data protection

1) Information about the collection of personal data and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data refers to all data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is JIMI PALAIS, owner Dennis Garbe
, Eiffestraße 598, 20537 Hamburg, Germany, Tel.: +49 49 740 724 38, Email: info@jimipalais.com . The controller of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

2) Data collection when visiting our website

If you use our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our visited website
  • Date and time of access
  • Amount of data sent in bytes
  • Source/reference from which you came to the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

Processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be shared or used for any other purpose. However, we reserve the right to subsequently review the server log files if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

3.1 Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online shop on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned Shopify services, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. for further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, an appropriate level of data protection is guaranteed by the European Commission's adequacy decision. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than those mentioned above by Shopify will only take place within the framework communicated below.

3.2 AWS CloudFront (Amazon)
On our website we use the Content Delivery Network ("CDN") "AWS CloudFront" of the service provider "Amazon" (Amazon EU Sa rl, 38 avenue John F. Kennedy, L-1855 Luxembourg).
A content delivery network is an online service that delivers large media files (such as graphics, page content, or scripts) through a network of regionally distributed servers connected via the Internet. Using Amazon's Content Delivery Network helps us optimize our website's loading speeds.
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the secure and efficient provision and improvement of the stability and functionality of our website.
For more information, see Amazon’s privacy policy at https://docs.aws.amazon.com/de_de/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html

3.3 Cloudflare
Our website uses a so-called Content Delivery Network ("CDN") from the technology service provider Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA ("Cloudflare"). A Content Delivery Network is an online service that delivers large media files (such as graphics, page content, or scripts) through a network of regionally distributed servers connected via the Internet. The use of Cloudflare's Content Delivery Network helps us optimize the loading speed of our website.
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the secure and efficient provision and improvement of the stability and functionality of our website.
We have a data processing agreement with Cloudfare (Data Processing Addendum, available at We have entered into a data protection agreement (https://www.cloudflare.com/media/pdf/cloudflare-customer-dpa.pdf ), which obligates Cloudfare to protect the data of our site visitors and not to share it with third parties. For the transfer of data from the EU to the USA, Cloudfare relies on the European Commission's standard data protection clauses, which are intended to ensure compliance with European data protection standards in the USA.
For more information, please see Cloudflare’s privacy policy at: https://www.cloudflare.com/privacypolicy/

3.4 IONOS
Our website uses a so-called Content Delivery Network ("CDN") provided by &1 IONOS Internet SE, Elgendorfer Str. 57, 56410 Montabaur ("IONOS"). A Content Delivery Network is an online service that delivers large media files (such as graphics, page content, or scripts) through a network of regionally distributed servers connected via the Internet. The use of the IONOS Content Delivery Network helps us optimize the loading speed of our website.
The processing is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in the secure and efficient provision and improvement of the stability and functionality of our website.
We have concluded a data processing agreement with IONOS, which obligates IONOS to protect the data of our site visitors and not to share it with third parties. Further information can be found in the IONOS privacy policy at: https://www.ionos.de/terms-gtc/terms-privacy

4) Cookies

To make visiting our website more attractive and enable the use of certain functions, we use cookies, i.e., small text files stored on your device. Some of these cookies are automatically deleted after closing your browser (so-called "session cookies"); others remain on your device for a longer period and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can find out how long cookies are stored in the overview of your web browser's cookie settings.
If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) (b) GDPR either to execute the contract, in accordance with Art. 6 (1) (a) GDPR in the event of consent being given, or in accordance with Art. 6 (1) (f) GDPR to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.
You can set your browser so that you are informed about the setting of cookies and can decide individually whether to accept them or to exclude the acceptance of cookies in certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contact

5.1 Review reminder by Reviews.io
If you have given us your express consent to do so during or after your order in accordance with Art. 6 (1) (a) GDPR, we will transmit your email address to the review platform "reviews.io" of REVIEWS.io 2020 GmbH, Stralauer Allee 6, 10245 Berlin, so that they can send you a review reminder by email. You can revoke your consent at any time by sending a message to the data controller or to the review platform.

