General information

The following information provides a simple overview of what happens to your personal data when you visit our website. Personal data are all data with which you can be personally identified. For detailed information on the subject of data protection, please refer to our data protection declaration below this text.

Data collection on our website

Who is responsible for data collection on this website?
The data processing on this website is carried out by the website operator. You can find their contact details in the imprint of this website.

How do we collect your data?
On the one hand, your data is collected when you communicate it to us. This can e.g. be data that you enter in a contact form.

Other data are automatically recorded by our IT systems when you visit the website. This is mainly technical data (e.g. Internet browser, operating system or time of the page was viewed). This data is collected automatically as soon as you enter our website.

What do we use your data for? Other data can be used to analyze your user behavior.

What rights do you have regarding your data?
You have the right to receive information about the origin, recipient and purpose of your stored personal data free of charge at any time. You also have the right to request the correction, blocking or deletion of this data. You can contact us at any time at the address given in the imprint if you have any further questions about data protection. You also have the right to lodge a complaint with the responsible supervisory authority.

Analysis tools and tools from third-party providers
When you visit our website, your surfing behavior can be statistically evaluated. This is mainly done with cookies and so-called analysis programs. Your surfing behavior is usually analyzed anonymously; surfing behavior cannot be traced back to you. You can object to this analysis or prevent it by not using certain tools. You can find details on this in our data protection declaration under the heading “Third party modules and analysis tools”.

You can object to this analysis. We will inform you about the possibilities of objection in this data protection declaration.

2. Customer account & amp; Orders

Customer account
When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. The processing takes place on the basis of Art. 6 Abs. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notifying us without affecting the legality of the processing carried out on the basis of the consent up to the time of revocation. Your customer account will then be deleted.

Collection, processing and transfer of personal data for orders
When ordering, we only collect and process your personal data insofar as this is necessary to fulfill and process your order and to process your inquiries . The provision of the data is necessary for the conclusion of the contract. Failure to provide it has the consequence that no contract can be concluded. The processing takes place on the basis of Art. 6 Abs. 1 lit. b GDPR and is necessary for the performance of a contract with you.

Your data will be passed on, for example, to the shipping companies and dropshipping providers, payment service providers, service providers for order processing and IT service providers selected by you. In all cases, we strictly observe the legal requirements. The amount of data transmission is limited to a minimum. The legal basis for the transfer of data is Art. 6 Para. 1 lit. b GDPR.

Age verification process
If you order age-restricted goods, we ensure that you have reached the legally required minimum age for the goods in accordance with the applicable youth protection law. We use an age verification process for this, with which we can identify you personally (age verification) and, if applicable,. Can ensure authentication. For this purpose we use the FRASPY Age Verification & amp; Identity check, Andreas van Loock, TOOLPIXX, Nettetalstraße 24, D-56745 Rieden.

For the purpose of checking the required minimum age, some of your personal data will be transmitted to the above service provider. This data processing takes place in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interests, which predominate in the context of a weighing of interests, in ensuring an offer that is compliant with youth protection law and also in compliance with the legal provisions on youth protection.

Contact, Reviews & amp; Newsletter

Use of the e-mail address for sending newsletters
We use your e-mail address, regardless of the contract, exclusively for our own advertising purposes for sending newsletters, provided you have expressly consented to this or are already listed with us in a business relationship or as an existing customer (Section 7 (3) UWG). In accordance with the statutory provisions, we primarily use your previous purchase data and interest data for the selection of advertising purposes, from which we derive your product interests, taking into account your purchase activities. The processing takes place on the basis of Art. 6 Abs. 1 lit. a GDPR with your consent or the purchase in our webshop. You can revoke your consent at any time without affecting the legality of the processing carried out on the basis of the consent up to the point of revocation. You can unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by sending us an informal message without incurring any costs other than the transmission costs according to the basic tariffs (e.g. internet connection costs, postage). Your e-mail address will then be removed from the distribution list.

Your data will be passed on to a service provider for email marketing as part of order processing. It will not be passed on to other third parties.

Payment service provider

Use of PayPal
All PayPal transactions are subject to the PayPal privacy policy. You can find this at
https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of Stripe
On our website we offer, among other things payment via Stripe and the associated payment methods. The provider of these payment services is

Stripe Payments Europe Ltd
Block 4, Harcourt Centre
Harcourt Road
Dublin 2

If you choose to pay via Stripe, the payment details you have entered will be transmitted to Stripe.

