concluded a data processing agreement with the provider, ensuring the protection of the data of our website visitors and prohibiting unauthorized transfer to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures the adherence to European data protection standards based on an adequacy decision by the European Commission.

3.3 SiteGround

We use a Content Delivery Network from the following provider: SiteGround Hosting Ltd., 3rd Floor, 11-12 St James's Square, St. James's, London SW1Y 4LB, United Kingdom.

This service allows us to deliver large media files like graphics, page content, or scripts more quickly via a network of regionally distributed servers. Processing occurs to safeguard our legitimate interest in improving the stability and functionality of our website, in accordance with Art. 6(1) lit. f GDPR. We have concluded a data processing agreement with the provider, ensuring the protection of the data of our website visitors and prohibiting unauthorized transfer to third parties.

For data transfers to the provider's location, an adequate level of data protection is ensured by an adequacy decision by the European Commission.

1. Cookies

To make the visit to our website more attractive and to enable the use of specific functions, we use cookies, small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"), while others remain stored on your device for a longer period and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can refer to your browser's cookie settings for the storage duration.

If personal data is processed by individual cookies we use, processing is carried out in accordance with Art. 6(1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6(1) lit. a GDPR with your consent, or in accordance with Art. 6(1) lit. f GDPR for the purpose of safeguarding our legitimate interest in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser to be notified when cookies are set and decide whether to accept them individually or exclude the acceptance of cookies for specific cases or generally.

Please note that if you do not accept cookies, the functionality of our website may be restricted.

1. Contacting Us

5.1 Shopify Inbox

This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

The processing of personal data transmitted through the chat is either in accordance with Art. 6(1) lit. b GDPR because it is necessary for the initiation or performance of a contract, or in accordance with Art. 6(1) lit. f GDPR based on our legitimate interest in providing effective support for our website visitors.

Your data transmitted in this way will be deleted once the issue has been resolved, subject to any statutory retention periods.

Additionally, information may be collected for the purpose of creating pseudonymized usage profiles through cookies. These are not used for personal identification and are not combined with other datasets. If these pieces of information relate to an individual, the processing is carried out in accordance with Art. 6(1) lit. f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.

Cookies can be prevented by appropriate browser settings. In this case, the functionality of our website may be limited.

Data is also transmitted to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

We have concluded a data processing agreement with the provider, ensuring the protection of the data of our website visitors and prohibiting unauthorized transfer to third parties.

For data transfers to Canada, an adequate level of data protection is ensured by an adequacy decision by the European Commission.

5.2 Contacting Us (e.g., via contact form or email)

When contacting us (e.g., via contact form or email), personal data is collected. The data collected when using a contact form is evident from the respective contact form. This data will be stored and used solely for the purpose of responding to your inquiry or for contacting you and the associated technical administration.

The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1) lit. f GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Art. 6(1) lit. b GDPR. Your data will be deleted once your inquiry has been resolved. This is the case when it is clear from the circumstances that the matter has been fully resolved, and no legal retention obligations stand in the way.

1. Use of Customer Data for Direct Marketing

6.1 Newsletter Subscription

If you subscribe to our email newsletter, we will regularly send you information about our offers. The mandatory information for sending the newsletter is your email address. The provision of additional data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called Double Opt-in procedure. This means that we will only send you the email newsletter once you have explicitly confirmed that you wish to receive the newsletter. We will then send you a confirmation email, asking you to confirm by clicking a link that you want to receive the newsletter.

By activating the confirmation link, you consent to the use of your personal data in accordance with Art. 6(1) lit. a GDPR. When registering for the newsletter, we also store the IP address registered by your Internet service provider (ISP) and the date and time of registration to trace any misuse of your email address at a later time. The data we collect when registering for the newsletter will be used exclusively for the purpose of sending promotional newsletters. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the controller mentioned above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have explicitly consented to further use of your data or we reserve further data use that is legally permissible and which we inform you about in this statement.

 

6.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our assortment via email. For this, we do not need to obtain separate consent from you in accordance with § 7(3) UWG. The data processing is based solely on our legitimate interest in personalized direct marketing according to Article 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.

You have the right to object to the use of your email address for the aforementioned marketing purposes at any time with effect for the future by notifying the responsible party mentioned at the beginning. Only transmission costs according to basic rates will apply. Once your objection is received, the use of your email address for advertising purposes will be immediately discontinued.

6.3 Shopify Email

The dispatch of our email newsletters is done through this provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland.

Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada.

