Back

Privacy policy

Last updated: October 2026. This is a translation for your convenience; the German version is legally binding.

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Seibel & Weis GbR (HWS24)
Ziegeleiweg 5
57319 Bad Berleburg
Germany
Represented by the partners Lukas Seibel, Julia Weis and Gabriel Weis
Email: weis-gbr@web.de

We are not legally required to appoint a data protection officer and have therefore not done so.

2. Principles

We process personal data only to the extent necessary to provide this website, to process your orders and enquiries, or on the basis of your consent. The legal bases are in particular Art. 6(1)(a) GDPR (consent), (b) (contract and pre-contractual measures), (c) (legal obligations, e.g. retention duties) and (f) (legitimate interests). The relevant legal basis is stated in each of the following sections.

3. Hosting and shop system (Shopify)

Our online shop runs on the Shopify platform. The provider for merchants in the European Economic Area is Shopify International Limited, Victoria Buildings, 2nd Floor, 1–2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify stores and processes on our behalf all data arising from visits to the website and from orders (e.g. order, customer and payment data). We have concluded a data processing agreement with Shopify pursuant to Art. 28 GDPR.

Data may be transferred to Shopify Inc. in Canada and to service providers in the USA. For Canada there is an adequacy decision of the EU Commission; transfers to the USA are based on the EU-US Data Privacy Framework or the EU Commission's standard contractual clauses. The legal basis is Art. 6(1)(b) and (f) GDPR; our legitimate interest is the secure and reliable operation of our online shop. More information: shopify.com/legal/privacy.

4. Visiting the website and server log data

When you visit our website, technically necessary data transmitted by your browser is processed: IP address, date and time of access, page visited, referrer URL, browser type and version, operating system. This data is required to deliver the website, to ensure its security and to detect misuse (Art. 6(1)(f) GDPR). It is not combined with other data sources. The connection is encrypted (TLS).

5. Cookies and consent

We use cookies and similar technologies. We set technically necessary cookies (e.g. for the cart, sign-in and checkout) on the basis of Section 25(2) no. 2 TDDDG and Art. 6(1)(b) or (f) GDPR. All other cookies – for example for statistics or marketing – are only set if you have consented via our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can change or withdraw your consent at any time with effect for the future via the "Cookie settings" link at the bottom of every page.

Shopify also provides us with statistics on the use of the shop (e.g. page views, carts, orders). Where non-essential cookies are used for this, this only happens with your consent.

6. Storage in your browser (local storage)

For some convenience features we store information only locally in your browser, without transmitting it to us: your chosen appearance (light/dark), your "Saved for later" list, the smartphone or vehicle model you selected under "My device", and whether a usage tip has already been shown. This storage is strictly necessary for the features you explicitly requested (Section 25(2) no. 2 TDDDG). Only if you have consented to the "Preferences" category in our cookie banner do we also remember the products you viewed recently in order to show them to you again (Section 25(1) TDDDG, Art. 6(1)(a) GDPR); if you withdraw your consent, this list is deleted. You can delete this data at any time in your browser settings.

7. Fonts

The font used on this website is delivered from our own shop server. No connection to servers of Google or other font providers is established.

8. Orders and contract processing

When you place an order, we process the data required for it: name, delivery and billing address, email address, telephone number if applicable, ordered items, payment method and payment status. The legal basis is Art. 6(1)(b) GDPR. Mandatory fields are marked in the checkout; without this information we cannot conclude the contract.

Inventory management: For processing, invoicing and shipping we transfer order data via the JTL ERP-Connector to our inventory management system JTL-Wawi. The provider of the software and the connector is JTL-Software-GmbH, Rather Straße 49d, 40476 Düsseldorf, Germany. Where JTL processes data on our behalf, a data processing agreement is in place.

Shipping: For delivery we pass your name and delivery address to DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany (Art. 6(1)(b) GDPR). We only pass your email address or telephone number to DHL so that DHL can announce the delivery and arrange a delivery time with you; you can object to this at any time (Art. 6(1)(f) GDPR, legitimate interest in smooth delivery).

9. Payment processing

Payments are processed via Shopify Payments. Your payment data is transmitted directly to the respective payment service provider; we do not receive complete card or account details. The legal basis is Art. 6(1)(b) GDPR. Depending on the payment method chosen, the following are involved:

  • Credit and debit cards via Shopify Payments; the technical payment service provider is Stripe Payments Europe Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.
  • Shop Pay, a Shopify service that lets you save your details for faster checkout if you wish (see section 3).
  • Apple Pay: Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland.
  • Google Pay: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
  • Klarna (e.g. invoice or instalments): Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. Klarna may carry out an identity and credit check; details can be found in Klarna's privacy notice shown during checkout.