The transmission of your data to Stripe takes place on the basis of Art. 6 Para. 1 lit. a GDPR (consent) and Art. 6 Para. 1 lit. b GDPR (processing to fulfill a contract). You have the option of withdrawing your consent to data processing at any time. A revocation does not affect the effectiveness of data processing operations in the past. All data required for payment processing are used exclusively for the execution of the payments and transmitted via the “SSL” method. Stripe is PCI DSS certified. Stripe transfers, processes and possibly stores personal data outside the EU. Stripe is subject to the Safe Harbor Agreement. Information on Stripe’s data protection is available here: https://stripe.com/de/privacy .

3. GENERAL NOTES AND MANDATORY INFORMATION

Data protection

The operators of this website take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this data protection declaration.

When you use this website, various personal data are collected. Personal data are data with which you can be personally identified. This data protection declaration explains which data we collect and what we use it for. It also explains how and for what purpose this is done.

We would like to point out that data transmission over the Internet (e.g. when communicating by e-mail) can have security gaps. A complete protection of the data against access by third parties is not possible.

Note on the responsible party

The responsible body for data processing on this website is:

The Armory
Obere Schmiedgasse 9/11
91541 Rothenburg
Managing Directors: Johannes Wittmann, Caroline Wittmann

info@wp13573076.server-he.de
+49 09861 3713

The responsible body is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data (e.g. names, email addresses, etc.).

Revocation of your consent to data processing
Many data processing operations are only possible with your express consent. You can revoke your consent at any time. An informal e-mail to us is sufficient. The legality of the data processing carried out until the revocation remains unaffected by the revocation.

Right of appeal to the responsible supervisory authority
In the event of violations of data protection law, the person concerned has the right to lodge a complaint with the responsible supervisory authority. The competent supervisory authority for data protection issues is the state data protection officer of the federal state in which our company is based. A list of data protection officers and their contact details can be found at the following link: https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html .

Right to data portability
You have the right to transfer data that we process automatically on the basis of your consent or in fulfillment of a contract to yourself or to a third party in a common, machine-readable format to be handed over. If you request the direct transfer of the data to another person responsible, this will only be done if it is technically feasible.

SSL or TLS encryption
For security reasons and to protect the transmission of confidential content, such as orders or inquiries that you send to us as the site operator, this site uses a SSL or. TLS encryption. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http: //” to “https: //” and by the lock symbol in your browser line.

If the SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

Information, blocking, deletion
Within the framework of the applicable legal provisions, you have the right to free information about your stored personal data, their origin and recipient and the purpose of data processing and, if necessary, at any time . a right to correct, block or delete this data. You can contact us at any time at the address given in the legal notice if you have any further questions on the subject of personal data.

Objection to advertising e-mails
We hereby object to the use of the contact data published in the context of the imprint obligation for sending unsolicited advertising and information materials. The operators of the pages expressly reserve the right to take legal action in the event of unsolicited sending of advertising information, such as spam e-mails.

4. DATA COLLECTION ON OUR WEBSITE

Google Login / Sign-In
We offer you the option of registering and logging in on AMBOSS with Google Sign-In. This takes place exclusively with your express consent in accordance with Art. 6 Para. 1 S. 1 lit. a. GDPR. Google Sign-In is a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. An additional registration or login is therefore not necessary. To log in or register, you will be redirected to the Google site, where you can log in with your usage data. This will link your Google profile or your Google email address and our service. Through the link, we automatically receive the following data from Google Ireland Limited:

First and last name

Email address

Your Google user ID (if different from your email address)

Of this data, we only use those that are named under section 3 and that are used to complete the user profile. This information is essential for our services to be able to identify you.

For more information on Google Sign-In and privacy settings, please refer to the data protection information ( https://policies.google.com/privacy ) and the terms of use ( https://policies.google .com / terms ) from Google Ireland Limited.

Facebook Connect
On this website it is possible to register via the Facebook account.

Facebook Connect is a service from Facebook, Inc. The use of Facebook Connect is subject to Facebook’s data protection conditions and terms of use.

When using Facebook Connect, Facebook profile data and public data on Facebook from your Facebook profile are transmitted to us. Conversely, we can transfer data to your Facebook profile. Your transmitted data will be stored and processed by us for the purpose of registration on our site.

By registering on our website via Facebook Connect, you consent to the transfer of profile data from your Facebook profile to us and the transfer of data for the use of our website to Facebook. The data that is available as public data in your Facebook profile is transmitted. We would like to point out that following changes to Facebook’s data protection conditions and terms of use, the “friends list” of the Facebook profile owner may also be transferred if this has been marked as “public” in the privacy settings on Facebook.

The legal basis for using the service is Art. 6 I f DS-GVO – legitimate interest. Our legitimate interest in using this service is to enable users to easily share content on Facebook.

Further information can be found at: https://www.facebook.com/about/privacy / your-info-on-other

Cookies
Some of the internet pages use so-called cookies. Cookies do not harm your computer and do not contain viruses. Cookies serve to make our offer more user-friendly, more effective and safer. Cookies are small text files that are stored on your computer and saved by your browser.

