Privacy policy DSGVO
This privacy policy clarifies the nature, scope and purpose of the collection and use of data of visitors and users (hereinafter collectively referred to as “users”) by Stolz und Müller GmbH, owner: Martin Stolz, Jürgen Müller, Bismarckstrasse 9, 76761 Rülzheim (hereinafter “provider”) as the data controller under data protection law.
If you have any questions about data protection, you can reach us on weekdays from 9:00 a.m. to 4:00 p.m. at +49 (0)6321/1890404 or by e-mail at info@lieht.com
Privacy Policy
In this privacy policy we inform you about the processing of your personal data. p>
If you want to change your privacy settings (grant consent or revoke your previously granted consent), click here to change your settings.
Responsible
Stolz und Müller GmbH, Bismarckstrasse 9, 76761 Rülzheim, Deutschland, info@lieht.com, +49(0)6321 1890404
Data security officer
You can contact our Data Protection Officer at:
attn. Martin Stolz,Bismarckstrasse 9
76761 Rülzheim
Phone: +49 (0)63211890404
Email: info@lieht.com
Hosting
Hetzner Online GmbH
Our website is hosted by our processor Hetzner, Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany.
Connection data are processed to provide and to deliver the website. Data are not stored beyond access for the mere purpose of delivery and provision of the website.
The legal basis of processing is the legitimate interest (absolute technical necessity to provide and to deliver the “website” service which you have explicitly requested by visiting the website according to Article 6 (1) (f) GDPR combined with § 25 TTDSG.
Connection data and other personal data are also processed in connection with various other functions or services in order to operate the website. Detailed information is provided in this Data Privacy Statement and in the individual functions or services.
Contact Form
You can contact us by using a contact form provided on our website. After submission of the contact form, the controller will process the personal data you have provided for the purpose of handling your request on the basis of your consent which you have given by submitting the form according to Art. 6 (1) (a) GDPR, until revocation.
You have no legal or contractual obligation to provide personal data. If you do not provide such data, you are simply not able to submit and we are not able to process your request.
Registration Form
You can register on our website. After you have registered, we will process the data provided in the registration form for the performance of the contract based on the contract concluded with us with your registration according to Art. 6 (1) (b) GDPR.
You have no legal or contractual obligation to provide personal data. You simply cannot register for the service if you do not provide such data.
Data are not transferred to third parties.
Security Services
On this website we use the offer of security service providers such as Captcha services to avoid non-human and automated input.
Google reCAPTCHA
If you give your consent, we will process your personal data in cooperation with the service Google reCaptcha, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland as joint controllers for the purpose of avoidance of non human and automatized inputs. We will enable the service to set third party cookies, to collect connection data and data of your web browser. Furthermore we enable the service to build a personal user-ID to conclusively identify the user within the scope of the advertising network operated by Google. The data will be stored on your device for up to two years.
The legal basis of processing is your consent according to Article 6 (1) (a) GDPR. A failure to give consent will have the effect of not being able to use reCaptcha or the connected forms.
You can revoke your consent by changing the settings at Privacy settings.
The Google group transfers your personal data to the USA. The legal basis for data transfer to the USA is your consent in accordance with Art. 49 Para. 1 a in conjunction with Art. 6 Para. 1 a GDPR. Before you gave your consent, you were informed that the USA does not have a data protection level that complies with EU standards. In particular, US intelligence agencies can access your data without being informed about it and without you being able to take legal action against it. For this reason, the European Court of Justice ruled in a judgment that the previous adequacy decision (Privacy Shield) was invalid.
Web Shop
You can buy products directly via our webshop. If you do so, the data you provide and the data of the products you have selected will be processed by the controller in order to provide you with an offer, for the conclusion of the contract, for the performance of the contract and for the fulfillment of post-contractual obligations prior to the conclusion of the contract based on the pre-contractual relationship initiated by you and, after conclusion of the contract, based on the contract according to Art. 6 (1) (b) GDPR.
