EN Your Cart is Empty
We take the protection of your personal data very seriously. We treat your personal data confidentially and in accordance with the statutory data protection regulations and this privacy policy.
Table of contents
The controller within the meaning of data protection law is:
Conradus, Schlözer und Setzer GbR
Owners Luna Conradus, Robert Schlözer and Lene Setzer
Viktoriastraße 78
52066 Aachen, Germany
Tel.: +49 (0) 1577 88 51 969
E-mail: info@mit-ton.de
The protection and security of your data is very important to us. We protect our website and other systems by technical and organisational measures against loss, destruction, access, alteration or distribution of your data by unauthorised persons. To protect the transmission of personal data, this website uses SSL/TLS encryption, which you can recognise by the string „https“ in the browser bar.
We only process personal data on a valid legal basis (in particular Art. 6 GDPR) and delete it as soon as the purpose of processing no longer applies and no statutory retention obligations conflict with this.
In principle, you can visit our website without disclosing your name. When accessing our website, however, data is automatically stored temporarily in a log file via our hosting service provider (see section 5) (including IP address, date/time, page accessed, amount of data transferred, browser/device type). The creation of personal user profiles is excluded.
The purpose is to ensure a smooth connection setup and to make use of the site convenient. The legal basis is Art. 6 (1) sentence 1 lit. f) GDPR; our legitimate interest follows from the stated purpose. The data is deleted after 7 days.
Our website uses cookies – small text files that are stored on your device.
Technically necessary cookies (e.g. session cookies, shopping cart function, storage of your cookie selection) are required for the operation of the website. The legal basis is Art. 6 (1) sentence 1 lit. f) GDPR or § 25 (2) TDDDG (German Telecommunications Digital Services Data Protection Act).
Analysis and marketing cookies (e.g. Google Analytics, Google Ads, Meta Pixel) are only used if you have given your consent in advance via our consent banner. The legal basis is Art. 6 (1) sentence 1 lit. a) GDPR in conjunction with § 25 (1) TDDDG. Your consent is voluntary and can be withdrawn at any time with effect for the future via the cookie settings.
To obtain and manage your consent, we use the tool „Consentik GDPR Cookies Banner“ (provider: Omega Theme, No. 18 Lane 11 Thai Ha, Hanoi, Vietnam). It stores your cookie selection and documents your consent (including a pseudonymous identifier, your consent decision, timestamp). The legal basis is Art. 6 (1) sentence 1 lit. c) GDPR in conjunction with Art. 7 (1) GDPR (obligation to provide evidence) and our legitimate interest pursuant to Art. 6 (1) sentence 1 lit. f) GDPR. The Bugsnag service (error diagnosis) may be integrated to provide the tool. The provider is based in Vietnam; a transfer to a third country cannot be ruled out (see section 18).
Our online shop is operated on the Shopify platform. The provider is Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (parent company: Shopify Inc., 151 O’Connor Street, Ground floor, Ottawa, ON K2P 2L8, Canada).
Shopify processes the data required to operate the shop on our behalf, in particular when providing the website, processing orders and payments, and for fraud prevention. A data processing agreement pursuant to Art. 28 GDPR exists with Shopify. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR (performance of a contract) and Art. 6 (1) sentence 1 lit. f) GDPR (provision of a secure, functional shop). A transfer to the USA/Canada cannot be ruled out (see section 18). Further information: https://www.shopify.com/legal/privacy
You can contact us voluntarily via the e-mail addresses provided or a contact form. We process the transmitted data (e-mail address, name and other information you provide) exclusively to handle your enquiry.
The legal basis is Art. 6 (1) sentence 1 lit. f) GDPR (legitimate interest in responding); if the enquiry is aimed at a contract, additionally Art. 6 (1) sentence 1 lit. b) GDPR. If you have given consent, the legal basis is Art. 6 (1) sentence 1 lit. a) GDPR. The data is deleted as soon as it is no longer required for the purpose and no retention obligations conflict with this. The registration/contact forms are technically provided via „Shopify Forms“ (Shopify International Limited); processing takes place within the scope of the Shopify data processing relationship (section 5).