Most of the cookies we use are so-called “session cookies”. They are automatically deleted after your visit. Other cookies remain stored on your device until you delete them. These cookies enable us to recognize your browser the next time you visit.

You can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when you close the browser. If cookies are deactivated, the functionality of this website may be restricted.

Cookies that are required to carry out the electronic communication process or to provide certain functions you want (e.g. shopping cart function) are stored on the basis of Art. 6 Para. 1 lit. f GDPR saved. The website operator has a legitimate interest in storing cookies for the technically error-free and optimized provision of its services. If other cookies (e.g. cookies for analyzing your surfing behavior) are stored, these will be treated separately in this data protection declaration.

Hosting services by a third party
As part of processing on our behalf, a third party provider provides us with the hosting and presentation of the website. This serves to safeguard our predominantly legitimate interests in a correct presentation of our offer in the context of a weighing of interests. All data that is collected as part of the use of this website or in the forms provided in the online shop as described below are processed on its servers. Processing on other servers only takes place within the scope explained here. This service provider is located in a country of the European Union or the European Economic Area.

Server log files
The provider of the pages automatically collects and saves information in so-called server log files, which your browser automatically transmits to us. These are:

• Browser type and browser version
• Operating system used
• Referrer URL
• Host name of the accessing computer
• Time of the server request
• IP address
• This data will not be merged with other data sources.

The basis for data processing is Art. 6 Para. 1 lit. b GDPR, which allows the processing of data to fulfill a contract or pre-contractual measures.

Contact form
If you send us inquiries using the contact form, your details from the inquiry form, including the contact details you provided there, will be stored by us for the purpose of processing the request and in case of follow-up questions . We do not pass on this data without your consent.

The processing of the data entered in the contact form takes place exclusively on the basis of your consent (Art. 6 Para. 1 lit. a GDPR). You can revoke this consent at any time. An informal e-mail to us is sufficient. The legality of the data processing operations carried out before the revocation remains unaffected by the revocation.

The data you enter in the contact form will remain with us until you ask us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed). Mandatory legal provisions – in particular retention periods – remain unaffected.

Data transfer to shipping service provider
If you have given us your express consent during or after your order, we will forward your e-mail address to the selected shipping service provider on the basis of this, so that they can can contact you prior to delivery for the purpose of notification or coordination of the delivery. You can revoke your consent at any time by sending a message to the contact option described below or directly to the shipping service provider at the contact address listed below. After revocation, we will delete the data you have provided for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this declaration.
DHL Paket GmbH
Am Dreistock 11
97318
Kitzingen

5. ANALYSIS TOOLS & amp; ADVERTISING

Google Analytics

This website uses functions of the web analysis service Google Analytics. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

Google Analytics uses so-called “cookies”. These are text files that are saved on your computer and that enable your use of the website to be analyzed. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there.

The storage of Google Analytics cookies is based on Art. 6 Para. 1 lit. f GDPR. The website operator has a legitimate interest in analyzing user behavior in order to optimize both its website and its advertising.

IP anonymization

We have activated the IP anonymization function on this website. As a result, your IP address will be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before it is transmitted to the USA. The full IP address is only transmitted to a Google server in the USA and shortened there in exceptional cases. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide the website operator with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

Use of Google Adwords Conversion Tracking

We use the online advertising program “Google AdWords” and conversion tracking as part of Google AdWords. Google Conversion Tracking is an analysis service provided by Google Inc. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”). If you click on an advertisement placed by Google, a conversion tracking cookie will be placed on your computer. These cookies lose their validity after 30 days, do not contain any personal data and are therefore not used for personal identification.
If you visit certain Internet pages on our website and the cookie has not yet expired, we and Google can recognize that you are accessing the Have clicked on the ad and were redirected to this page. Every Google AdWords customer receives a different cookie. This means that there is no way that cookies can be tracked via the websites of AdWords customers.
The information that is obtained using the conversion cookie is used to create conversion statistics for AdWords customers who opt for Have decided on conversion tracking. Here, customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, you do not receive any information with which users can be personally identified.
If you do not want to participate in tracking, you can object to this use by preventing the installation of cookies by setting your browser software accordingly (deactivation option). You will then not be included in the conversion tracking statistics. You can find more information and Google’s privacy policy at: http: // www .google.com / policies / technologies / ads / , http: //www.google.de/policies/privacy/

Use of the remarketing or “similar target groups” function of Google Inc.