Based on our legitimate interest in effective and user-friendly newsletter marketing, we share the data you provided during the newsletter registration in accordance with Article 6(1)(f) GDPR with this provider so that they can handle the newsletter dispatch on our behalf.

Subject to your explicit consent in accordance with Article 6(1)(a) GDPR, the provider will also conduct statistical success evaluations of newsletter campaigns using web beacons or tracking pixels in the sent emails, which can measure open rates and specific interactions with the content of the newsletter. Device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed but is not merged with other data sets. You can withdraw your consent for newsletter tracking at any time with effect for the future.

We have concluded a data processing agreement with the provider that protects the data of our website visitors and prohibits sharing with third parties.

In the case of data transfer to Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.

7) Online Marketing

Google AdSense

This website uses Google AdSense, a web advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, text files that are stored on your computer and allow the analysis of your use of the website. Additionally, Google AdSense uses "web beacons" (small invisible graphics) to collect information, which can track simple actions like visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is typically transmitted to and stored on a server by Google. This may also involve transmission to servers of Google LLC. in the USA.

Google uses the information obtained to evaluate your use of AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process the data on behalf of Google.

All the above-described processing, particularly the reading of information on the used device via cookies and/or web beacons, will only be performed if you have given us your explicit consent in accordance with Article 6(1)(a) GDPR. Without this consent, Google AdSense will not be used during your visit.

You can withdraw your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website.

For data transfers to the USA, the provider is part of the EU-US Data Privacy Framework, ensuring compliance with European data protection standards through an adequacy decision by the European Commission.

For more information about Google's privacy policies, visit: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

8) Web Analytics Services

8.1 Google (Universal) Analytics

This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows an analysis of your use of our website.

By default, Google (Universal) Analytics sets cookies when visiting the website, which are small text files stored on your device that collect certain information. This information includes your IP address, which is truncated by Google to exclude direct personal identification.

The information is transferred to Google's servers and processed there. This may also involve transmission to Google LLC. in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide additional services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected via Google (Universal) Analytics is stored for two months and then deleted.

All the above-described processing, particularly the setting of cookies on the used device, is only performed if you have given us your explicit consent under Article 6(1)(a) GDPR. Without your consent, Google (Universal) Analytics will not be used during your visit. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized sharing with third parties.

For more legal information about Google (Universal) Analytics, visit https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites

Demographic Features Google (Universal) Analytics uses the special feature "demographic features" and can generate statistics about the age, gender, and interests of website visitors. This is done by analyzing advertisements and third-party information. As a result, target groups for marketing activities can be identified. The collected data cannot be attributed to any specific person and will be deleted after being stored for two months.

Google Signals As an extension of Google (Universal) Analytics, Google Signals can be used on this website to generate cross-device reports. If you have personalized ads enabled and have linked your devices to your Google account, Google, subject to your consent for using Google Analytics under Article 6(1)(a) GDPR, can analyze your usage behavior across devices and create database models, including for cross-device conversions. We do not receive personal data from Google, only statistics. If you want to stop the cross-device analysis, you can disable the "Personalized Ads" feature in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. For more information on Google Signals, visit: https://support.google.com/analytics/answer/7532985?hl=de.

User IDs As an extension of Google (Universal) Analytics, the "User IDs" feature can be used on this website. If you have consented to the use of Google (Universal) Analytics under Article 6(1)(a) GDPR, have set up an account on this website, and log in to the account on various devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection standards through an adequacy decision by the European Commission.

8.2 Google Analytics 4

This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows an analysis of your use of our website.

By default, Google Analytics 4 sets cookies when visiting the website, which are small text files stored on your device that collect certain information. This information includes your IP address, which is truncated by Google to exclude direct personal identification.

The information is transferred to Google's servers and processed there. This may also involve transmission to Google LLC. in the USA.

Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide additional services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected via Google Analytics 4 is stored for two months and then deleted.

All the above-described processing, particularly the setting of cookies on the used device, is only performed if you have given us your explicit consent under Article 6(1)(a) GDPR. Without your consent, Google Analytics 4 will not be used during your visit. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits unauthorized sharing with third parties.

For more legal information about Google Analytics 4, visit https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, and https://policies.google.com/technologies/partner-sites

Demographic Features Google Analytics 4 uses the special feature "demographic features" and can generate statistics about the age, gender, and interests of website visitors. This is done by analyzing advertisements and third-party information. As a result, target groups for marketing activities can be identified. The collected data cannot be attributed to any specific person and will be deleted after being stored for two months.