5.2 Zendesk
We use the Zendesk email ticket system, a customer service platform of Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland ("Zendesk"), to process customer inquiries. If users submit contact inquiries to our website via email, these are stored and organized in the ticket system to enable chronological processing and improve the service experience. Users can always view the current status of their request using the individually assigned ticket number.
Exclusively for the organization of inquiries and their processing, personal data will be collected to the extent provided in the inquiry, but in any case the name, first name and email address, transmitted to Zendesk, stored there and read out.
The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, in the fastest possible response to your request and in the optimization of our service offering in accordance with Art. 6 (1) (f) GDPR
We have entered into a data processing agreement with Zendesk, which obligates Zendesk to protect our customers' data and not to share it with third parties.
Personal data may be transferred to Zendesk Inc. servers in the USA. For such data transfers, Zendesk adheres to Binding Corporate Rules (BCRs), which have been recognized by the Irish Data Protection Authority as appropriate safeguards for compliance with European data protection standards.
Your data will be deleted after your request has been processed. This will be the case if the circumstances indicate that the matter in question has been conclusively resolved and provided there are no statutory retention periods to the contrary.
For more information about Zendesk’s privacy practices, please visit https://www.zendesk.de/company/customers-partners/privacy-policy/ .

5.3 When you contact us (e.g., via contact form or email), personal data will be processed exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) (f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention periods to the contrary.

6) Data processing when opening a customer account

In accordance with Art. 6 (1) (b) GDPR, personal data will continue to be collected and processed to the extent necessary if you provide it to us when opening a customer account. You can find out which data is required to open an account in the input mask of the corresponding form on our website. You can delete your customer account at any time by sending a message to the above-mentioned address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded through it have been fully processed, there are no statutory retention periods to the contrary, and we have no legitimate interest in continuing to store it.

7) Comment function

As part of the comment function on this website, in addition to your comment, information about the time the comment was created and the commenter name you chose will be saved and published on this website. Furthermore, your IP address will be saved for security reasons to enable identification of the author in the event of illegal comments. Your email address will be saved so that we can contact you if a third party objects to your published content as illegal.

8) Use of customer data for direct marketing

8.1 Registration for our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to receive the newsletter is your email address. Providing additional data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure to send the newsletter, which ensures that you only receive the newsletter after you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. We will save your IP address entered by your Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your email address at a later date. The data we collect when you register for the newsletter will be used strictly for the intended purpose. You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we will inform you in this declaration.

8.3 Product availability notification by email

For temporarily unavailable items, you can sign up to receive email product availability notifications. We will then send you a one-time email notification about the availability of the item you have selected. The only mandatory information required to receive this notification is your email address. Providing additional information is voluntary and may be used to contact you personally. We use the so-called double opt-in process to send emails, which ensures that you only receive a notification after you have expressly confirmed your consent by clicking on a verification link sent to the specified email address.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 (1) (a) GDPR. We will save your IP address entered by your Internet service provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your email address at a later date. The data we collect when you register for our email notification service on product availability will be used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a corresponding message to the person responsible named above. After unsubscribing, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use the data in any other way that is permitted by law and about which we inform you in this declaration.

9) Data processing for order processing

9.1 To the extent necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 (1) (b) GDPR.

If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact information you provided when placing your order (name, address, email address) in order to inform you personally about upcoming updates within the legally stipulated period via a suitable communication channel (e.g., by post or email) within the scope of our statutory information obligations pursuant to Art. 6 (1) (c) GDPR. Your contact information will be used strictly for the purpose of notifying you of updates owed by us and will only be processed by us to the extent necessary for the respective information.

To process your order, we also work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data will be transmitted to these service providers in accordance with the following information.

9.2 The web agency we-site GmbH transfers the simple right of use to the code for the JIMI PALAIS online shop. This simple right of use entitles JIMI PALAIS to use the code for the aforementioned online shop. The right of use is neither temporally nor geographically limited. It is expressly stated that the copyright to the code remains with the transferor, we-site GmbH. Any modifications, reproductions, or resale of the code without the express consent of we-site GmbH are prohibited.

In connection with this right of use, JIMI PALAIS ensures compliance with the online store's privacy policy and practices, and that all data protection-related aspects, including the collection, storage, and processing of user data, are in compliance with applicable data protection laws and regulations. we-site GmbH assumes no liability for data protection violations resulting from the operation or use of the online store by the customer.

