Privacy policy

1. Responsible person

The controller responsible for data processing on this website is:
Kennel & Schmenger Handelsgesellschaft mbH
Im Erlenteich 1-5
66955 Pirmasens
Germany
Phone: +49 (0) 6331 710-0
E-Mail: [email protected]

Data protection officer:
E-Mail: [email protected]

2. general information on data processing

Unless otherwise stated below, the provision of your personal data is not required by law or contract and is not necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide data has no consequences.

“Personal data” means any information relating to an identified or identifiable natural person.

3. visit to our website / server log files

When you visit our website, certain information is automatically transmitted by your browser to our server or to our hosting service provider and stored in so-called server log files. This includes in particular

IP address
Date and time of access
URL accessed / name of the file accessed
operating system used
Browser type and browser version
amount of data transferred
Referrer URL (previously visited page)
Internet service provider of the accessing system

This data is processed on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in ensuring the trouble-free operation of the website, IT security and the optimization of our online offering. The log files are generally deleted after up to 90 days, unless further storage is required for evidentiary purposes.

4. making contact

4.1 Contact by e-mail

If you contact us by email, we will process your personal data (e.g. name, email address, content of the message) solely for the purpose of processing and responding to your request.

If the contact is made for the implementation of pre-contractual measures or in connection with an existing contract, the legal basis is Art. 6 para. 1 lit. b GDPR. In all other cases, processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR due to our legitimate interest in processing your request. In this case, you have the right to object to this processing at any time on grounds relating to your particular situation.

The data will be deleted as soon as your request has been conclusively answered and there are no legal obligations to retain the data.

4.2 Contact form

If you use our contact form, we collect the data you enter (e.g. name, e-mail address, message) solely for the purpose of processing your request.

The legal basis is - depending on the content of your request - Art. 6 para. 1 lit. b GDPR (pre-contractual measures / contract performance) or Art. 6 para. 1 lit. f GDPR (legitimate interest in processing your request). Here, too, you have the right to object at any time for reasons arising from your particular situation if processing is based on Art. 6 para. 1 lit. f GDPR.

4.3 Address validation (Google Maps API)

We use address validation functions of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”) on our website to check and complete address data entered by you (e.g. street, house number, zip code, city, country) in forms. The data entered is transmitted to Google and analyzed there. If necessary, your e-mail address and telephone number may also be processed.

Your data may be transferred to the USA. The EU Commission has issued an adequacy decision for the USA (Trans-Atlantic Data Privacy Framework - TADPF). Google is certified in accordance with the TADPF.

The legal basis is Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a correct data basis for proper contract processing. You can object to this processing at any time for reasons arising from your particular situation.

Further information on Google's terms of use and data protection can be found at https://cloud.google.com/maps-platform/terms and https://policies.google.com/privacy.

5. Applications by e-mail

If you apply to us by e-mail, we will process the personal data you provide (e.g. contact details, CV, qualifications, certificates) solely for the purpose of deciding whether to establish an employment relationship.

The legal basis is Art. 6 para. 1 lit. b GDPR in conjunction with § 26 BDSG (implementation of pre-contractual measures in the employment context).

After completion of the application process, your data will generally be deleted after six months at the latest, unless you have consented to longer storage (e.g. inclusion in an applicant pool) or there is a legal obligation to store your data for longer. If you are hired, the data will be transferred to your personnel file.

6. customer account and orders

6.1 Customer account

You can create a customer account in our online store. For this purpose, we process the data you provide (e.g. name, address, e-mail address, password).

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future; we will then delete your customer account, provided that there are no legal storage obligations to the contrary.

6.2 Orders

When you place an order in our online store, we process your personal data (e.g. name, billing and delivery address, contact details, products ordered, payment information) to process the order process.

The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfillment). It is not possible to place an order without providing the required data.

To process the contract, we pass on data to service providers to the extent necessary, e.g:

shipping companies
Dropshipping partner
Payment service provider
Service provider for IT and store operations

The transfer takes place on the basis of Art. 6 para. 1 lit. b GDPR (contract fulfillment) and is limited to what is necessary.

7. newsletter and direct advertising

7.1 Newsletter

If you register for our newsletter, we will only use your email address to send you our newsletter with information about our products, offers and promotions.

