Thank you for visiting our website and for your interest in our products.
When you visit our website, use our online services, or enter into or show interest in a contractual relationship with us, your personal data may be processed. Protecting your data is very important to us, and with this privacy policy, pursuant to Art. 13 of the General Data Protection Regulation (GDPR), we want to inform you about how we handle your personal data (hereinafter also referred to as “data”).
For easier readability, we use only the masculine form for personal designations in this text. However, all formulations naturally apply equally to all genders.
Last updated: [25.09.2025]
V. Online Presence on Social Media
C. Storage and Deletion of Data
D. Your Rights as a Data Subject
F. Data Processing When Accessing Linked Content
G. Automated Decision-Making / Profiling
H. Changes to this Privacy Policy
Our privacy policy is intended to be easy to read and understand for our website visitors and users, as well as our customers, business partners, and interested parties. To ensure this, we would like to explain the most important terms. In this privacy policy, we use the following terms, among others:
· “personal data” all information relating to an identified or identifiable natural person (hereinafter “data subject”)e.g., name, address, email addresses, user behavior;
· “processing” any operation or set of operations performed on personal data, with or without the aid of automated processes, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, or destruction;
· “controller” the natural or legal person, public authority, agency, or other body which, alone or jointly with others, determines the purposes and means of the processing of personal data;
· “processor” a natural or legal person, public authority, agency, or other body which processes personal data on behalf of the controller;
· “profiling” any form of automated processing of personal data consisting of the use of personal data to evaluate certain personal aspects relating to a natural person, in particular to analyze or predict aspects concerning that natural person’s performance at work, economic situation, health, personal preferences, interests, reliability, behavior, location, or movements.
Unless otherwise specified in this privacy policy, the controller within the meaning of Art. 4(7) GDPR is
Tallow GmbH, Forchenrainstr. 39/1 70839 Gerlingen, Germany.
For specific questions regarding the processing of your personal data and to exercise your rights under the GDPR, you can contact the above points of contact at any time.
When using the website for informational purposes only, meaning simply viewing it without registering or otherwise providing us with information, we process the following personal data that your browser transmits to our server.
· IP address
· Date and time of the request
· Time zone difference to Greenwich Mean Time (GMT)
· Content of the request (visited page)
· Access status/HTTP status code
· Data volume transferred in each case
· Previously visited page
· Browser type
· Operating system used
· Language and version of browser software
· Hostname of the accessing computer
This data is technically necessary for us to display our website to you and to ensure its stability and security, and therefore must be processed by us. The legal basis for this is Art. 6 para. 1 sentence 1 lit. f GDPR.
For security reasons and to protect the transmission of confidential content, such as inquiries you send to us, this website uses SSL or TLS encryption. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the lock symbol in your browser bar.
When SSL or TLS encryption is activated, the data you transmit to us cannot be read by third parties.
In some areas of our website, we use cookies. Cookies are small text files that are stored by your browser on your device (e.g., computer, tablet, or mobile phone) when you visit a website and can be read by us or a third party. They are used to identify your device for a certain period of time.
Some of the cookies we use are so-called "session cookies" which are automatically deleted after your visit ends. Other cookies remain stored on your device until you delete them. These cookies allow us to recognize your browser on your next visit.
Some cookies are required for the use of our website. These cookies are not used for analysis, tracking, or advertising purposes. In some cases, they only contain information about specific settings and are not personally identifiable. These cookies are essential for user navigation, security, and the operation of the website. We use these cookies on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR to ensure the basic functions of the website.
You can set your browser to notify you when cookies are set, making the use of cookies transparent for you. You can also delete cookies at any time via the relevant browser setting and prevent new cookies from being set. Please note, however, that this may result in our website no longer being displayed and some functions may no longer be technically available.
Additionally, we also use cookies that are not technically necessary based on your consent. These processes only take place with your express consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 Telecommunications Digital Services Data Protection Act (TDDDG). You may withdraw your consent at any timeby clicking the settingsbutton at the bottom of the screen and making your desired selections in the cookie consent banner that opens.
For more information about the individual cookies we use on our website, please refer to our cookie consent banner.
As part of an order in our online shop, we collect and store the personal data you provide. This includes in particular:
We process this data to fulfill your order, deliver the goods, and meet our contractual obligations. The legal basis for processing your data in the context of the order is Art. 6 para. 1 sentence 1 lit. b GDPR (performance of a contract or pre-contractual measures). We also process your data if we are legally required to do so (Art. 6 para. 1 sentence 1 lit. c GDPR), e.g., to fulfill commercial and tax retention obligations under the HGB and AO. In addition, we process your data based on our legitimate interests pursuant to Art. 6 para. 1 sentence 1 lit. f GDPR, e.g., for the enforcement or defense of legal claims.