If you use an already existing customer account to buy our products or have created a customer account to buy the products, your personal data will be processed until you delete your customer account.
When customers buy our products via a guest checkout, their personal data will be processed until the legal retention periods have expired.
Your data are processed for the purpose of direct marketing in a manner compatible with the purpose of performing the contract in forms not requiring consent, such as addressed advertising materials sent by post, until you object.
You have no legal or contractual obligation to provide personal data. However, the provision of data is necessary for the conclusion of the contract. If you do not provide such data, a contract cannot be concluded.
Shopping carts of non-registered users will be deleted after 14 days, at the latest. User accounts of registered users are active until the account is deleted by the user. Contract data are processed until the limitation period of potential post-contractual obligations has expired.
Payments are processed via:
Service:Amazon Pay
Provider:Amazon Payments Europe S.C.A. 38 avenue J.F. Kennedy, L-1855 Luxenburg
Service: PayPal
Provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, 2449 Luxenburg
Right to object
You have the right to object to processing if your personal data is processed based on legitimate interests.
We will then cease the processing carried out on this basis, unless there are compelling and legitimate reasons for us to do so.
You have the right to object to the processing of your personal data for the purpose of direct marketing. In this case, we will cease the processing of your personal data for the purpose of direct mail.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Withdrawal
You have the right to withdraw your consent at any time by changing the settings at Privacy settings.
If you have given your consent to receipt of advertising by email, you may withdraw your consent by clicking the unsubscribe link. In this case, we will cease the processing operations, unless there is any other legal basis.
The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
Right to data subject
You have the right to access to, rectification, erasure and restriction of processing of personal data.
You have also the right to data portability if the processing of your personal data is based on your consent or on a contract concluded with you.
You have also the right to lodge a complaint with the supervisory authority. If you need more information on the supervisory authorities in the European Union, go to here.
Further services on our shop pages
The following services are embedded on our shop pages. They are listed here individually because they go beyond the building blocks described above. Status of this list: 7 September 2026, established by recording the actual network requests made by our pages.
Audience measurement with Umami
To evaluate the use of our shop statistically and to design it according to demand, we use the analytics software Umami. Umami is privacy-friendly open source software. It is not obtained from a third-party provider but operated by our technical service provider as a processor under Art. 28 GDPR on a server in Germany. No data is transferred to third parties or to third countries.
Umami does not set cookies and does not store any information on your device – neither in local storage nor as an identifier. There is no access to information on your terminal equipment within the meaning of Section 25 TDDDG; consent is therefore not required for this.
On each page view, Umami processes: the page called up, the previously visited page (referrer), browser type and language, operating system, device type and screen resolution, the approximate origin (country and region) as well as the date and time of the visit. Your IP address is not stored. It is processed only transiently in order to recognise page views belonging to one visit by means of a daily changing, non-reversible check value. There is no recognition beyond the day, no cross-site tracking and no profiling.
During the ordering process we additionally record the individual steps (product view, basket, checkout, order completion) including order number, order value, currency and the payment method chosen. This information serves statistical evaluation only; name, address, payment and contact data are not passed to the statistics. The order number serves solely to avoid double counting.
The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in measuring and improving our offer without burdening your device and without passing data to third parties. You may object to this processing at any time with effect for the future (Art. 21 GDPR).
Google Analytics 4
The audience measurement Google Analytics 4 with the identifier G-5CQ8FF0GPH is embedded on our shop pages (provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It is loaded together with our Google Ads tag because the advertising account and the measurement identifier are linked.
Recorded are, among other things, the pages called up, time spent, origin of the visit, information about browser, operating system and device as well as a shortened form of your IP address. A transfer to the USA cannot be ruled out. As long as you have not given consent via our privacy settings, the information is transmitted without cookies and without a personal advertising identifier (so-called consent mode); with your consent, cookies are added.