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future, e.g. via the unsubscribe link in the newsletter or by sending us a message. Your e-mail address will then be deleted from the mailing list.

7.2 Newsletter dispatch via GetResponse

To send our newsletter, we use the GetResponse service provided by GetResponse Sp. z o.o., Arkonska 6, A3, 80-387 Gdansk, Poland (“GetResponse”).

The data you provide (e.g. e-mail address, name if applicable) is transferred to GetResponse and processed on servers in the EU. GetResponse also supports us in evaluating our newsletter campaigns, e.g. by measuring opening and click rates using tracking pixels and individual links. IP address, browser information, device data and times of openings/clicks can be processed. The data is pseudonymized and used for statistical evaluations.

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this at any time; details on the use of data by GetResponse can be found in GetResponse's privacy policy at https://www.getresponse.de/legal/privacy.

7.3 Shipping information of the transport company

If you give your express consent during the ordering process, we will pass on your e-mail address to the shipping company we use so that it can inform you by e-mail about the status of your delivery.

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time by contacting us or the shipping company directly.

8. Payment service providers and credit checks

8.1 PayPal Express

We offer the payment method “PayPal Express” from PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (“PayPal”). If you select this payment method, the data required for payment processing will be transmitted to PayPal.

To integrate the service, PayPal may collect certain information (e.g. IP address, browser type, operating system, device type) and use cookies when you visit our website.

The legal basis for this processing is Art. 6 para. 1 lit. f GDPR (legitimate interest in offering our customers various payment options) and, with regard to the specific payment processing, Art. 6 para. 1 lit. b GDPR (fulfillment of contract).

Further information on data processing by PayPal can be found at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

8.2 PayPal Check-Out (incl. credit card, direct debit, “pay later”, purchase on account)

We use PayPal Check-Out as a central payment service. Depending on the payment method selected (e.g. PayPal, credit card via PayPal, direct debit via PayPal, “pay later”, purchase on account), the data required for this is transmitted to PayPal and processed there.

The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfillment). For certain payment methods, PayPal may carry out a credit check and transmit data to credit agencies for this purpose. This is done on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in protection against payment defaults).

Details on the credit check and the credit agencies used can be found in PayPal's privacy policy.

8.3 Payment processing via Mollie

We also use the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands (“Mollie”). Depending on the selected payment method, payment data (e.g. bank details, credit card details), IP address, browser and device data and order information are transmitted to Mollie.

The legal basis is Art. 6 para. 1 lit. b GDPR (contract fulfillment). Further information can be found in Mollie's privacy policy at https://www.mollie.com/de/privacy.

8.4 Credit check / SCHUFA

If we make advance payments (e.g. purchase on account), we reserve the right to carry out a credit check. For this purpose, we may transmit personal data to SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden and obtain information there.

The legal basis is Art. 6 para. 1 lit. f GDPR (legitimate interest in avoiding payment defaults). You can object to this processing at any time for reasons arising from your particular situation. In this case, a certain payment method may not be offered.

9. cookies

Our website uses cookies. These are small text files that are stored on your end device and may contain information. Some of the cookies are technically necessary to provide website functions. Other cookies are used for statistical or marketing purposes.

You can set your browser so that you are informed about the setting of cookies, allow cookies only in individual cases, exclude the acceptance of cookies for certain cases or activate the automatic deletion of cookies when closing the browser. You can delete cookies that have already been saved at any time. If cookies are deactivated, the functionality of the website may be restricted.

Insofar as we use technically necessary cookies, this is done on the basis of § 25 para. 2 TDDDG and Art. 6 para. 1 lit. f GDPR (legitimate interest in a functional website). We obtain your consent for all other cookies or similar technologies (see cookie consent tool).

10. cookie consent management (Shopware)

We use the Cookie Consent Manager of shopware AG, Ebbinghoff 10, 48624 Schöppingen (“Shopware”) to manage and document your consent to the use of cookies and similar technologies.

User information (e.g. your selection, IP address, time of consent) is processed for this purpose. The legal basis is Art. 6 para. 1 lit. c GDPR (fulfillment of legal obligations) in conjunction with Art. 7 para. 1 GDPR.

