Privacy Notice

Controller

The controller within the meaning of data protection laws, in particular the EU General Data Protection Regulation (GDPR), is:

25pix GmbH
Brahmsstraße 9
85591 Vaterstetten, Germany

Managing Directors: Christine Kipke, Nicolas Leiser
Email: info@25pix.com

Data Protection Officer

We have appointed Arne Vodegel as our Data Protection Officer.

Your Data Subject Rights

You may exercise the following rights at any time under the contact details provided, in accordance with the GDPR:

  • Access to your data stored with us and information on its processing (Art. 15 GDPR)
  • Rectification of incorrect personal data (Art. 16 GDPR)
  • Erasure of your data stored with us (Art. 17 GDPR)
  • Restriction of processing if we are not yet allowed to delete your data due to legal obligations (Art. 18 GDPR)
  • Objection to the processing of your data (Art. 21 GDPR)
  • Data portability if you have consented to data processing or entered into a contract with us (Art. 20 GDPR)

If you have given us consent, you can revoke it at any time with effect for the future.

You may also contact a supervisory authority with a complaint at any time. A list of supervisory authorities (for the non-public sector) with contact information can be found at:
https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html


Processing Activities

Collection of General Information When Visiting Our Website

Nature and Purpose of Processing
When you access our website, general information is automatically collected (server log files), such as browser type, operating system, ISP domain, IP address, etc. This is done to:

  • ensure a technically error-free presentation
  • optimize the website

We do not use this data to identify you personally. However, we may review log files if there is evidence of unlawful use.

Legal Basis & Legitimate Interest
Processing is based on Art. 6(1)(f) GDPR—our legitimate interest in improving the stability and functionality of our website and ensuring system security.

Recipients
Technical service providers acting as data processors.

Storage Period
Log files are stored for a maximum of 14 days unless a security-related event (e.g., DDoS attack) occurs.

Provision Required or Necessary
Not legally or contractually required—but the service cannot be provided without the IP address.


Contacting Us

Nature and Purpose of Processing
If you use our contact form or email us, the information provided (including metadata like IP address, timestamps, and referrer URLs) will be stored to respond to your request.

Legal Basis
Art. 6(1)(f) GDPR—legitimate interest in easy communication.
Art. 6(1)(b) GDPR—if it’s in the context of pre-contractual steps.

Recipients
Possible technical service providers acting as data processors.

Storage Period
Deleted within six months unless a contract is concluded, in which case storage complies with legal retention periods (6–10 years).

Provision Required or Necessary
Voluntary, but necessary for us to process your request.


Newsletter

Nature and Purpose of Processing
We collect your email and confirm subscription via a double opt-in method to send newsletters.

Legal Basis
Your consent (Art. 6(1)(a) GDPR)

Recipients
Email service providers acting as data processors.

Storage Period
Only as long as consent exists.

Provision Required or Necessary
Voluntary and based on consent. No newsletter without it.

Revoking Consent
You may unsubscribe at any time via the link in each email or via contact details in this privacy policy.


Paid Services

Nature and Purpose of Processing
We process your data to fulfill your order, handle returns/exchanges, and manage complaints.

Legal Basis
Art. 6(1)(b) GDPR—necessary for the contract.

Recipients

  • Technical service providers
  • Shipping providers (name & address)
  • Payment providers and banks

Storage Period
Data is stored in accordance with legal retention periods (6 or 10 years).

Provision Required or Necessary
Contractually required—without it, we cannot process your order.


Creating a Customer Account

Nature and Purpose of Processing
We collect your contact details and purchase history to set up your customer account.

Legal Basis
Your consent (Art. 6(1)(a) GDPR)

Recipients
Technical service providers acting as data processors.

Storage Period
Only as long as consent exists.

Provision Required or Necessary
Voluntary; not required for purchases. Guest checkout remains available.

Revoking Consent
You may request deletion of your account at any time using the contact details provided.


Audience Measurement

Nature and Purpose of Processing
We analyze visitor behavior and demographics (e.g., age, gender) pseudonymously to optimize our website.

Legal Basis
Art. 6(1)(f) GDPR—legitimate interest in improving web services.

Recipients
Technical service providers acting as data processors.

Storage Period
See specific tool details below.

Provision Required or Necessary
Not legally or contractually required.