To fulfill the contract in accordance with Art. 6 para. 1 sentence 1 lit. b GDPR, we transmit your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the ordered goods.
Depending on which payment service provider you select during the order process, we transmit the payment data required for payment processing to the credit institution commissioned for the payment and, if applicable, to payment service providers used by us or to the selected payment service. In some cases, the respective payment service providers also collect this data themselves, especially if you have an account with them. In this case, you must log in to the relevant payment service provider with your access data during the order process. The privacy policy of the respective payment service provider applies in this regard.
You have the option to create a user account on our platform. A valid email address is required for registration. The data collected during account setup is used exclusively for managing your account and enabling the features you request.
The legal basis for processing your data in connection with the creation and use of the user account is Article 6(1)(b) of the GDPR (fulfillment of a contract or carrying out pre-contractual measures).
In your user account, you can view, change, or update the data you have provided at any time. You may delete your user account at any time.
When you contact us (e.g., via online contact form, email, phone, or through social media) or as part of an existing business relationship, your data will be processed as necessary to respond to your inquiry and any requested actions.
Regardless of the communication method chosen, we collect the content of your inquiry (e.g., entries in online contact forms, including first and last name, email address, and contact information).
We process your data for the following purposes: individual communication with you, management and response to inquiries, provision of our online services, and user-friendliness.
We process your data to protect our legitimate interests pursuant to Article 6(1)(f) of the GDPR in order to respond appropriately to contact inquiries. If you are seeking information about a potential or existing contractual relationship, processing is carried out to implement pre-contractual measures pursuant to Article 6(1)(b) of the GDPR.
You have the option to subscribe to our newsletter. Our newsletter provides you with information about us and our offerings. To sign up for the newsletter, you must provide your email address. When you subscribe, your email address will be transmitted to us (or our email provider) and stored there. After signing up, you will receive an email to confirm your subscription ("double opt-in").
Our newsletter is sent based on your prior explicit consent, Article 6(1)(a) of the GDPR. You may unsubscribe from the newsletter at any time, either by contacting us using the methods described in this privacy policy or via a link provided in the newsletter. After unsubscribing, we will remove your email address from the recipient list, unless you have expressly consented to further use of your data in accordance with Article 6(1)(a) of the GDPR or we reserve the right to further use your data as permitted by law and as described in this privacy policy.
If we receive your email address in connection with the sale of a product or service and you have not objected, we reserve the right to regularly send you offers for similar products or services from our portfolio by email, based on Section 7(3) of the German Act Against Unfair Competition (UWG). This serves to protect our overriding legitimate interest in direct marketing, Article 6(1)(f) of the GDPR. You may object to the use of your email address for this purpose at any time by contacting us using the methods described in this privacy policy or via a link provided in the promotional email (see also below regarding your right to object), without incurring any costs other than the transmission costs according to the basic rates.
As part of providing our website, we use service providers as processors. This includes, among other things, areas such as hosting, website operation, marketing, and email providers. We have entered into data processing agreements (DPAs) with the respective service providers. When transferring your data to third countries, we ensure that an adequate level of protection is guaranteed. This is achieved either by the European Commission recognizing the respective countries as safe (adequacy decision), specific contracts approved by the European Commission (standard contractual clauses, SCCs), or, if necessary, by obtaining your explicit consent.
If you have given your consent, Google Analytics, a web analytics service provided by Google, is used on this website. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.
This service creates pseudonymized user profiles and uses cookies (see "Cookies"). The information generated by the cookie about your use of this website (browser type/version, operating system used, time of server request, referrer URL (the previously visited page), hostname of the accessing computer (IP address)) is transmitted to a Google server in the USA and stored there.
Google processes the data in the USA. The data is used to analyze website usage, compile reports on website activity, and provide other services related to website and internet usage for market research and to tailor these internet pages to user needs. This information may also be transferred to third parties if required by law or if third parties process this data on our behalf. Your IP address will never be merged with other Google data. IP addresses are anonymized so that they cannot be linked to any individual (IP masking).
The following applies to data transfers to the USA: Google is certified under the EU-US Data Privacy Framework (DPF) and has committed to complying with European data protection principles. In addition, we have entered into EU Standard Contractual Clauses (SCCs) with Google in accordance with Art. 46 para. 2(c) GDPR to ensure compliance with the EU data protection level.