You can find further information at https://www.shopware.com/de/datenschutz/.

11. web analytics, online advertising and affiliate programs

11.1 Google Analytics 4

We use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google Analytics uses cookies or similar technologies to analyze your use of our website.

The following data is processed: IP address (shortened), click path, pages viewed, technical information about browser and device, referrer URL, location data (approximate), purchase activities.

The IP address is usually truncated before being transmitted to the USA. However, data may still be transmitted to Google LLC servers in the USA. Google is certified in accordance with the Trans-Atlantic Data Privacy Framework (TADPF).

The legal basis for the use of Google Analytics is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with Section 25 para. 1 TDDDG. You can revoke your consent at any time with effect for the future via the cookie consent tool.

You can find further information at https://policies.google.com/technologies/partner-sites and https://policies.google.com/privacy.

11.2 Meta Pixel (Facebook/Instagram)

We use the Meta Pixel of Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (“Meta”) on our website to target website visitors on the social networks Facebook and Instagram with interest-based advertising and to generate conversion statistics.

Meta and we are joint controllers for certain processing steps. The corresponding agreement pursuant to Art. 26 GDPR is available at https://www.facebook.com/legal/terms/businesstools can be viewed.

Among other things, the following data is processed: pages visited, interactions, device information, IP address, Facebook/Instagram ID, if applicable, if you are logged in there. Meta can link the data to existing user accounts.

Your data may be transferred to the USA. Meta is certified according to the TADPF.

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. You can withdraw your consent at any time. Further information on data processing by Meta can be found at https://www.facebook.com/privacy/policy.

11.3 Google Ads conversion tracking and remarketing

We use Google Ads with conversion tracking and the remarketing or “similar target groups” function of Google Ireland Limited to measure the success of our ads and to show you interest-based advertising in the Google advertising network.

Cookies are used to record which ads were clicked on and which actions were subsequently taken on our website (e.g. purchases). In addition, anonymized user profiles can be created that are used to control personalized advertising.

Data may be transmitted to Google LLC servers in the USA (TADPF certification).

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. You can revoke your consent at any time via the cookie consent tool.

11.4 Microsoft Advertising

We use Microsoft Advertising from Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA (“Microsoft”) to track users who reach our website via Microsoft ads and to measure the success of these campaigns.

Cookies and tracking pixels may be used for this purpose, which collect IP address, browser information, device data and referrer URL, among other things. The data may be transferred to the USA. Microsoft is certified according to the TADPF.

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. You can withdraw your consent at any time.

11.5 ADCELL partner program

We participate in the “ADCELL” partner program of Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin (“ADCELL”). In this respect, ADCELL and we are joint controllers for certain processing steps. The agreement pursuant to Art. 26 GDPR is available at https://www.adcell.de/datenverarbeitung can be viewed.

ADCELL uses cookies and tracking pixels for the correct allocation of orders and commission billing. This allows the IP address, abbreviated usage data and the time of clicks and orders to be recorded.

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. You can revoke your consent at any time via the consent tool.

12. plug-ins and tools

12.1 Google Tag Manager

We use the Google Tag Manager of Google Ireland Limited. The Google Tag Manager itself does not set any cookies and does not store any personal data. It is only used to manage and trigger other tags (e.g. Google Analytics, conversion tracking).

The legal basis is generally Art. 6 para. 1 lit. f GDPR (legitimate interest in the efficient management of the tracking tools used). Insofar as tools are integrated via the Tag Manager that are based on consent, the legal basis depends on the respective tools (see above).

12.2 Cloudflare (content delivery network and security functions)

We use the services of Cloudflare Inc, 101 Townsend St, San Francisco, CA 94107, USA (“Cloudflare”), in particular as a content delivery network (CDN), for performance optimization and for protection against attacks (e.g. DDoS protection, web application firewall).

Cloudflare operates a global network of servers. Every time our website is accessed, the data traffic is routed via Cloudflare servers. Among other things, the IP address, system configuration information and other technical data may be recorded in server log files.

Data may be transferred to the USA. Cloudflare is certified in accordance with the Trans-Atlantic Data Privacy Framework (TADPF).

The legal basis is Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in the secure, stable and high-performance provision of our website.