9.3 Use of payment service providers (payment services)

- Apple Pay
If you choose to use the "Apple Pay" payment method from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed using the "Apple Pay" function on your iOS, watchOS, or macOS device by charging a payment card stored with "Apple Pay." Apple Pay uses security features integrated into your device's hardware and software to protect your transactions. To authorize a payment, you will need to enter a previously specified code and verify your payment using your device's "Face ID" or "Touch ID" function.
For payment processing, the information you provide during the ordering process, along with information about your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before transmitting the data to the payment service provider of the payment card stored in Apple Pay to process the payment. This encryption ensures that only the website through which the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment.
If personal data is processed during the transmissions described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successful. This anonymization completely eliminates any personal identification. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase made through Safari on your Mac, your Mac and the authorization device communicate over an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can identify you personally. You can turn off the ability to use Apple Pay on your Mac in your iPhone's settings. Go to "Wallet & Apple Pay" and turn off "Allow Payments on Mac."
Further information on data protection with Apple Pay can be found at the following internet address: https://support.apple.com/de-de/HT203027
- Google Pay
If you choose the "Google Pay" payment method provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment will be processed via the "Google Pay" application on your mobile device running at least Android 4.4 ("KitKat") and equipped with NFC by charging a payment card stored with Google Pay or a payment system verified there (e.g., PayPal). To authorize a payment via Google Pay of more than €25, you must first unlock your mobile device using the verification method configured (e.g., facial recognition, password, fingerprint, or pattern).
For the purpose of payment processing, the information you provided during the ordering process, along with information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay to the originating website in the form of a unique transaction number, which is used to verify a successful payment. This transaction number does not contain any information about the actual payment data of your payment method stored in Google Pay, but is created and transmitted as a one-time, valid numeric token. For all transactions via Google Pay, Google acts solely as an intermediary to process the payment process. The transaction is carried out exclusively between the user and the originating website by debiting the payment method stored in Google Pay.
If personal data is processed during the transmissions described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) (b) GDPR.
Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction made through Google Pay. This includes the date, time, and amount of the transaction, the merchant location and description, a description of the purchased goods or services provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer, or the sender and recipient, the payment method used, your description of the reason for the transaction, and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 (1) (f) GDPR on the basis of the legitimate interest in proper accounting, the verification of transaction data and the optimization and maintenance of the functionality of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information that is collected and stored by Google when using other Google services.
The Google Pay terms of use can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de
Further information on data protection at Google Pay can be found at the following internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de
- giropay
When paying via "giropay," payment processing is handled by giropay GmbH, An der Welle 4, 60322 Frankfurt/Main, to which we will forward the information you provided during the ordering process, along with information about your order. Your data will be passed on in accordance with Art. 6 (1) (b) GDPR exclusively for the purpose of payment processing and only to the extent necessary for this purpose. You can find further information about giropay GmbH's privacy policy at the following website address: https://www.giropay.de/rechts/datenschutzerklaerung
- Klarna
If you select a Klarna payment service, the payment will be processed via Klarna Bank AB (publ), https://www.klarna.com/de/ , Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number, and IP address) as well as data related to the order (e.g., invoice amount, item, delivery method) will be passed on to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 (1) (a) GDPR during the ordering process. You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values ​​(so-called score values). To the extent that score values ​​are included in the credit report results, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values ​​includes, but is not limited to, address data. Klarna uses the information obtained regarding the statistical probability of a payment default to make a considered decision regarding the establishment, implementation, or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal data will be processed in accordance with applicable data protection regulations and in accordance with the information in Klarna's privacy policy for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for those affected based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
treated.
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we will transfer your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. This transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check regarding the statistical probability of default to decide whether to provide the respective payment method. The credit check may contain probability values ​​(so-called score values). To the extent that score values ​​are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is used to calculate the score values. Further data protection information, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, payment processing will be carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process, along with information about your order (name, address, account number, bank sort code, credit card number (if applicable), invoice amount, currency, and transaction number) in accordance with Art. 6 (1) (b) GDPR. Your data will be passed on exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Shopify Payments' data protection can be found at the following website address: https://www.shopify.com/legal/privacy .
Data protection information about Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

10) Online Marketing

Facebook Pixel for creating custom audiences (with Cookie Consent Tool)
Our online offering uses the so-called “Facebook Pixel” of the social network Facebook, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”).
If a user clicks on an ad placed by us that is displayed on Facebook, a suffix is ​​added to the URL of our linked page via Facebook Pixel. If our page allows data sharing with Facebook via Pixel, this URL parameter is written into the user's browser via a cookie, which our linked page itself sets. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is able to define visitors to our online offering as a target group for displaying advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads we place only to those Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g., interests in certain topics or products determined based on the websites visited) that we transmit to Facebook (so-called "custom audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interests of users and are not annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion").
The data collected is anonymous to us, meaning it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy ( https://www.facebook.com/about/privacy/ ). The data can enable Facebook and its partners to place advertisements on and outside of Facebook.
The data processing associated with the use of the Facebook Pixel takes place exclusively with your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