Data processing is based on your consent in accordance with Art. 6 para. 1 sentence 1(a) GDPR and § 25 para. 1 TDDDG. You can revoke your consent at any time, by clicking the settings button at the bottom of the screen and making your desired selections in the cookie consent banner that opens.
Additionally, you can prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) as well as the processing of this data by Google by downloading and installing a browser add-on: https://tools.google.com/dlpage/gaoptout?hl=de.
You can find details about data protection at Google here: https://policies.google.com/privacy
We use Google Ads on our website, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (“Google”).
With the help of Google Ads, we can display advertisements in the Google search engine and the Google advertising network. This allows us to specifically promote our website in search results and show users ads based on their interests.
If you arrive at our website via a Google ad, Google Ads sets a so-called conversion cookie on your device. This cookie expires after 30 days and is not used for personal identification. Through the cookie, we and Google can recognize that a user has clicked on an ad and was redirected to our website. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of different Ads customers.
The information obtained through the conversion cookie is used to create conversion statistics. In this way, we learn the total number of users who clicked on our ads and were redirected to a page tagged for conversion tracking. However, we do not receive any information that would allow us to personally identify users.
We may also use Google Ads Remarketing. In this case, cookies are used to collect information about your user behavior in order to show you interest-based advertising on other websites within the Google advertising network.
As part of Google Ads, the following data may be processed in particular:
Data processing is based on your consent in accordance with Art. 6 para. 1 sentence 1(a) GDPR and § 25 para. 1 TDDDG. You can revoke your consent at any timerevoke, by clicking the settings button at the bottom of the screen and making your desired selections in the cookie consent banner that opens.
Google also processes data in the USA. Google is certified under the EU-U.S. Data Privacy Framework (DPF) and is committed to complying with European data protection principles. In addition, we have entered into EU Standard Contractual Clauses (SCCs) with Google to ensure an adequate level of data protection.
You can find details about data protection at Google here:
https://policies.google.com/privacy?hl=de
We use the Meta Pixel on our website, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland (“Meta”).
With the help of the Meta Pixel, we can track whether you reached our website via an ad placed on Meta. This allows us to measure the effectiveness of our ads (conversion tracking) and show you interest-based advertising in the future (retargeting).
When using the Meta Pixel, the following data may be processed in particular:
Meta may link this data to your Facebook or Instagram account and use it for its own advertising purposes. If you are registered with Meta services, your visit to our website can be linked to your profile. Even if you do not have a Meta account, it is possible that Meta collects and processes data about you via the pixel.
Data processing is based on your consent in accordance with Art. 6 para. 1 sentence 1(a) GDPR and § 25 para. 1 TDDDG. You can revoke your consent at any timerevoke, by clicking the settings button at the bottom of the screen and making your desired selections in the cookie consent banner that opens.
Meta also processes data in the USA. Meta is certified under the EU-U.S. Data Privacy Framework (DPF) and is therefore committed to complying with European data protection principles. In addition, we have entered into EU Standard Contractual Clauses (SCCs) with Meta pursuant to Art. 46 (2) (c) GDPR to ensure an adequate level of data protection.
To the extent that personal data is collected via the Meta Pixel and transmitted to Meta, both we and Meta are jointly responsible pursuant to Art. 26 GDPR. This joint responsibility is limited exclusively to the collection and transfer of data to Meta. Any subsequent processing by Meta is carried out under its own responsibility.
You can find the agreement on joint processing here:
https://www.facebook.com/legal/controller_addendum
We use the analytics service Admetrics from admetrics GmbH, Hanauer Landstraße 161-173, 60314 Frankfurt am Main, Germany (“Admetrics”) to measure and optimize the effectiveness of our advertising and marketing activities. With the help of Admetrics, we can analyze user behavior on our website, improve the performance of our campaigns, and make data-driven decisions for our marketing.
The following data in particular may be processed when using Admetrics:
For analysis, Admetrics uses cookies. These store information about the use of our website and allow for more precise analysis of user behavior.
Data processing is based on your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time, by clicking the settings button at the bottom of the screen and making your desired selections in the cookie consent banner that opens.
You can find details on data processing by Admetrics in the provider’s privacy policy:
https://www.admetrics.io/en/privacy_policy/
Our website uses the analytics and online marketing service Outbrain from Outbrain UK Ltd., First Floor, Craven House, 121 Kingsway, London, WC2B 6PA, United Kingdom. Outbrain enables us to display content and advertisements that may be of interest to you either on our website or on third-party sites.