You can voluntarily open a customer account. We process the data provided there (mandatory: name, address, e-mail address, password; voluntary: telephone number) in order to manage the account and make further orders easier for you. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR and – due to your consent when creating it – Art. 6 (1) sentence 1 lit. a) GDPR. The account is deleted after withdrawal, unless tax/commercial retention obligations conflict with this (generally up to 10 years).
When placing an order, you must provide personal data (name, address, e-mail address, telephone number if applicable). The purpose is contract processing (contact, delivery, invoicing, defence/assertion of claims, fulfilment of legal obligations). The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR; after contract processing, Art. 6 (1) sentence 1 lit. c) GDPR (retention obligations) or lit. f) (preservation of evidence). The data is deleted after processing, unless retention obligations exist (generally up to 10 years, in individual cases longer).
To deliver the goods, we pass on the required data to the shipping service provider DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR. A tax office receives invoice documents containing your data to prepare our tax returns; data may also be passed on due to a legal obligation towards authorities (e.g. the tax office).
Depending on the payment method chosen, we pass on the data required for processing to the respective service provider. The legal basis is in each case Art. 6 (1) sentence 1 lit. b) GDPR.
PayPal: If you pay via PayPal, we pass on the relevant data (including name, address, telephone number, IP address, e-mail address, order and invoice data) to PayPal (Europe) S.à.r.l. & Cie., S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. PayPal may carry out credit checks (legal basis Art. 6 (1) sentence 1 lit. f) GDPR). Further information: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
Shopify Payments / credit card: Processing takes place via Shopify Payments (Shopify International Limited, address as in section 5; technical processing via Stripe). Payment/card data and order data are transmitted. Further information: https://www.shopify.com/legal/privacy
Klarna: If you choose a Klarna payment method, your data is transmitted to Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden; Klarna may carry out a credit check. Further information: https://www.klarna.com/de/datenschutz/
Apple Pay / Google Pay: The payment data is transmitted in encrypted form to Apple Distribution International Ltd. (Hollyhill Industrial Estate, Hollyhill, Cork, Ireland) or Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) and the payment service provider behind them.
Shop Pay: In the checkout we offer „Shop Pay“, an accelerated payment service of Shopify International Limited (address as in section 5). If you use it, your contact, shipping and payment data are stored at Shop Pay to speed up future orders. Use is voluntary. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR, or in the case of storage for future purchases Art. 6 (1) sentence 1 lit. a) GDPR. Further information: https://shop.app/privacy
To process your orders (including order management, invoicing, shipping preparation) we use the Billbee software (Billbee GmbH, Paulinenstraße 54, 32756 Detmold, Germany). In this context, your order and shipping data (name, address, e-mail address, order items) are processed. A data processing agreement pursuant to Art. 28 GDPR exists with Billbee. The legal basis is Art. 6 (1) sentence 1 lit. b) GDPR and Art. 6 (1) sentence 1 lit. f) GDPR (efficient order processing).
To fulfil the statutory obligation regarding the EU withdrawal button (§ 356a German Civil Code, BGB), we use the service „EU-Widerrufsbutton“ (provider: 401layers UG (haftungsbeschränkt), Dorothea-Erxleben-Str. 1a, 40721 Hilden, Germany). Via the „Withdraw from contract“ button you can declare your withdrawal directly online. If you complete and submit the form, the data entered (in particular name, order number, e-mail address and, where applicable, order details) is processed to handle your withdrawal; you and we receive a confirmation of receipt by e-mail. The technical integration takes place via a Shopify app proxy. A data processing agreement pursuant to Art. 28 GDPR exists with the provider. The legal basis is Art. 6 (1) sentence 1 lit. c) GDPR (legal obligation) and Art. 6 (1) sentence 1 lit. b) GDPR (processing within the scope of the contractual relationship). Further information: https://euwiderrufsbutton.de/privacypolicy
You can subscribe to a free newsletter. For registration we use the double opt-in procedure: after signing up, you will receive an e-mail in which you must confirm your registration. Your e-mail address is required. The newsletter is sent via Shopify Email (Shopify International Limited, address as in section 5). The legal basis is your consent pursuant to Art. 6 (1) sentence 1 lit. a) GDPR. You can unsubscribe at any time (unsubscribe link in every e-mail or message to info@mit-ton.de); after unsubscribing, your address is deleted from the distribution list.