11) Web analysis services

11.1 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables the analysis of website usage.
When using Google Analytics 4, so-called "cookies" are used by default. Cookies are text files that are stored on your device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your device, truncated by the last digits; see below) is usually transmitted to a Google server, where it is stored and processed. This may also involve transmitting information to the servers of Google LLC, located in the USA, for further processing.
When using Google Analytics 4, the IP address transmitted by your device when you use the website is automatically collected and processed anonymously by default, so that the information collected cannot be directly linked to a specific person. This automatic anonymization occurs by Google abbreviating the last digits of the IP address transmitted by your device within member states of the European Union (EU) or other contracting states to the Agreement on the European Economic Area (EEA).
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports on your website activities and usage behavior, and to provide us with other services related to your website and internet usage. The shortened IP address transmitted by your device as part of Google Analytics 4 will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 will be retained for two months and then deleted.
Google Analytics 4 also uses a special feature called "demographic features" to compile statistics about the age, gender, and interests of website users based on an analysis of interest-based advertising and with the aid of third-party information. This makes it possible to identify and differentiate website user groups for the purpose of targeting marketing measures that are optimized for specific groups. However, data collected via "demographic features" cannot be assigned to a specific person, including you personally. This data collected via the "demographic features" function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the device you use to access the website, will only take place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without your consent, Google Analytics 4 will not be used while you use the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website.
In connection with this website, the "UserIDs" function is used as an extension of Google Analytics 4. By assigning individual UserIDs, we can have Google create cross-device reports (so-called "cross-device tracking"). This means that if you give your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) (a) GDPR, your usage behavior can also be analyzed across devices if you have set up a personal account by registering on this website and are logged into your personal account on different devices using your corresponding login data. The data collected in this way shows, among other things, the device on which you first clicked on an ad and the device on which the corresponding conversion took place.
We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.
To ensure compliance with European data protection standards, including any transfer of data from the EU or EEA to the USA and any further processing there, Google relies on the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.
Further legal information about Google Analytics 4, including a copy of the standard contractual clauses mentioned, can be found at https://policies.google.com/privacy?hl=de&gl=de and under https://policies.google.com/technologies/partner-sites

12) Retargeting/ Remarketing/ Recommendation Advertising

Google Ads Remarketing
Our website uses Google Ads Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google places a cookie on your device’s browser which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Further data processing only takes place if you have given Google your consent to link your internet and app browsing history to your Google account and to use information from your Google account to personalise ads that you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing. For this purpose, Google will temporarily link your personal data with Google Analytics data to create audiences. When using Google Ads Remarketing, personal data may also be transferred to Google LLC servers in the USA.
Details on the processing initiated by Google Ads Remarketing and how Google handles data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/onweb/
Further information and the privacy policy regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

Outbrain
This website uses retargeting technology from Outbrain Inc., 39 W 13th Street, New York, NY 10011, USA ("Outbrain"). This technology enables us to point visitors to our website, based on their usage behavior, to other own or third-party content in the form of banners that are likely to correspond to their respective user interests. This content is displayed based on a cookie-based analysis of previous usage behavior, although no personal data is stored. For this interest-based content determination, a cookie is stored on your computer or mobile device in order to collect pseudonymized data about your surfing behavior and thus adapt the content individually to the stored information.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

Outbrain Pixel
Within our online offering we use the “Outbrain Pixel” of Outbrain, Inc., 39 W 13th St, New York 10011, USA (“Outbrain”). Outbrain Pixel places a cookie on your computer if you have reached our website via an advertisement or other campaign. Cookies are small text files that are stored on your device. If the user visits certain pages of this website, we can recognize that the user has clicked on the advertisement and was redirected to this page (conversion page). The information collected using the conversion cookie is used to create conversion statistics, i.e. to record how many users reach a conversion page after clicking on an advertisement. This tells us the total number of users who clicked on our advertisement and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.
All processing described above, in particular the reading of information from the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website.

