1) Introduction and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. The following information outlines how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website under the General Data Protection Regulation (GDPR) is:

Holger Clasen GmbH & Co. KG
Alsterdorfer Str. 228, 22297 Hamburg, Germany
Phone: +49 (0) 40 511 28-0
Email: info@holger-clasen.de

The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer who can be reached as follows:

Personally liable partner: Bernd Clasen GmbH
Managing Director: Lennart Clasen
Address: Alsterdorfer Straße 228, 22297 Hamburg, Germany
Phone: +49 (0) 40 511 28-0
Email: info@holger-clasen.de

2) Data Collection When Visiting Our Website

If you visit our website for informational purposes only (i.e., without registering or submitting information), we collect only the data that your browser transmits to our server (so-called “server log files”). This includes:

• Visited page(s) on our website
• Date and time of access
• Amount of data transferred (in bytes)
• Referring page (referrer)
• Browser used
• Operating system used
• IP address (possibly in anonymized form)

Processing is based on Art. 6(1)(f) GDPR and our legitimate interest in ensuring the stability and functionality of the website. These data are not passed on or otherwise used. However, we reserve the right to check server log files retrospectively if there are concrete indications of unlawful use.

3) Hosting and Content Delivery Network (CDN)

Our website is hosted by a provider who operates servers exclusively within the European Union, either directly or through subcontractors. All data collected via our website is processed on these servers.
We have concluded a data processing agreement with the hosting provider to ensure the protection of visitor data and to prevent unauthorized disclosure to third parties.

4) Cookies

To make our website more attractive and to enable certain functions, we use cookies — small text files stored on your device. Some are session cookies (deleted after closing your browser), while others are persistent cookies (remain stored and allow for customized settings). The duration of storage is listed in your browser’s cookie settings.

Where cookies process personal data, the legal basis is either:

• Art. 6(1)(b) GDPR – for contract execution
• Art. 6(1)(a) GDPR – if consent has been given
• Art. 6(1)(f) GDPR – for legitimate interests such as user-friendly website design

You can configure your browser to inform you about the use of cookies, restrict or reject them altogether. Disabling cookies may limit functionality.

5) Contacting Us

If you contact us (e.g., via contact form or email), we collect personal data only to the extent necessary to respond to your request and for the associated technical administration.
The legal basis is Art. 6(1)(f) GDPR. If the purpose of contact is to initiate or fulfill a contract, Art. 6(1)(b) GDPR also applies.
Your data will be deleted after your request has been processed, unless legal retention obligations apply.

6) Registration on the Website / Portal / Forum

You may register on our website by entering personal data. Required fields are indicated on the registration form. We use a double opt-in process: registration is complete only after confirmation via a link sent to your email. Unconfirmed registrations are automatically deleted after 24 hours.

Upon using the portal, we store the necessary data for contract performance (including payment details where applicable) and any voluntary information provided during use. You can manage all data in your account.
Legal basis: Art. 6(1)(f) GDPR.

We also store any public content you post (e.g., forum posts, guestbook entries). This is necessary for the operation of the website and falls under our legitimate interest.
If you delete your account, your public posts remain visible, but your profile will no longer be identifiable. All other personal data will be deleted.

7) Use of Customer Data for Direct Marketing

Newsletter Subscription

When you subscribe to our email newsletter, we will regularly send you information about our offers. Only your email address is required. Additional details are optional and used to personalize communication.

We use the double opt-in process: you will receive a confirmation email with a link that must be clicked to complete your subscription.

By confirming, you consent to processing in accordance with Art. 6(1)(a) GDPR. We log your IP address and subscription time to document consent and prevent misuse.

You can unsubscribe at any time via a link in the newsletter or by contacting us. Upon unsubscribing, your email address will be removed from our mailing list unless further processing is legally permissible or consented to.

8) Your Rights

8.1 Under the applicable data protection laws, you have the following rights:

• Right of access (Art. 15 GDPR)
• Right to rectification (Art. 16 GDPR)
• Right to erasure (Art. 17 GDPR)
• Right to restriction of processing (Art. 18 GDPR)
• Right to notification (Art. 19 GDPR)
• Right to data portability (Art. 20 GDPR)
• Right to withdraw consent (Art. 7(3) GDPR)
• Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)

8.2 Right to Object

If we process your personal data on the basis of legitimate interests (Art. 6(1)(f) GDPR), you have the right to object at any time based on reasons related to your particular situation.

If you object, we will stop processing your data unless we can demonstrate compelling legitimate grounds or the processing serves the establishment, exercise, or defense of legal claims.

If your personal data is processed for direct marketing purposes, you have the right to object at any time without providing reasons. Once exercised, we will no longer use your data for these purposes.

9) Retention Period of Personal Data

The duration of data storage depends on the legal basis, purpose of processing, and statutory retention periods.

• If based on consent (Art. 6(1)(a) GDPR): until consent is withdrawn
• If based on contractual obligations (Art. 6(1)(b) GDPR): stored until the contract is fulfilled and statutory retention periods (e.g., commercial, tax laws) have expired
• If based on legitimate interest (Art. 6(1)(f) GDPR): stored until a valid objection is made, unless overriding reasons justify continued storage
• For direct marketing purposes: stored until objection is raised (Art. 21(2) GDPR)

Payment Services by Klarna

In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer the following payment methods (payments are made directly to Klarna):

• Invoice: Payment due 30 days after shipping. Terms for Germany: Klarna DE Invoice, for Austria: Klarna AT Invoice
• Instalments: Flexible monthly payments starting from 1/24 of the total amount (min. €6.95). Full terms: Klarna Account Terms
• Sofort: Your account will be debited immediately upon order.
• Direct debit: Your account will be debited after shipment. You will be notified by email.

Use of these payment methods requires a positive credit check. To this end, we transmit your data to Klarna for identity and credit assessment. The available payment options depend on the result. More details:

• Klarna Terms Germany
• Klarna Terms Austria
• Klarna Privacy Information

Unless otherwise stated, personal data will be deleted once it is no longer necessary for the purposes for which it was collected or processed.

Last revised: May 2025