The providers' own privacy notices also apply. Data may be transferred to third countries (in particular the USA) on the basis of the EU-US Data Privacy Framework or standard contractual clauses.

10. Customer account

You can create a customer account to view orders, invoices and addresses. You sign in without a password using a code we send you by email. For this we process your email address and your order data (Art. 6(1)(b) GDPR). If you sign in with "Shop", your sign-in data is processed via Shopify's Shop service. You can have your customer account deleted at any time; a short message to us is sufficient. Statutory retention obligations remain unaffected.

11. Contacting us

If you contact us via the contact form, email or WhatsApp, we process your details (e.g. name, email address, telephone number, order number, content of your message) to answer your enquiry. The legal basis is Art. 6(1)(b) GDPR where your enquiry relates to a contract, otherwise Art. 6(1)(f) GDPR (legitimate interest in answering enquiries). We delete the data once your enquiry has been fully dealt with and no retention obligations apply.

WhatsApp: If you write to us via WhatsApp, the communication is handled by WhatsApp Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland. WhatsApp processes in particular your telephone number and communication metadata; a transfer to Meta Platforms, Inc. in the USA is possible (EU-US Data Privacy Framework). Messages are end-to-end encrypted. Use is voluntary; you can always reach us by email or the contact form instead. Please do not send us sensitive data via WhatsApp.

12. Back-in-stock notification (Alert Me)

If a version is sold out, you can ask to be notified by email as soon as it is available again. For this we process your email address, the selected product and version, and the time of your sign-up. The legal basis is the consent you give in the form (Art. 6(1)(a) GDPR).

For the sign-up and for sending the notification we use the Shopify app “Alert Me Restock” by GrootApp, A-806 RJD Business Hub, Naginawadi Road, Katargam, 395004 Surat (Gujarat), India (hello@grootapps.com). The data is stored on servers in the USA (Amazon Web Services). There is no adequacy decision of the EU Commission for India; the transfer is therefore based on your explicit consent (Art. 49(1)(a) GDPR). This involves the risk that authorities there may access the data and that you may not have the same rights and remedies as in the EU.

Data is only transferred when you submit the form – merely viewing a product page does not load any content from Alert Me in our shop. We delete your sign-up once the notification has been sent, at the latest after 12 months. You can withdraw your consent at any time with effect for the future by sending us an email.

If the service is exceptionally unavailable, your request reaches us instead as a message via our contact form (see section 11). We then notify you ourselves and delete the message afterwards.

13. Product reviews (Judge.me)

For product reviews we use the Judge.me service of Judge.me Ltd., c/o Buckworths, 1–3 Worship Street, London EC2A 2AB, United Kingdom. When you open a product page, your browser loads the review display from Judge.me servers; technically necessary data such as your IP address is transmitted in the process (Art. 6(1)(f) GDPR; our legitimate interest is displaying genuine customer reviews).

If you submit a review, we process the data you enter (name or initials, email address, star rating, text and photos, if any) and publish the review and your name or initials – never your email address (Art. 6(1)(a) GDPR). Reviews from buyers are marked as "verified". After an order we only ask you for a review by email if you have consented to receiving marketing emails; you can object at any time via the unsubscribe link.

There is an adequacy decision of the EU Commission for the United Kingdom. More information: judge.me/privacy.

14. Newsletter

If you subscribe to our newsletter, we use your email address to send you information about new products and offers (Art. 6(1)(a) GDPR). Subscription uses the double opt-in procedure: your address is only added after you confirm via the link in our email. We store the time and IP address of the sign-up and confirmation to be able to prove your consent. The newsletter is sent via Shopify (see section 3). You can unsubscribe at any time via the link in every email or by sending us a message.

15. Retention period

We only store personal data for as long as necessary for the respective purpose. Documents relevant under commercial and tax law (e.g. invoices and accounting records) are retained for six, eight or ten years depending on their type in accordance with Section 257 HGB and Section 147 AO (Art. 6(1)(c) GDPR). The data is then deleted.

16. Your rights

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to withdraw consent at any time with effect for the future (Art. 7(3) GDPR). Simply contact us at the email address above.

Right to object (Art. 21 GDPR): Where we process data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you may object at any time on grounds relating to your particular situation. You may object to processing for direct marketing purposes at any time without giving reasons.

You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Landesbeauftragte für Datenschutz und Informationsfreiheit Nordrhein-Westfalen, Kavalleriestraße 2–4, 40213 Düsseldorf, Germany, www.ldi.nrw.de.

17. Automated decisions

We do not carry out automated decision-making, including profiling, within the meaning of Art. 22 GDPR. For a possible credit check when paying with Klarna, see section 9.

18. Changes

We update this privacy policy when our website or the legal requirements change. The version published here applies.