Privacy Policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we process your personal data when you use our website. Personal data means all data that can be used to identify you personally.

1.2 The controller for data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Bertrand Dahi, Alte Eisenacher Str. 25, 99834 Gerstungen, Germany, Tel.: +4915792557024, E-mail: kontakt@eichenhain.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

2) Data collection when visiting our website

2.1 When our website is used purely for information purposes—that is, when you do not register or otherwise provide us with information—we only collect the data that your browser transmits to the website server (so-called “server log files”). When you access our website, we collect the following data, which is technically necessary for us to show you the website:

the website you accessed
date and time at the moment of access
amount of data sent in bytes
source/referrer, i.e. from which you reached the page
browser used
operating system used
IP address used (if applicable, in anonymised form)

Processing is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. No disclosure or other use of the data takes place. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries addressed to the controller), this website uses SSL or TLS encryption. You can recognise a secure, encrypted connection by the “https://” string and the padlock icon in your browser address bar.

3) Hosting & Content Delivery Network

For hosting our website and displaying the page content, we use a provider whose services are provided either by itself or through selected subcontractors exclusively on servers located within the European Union.

All data collected on our website is processed on these servers.

We have entered into a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits any unauthorised disclosure to third parties.

4) Cookies

To make your visit to our website more attractive and to enable the use of certain functions, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted again when you close your browser (so-called “session cookies”); others remain on your device longer and enable the storage of page settings (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.

To the extent that, through certain cookies used by us, personal data is processed, processing is carried out in accordance with Art. 6(1)(b) GDPR either for the performance of a contract, pursuant to Art. 6(1)(a) GDPR in the event of consent given, or pursuant to Art. 6(1)(f) GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of your visit to the site.

You can configure your browser so that you are informed about the setting of cookies, decide individually whether to accept them, or exclude cookies for certain cases or generally.

Please note that if cookies are not accepted, the functionality of our website may be limited.

5) Contacting us

5.1 Own review reminder

Only on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, we use your e-mail address to send you a one-time reminder to submit a review of our services after contract performance. You can withdraw your consent at any time by sending a message to the controller responsible for data processing.

5.2 ShopVote

For review reminders we use the services of the following provider: Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany

Only on the basis of your express consent in accordance with Art. 6(1)(a) GDPR, we transmit your e-mail address and, where applicable, other customer data to the provider so that it can contact you by e-mail with a review reminder.

You can withdraw your consent at any time with effect for the future, either from us or from the provider.

We have entered into a data processing agreement with the provider, which protects the data of our website visitors and prohibits any unauthorised disclosure to third parties.

5.3 WhatsApp Business

You have the option to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.

If you contact us via WhatsApp in relation to a specific business matter (for example, an order you have placed), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name in accordance with Art. 6(1)(b) GDPR for the processing and answering of your request. On the basis of the same legal basis, we may ask you via WhatsApp to provide additional data (order number, customer number, address or e-mail address) so that we can assign your enquiry to a specific matter.

If you use our WhatsApp contact for general enquiries (for example, about the range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the efficient and prompt provision of the requested information.

Your data is always used only to answer your request via WhatsApp. No disclosure to third parties takes place.

Please note that WhatsApp Business receives access to the address book on the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp Business account, we use a mobile device whose address book stores exclusively the WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that any person whose WhatsApp contact details are stored in our address book has already consented, upon first use of the app on their device, to the transmission of their WhatsApp telephone number from the address books of their chat contacts through acceptance of WhatsApp’s Terms of Use under Art. 6(1)(a) GDPR. The transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

You can find the purpose and scope of data collection and the further processing and use of the data by WhatsApp, as well as your rights and options for protecting your privacy, in WhatsApp’s privacy information: https://www.whatsapp.com/legal/?eea=1#privacy-policy

We have entered into a data processing agreement with the provider, which protects the data of our website visitors and prohibits any unauthorised disclosure to third parties.

As part of the above-mentioned processing, it may result in data transfers to Meta Platforms Inc. servers in the USA.

For transfers of data to the USA, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

5.4 As part of contacting us (e.g. via a contact form or e-mail), personal data is processed—exclusively for the purpose of processing and answering your request and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in answering your request in accordance with Art. 6(1)(f) GDPR. If your contact is aimed at entering into a contract, Art. 6(1)(b) GDPR provides an additional legal basis for processing. Your data is deleted when it can be seen from the circumstances that the matter in question has been conclusively clarified and provided that no statutory retention obligations conflict with deletion.