Snap Pixel (Snapchat)
This website uses the “Snapchat Pixel”, a tracking technology of the social network Snapchat of Snap Inc., 63 Market Street, Venice, CA 90291, USA (“Snapchat”).
If you accessed our website from an ad on Snapchat, we will place a cookie on your computer that interacts with JavaScript code also implemented by Snapchat. Cookies are small text files that are stored on your device.
If a user is redirected from a Snapchat ad to pages on this website, the pixel records certain user actions predefined by us and can track them (e.g., completed transactions, leads, search queries on the website, visits to product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Snapchat server via the Snapchat pixel, transmitting certain information about the action (including the type of action, time, and device browser type).
Through this transmission, Snapchat can compile statistics about user behavior on our website after redirection from an ad, which we use to optimize our offering. However, we do not receive any information that can be used to personally identify users.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Snapchat for the use of the Snapchat Pixel ("Data Processing Agreement", available at We have entered into a data processing agreement (https://www.snap.com/es/terms/data-processing-agreement ), which obligates Snapchat to protect the data of our site visitors and not to share it with third parties. Snapchat generally transmits collected information outside the European Economic Area and relies on the European Commission's standard data protection clauses, which are intended to ensure compliance with European data protection standards.

TikTok Pixel
This website uses the “TikTok Pixel”, a tracking technology of the social network “TikTok” of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”).
With the help of cookies (small text files that are stored on the device used), information about surfing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored there and evaluated in order to then enable the display of interest-based and personalized product recommendations on TikTok. The information collected and processed pseudonymously in this way generally includes the device ID, device type, timestamp, operating system used and IP address. The information can be assigned to the user with the help of other information that TikTok has stored about the user, e.g. due to the ownership of an account on the social network "TikTok". TikTok can also combine the information collected via the pixel with other information that TikTok has collected via other websites and/or in connection with the use of the social network "TikTok" and thus create pseudonymized user profiles. Under no circumstances can the collected information be used to personally identify visitors to this website.
The TikTok pixel also enables us to track the effectiveness of advertisements on TikTok. If the user is redirected from a TikTok ad to pages on this website and the cookies have not yet expired, the pixel records certain user actions predefined by us and can track these (e.g. completed transactions, leads, search queries on the website, views of product pages). When such an action is carried out, your browser sends an HTTP request from the cookie to the TikTok server via the TikTok pixel, which transmits certain information about the action. Through this transmission, TikTok can compile statistics about user behavior on our website after redirection from a TikTok ad, which we use to optimize our offering.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website. We have concluded a data processing agreement with TikTok for the use of the TikTok Pixel, which obliges TikTok to protect the data of our site visitors and not to pass it on to third parties. TikTok generally transmits collected information outside the European Economic Area and relies on so-called standard data protection clauses of the European Commission, which are intended to guarantee compliance with European data protection standards.

13) Page functionalities

13.1 Use of YouTube videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
The extended data protection mode is used here, which, according to the provider, only starts saving user information when the video(s) is played. If the playback of embedded YouTube videos is started, the provider "YouTube" uses cookies to collect information about user behavior. According to information from "YouTube", these are used, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not want to be assigned to your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles; you must contact YouTube to exercise this right. When using YouTube, personal data may also be transferred to the servers of Google LLC in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our control.
All processing described above, in particular the reading of information on the device used via the tracking pixel, will only be carried out if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. Without this consent, YouTube videos will not be used during your visit to the site.
You can revoke your consent at any time with future effect. To exercise your revocation, please deactivate this service using the "Cookie Consent Tool" provided on the website, using alternative options communicated to you on the website.
Further information on data protection at “YouTube” can be found in the YouTube Terms of Use at https://www.youtube.com/static?template=terms and in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy

13.2 - Google Meet
We use the “Google Meet” service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (hereinafter “Google Meet”) to conduct online meetings, video conferences and/or webinars.
When you use Google Meet, different types of data are processed. The extent of the data processed depends on which data you provide before or during your participation in an online meeting, video conference, or webinar. When you use Google Meet, data from communication participants is processed and stored on Google servers. This data may include, in particular, your login details (name, email address, telephone number (optional), and password) and meeting data (topic, participant IP address, device information, description (optional)). In addition, visual and auditory contributions from participants, as well as voice input in chats, may be processed. This may also result in data being transmitted to Google LLC servers in the USA.
For the processing of personal data necessary to fulfill a contract with you (this also applies to processing operations necessary to carry out pre-contractual measures), Art. 6 (1) (b) GDPR serves as the legal basis. If you have given us your consent to process your data, the processing will be based on Art. 6 (1) (a) GDPR. Consent given can be revoked at any time with future effect.
Furthermore, the legal basis for data processing when conducting online meetings, video conferences, or webinars is our legitimate interest in the effective conduct of the online meeting, webinar, or video conference pursuant to Art. 6 (1) (f) GDPR. Further information on data usage by Google Meet can be found in Google's privacy policy at https://www.google.de/policies/privacy/

