Privacy Policy
It is a matter of tremendous importance to us that we handle the personal data you provide responsibly, which is why we take all necessary measures to protect it. It goes without saying that all applicable national and European data protection regulations are complied with. Below, you will find all the information pertaining to the purpose and legal basis for processing this data, to whom the data is passed on, how long it is stored and what rights you are entitled to.
1. Who is responsible for data processing, and who can you contact?
Living Crafts GmbH, Schlesier Straße 11, 95152 Selbitz, Germany, is the data controller responsible for your personal data.
E-mail: service@livingcrafts.de
Telephone: +49 (0)9280 98108-0
You may contact our Data Protection Officer at datenschutz@livingcrafts.de or Data Protection Officer c/o Living Crafts GmbH, Schlesier Straße 11, 95152 Selbitz.
2. When do we collect data?
We process data when you place an order in our online shop, when you visit this website and when you get in touch with us. This may be data that we require to process the customer account and/or the order, to visit the website or to establish contact, as well as data that is provided voluntarily. Details can be found in Clause 3.
3. For what purposes is data processed, and on what legal basis is this managed?
3.1. Customer account, guest order
You have the option of registering as a customer with a customer account on our homepage. To this end, it is necessary for the respective user to go through a registration process, in order to gain access to the shopping basket, maintain user data, payment settings etc., place and view orders by logging in at a later date.
Data category:
- Salutation
- Name
- Street and house number
- Postcode
- Location
- Country
- E-mail address
- Voluntary information: Date of birth
- Voluntary information: Telephone
- Voluntary information: Fax
- Voluntary information: How did you become aware of Living Crafts
Assignment of a password during registration:
The Password Policy must be adhered to: 1 lower case letter, 1 upper case letter, 1 number, 1 special character [#$^+=!*()@%&-.], and the password must consist of at least 8 characters in total
All information provided during the registration process is saved in your personal account and can be updated at any time.
Your data shall be forwarded to dennree GmbH. Dennree GmbH shall then manage the storage of the customer account, as well as payment monitoring. For this purpose, the above-mentioned data, as well as the payment modalities, shall be transmitted to the latter when an order is placed.
In order to ensure data protection-compliant processing, we have concluded an order processing contract with our service provider.
Data processing shall take place for the provision of your customer account, access to your customer profile and for order and payment processing.
The legal basis for this processing is Art. 6 (1) lit. b GDPR and your declaration of consent pursuant to Art. 6 (1) lit. a in conjunction with Art. 7 GDPR.
Should you wish to place an order without creating a customer account, the above-mentioned data shall also be collected. However, this shall only be processed for order and payment processing.
3.2. Advertising
3.2.1. Personalised offers, surveys
Should you give your consent, we shall use your customer account data to send you interesting offers and information tailored to your individual needs – including in electronic form if you provide your e-mail address. You may also be invited to take part in surveys from time to time.
The legal basis for the processing of this data is your consent in accordance with Art. 6 (1) lit. a GDPR.
3.2.2. Newsletter
You may subscribe to a free newsletter on our website. When you register for the newsletter, the data from the input screen is transmitted to us. The e-mail address must be provided as mandatory information and as voluntary information: Salutation, title, first name, last name and date of birth. The user’s e-mail address shall be stored for as long as the newsletter subscription is active. Any other personal data collected during the registration process shall generally be deleted after a period of 90 days.
The legal basis for the processing of data subsequent to registration for the newsletter by the user is consent in accordance with Art. 6 (1) lit. a GDPR.
3.3. Competitions
From time to time, we will offer you the opportunity to take part in competitions – including via social media. The personal data you provide to us as part of such a promotional campaign shall be used exclusively for the purpose of processing said promotion (in the case of a competition, for example, for determining the winner, notifying the winner and sending the prize). We use social media to inform our customers via a corresponding post or story. All users can then state why they would like to win the prize, without the specific answer having any influence on the prize draw itself. After the draw, we shall announce the winners under the respective post and ask them to contact us by way of private message.
Should you take part in a competition provided by us, we shall process your data insofar as this is necessary for the processing of the competition. If necessary, we shall obtain separate consent from you for the further processing of your data as part of the competition. You must be at least sixteen years old to participate. The legal basis for this processing is Art. 6 (1) lit. a or Art. 6 (1) lit. b GDPR.
The data collected for participation shall be deleted at the end of the competition, unless you have consented to further processing.
3.4. Contact
Various contact forms are available on our website that can be used to contact us electronically. Mandatory information is marked with an asterisk; all other information is voluntary. Should a user make use of this option, the data entered in the input mask shall be transmitted to us and stored. Your consent is obtained for the processing of the data as part of the process in which it is sent, and reference is made to this Privacy Policy.
Alternatively, you may contact us via the e-mail address provided. In this case, the user’s personal data transmitted with the e-mail shall be stored.
No data shall be passed on to third parties in this context. The data shall be used exclusively for processing the conversation. Should you contact us by telephone, your name and telephone number, potentially your address and the reason for your call shall also be stored.