6) Data processing when opening a customer account

In accordance with Art. 6(1)(b) GDPR, personal data continues to be collected and processed to the extent required if you provide it to us when opening a customer account. Which data is required for account creation can be found in the input form of the corresponding form on our website.

Deleting your customer account is possible at any time and can be done by sending a message to the controller’s address stated above. After your customer account has been deleted, your data will be deleted if all contracts concluded on that basis have been fully processed, if there are no statutory retention periods that conflict with deletion, and if we do not have a legitimate interest in continued retention.

7) Use of customer data for direct marketing

7.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. Providing additional data is voluntary and will be used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, which ensures that you will only receive the newsletter after you have expressly confirmed your consent to receive it by activating a verification link sent to the e-mail address provided.

By activating the confirmation link, you grant us your consent for the use of your personal data in accordance with Art. 6(1)(a) GDPR. In this process, we store your IP address recorded by your internet service provider (ISP), as well as the date and time of the subscription, so that potential misuse of your e-mail address can be tracked at a later point in time. The data we collect upon newsletter subscription is used strictly for the stated purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named at the start of this policy. After you have unsubscribed, your e-mail address will be deleted immediately from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use your data further in a way that is permitted by law and for which we will inform you in this statement.

7.2 ActiveCampaign

Our e-mail newsletters are sent through this provider: ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, USA

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we forward the data you provide when subscribing to the newsletter according to Art. 6(1)(f) GDPR to this provider so that it can handle newsletter dispatch on our behalf.

Subject to your express consent pursuant to Art. 6(1)(a) GDPR, the provider also performs statistical success analysis of newsletter campaigns using web beacons and/or tracking pixels in the e-mails sent, which can measure open rates and specific interactions with the newsletter content. In doing so, device information (e.g. time of access, IP address, browser type and operating system) is also collected and analysed, but is not combined with other data sets.

You can withdraw your consent for newsletter tracking at any time with effect for the future.

We have entered into a data processing agreement with the provider, which protects the data of our website visitors and prohibits any unauthorised disclosure to third parties.

7.3 E-mail notification of product availability

For items that are temporarily unavailable, you can subscribe to receive e-mail notifications about product availability. For this, we send you a one-time e-mail message regarding the availability of the specific item you have selected. The only mandatory information for sending this notification is your e-mail address. Providing additional data is voluntary and may be used to address you personally. For sending the e-mail, we use the so-called double opt-in procedure, which ensures that you will only receive a notification after you have expressly confirmed your consent to this by activating a verification link sent to the e-mail address provided.

By activating the confirmation link, you grant us your consent for the use of your personal data in accordance with Art. 6(1)(a) GDPR. In this process, we store your IP address recorded by your internet service provider (ISP), as well as the date and time of the subscription, so that potential misuse of your e-mail address can be tracked at a later point in time. The data we collect upon subscription to our e-mail notification service for product availability is used strictly for the stated purpose.

You can unsubscribe from availability notifications at any time by sending a corresponding message to the controller named at the start of this policy. After you have unsubscribed, your e-mail address will be deleted immediately from our distribution list set up for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data further in a way that is permitted by law and for which we will inform you in this statement.

7.4 E-mail reminders for the shopping cart

If you end your purchase with us before completing the order, you have the option to receive a one-time e-mail reminder of the contents of your virtual shopping cart.

The only mandatory information for sending this reminder is your e-mail address. Providing additional data is voluntary and may be used to address you personally. For sending the e-mail, we use the so-called double opt-in procedure, which ensures that you will only receive a notification after you have expressly confirmed your consent to this by activating a verification link sent to the e-mail address provided.

By activating the confirmation link, you grant us your consent for the use of your personal data in accordance with Art. 6(1)(a) GDPR for the sending of a shopping cart reminder. In this process, we store your IP address recorded by your internet service provider (ISP), as well as the date and time of the subscription, so that potential misuse of your e-mail address can be tracked at a later point in time. The data we collect upon subscription to our e-mail notification service is used strictly for the stated purpose.

You can unsubscribe from shopping cart reminders at any time by sending a corresponding message to the controller named at the start of this policy. After you have unsubscribed, your e-mail address will be deleted immediately from our distribution list set up for this purpose unless you have expressly consented to further use of your data or we reserve the right to use your data further in a way that is permitted by law and for which we will inform you in this statement.