13.3 Online applications via a form
On our website, we offer prospective employees the opportunity to apply online using a corresponding form. Acceptance into the application process requires that applicants provide us with all the personal data necessary for a thorough and informed assessment and selection.
The required information includes general personal information (name, address, telephone or email contact details) as well as performance-specific evidence of the qualifications required for a position. Health-related information may also be required, which, in the interest of social protection, must be specifically considered under labor and social law.
When you submit the form, your applicant data will be transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated solely for the purpose of processing your application.
The legal basis for this processing is generally Art. 6 (1) (b) GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), within the meaning of which completing the application process is considered to be the initiation of an employment contract.
If special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severe disability) are requested from applicants as part of the application process, the processing will be carried out in accordance with Art. 9 (2) (b) GDPR so that we can exercise the rights arising from employment law and social security and social protection law and fulfil our obligations in this regard.
Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9 (1) (h) GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector.
If the applicant is not selected as part of the evaluation described above, or if the applicant withdraws their application prematurely, the data submitted via the form will be deleted after a corresponding notification, at the latest, after six months. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, fulfilling our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6 (1) (b) GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG) for the purposes of implementing the employment relationship.

13.4 Applications for job vacancies by email
On our website, we advertise currently vacant positions in a separate section, for which interested parties can apply by email to the contact address provided.
In order to be accepted into the application process, applicants must provide us with all the personal data required for a well-founded and informed assessment and selection along with their application by email.
The required information includes general personal information (name, address, telephone or email contact details) as well as performance-specific evidence of the qualifications required for a position. Health-related information may also be required, which, in the interest of social protection, must be specifically considered under labor and social law.
The relevant job advertisement will specify which components an application must contain in order to be considered and in what form these components must be submitted by email.
After receiving the application submitted using the specified email address, we will store the applicant data and evaluate it solely for the purpose of processing the application. For any queries that arise during the processing of the application, we will use either the email address provided by the applicant with their application or a telephone number provided, at our discretion.
The legal basis for this processing, including contacting us for queries, is generally Art. 6 (1) (b) GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG), within the meaning of which completing the application process is considered to be the initiation of an employment contract.
If special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severe disability) are requested from applicants as part of the application process, the processing will be carried out in accordance with Art. 9 (2) (b) GDPR so that we can exercise the rights arising from employment law and social security and social protection law and fulfil our obligations in this regard.
Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9 (1) (h) GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector.
If the applicant is not selected as part of the evaluation described above, or if the applicant withdraws their application prematurely, their data submitted via email and all electronic correspondence, including the original application email, will be deleted after a maximum of six months following notification. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, fulfilling our obligations to provide evidence under the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6 (1) (b) GDPR (for processing in Germany in conjunction with Section 26 (1) BDSG) for the purposes of implementing the employment relationship.

13.6 - Google Web Fonts
This website uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the consistent display of fonts. When you visit a page, your browser loads the required web fonts into your browser cache to display text and fonts correctly.
For this purpose, the browser you use must establish a connection to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC in the USA. In this way, Google becomes aware that our website was accessed via your IP address. The processing of personal data when establishing a connection with the font provider will only take place if you have given us your express consent in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For more information about Google Web Fonts, see https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/

13.7 Google reCAPTCHA

On this website we also use the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an entry has been made by a natural person or has been misused through machine and automated processing. The service includes sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) (f) GDPR on the basis of our legitimate interest in determining individual responsibility on the Internet and preventing misuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.

Further information about Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

To the extent legally required, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 (1) (a) GDPR. You can revoke your consent at any time with future effect. To exercise your consent, please follow the objection option described above.

13.8 Google Customer Reviews (formerly Google Certified Retailer Program)

We work with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the opportunity to collect customer reviews from users of our website. After making a purchase on our website, you will be asked whether you would like to participate in an email survey from Google. If you give your consent in accordance with Art. 6 (1) (a) GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. The rating you submit will then be summarized with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. Using Google Customer Reviews may also result in personal data being transferred to Google LLC servers in the USA.

You can revoke your consent at any time by sending a message to the data controller or to Google.