For this purpose, Outbrain uses cookies and similar technologies that are stored on your device. Pseudonymous user profiles are created to analyze browsing behavior and generate personalized recommendations based on this data. The data collected may include information about browser type, IP address (shortened), device, click behavior, and viewed content.
Data processing is based on your consent in accordance with Art. 6 (1) sentence 1 (a) GDPR and § 25 (1) TDDDG. You can withdraw your consent at any time, by clicking the settings button at the bottom of the screen and making your desired selections in the cookie consent banner that opens.
For more information on data protection at Outbrain, please visit: https://www.outbrain.com/legal/privacy
We use the services of Taboola Germany GmbH, Alt-Moabit 2, 10557 Berlin, Germany (“Taboola”). Taboola is a provider of content discovery and online marketing technologies. With Taboola, we can display content and advertisements to users on our website and on third-party sites based on their individual interests.
Taboola uses cookies and similar tracking technologies to analyze users’ browsing behavior and create profiles. Based on this, personalized recommendations and ads are delivered that match users’ previous interests or may potentially be relevant.
Data processed may include in particular:
Taboola processes this information in a pseudonymized form and creates user profiles from it. Direct identification of individuals is not possible. Personal data may also be shared with Taboola’s partner networks.
Data processing is based on your consent in accordance with Art. 6 para. 1 sentence 1(a) GDPR and § 25 para. 1 TDDDG. You can revoke your consent at any timerevoke, by clicking the settings button at the bottom of the screen and making your desired selections in the cookie consent banner that opens.
For more information about data processing by Taboola, please see Taboola’s privacy policy at: https://www.taboola.com/de/policies/privacy-policy
We use the services of Klaviyo Inc., 125 Summer Street, Floor 6, Boston, MA 02110, USA (“Klaviyo”) for sending and analyzing email newsletters as well as for marketing automation.
With Klaviyo, we can manage newsletter campaigns, optimize delivery, and analyze recipient responses. For this purpose, Klaviyo processes various data that you provide when signing up for the newsletter or using other services. Klaviyo also uses tracking technologies (such as web beacons or cookies) to collect information about whether and when you opened our newsletter and which links you clicked. This information helps us tailor future newsletters more closely to the interests of our subscribers.
Data processed may include in particular:
· Last name, first name
· Email address
· IP address
· Time of registration ("Double Opt-In")
· Information on newsletter usage (open and click rates, unsubscribes)
· if applicable, other voluntarily provided data (e.g., preferences, interests)
The legal basis for using Klaviyo is your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent to receive our newsletter at any time via the unsubscribe link included in every email or by sending us a message.
Klaviyo also processes data in the USA. Klaviyo is certified under the EU-U.S. Data Privacy Framework (DPF) and is committed to complying with European data protection principles.
For more information on data processing by Klaviyo, please refer to Klaviyo's privacy policy at: https://www.klaviyo.com/legal/privacy
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"). Shopify provides us with the technical platform to create and operate our website.
When you visit our website, Shopify in particular processes:
If you make a purchase through our website, Shopify also collects:
Shopify uses cookies in your browser for analysis and statistics purposes.
The processing of your data is necessary for the fulfillment of the contract or for carrying out pre-contractual measures (Art. 6 para. 1 sentence 1 lit. b GDPR). The use of cookies for analysis and statistics purposes is based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and § 25 para. 1 TDDDG. You can revoke your consent at any timewithdraw, by clicking the settings button at the bottom of the screen and making your desired selections in the cookie consent banner that opens.
Where processing is necessary for the technical provision of our website, it is based on our legitimate interest in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR in ensuring the secure and efficient operation of our online services.
All data collected on our website is processed on Shopify's servers. As part of these services, data may be transferred to Shopify in the USA or Canada. There is an adequacy decision for Canada: The European Commission has determined that Canada ensures an adequate level of data protection. With regard to data transfers to the USA, we have entered into EU Standard Contractual Clauses (SCCs) with Shopify in accordance with Art. 46 para. 2 lit. c GDPR, which ensure compliance with the EU data protection level.
For more information about data protection at Shopify, please visit https://www.shopify.de/legal/datenschutz.
We use the services of Trustpilot A/S, Pilestræde 58, 5th Floor, 1112 Copenhagen, Denmark ("Trustpilot"), to collect and publish customer reviews. This helps us increase transparency and trust in our products and services.
After placing an order, we may invite you by email to leave a review on Trustpilot. For this purpose, we may transmit personal data (e.g., name, email address, order number) to Trustpilot as necessary. Leaving a review is, of course, voluntary.