This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland („Google“). Google Analytics uses cookies and similar technologies to analyse the use of the website. The information generated (including truncated IP address, device and usage data, and online identifiers) is generally transmitted to a Google server. A transfer to the USA cannot be ruled out (see section 18). We use Google Analytics with IP anonymisation; your IP address is truncated within the EU before storage.
The purpose is to evaluate use, create reports and improve our offering. The legal basis is your consent pursuant to Art. 6 (1) sentence 1 lit. a) GDPR and § 25 (1) TDDDG, given via our consent banner and revocable at any time via the cookie settings. The data linked to cookies is automatically deleted after 14 months. Further information: https://policies.google.com/privacy
We use Google Ads to draw attention to our offers on external websites. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Conversion tracking allows us to evaluate the effectiveness of our advertising; a cookie is set as soon as you click on a Google ad. Via remarketing we can show you interest-based advertising within the Google advertising network. A transfer to the USA cannot be ruled out (see section 18). The legal basis is your consent pursuant to Art. 6 (1) sentence 1 lit. a) GDPR and § 25 (1) TDDDG, revocable at any time via the cookie settings. Further information: https://policies.google.com/privacy
We use the „Meta Pixel“ of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Meta“) on our website. With the Meta Pixel we can track the behaviour of users after they have been redirected to our website by clicking on a Meta/Facebook ad or have visited our website. This allows us to evaluate the effectiveness of our ads (conversion tracking), build target groups for advertising (including Custom/Lookalike Audiences) and show you interest-based advertising within Facebook/Instagram (remarketing).
In this context, information about your use of the website (including IP address, device and browser data, online identifiers, and triggered events such as page views or purchases) is transmitted to Meta. A transfer to the USA cannot be ruled out (see section 18).
When collecting and transmitting data via the pixel, we and Meta are joint controllers within the meaning of Art. 26 GDPR; the details are set out in the joint controllership agreement (Controller Addendum) between Meta and us.
The legal basis is your consent pursuant to Art. 6 (1) sentence 1 lit. a) GDPR and § 25 (1) TDDDG, which you give via our consent banner and can withdraw at any time with effect for the future via your cookie settings. Further information: https://www.facebook.com/privacy/policy
We maintain publicly accessible profiles on social networks (Facebook and Instagram, each Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland). On our website we merely link to these profiles. If you interact with our profiles, the respective provider processes your data under its own responsibility. For the use of the Meta Pixel on our website, see section 16. Further information: https://www.facebook.com/privacy/policy
Some of the services we use (in particular Shopify, Google, Meta and PayPal) may transfer personal data to countries outside the EU/EEA, in particular to the USA. The provider of our consent tool (Omega Theme) is also based in Vietnam. In these countries there may not be a level of data protection equivalent to European law. Where a transfer takes place, this is done on the basis of the EU-US Data Privacy Framework (if the respective provider is certified), on the basis of the EU standard contractual clauses pursuant to Art. 46 (2) lit. c) GDPR, or on the basis of your explicit consent pursuant to Art. 49 (1) lit. a) GDPR. Please refer to the privacy policies of the respective providers for details.
As a data subject, you have the right to information (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing (Art. 21). If processing is based on your consent, you can withdraw it at any time with effect for the future (Art. 7 (3) GDPR). For all of this, a message to info@mit-ton.de is sufficient.
Right to object (Art. 21 GDPR): You have the right, on grounds relating to your particular situation, to object at any time to processing based on Art. 6 (1) lit. e) or f) GDPR; this also applies to profiling based on these provisions. If data is processed for direct marketing, you can object at any time; we will then no longer process your data for these purposes.
Right to lodge a complaint (Art. 77 GDPR): Without prejudice to any other remedy, you have the right to lodge a complaint with a supervisory authority if you consider that the processing infringes the GDPR. The authority responsible for us is: Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen (LDI NRW), Kavalleriestraße 2–4, 40213 Düsseldorf, Germany.
We are not legally obliged to appoint a data protection officer. If you have any questions about data protection, you can reach us at info@mit-ton.de.
As of: 19 June 2026
Please fill out the following form to submit your withdrawal request.