The provider uses the remarketing or “similar target groups” function of Google Inc. (“Google”) on the website. Using this function, the provider can target visitors to the website with targeted advertising by displaying personalized, interest-based advertisements for visitors to the provider’s website when they visit other websites in the Google Display Network. To carry out the analysis of website usage, which forms the basis for creating interest-based advertisements, Google uses so-called cookies. For this purpose, Google saves a small file with a sequence of numbers in the browser of the website visitors. This number is used to record visits to the website as well as anonymised data on the use of the website. There is no storage of personal data of the visitors to the website. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are very likely to take into account previously accessed product and information areas. You can permanently deactivate the use of cookies by Google by following the link below and downloading and installing the plug-in provided there: https://www.google.com/settings/ads/plugin . Alternatively, you can deactivate the use of cookies by third party providers by visiting the deactivation page of the Network Advertising Initiative at http://www.networkadvertising.org/choices/ and implement the additional information on opt-out mentioned there. Further information on Google Remarketing and Google’s data protection declaration can be found at: http: / /www.google.com/privacy/ads/ .

Browser Plugin

You can prevent the storage of cookies by setting your browser software accordingly; however, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install: https://tools.google.com/dlpage/ gaoptout? hl = de .

Objection to data collection

You can prevent Google Analytics from collecting your data by clicking on the following link. An opt-out cookie will be set which prevents the collection of your data on future visits to this website: Deactivate Google Analytics .

You can find more information on handling user data on Google Analytics in Google’s data protection declaration: https://support.google.com/analytics/answer/6004245?hl=de .

Order data processing

We have concluded a contract data processing agreement with Google and fully implement the strict requirements of the German data protection authorities when using Google Analytics.

Facebook Custom Audiences

We use Facebook Website Custom Audiences on our websites. For this purpose, so-called Facebook pixels are integrated on our websites. This is Javascript code. These pixels generate a checksum (hash value) from your usage data, which is transmitted to Facebook, e.g. Browser information. If available, the Facebook cookie is also addressed and your Facebook ID is transmitted. If you have a Facebook profile and log in there, you can be presented with targeted, customized advertising for Waffenkammer products and offers based on the data transmitted by the pixels. Data from users who do not have a Facebook profile will be discarded unused by Facebook. For more information on the purpose and scope of the data collection and the further processing and use of the data by Facebook as well as your setting options to protect your privacy, please refer to the Facebook data protection guidelines at https://de-de.facebook.com/privacy/explanation. < / p>

6. PLUGINS AND TOOLS

Google Web Fonts

This page uses so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to the Google servers. This gives Google knowledge that our website has been accessed via your IP address. The use of Google Web Fonts takes place in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

If your browser does not support web fonts, a standard font will be used by your computer.

Further information on Google Web Fonts can be found at https://developers.google .com / fonts / faq and in the Google Privacy Policy: https : //www.google.com/policies/privacy/ .

Google Maps

This site uses the Google Maps map service via an API. The provider is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps it is necessary to save your IP address. This information is usually transmitted to a Google server in the USA and stored there. The provider of this site has no influence on this data transfer.

The use of Google Maps takes place in the interest of an appealing presentation of our online offers and an easy findability of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR.

You can find more information on handling user data in Google’s data protection declaration: https://www.google.de/intl/de/policies/privacy/ .

Facebook plugin

You can find plugins for the social network Facebook on our website. Its provider is Facebook Inc. It is based in the USA, California 94025, 1 Hacker Way, Menlo Park. The Facebook logo or the “Like-Button” (“Like” button) on our site identify the Facebook plug-ins in a recognizable way for you. Please also note the overview of the Facebook plugins on http: //developers.facebook .com / docs / plugins / . When you visit our website, we establish a direct connection to the Facebook server via the plugin. You are then switched there via your browser. For Facebook, this is linked to the information that you have visited our website with your IP address. By clicking on the Facebook “Like” button, you link the content of our website to your profile on Facebook. For Facebook, the visit to our site can be assigned to your user account. We have no knowledge of the type of content that is transmitted to Facebook and how Facebook uses it. You can find more information on data collection and use in the Facebook data protection declaration, which you can find at http://de-de.facebook.com/policy.php . You can prevent the assignment of your visit to our site to your Facebook profile by simply logging out of your Facebook account beforehand.

Instagram plugin

We also integrate functions of the Instagram online service on our website. The provider of these functions is Instagram Inc. It is based in the USA, CA 94025, 1601 Willow Road, Menlo Park. The Instagram button enables you to link to your Instagram account when you visit our website, provided you are logged in to Instagram. Instagram thus receives the information about your visit to our website and can assign this visit to your Instagram profile. We have no knowledge of the content of the information transmitted or of its use by Instagram. You can find further information on data collection and data use by Instagram in the Instagram data protection declaration at http: //instagram.com/about/legal/privacy/ .

7. NEWSLETTER