The processing of personal data from the input mask serves us to process the contact and process the request. When establishing contact by e-mail or telephone, this also constitutes a necessary, legitimate interest in the processing of your data.
Any other personal data processed during the process by which your data is sent shall be used to prevent misuse of the contact form and to ensure the security of our information technology systems. We shall store your data relating to an enquiry until the process has been completed, for a maximum of 6 years.
The legal basis for the processing of the data is Art. 6 (1) lit. a GDPR. The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) f) GDPR.
3.5. Application
Our online careers portal affords you the opportunity to find out about vacancies at Living Crafts and within the dennree Group, and to submit your application online. To do this, you must enter your title, first name, last name, street and house number, postcode, city and country as mandatory fields, as well as your telephone number as voluntary information. Other mandatory information we require concerns how you heard about us, your earliest starting date and a download of your CV. You can also voluntarily notify us of which area of the company you are interested in, the period of your employment and your salary expectations. You can also voluntarily upload a cover letter, your picture and other documents.
Should you submit your application by post or e-mail, the following processing principles shall apply accordingly.
Your data shall be processed by the dennree Group’s HR department for the purpose of processing your application. On the basis of the data you provide, we shall make a pre-selection for filling the vacancy.
Should you use our online career portal, your data shall be transmitted in encrypted form to our data processor – heroes GmbH – and then made available to the dennree Group’s HR department.
If we are unable to consider you for a vacancy, you shall be informed by e-mail. The data shall then be deleted within 6 months of completion of the application process, unless you have consented to your application being included in our application pool.
Should you apply using the contact form for unsolicited applications for an independent, organic market, your application shall be forwarded directly to the owner of this organic market and processed there.
The legal basis for the processing of data is Art. 6 (1) lit. b GDPR.
The applicant shall have the option to withdraw their consent to the processing of personal data at any time. In this case, the application process shall be terminated and the data deleted. You may also make changes to your profile in the applicant management system and delete your data under “Delete account”. After your account has been deleted, your data shall be anonymised and used for statistical purposes. Please note that changes to your profile will affect all your applications.
3.6. Cookies
Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed once more. A list of the cookies used can be found in the Cookie Policy in the “Privacy Settings”.
Different cookies are used: necessary, analysis and marketing cookies.
The necessary cookies are used to make our website more user-friendly. Some elements of our website require that the accessing browser can be identified even after a page change. The following data is stored and transmitted in the cookies: Language settings, items in a shopping basket or shopping list, log-in information. The user may also specify the market in the market search by location. The page shall then open with the market that has been entered. The legal basis is Art. 6 (1) lit. b and f GDPR in conjunction with Section 25 (2) No. 2 Telecommunications-Telemedia Data Protection Act (TTDSG).
The analysis cookies are used to enable the analysis of the surfing behaviour of users and to evaluate their surfing behaviour, in order to constantly improve the website. The legal basis for processing is Art. 6 (1) lit. a GDPR in conjunction with Section 25 (1) Telecommunications-Telemedia Data Protection Act (TTDSG). Data processing shall only take place if explicit consent has been given in the cookie banner or cookie settings.
Marketing cookies are used to enable an analysis of the user’s surfing behaviour so that individual content can be displayed. Various data provided by (or collected from) you shall be combined to prepare or perform marketing measures and to display personalised advertising. The legal basis is Art. 6 (1) a) GDPR in conjunction with Section 25 (1) Telecommunications-Telemedia Data Protection Act (TTDSG). Data processing shall only take place if explicit consent has been given in the cookie banner or cookie settings.
3.7. Social media
On our website you will find buttons that allow you to interact with various social media networks. You can activate these social plugins, whereby activation shall entail the consequence that, in particular, the website address on which the activated plugin is located, the date and time the website is accessed, information about the browser and operating system used and your current IP address are transmitted to the respective social media provider in this case. If you are already logged in to the relevant networks at the time the plugin is activated, the plugin shall also be able to determine your user name and, if applicable, your real name from the above-mentioned data. With the help of the available buttons, it is possible to share a post or page of this offer on the social network, to follow the provider on the social network and to go directly to posts on the social networks.
Our online offering uses plugins from the social networks Facebook, Instagram, Xing and LinkedIn. The plugins can be recognised by their respective logos. These are social media services based in the USA and other countries outside the European Union. Your personal data shall, therefore, also be processed outside the European Union when you use the plugin. We would like to draw your attention to the fact that companies in these countries are subject to data protection laws that do not always correspond to the standard of European data protection laws.
We have no influence on the scope, type and purpose of data processing by the respective provider of the social media service. Information on how you can manage your content and information on social networks can be found at
https://www.facebook.com/about/privacy
LinkedIn Datenschutzrichtlinie
3.8. Google services, Microsoft Bing Ads
Our website uses various Google services (Google analytics, Google Ads, Google Tag Manager) and the Microsoft Bing Ads service.