8) Data processing for order fulfilment

8.1 To the extent required for contract processing for delivery and payment purposes, the personal data we collect is forwarded, in accordance with Art. 6(1)(b) GDPR, to the commissioned transport company and the commissioned financial institution.

If, on the basis of a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provide when placing the order in order to inform you personally within the scope of our legal information obligations pursuant to Art. 6(1)(c) GDPR. Your contact details are used strictly for notifications regarding updates owed by us and are processed by us only to the extent required for the respective information.

To fulfil your order, we also work with the following service provider(s), which support us in whole or in part with the performance of contracts concluded. Certain personal data is transmitted to these service providers in accordance with the information below.

8.2 Monta

For order fulfilment, we use the following provider: Monta Krefeld GmbH, Märkische Straße 10, 47809 Krefeld

Name, address and, where applicable, other personal data are transmitted to the provider exclusively for the purpose of processing the online order in accordance with Art. 6(1)(b) GDPR. Your data will be forwarded only to the extent actually required for processing your order.

8.3 Disclosure of personal data to shipping service providers

- DHL

As transport provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

We forward your e-mail address and/or telephone number, in accordance with Art. 6(1)(a) GDPR, to the provider before delivery of the goods, for the purpose of coordinating a delivery date or for sending a delivery notification, provided that you have given your express consent in the order process. Otherwise, for the purpose of delivery, we forward only the recipient’s name and delivery address to the provider in accordance with Art. 6(1)(b) GDPR. The disclosure only takes place to the extent required for the delivery of the goods. In this case, prior coordination of the delivery date with the provider and/or sending a delivery notification is not possible.

Consent may be withdrawn at any time with effect for the future towards the controller named above or towards the provider.
- UPS

As transport provider, we use the following provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

Consent may be withdrawn at any time with effect for the future towards the controller named above or towards the provider.

8.4 Use of payment service providers (payment services)

- Klarna

On this website, one or more online payment methods offered by the following provider are available: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

When you select a payment method where you pay in advance (e.g. credit card payment), the provider is given your payment details communicated as part of the checkout process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order in accordance with Art. 6(1)(b) GDPR. In this case, your data is forwarded exclusively for the purpose of processing the payment with the provider and only to the extent required for this.

When you select a payment method where the provider pays in advance (e.g. invoice purchase or instalment purchase, or direct debit), you will also be asked during the checkout process to provide certain personal details (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and possibly details of an alternative payment method).

To safeguard our legitimate interest in verifying the ability of our customers to make payment, we forward these data to the provider in accordance with Art. 6(1)(f) GDPR for the purpose of a credit check. Based on the personal details you provide and other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment method you selected can be granted in view of payment and/or receivables default risks.

For the decision as part of the application review, in addition to provider-internal criteria pursuant to Art. 6(1)(f) GDPR, identity and creditworthiness information from the following credit reference agency(ies) may also be considered:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

A credit report may include probability values (so-called score values). Where score values are included in the credit report result, their basis is a scientifically recognised mathematical-statistical procedure. Among other things, address data is included in the calculation of score values, but not exclusively.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractually compliant payment processing.
- Mollie

On this website, one or more online payment methods offered by the following provider are available: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands

On this website, one or more online payment methods offered by the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg

When you select a payment method where you pay in advance, your payment details communicated as part of the checkout process (including name, address, bank and payment card information, currency and transaction number) as well as information about the contents of your order are forwarded to the provider in accordance with Art. 6(1)(b) GDPR. In this case, your data is forwarded exclusively for the purpose of processing the payment with the provider and only to the extent required for this.

When you select a payment method where we pay in advance, you will also be asked during the checkout process to provide certain personal details (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and possibly details of an alternative payment method).

To safeguard our legitimate interest in verifying your ability to make payment in such cases, we forward these data to the provider in accordance with Art. 6(1)(f) GDPR for the purpose of a credit check. Based on the personal details you provide and other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment method you selected can be granted in view of payment and/or receivables default risks.

On this website, one or more online payment methods offered by the following provider are available: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland

8.5 Electronic cancellation function for distance contracts

Consumers who enter into contracts on this website for which a statutory right of withdrawal exists have the option to declare their withdrawal via an electronic cancellation function in accordance with the applicable withdrawal provisions.