Published reviews are generally visible on Trustpilot's website and may include the information you provided there (e.g., name or pseudonym, review text, date).
The processing of your review data is voluntary and based on your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR.
For more information on data processing by Trustpilot, please refer to Trustpilot's privacy policy at: https://de.trustpilot.com/legal/privacy-policy
We have various presences on so-called social media platforms. We operate these presences with the following providers:
· Facebook, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Website: https://www.facebook.com/; Privacy Policy: https://www.facebook.com/privacy/explanation
· LinkedIn, LinkedIn Ireland Unlimited Company Wilton Place, Dublin 2, Ireland; Website: https://de.linkedin.com/; Privacy Policy: https://www.linkedin.com/legal/privacy-policy
· Instagram, Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; Website: https://www.instagram.com/; Privacy Policy: https://help.instagram.com/519522125107875
For these information services, we use the technical platform and services of the respective providers. Please note that you use our social media presences and their features at your own responsibility. This applies in particular to the use of interactive features (e.g., commenting, rating, sharing).
When you visit our social media presences, the platform providers collect, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide us, as account operators, with statistical information about your interactions with our posts. The data collected about you is processed by the platforms and may be transferred to countries outside the EU, especially the USA.
All providers mentioned above (except TikTok) are certified under the EU-US Data Privacy Framework (DPF) and have committed to complying with European data protection principles. In addition, we have concluded EU Standard Contractual Clauses with these providers, including TikTok, in accordance with Art. 46(2)(c) GDPR, which ensure compliance with the EU level of data protection.
We do not know how the social media platforms use the data from your visit to our account and your interactions with our posts for their own purposes, how long they store this data, or whether they pass it on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network, or if you visit the page as a non-registered and/or non-logged-in user. When you access a post or our account, the IP address assigned to your device is transmitted to the provider of the social media platform. If you are currently logged in, a cookie on your device can be used to track how you navigate the web. Through buttons integrated into websites, the platforms can track your visits to these websites and associate them with your profile to offer you targeted content or advertising. To avoid this, you should log out, disable the “stay logged in” feature, delete any cookies stored on your device, and restart your browser.
As the provider of the information service, we only process the data that you provide to us in the course of using our service and that requires interaction. For example, if you ask us a question that we can only answer by email, we will store your information according to the general principles of our data processing, as described in this privacy policy. The legal basis for processing your data on the social media platform is Art. 6(1)(f) GDPR.
In the case of information requests and the exercise of data subject rights, we also point out that these can most effectively be asserted with the providers. Only the providers have access to users’ data and can take appropriate measures and provide information directly. If you still need assistance, you can contact us.
The social media platform providers explain in their privacy policies what information they receive and how it is used. These statements (see links above) also contain information on contact options and settings for advertisements.
The data we process will be deleted in accordance with legal requirements as soon as your consent to data processing is revoked, or if the purpose for processing this data no longer applies, or if the data is no longer required for that purpose. This means that we store your personal data only as long as it is necessary for the respective processing purpose and limit the storage period to the minimum required. Beyond that, we only store your data if we are legally authorized or obliged to do so under statutory retention periods.
You have the right to
· Access in accordance with Art. 15 GDPR,
· Rectification in accordance with Art. 16 GDPR,
· Erasure in accordance with Art. 17 GDPR,
· Restriction of processing in accordance with Art. 18 GDPR,
· Data portability in accordance with Art. 20 GDPR, as well as
· Objection in accordance with Art. 21 GDPR (for the right to object, see below).
You may also revoke any consent you have given us for the processing of personal data at any time. Revocation can be made using the contact options described in this privacy policy. Please note that the revocation only takes effect for the future. Processing that took place before the revocation is not affected.
You also have the right to lodge a complaint with the data protection supervisory authority pursuant to Art. 77 GDPR.
You have the right, for reasons arising from your particular situation, to object at any time to the processing of your personal data based on Art. 6(1)(e) or (f) GDPR; this also applies to profiling based on these provisions within the meaning of Art. 4(4) GDPR.
If you object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is for the establishment, exercise, or defense of legal claims.
You can object using the contact options described in this privacy policy.
This website may contain external links or hyperlinks to other providers’ websites. These are to be distinguished from our own content. These external contents do not originate from us, and we have no influence over the content of third-party sites. If you are redirected to other sites via links on our website, please refer to those sites for information on how your data is handled there.
No automated decision-making or profiling takes place.
As our website and online offerings develop, or due to changes in legal or regulatory requirements, it may become necessary to occasionally update this privacy policy.
If you have any questions regarding the processing of your data, you can contact us at any time.
***