Google Signals

As an extension of Google Analytics 4, Google Signals can be used on this website to generate cross-device reports. If you have personalized ads enabled and have linked your devices to your Google account, Google, subject to your consent for the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, can analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive personal data from Google but only statistics. If you wish to stop cross-device analysis, you can disable the "Personalized Ads" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de For more information about Google Signals, visit: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs

As an extension of Google Analytics 4, the "UserIDs" feature can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, have set up an account on this website, and log in to this account on different devices, your activities, including conversions, can be analyzed across devices.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.

8.3 Google Tag Manager

This website uses the "Google Tag Manager," a service from the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereafter: "Google").

The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analytics services, and for calibrating, controlling, and linking them to conditions via a unified interface. The Google Tag Manager itself does not store information on user devices or read it. It does not conduct independent data analyses either. However, the Google Tag Manager transmits your IP address to Google when the page is accessed, and it may be stored there. It is also possible to transmit data to Google LLC. servers in the USA.

This processing only takes place if you have explicitly consented to it according to Art. 6 para. 1 lit. a GDPR. Without this consent, the use of the Google Tag Manager will not occur during your visit to the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision by the European Commission.

Further legal information about Google Tag Manager can be found at: https://business.safety.google/intl/de/privacy/ and https://policies.google.com/privacy?hl=de&gl=de

9) Retargeting/Remarketing and Conversion Tracking

9.1 Meta Pixel

Within our online offerings, we use the "Meta Pixel" service from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")

When a user clicks on one of our advertisements on Facebook and/or Instagram, the URL of the linked page is extended by a parameter using "Meta Pixel." This URL parameter is then entered into the user's browser after being redirected by a cookie set by our linked page.

This allows Meta to determine the visitors to our online offering as a target audience for displaying ads (so-called "Ads"). Accordingly, we use the service to show Facebook and/or Instagram ads only to users who have shown interest in our online offering or who have certain characteristics (e.g., interests in specific topics or products determined by the visited websites), which we transmit to Meta (so-called "Custom Audiences").

Additionally, the "Meta Pixel" can track whether users were redirected to our website after clicking on an ad and what actions they perform there (so-called "Conversion Tracking").

The data collected is anonymous to us, meaning it does not provide us with any information about the identity of users. However, the data is stored and processed by Meta, making it possible to link the data to the user's profile, allowing Meta to use the data for its own advertising purposes.

All the aforementioned processing, particularly setting cookies to read information on the device used, will only be carried out if you have explicitly consented to it according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

We have concluded a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.

The information generated by Meta is typically transferred to a server of Meta and stored there; this may also involve a transfer to Meta Platforms Inc.'s servers in the USA.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision by the European Commission.

9.2 Google Ads Remarketing

This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

To this end, Google places a cookie in the browser of your device, which automatically enables interest-based advertising based on the pages you have visited through a pseudonymous cookie ID. Further data processing occurs only if you have consented to Google linking your internet and app browsing history with your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google during your visit to our website, Google uses your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, your personal data is temporarily linked with Google Analytics data to form audiences. When using Google Ads Remarketing, it may also result in the transmission of personal data to Google LLC's servers in the USA.

All the aforementioned processing, particularly setting cookies to read information on the device used, will only be carried out if you have explicitly consented to it according to Art. 6 para. 1 lit. a GDPR. Without this consent, retargeting technology will not be used during your visit.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision by the European Commission.

Details about the processing initiated by Google and how Google handles website data can be found here: https://policies.google.com/technologies/partner-sites

Further information about Google's privacy policy can be found here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

9.3 Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to attract attention to our attractive offers with the help of advertising materials (so-called Google AdWords) on external websites. We can determine the success of individual advertising measures with respect to the data from the advertising campaigns. We aim to show you ads that are of interest to you, make our website more attractive for you, and achieve a fair calculation of the incurred advertising costs.

The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files placed on your device. These cookies typically expire after 30 days and do not identify you personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot be tracked across websites of Google Ads customers. The information obtained via the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that could personally identify users. When using Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA.

Details of the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites

All the aforementioned processing, particularly setting cookies to read information on the device used, will only be carried out if you have explicitly consented to it according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

You can permanently opt out of the use of cookies for Google Ads Conversion Tracking by downloading and installing the browser plugin available at the following link: https://www.google.com/settings/ads/plugin?hl=de

Please note that some features of this website may not be available or may be limited if you have disabled the use of cookies.

Google's privacy policy can be viewed here: https://business.safety.google/intl/de/privacy/ and https://www.google.de/policies/privacy/

For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, ensuring compliance with European data protection standards based on an adequacy decision by the European Commission.