When using the cancellation function, in addition to information for identifying the contract to be withdrawn, you must provide or confirm further personal information such as your first and last name and the consumer’s e-mail address.

We collect this information and transmit it to us in accordance with Art. 6(1)(b) GDPR, and only to the extent required for the proper processing of the withdrawal. Also on the basis of Art. 6(1)(b) GDPR, the provided personal data is used to confirm receipt of the withdrawal declaration by e-mail. A further legal basis for processing is Art. 6(1)(c) GDPR. We are legally required to provide an electronic cancellation function for paid consumer distance contracts.

9) Page functionalities

9.1 ShopVote graphics

On our website, graphic elements from the following provider are embedded for displaying external customer reviews and/or an external quality seal: Blickreif GmbH, Schulstraße 46, 80634 Munich, Germany

When you access a page of our web presence that contains such graphic elements, your browser establishes a direct connection to the provider’s servers in order to load the elements properly. In doing so, certain browser information is transmitted to the provider, including your IP address.

To the extent that personal data is processed in this context, it is carried out in accordance with Art. 6(1)(f) GDPR on the basis of our legitimate interest in the optimal marketing of our offer and in the appealing design of our website.

9.2 - Cloudflare Turnstile

On this website we use the CAPTCHA service of the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA

The service checks whether an input is made by a natural person or is carried out abusively through machine and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is taken by a human rather than an automated bot, Cloudflare Turnstile collects the IP address of the device used, detection data for the type of browser and operating system used, as well as the date and duration of the visit, and transmits this information to the provider’s servers for analysis.

The legal basis is our legitimate interest in determining individual responsibility on the internet and in preventing misuse and spam in accordance with Art. 6(1)(f) GDPR.

We have entered into a data processing agreement with the provider, which ensures the protection of the data of our website visitors and prohibits any unauthorised disclosure to third parties.

10) Tools and other information

Lexware Office

For processing bookkeeping, we use the service of the cloud-based accounting software of the following provider: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany

The provider processes incoming and outgoing invoices and, if applicable, also our company’s bank transactions in order to automatically capture invoices, match them to transactions, and – in a partly automated process – create financial accounting from this.

If personal data is processed in this context, processing is carried out on the basis of our legitimate interest in an efficient organisation and documentation of our business transactions pursuant to Art. 6(1)(f) GDPR.

11) Rights of the data subject

11.1 The applicable data protection law grants you, as against the controller, the following data subject rights (rights of access and rights of intervention) regarding the processing of your personal data; for the conditions for exercising these rights, reference is made to the legal basis stated:

right of access pursuant to Art. 15 GDPR;
right to rectification pursuant to Art. 16 GDPR;
right to erasure pursuant to Art. 17 GDPR;
right to restriction of processing pursuant to Art. 18 GDPR;
right to notification pursuant to Art. 19 GDPR;
right to data portability pursuant to Art. 20 GDPR;
right to withdraw consent given pursuant to Art. 7(3) GDPR;
right to lodge a complaint pursuant to Art. 77 GDPR.

11.2 RIGHT TO OBJECT

IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTERESTS, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING, FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL TERMINATE THE PROCESSING OF THE AFFECTED PERSONAL DATA. HOWEVER, FURTHER PROCESSING MAY CONTINUE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO PROCESSING OF THE PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL TERMINATE PROCESSING OF THE AFFECTED PERSONAL DATA FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The duration of storage of personal data is determined according to the applicable legal basis, the processing purpose and—where applicable—also according to the applicable statutory retention period (e.g. retention periods under commercial and tax law).

Where personal data is processed on the basis of an express consent in accordance with Art. 6(1)(a) GDPR, the data concerned is stored for as long as you do not withdraw your consent.

If statutory retention periods apply to data processed in connection with contractual obligations or quasi-contractual obligations on the basis of Art. 6(1)(b) GDPR, such data is routinely deleted after expiry of the retention periods, provided it is no longer necessary for contract performance or initiating a contract and/or we do not have a legitimate interest in continued storage.

Where personal data is processed on the basis of Art. 6(1)(f) GDPR, this data is stored for as long as you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights and freedoms, or if the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for the purpose of direct marketing on the basis of Art. 6(1)(f) GDPR, this data is stored for as long as you exercise your right to object under Art. 21(2) GDPR.

Otherwise, if nothing else follows from the other information in this statement regarding specific processing scenarios, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

As of: 21.07.2026, 10:47:03