For more information about Google’s privacy practices in connection with the Google Customer Reviews program, please visit the following link: https://support.google.com/merchants/answer/7188525?hl=de

For more information about Google Seller Ratings privacy, please follow this link: https://support.google.com/google-ads/answer/2375474

Data protection declaration Unless otherwise stated below, the provision of your personal data is neither legally nor contractually required, nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide this data will have no consequences. This only applies if no other information is stated during the subsequent processing operations. "Personal data" is all information relating to an identified or identifiable natural person. Server log files You can visit our websites without providing any personal information. Each time you access our website, usage data is transmitted to us or our web host/IT service provider via your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in ensuring the uninterrupted operation of our website and to improve our offering. Your data will be transferred to Canada, among other places. The EU Commission has issued an adequacy decision for data transfers to Canada. Contact Person responsible Contact us upon request. The person responsible for data processing is: Dennis Garbe, Eiffestrasse 598, 20537 Hamburg Germany, +4917680526387, dennis@jimipalais.com Customer's unsolicited contact via email If you contact us proactively via email, we will only collect your personal data (name, email address, message text) to the extent provided by you. The data is processed to process and respond to your contact request. If the contact is for the implementation of pre-contractual measures (e.g. advice in the event of a purchase interest, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6 (1) (b) GDPR. If contact is made for other reasons, this data processing is carried out on the basis of Art. 6 (1) (f) GDPR out of our overriding legitimate interest in processing and answering your enquiry. In this case, you have the right to object to this processing of personal data concerning you based on Art. 6 (1) (f) GDPR at any time for reasons arising from your particular situation. We will only use your e-mail address to process your enquiry. Your data will then be deleted in compliance with statutory retention periods unless you have consented to further processing and use. Orders Collection, processing and transfer of personal data when placing orders When you place an order, we only collect and process your personal data to the extent that this is necessary to fulfil and process your order and to process your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) (b) GDPR and is necessary for the fulfilment of a contract with you. Your data will be passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, order processing service providers and IT service providers. In all cases, we strictly adhere to the legal requirements. The extent of data transfer is kept to a minimum. Your data will be transferred to Canada, among other places. An adequacy decision by the EU Commission has been made for data transfers to Canada. Cookies Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user's computer system. When a user visits a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is visited again. Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your Internet browser, you can be notified before cookies are set, decide individually whether to accept them, and prevent cookies from being saved and the data they contain from being transmitted. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent. You can find out how to manage cookies in the most important browsers (including how to deactivate them) using the links below: Chrome: https://support.google.com/accounts/answer/61416?hl=de Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9- 2a946a29ae09 Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac Technically necessary cookies Unless otherwise stated in the privacy policy, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Furthermore, cookies enable our systems to recognize your browser even after you change pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary that the browser is recognized even after you change pages. The use of cookies or similar technologies is based on Section 25 (2) TTDSG. The processing of your personal data is based on Art. 6 (1) (f) GDPR out of our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering. You have the right to object to this processing of personal data concerning you at any time for reasons arising from your particular situation. Rights of those affected and storage period Duration of storage After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular tax and commercial law, and then deleted after the deadline has expired, unless you have consented to further processing and use. Rights of the data subject: If the legal requirements are met, you have the following rights under Articles 15 to 20 of the GDPR: Right to information, rectification, erasure, restriction of processing, and data portability. Furthermore, pursuant to Article 21 (1) GDPR, you have the right to object to processing based on Article 6 (1) (f) GDPR, as well as to processing for direct marketing purposes. Right to lodge a complaint with the supervisory authority: Pursuant to Article 77 of the GDPR, you have the right to lodge a complaint with the supervisory authority if you believe that the processing of your personal data is unlawful. You can lodge a complaint with the supervisory authority responsible for us, among others, which you can reach using the following contact details: Hamburg Commissioner for Data Protection and Freedom of Information Ludwig-Erhard-Str 22, 7th floor 20459 Hamburg Tel.: +49 40 428544040 Fax: +49 40 428544000 Email: mailbox@datenschutz.hamburg.de Right of objection If the personal data processing listed here is based on our legitimate interest pursuant to Art. 6 (1) (f) GDPR, you have the right to object to this processing at any time with effect for the future for reasons arising from your particular situation. Once you have objected, the processing of the data in question will be stopped unless we can demonstrate compelling legitimate grounds for the processing which outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims. last updated: 13.07.2023