You can find further information at https://www.cloudflare.com/de-de/privacypolicy/.

12.3 BunnyCDN (Content Delivery Network)

We use the content delivery network “BunnyCDN” from the provider BunnyWay d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia (“BunnyCDN”) to further optimize loading times and ensure the stable delivery of static content (e.g. images, scripts, stylesheets).

A CDN is a network of geographically distributed servers through which web content is delivered as quickly as possible. When you visit our website, a connection to BunnyCDN servers is established. In particular, the following data may be processed:

IP address
Date and time of access
URL accessed
amount of data transferred
Information on browser and operating system
Referrer URL

Processing generally takes place within the EU. For performance optimization, individual content may be delivered via edge locations outside the EU. In this case, data is transferred to third countries on the basis of Art. 46 GDPR (appropriate safeguards) or standard contractual clauses that BunnyCDN has implemented.

The legal basis is Art. 6 para. 1 lit. f GDPR from our overriding legitimate interest in a fast, stable and secure provision of our website.

Further information on data protection at BunnyCDN can be found at https://bunny.net/privacy.

12.4 Wordfence (security plugin)

We use the “Wordfence” security plugin from Defiant Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (“Wordfence”) to protect our website from attacks and misuse.

Among other things, Wordfence sets cookies and processes IP addresses, access attempts and possibly other technical data in order to detect and block attacks. Data may be transferred to the USA in the process. Data is transferred on the basis of standard contractual clauses, among other things.

Insofar as cookies or comparable technologies are used, this is done on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. Any additional security processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest in protecting our systems).

12.5 Google Maps (map display)

On individual pages, we integrate maps from the Google Maps service provided by Google Ireland Limited. When these pages are accessed, data (including IP address, location data, browser information) is transmitted to Google.

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. You can revoke your consent at any time for the future.

Further information: https://www.google.com/privacypolicy.html.

12.6 Vimeo

We embed videos from the provider Vimeo Inc, 555 West 18th Street, New York, NY 10011, USA (“Vimeo”). When you access a page with an embedded Vimeo video, a connection to the Vimeo servers is established. Among other things, your IP address, information about the device used and the page accessed are transmitted. If you are logged in to Vimeo, Vimeo can assign the page view to your user account.

Data may be transferred to the USA. The data transfer takes place on the basis of standard contractual clauses, among other things.

The legal basis is your consent in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 para. 1 TDDDG. You can revoke your consent at any time with effect for the future.

Further information: https://vimeo.com/privacy.

13. duration of storage

Unless otherwise stated in this privacy policy, we only store personal data for as long as is necessary for the respective processing purposes or for as long as there are statutory retention obligations (e.g. commercial and tax obligations of generally 6 or 10 years).

Once the purpose of processing no longer applies or statutory retention periods have expired, the data will be deleted or its processing restricted in accordance with the statutory requirements.

14. your rights

You have the following rights in particular vis-à-vis us within the framework of the applicable data protection regulations:

Right of access (Art. 15 GDPR)Right to rectification (Art. 16 GDPR)
Right to erasure (Art. 17 GDPR)
Right to restriction of processing (Art. 18 GDPR)
Right to data portability (Art. 20 GDPR)
Right to object to certain processing operations (Art. 21 GDPR)
Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

If processing is based on your consent (Art. 6 para. 1 lit. a GDPR), you can revoke this consent at any time with effect for the future without affecting the legality of the processing until revocation.

14.1 Right to object pursuant to Art. 21 GDPR

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data that we carry out on the basis of Art. 6 para. 1 lit. f GDPR (legitimate interest). We will then no longer process the personal data unless we can demonstrate compelling legitimate grounds that outweigh your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.

Please send your objection or withdrawal of consent to the contact details of the controller listed above.

15. supervisory authority

You have the right to complain to a data protection supervisory authority about the processing of your personal data by us. The authority responsible for us is in particular

State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate
P.O. Box 30 40
55020 Mainz
Phone: +49 6131 89200
E-Mail: [email protected]

You can find an overview of all supervisory authorities in Germany at https://www.bfdi.bund.de/DE/Infothek/Anschriften_Links/anschriften_links-node.html.

16th status of the privacy policy

Status: November 20, 2025