The purpose of the cookies used by Google Analytics, Google Ads and Microsoft Bing Ads is to analyse your use of the website. Google shall use this information on our behalf to analyse the use of our online offer by users, to compile reports on the activities within this online offer and to provide us with further services associated with the use of this online offer and the use of the Internet in general. Pseudonymised user profiles can be created from the processed data. We only use Google Analytics with activated IP anonymisation. This means that the user’s IP address is shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. The IP address transmitted by the user’s browser will not be merged with other Google data. The legal basis for the processing is your consent in accordance with Art. 6 (1) lit. b GDPR.
The Google Tag Manager makes it possible to measure website and advert performance. Google Tag Manager cookies are used to pass on user behaviour data to Google Analytics and Google Ads after interaction with ads or the website, which allows an evaluation of page views, clicks, scrolling, use of the shopping cart and campaign performance, among other things.
The legal basis for processing is Art. 6 (1) lit. a in conjunction with Section 25 (1) Telecommunications-Telemedia Data Protection Act (TTDSG). Data processing shall only take place if explicit consent has been given in the cookie banner or cookie settings.
4. Who has access to the data and to whom is it transmitted?
The data shall be processed within the dennree Group and only rendered accessible to those persons who need it to fulfil these tasks. In addition, various service providers shall receive access to the data collected if they are used by us for fulfilment. They receive data only to the extent necessary for the fulfilment of the services. These are service providers in the following categories:
- Hosting service provider for the operation of the website
- Development service provider for the development and operation of the website
- IT service provider for the operation of the online shop
- Postal service provider for the dispatch of online orders
- Payment service provider for the processing of online orders
- Credit agencies for performing credit checks
- Debt collection agencies and law firms for the enforcement of claims
- Service provider for processing returns and claims for defects
- E-mail marketing service provider for sending newsletters
- Print service provider for the creation and dispatch of loyalty cards
- Advertising network operators for embedding advertising campaigns and displaying online advertising
- Service provider for the integration and performance measurement of online advertising
- Analysis service provider for the evaluation of data and analysis of website usage
- Market research company for the realisation of market research studies
- Operators of social media platforms when interacting with plugins
5. What rights do you have?
5.1. Right to the disclosure of information
You have the right to request the disclosure of information about your personal data processed by us in accordance with Art. 15 GDPR. In particular, you may request information about the processing purposes, the category of personal data, the categories of recipients to whom your data has been (or will be) disclosed, the envisaged storage period, the existence of a right to rectification, erasure, restriction of processing or objection, the existence of a right of appeal, the origin of your data if it has not been collected by us, as well as the existence of automated decision-making – including profiling – and, if applicable, meaningful information pertaining to the individual details of your data. Please contact info@biomarkt.de directly if you wish to exercise your right to information.
5.2. Rectification, erasure, restriction of processing and data portability
You also have the right – assuming that the legal requirements are met,
- in accordance with Art. 16 GDPR, to immediately request the correction of incorrect or incomplete personal data stored by us;
- to demand the erasure of your personal data stored by us in accordance with Art. 17 GDPR, unless the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defence of legal claims;
- in accordance with Art. 18 GDPR, to demand the restriction of the processing of your personal data if the accuracy of the data is disputed by you, the processing is unlawful but you refuse to delete it and we no longer need the data, but you require it for the assertion, exercise or defence of legal claims or you have lodged an objection to the processing in accordance with Art. 21 GDPR;
- in accordance with Art. 20 GDPR, to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request that it be transmitted to another controller.
5.3. Right of lodge an objection
If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 (1) Sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you shall have a general right to lodge an objection, which shall be implemented by us without specifying a particular situation.
If you wish to exercise your right of cancellation or objection, simply send an e-mail to info@denns.de.
5.4. Revocation of consent
You have the right to revoke your declaration of consent under data protection law at any time. The revocation of consent shall not affect the lawfulness of processing based on consent before its revocation.
5.5. Supervisory authority
Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular, in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR. The supervisory authority with which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy pursuant to Art. 78 GDPR. The address of the supervisory authority responsible for our company is Bayerisches Landesamt für Datenschutzaufsicht, Postfach 1349, 91504 Ansbach, e-mail: poststelle@lda.bayern.de.
6. Cookie Policy
Our website uses cookies to personalise content and advertisements, to offer functions for social media and to analyse access to our website. We also share information about your use of our website with our social media, advertising and analytics partners. Our partners may combine this information with other data that you have provided to them or that you have collected as part of your use of the services.
Cookies are small text files that are used by websites to make the user experience more efficient.
By law, we may store cookies on your device if they are strictly necessary for the operation of this site. We need your permission for all other cookie types.
This site uses different types of cookies. Some cookies are placed by third parties that appear on our pages.
You can change or revoke your consent at any time on our website in the data protection settings.
In our Privacy Policy, you can find out how you can contact us and how we process personal data. Please enter your “Consent ID” (“Einwilligungs-ID”) and the date when you contact us regarding your consent.
You can change your cookie settings in the data protection settings at any time.
Version as of: 24.03.2025