The legal basis for the cookieless transmission is Art. 6(1)(f) GDPR, and for processing with cookies your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG. Google’s privacy policy is available at https://policies.google.com/privacy.
Google Ads conversion measurement
We use the conversion tag of Google Ads on our shop pages (identifier AW-938640269, provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland). It reports to Google whether a visit that came about through one of our advertisements led to a purchase. Cookies may be set and information about the completed order – such as order value and currency – may be transmitted to Google; a transfer to the USA cannot be ruled out.
We treat this tag as necessary for the operation of our shop; deselection via the privacy settings is not provided for it. The legal basis is our legitimate interest in measuring the success of our advertising under Art. 6(1)(f) GDPR.
Meta visitor action pixel (Facebook pixel)
Our shop uses the visitor action pixel of Meta (identifier 2475920742685200, provider: Meta Platforms Ireland Limited, Merrion Road, Dublin 4, Ireland). It records page views as well as events of the ordering process and transmits them to Meta in order to measure the effect of our advertisements and to show you suitable advertising there. You may be recognised across devices; Meta sets the cookie _fbp for this purpose. A transfer to the USA cannot be ruled out.
In addition, a script from the provider unpkg.com is loaded to prepare the event data; your IP address is transmitted to its servers in the process.
The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG, revocable at any time via our privacy settings. Meta’s privacy policy is available at https://www.facebook.com/privacy/policy.
Pinterest tag
The Pinterest counting tag is embedded on our shop pages (identifier 2612697827106, provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland). It reports page views and events of the ordering process to Pinterest and sets the cookie _pin_unauth for this purpose. A transfer to the USA cannot be ruled out.
The legal basis is your consent under Art. 6(1)(a) GDPR and Section 25(1) TDDDG, revocable at any time via our privacy settings. Pinterest’s privacy policy is available at https://policy.pinterest.com/en/privacy-policy.
Audience measurement by Jetpack
For access statistics, a counting script from Jetpack is loaded on our shop pages (provider: Automattic Inc., 60 29th Street #343, San Francisco, CA 94110, USA). Your IP address and information about the page view are transmitted to Automattic in the process.
Jetpack is at the same time the interface through which our shop is administered. We therefore treat the service as necessary for operation; deselection via the privacy settings is not provided for it. The legal basis is our legitimate interest in the secure operation and administration of the shop under Art. 6(1)(f) GDPR.
Google customer reviews
When Google reviews are displayed, the profile pictures of the authors are loaded directly from Google servers (googleusercontent.com, ggpht.com). Your IP address is transmitted to Google in the process. A transfer to the USA cannot be ruled out. The legal basis is our legitimate interest in presenting customer reviews under Art. 6(1)(f) GDPR.
Attribution of orders
So that we can trace by which route an order came about, our shop system stores several cookies beginning with sbjs_ on your device on your first visit. They record the origin of the visit (for example search engine, advertisement or referring website), the time and the number of visits. This information is not transmitted to third parties and remains within our shop system. The legal basis is our legitimate interest in evaluating our sales channels under Art. 6(1)(f) GDPR.
Payment data
Depending on the payment method chosen, we process different information. For purchase on account and for bank transfer or payment in advance, we process your invoice and order data as well as the incoming payment in our own system; no transfer to third parties takes place. For payment by SEPA direct debit we additionally process your bank details (IBAN, account holder) and the direct debit mandate you have granted; we pass this information exclusively to our bank in order to execute the direct debit.
The legal basis is the performance of the contract concluded with you under Art. 6(1)(b) GDPR and, for retention beyond that, compliance with our commercial and tax law obligations under Art. 6(1)(c) GDPR in conjunction with the statutory retention periods.
Fonts
Fonts are delivered from our own server. Our shop does not call Google Fonts. Font files from Google are loaded only indirectly when the Google reCAPTCHA service described above is loaded.