Tools Used for Analytics

Google Analytics

Nature and Purpose of Processing
With your consent, we use Google Analytics 4. Google anonymizes your IP address by default. User behavior is tracked through events such as:

  • Pageviews, session starts, engagement
  • First-time visits, scroll depth
  • Ad views/clicks, internal search, video interaction

The following information is also collected:

  • Your approximate location (region)
  • Your IP address (in shortened form)
  • Technical information such as browser, internet provider, device, and screen resolution
  • The source (referrer URL) of your visit (i.e., which website or advertising medium you came to us from)

More information on terms of use and data protection can be found at:
https://www.google.com/analytics/terms/de.html and
https://policies.google.com/?hl=de.

On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator.

Legal Basis
Consent (Art. 6(1)(a) GDPR)

Recipients

We use technical service providers for the operation and maintenance of our website and for the analysis of cookies, who act as our data processors.

Another recipient of the data is Google Ireland Limited (Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland). Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider.

Storage Period

The data we send and that is linked with cookies is automatically deleted after 14 months.

The maximum lifespan of Google Analytics cookies is two years. Data whose retention period has been reached is automatically deleted once a month.

Third-Country Transfer
Data may be processed in the U.S. There is a potential risk of access by U.S. authorities. Standard contractual clauses are in place. See:
https://business.safety.google/adscontrollerterms/sccs/eu-c2c

Revoking Consent

You can withdraw your consent at any time with effect for the future in the cookie settings.
In addition, you can prevent tracking by Google Analytics on our website by clicking this link. This will install an opt-out cookie on your device. This cookie will prevent the collection of data by Google Analytics on this website and in this browser in the future, as long as the cookie remains installed in your browser.
Furthermore, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing the browser plugin available at the following link: Browser Add On to deactivate Google Analytics


Cookies

A cookie is a small data record that is created when visiting a website and temporarily stored on the visitor’s device. If the server of this website is accessed again by the website user, the user’s browser sends the previously received cookie back to the server. The server can evaluate the information obtained through this process. Cookies can, in particular, make navigation on a website easier.

Detailed information about cookies and which cookies are used on this website for what purpose can be accessed at any time in the cookie settings.

Deleting Cookies

You can delete individual cookies or the entire set of stored cookies. Additionally, you will find information and instructions on how to delete these cookies or block their storage in advance. Depending on your browser provider, you can find the necessary information at the following links:

Additionally, you can generally prevent the loading of so-called scripts. NoScript allows the execution of JavaScript, Java, and other plugins only on trusted domains of your choice.

For information and instructions on how to configure this feature, please refer to your browser provider. (For example, for Mozilla Firefox: https://addons.mozilla.org/de/firefox/addon/noscript/)


Technically Necessary Cookies

Type and Purpose of Processing
We use cookies to make our website more user-friendly. Some elements of our website require the identifying of the calling browser even after navigating to a different page.
The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these functions, it is necessary to recognize the browser again after a page change.

We require cookies for the following applications:
You can find an overview of the cookies used in our cookie consent tool.

Legal Basis and Legitimate Interest
Data processing is carried out solely based on our legitimate interest in designing our website in a user-friendly way and in documenting consent pursuant to Art. 6(1)(f) GDPR in conjunction with a balancing of interests according to §25(2) TDDDG (Telecommunications and Telemedia Data Protection Act).

Recipients
The recipients of the data may include technical service providers who act as processors for the operation and maintenance of our website.

Storage Duration
You can find the respective storage duration of cookies in our cookie consent tool.

Provision Required or Necessary
Providing the aforementioned personal data is not legally or contractually required. However, without this data, the service and functionality of our website cannot be guaranteed. In addition, some services may not be available or may be restricted.

Right to Object
Please refer to the information below on your right to object in accordance with Art. 21 GDPR.

Voluntary Provision
The provision of your data is voluntary, based solely on your consent. However, please note that without your consent, you may not be able to fully use all functions of this website.

Withdrawal of Consent
You can withdraw your consent at any time via the cookie consent tool with effect for the future.

Profiling
With the help of non-essential cookies, the behavior of website visitors can be analyzed, and interests evaluated. For this, we create a pseudonymous user profile.


Information About Your Right to Object Under Art. 21 GDPR

Individual Right of Objection
You have the right, for reasons arising from your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR (data processing on the basis of a balance of interests); this also applies to profiling based on this provision according to Art. 4 No. 4 GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.

Recipient of the Objection
info@25pix.com


Changes to Our Privacy Policy

We reserve the right to adapt this privacy policy to always comply with current legal requirements or to implement changes to our services in the privacy policy, e.g., when introducing new services.
The new privacy policy will then apply to your next visit.


Questions About Data Protection

If you have questions about data protection, please send us an email to the controller mentioned above.


Copyright Notice

This privacy policy was created with the help of activeMind AG – the experts for external data protection officers (Version #2024-10-25).

en_GBEN