Privacy Policy

1) Introduction and contact details of the controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data means any data that can be used to identify you personally.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is VANLEX Design GmbH, Körsestrasse 2, 31655 Stadthagen, Germany, Tel.: +49 (0)572 18989632, Email: info@deinvan.de. The controller responsible for processing personal data is the natural or legal person who, alone or jointly with others, determines the purposes and means of processing personal data.

2) Data collection when you visit our website

If you use our website for information purposes only, meaning that you do not register or otherwise provide us with information, we only collect the data that your browser transmits to the website server (known as "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

The page of our website visited
The date and time of access
The amount of data sent in bytes
The source/referrer from which you reached the page
The browser used
The operating system used
The IP address used (in anonymised form, where applicable)

Processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disclosed or used for any other purpose. However, we reserve the right to review the server log files retrospectively if there are specific indications of unlawful use.

3) Cookies

To make visiting our website more attractive and enable the use of certain functions, we use cookies, which are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser ("session cookies"), while others remain on your device for longer and allow website settings to be saved ("persistent cookies"). In the latter case, you can find the storage period in your web browser's cookie settings overview.

If individual cookies used by us also process personal data, this processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of a contract, Article 6(1)(a) GDPR where consent has been given, or Article 6(1)(f) GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and making your visit user-friendly and efficient.

You can configure your browser to notify you when cookies are set and decide individually whether to accept them, or to refuse cookies in certain cases or altogether.

Please note that refusing cookies may limit the functionality of our website.

4) Contacting us

4.1 ShopVote

For review reminders, we use the services of the following provider: Blickreif GmbH, Schulstraße 46, 80634 München, Germany.

We transmit your email address and, where applicable, other customer data to the provider solely on the basis of your express consent in accordance with Article 6(1)(a) GDPR, so that the provider can contact you by email with a reminder to leave a review.

You may withdraw your consent at any time with future effect by contacting us or the provider.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

4.2 When you contact us (for example, via a contact form or email), personal data is processed solely for the purpose of handling and responding to your enquiry and only to the extent necessary for that purpose.

The legal basis for processing this data is our legitimate interest in responding to your enquiry in accordance with Article 6(1)(f) GDPR. If your contact relates to entering into a contract, Article 6(1)(b) GDPR provides an additional legal basis for processing. Your data will be deleted when it is apparent from the circumstances that the matter has been conclusively resolved, provided that no statutory retention obligations prevent deletion.

5) Data processing when opening a customer account

In accordance with Article 6(1)(b) GDPR, personal data is also collected and processed to the extent necessary when you provide it to us when opening a customer account. The data required to open an account is shown in the relevant form on our website.

You may delete your customer account at any time by sending a message to the controller at the address stated above. After your customer account has been deleted, your data will be deleted, provided that all contracts concluded through it have been fully performed, no statutory retention periods prevent deletion, and we no longer have a legitimate interest in retaining the data.

6) Use of customer data for direct marketing

Subscribing to our email newsletter

If you subscribe to our email newsletter, we will regularly send you information about our offers. The only information required to receive the newsletter is your email address. Providing further data is voluntary and allows us to address you personally. We use the "double opt-in" procedure for sending newsletters. This ensures that you only receive newsletters after you have expressly confirmed your consent to receiving them by clicking a verification link sent to the email address you provided.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) GDPR. We store the IP address recorded by your Internet Service Provider (ISP), together with the date and time of your subscription, so that any possible misuse of your email address can be traced at a later date. The data we collect when you subscribe to the newsletter is used strictly for its intended purpose.

You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a corresponding message to the controller named at the beginning of this policy. Once you have unsubscribed, your email address will be deleted from our newsletter mailing list without delay, unless you have expressly consented to further use of your data or we reserve the right to use the data further in a manner permitted by law and of which we inform you in this policy.

7) Data processing for order fulfilment

7.1 Where necessary for the performance of the contract for delivery and payment purposes, the personal data we collect is passed to the transport company and financial institution engaged by us in accordance with Article 6(1)(b) GDPR.

If, under a corresponding contract, we are obliged to provide you with updates for goods with digital elements or for digital products, we process the contact details you supplied when ordering in order to inform you personally as part of our statutory information obligations in accordance with Article 6(1)(c) GDPR. Your contact details are used strictly for communications about updates we are obliged to provide and are processed by us for this purpose only to the extent necessary for the information concerned.

To process your order, we also work with the following service provider(s), who support us wholly or partly in performing contracts we have concluded. Certain personal data is transmitted to these service providers in accordance with the information below.

7.2 Use of payment service providers (payment services)

- PayPal

One or more online payment methods offered by the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

If you select a payment method offered by the provider under which you pay in advance, the payment data you supply during the ordering process (including your name, address, bank and payment card information, currency and transaction number), together with information about the contents of your order, is passed to the provider in accordance with Article 6(1)(b) GDPR. In this case, your data is disclosed solely for the purpose of processing the payment with the provider and only to the extent necessary for that purpose.

If you select a payment method under which we provide our service before receiving payment, you will also be asked during the ordering process to provide certain personal data (first name and surname, street, house number, postcode, town/city, date of birth, email address, telephone number and, where applicable, details of an alternative payment method).

To safeguard our legitimate interest in establishing your ability to pay in such cases, we forward this data to the provider for a credit check in accordance with Article 6(1)(f) GDPR. Based on the personal data you provide and additional data (such as the shopping basket, invoice amount, order history and payment experience), the provider checks whether the payment option you have selected can be offered in view of payment and/or debt default risks.

The credit report may contain probability values ("scores"). Where scores are included in the credit report result, they are based on a scientifically recognised mathematical and statistical procedure. Address data is among, but not the only, information used to calculate these scores.

You may object to this processing of your data at any time by contacting us or the provider. However, the provider may remain entitled to process your personal data where this is necessary to process payments in accordance with the contract.

8) Web analytics services

Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables analysis of your use of our website.

By default, Google Analytics 4 does not use cookies when you visit the website unless you expressly consent to cookies. Instead, information about your usage behaviour is collected and processed through "pings" (small data packets sent to the host of a device). This information also includes your IP address, although Google truncates its final digits to prevent direct identification of an individual.

The information is transmitted to Google's servers and processed further there. Transfers to Google LLC, based in the USA, are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activity for us and provide other services relating to website and internet use. The truncated IP address transmitted by your browser as part of Google Analytics is not combined with other Google data. The data collected through the use of Google Analytics 4 is stored for two months and then deleted.

All the processing described above, including the transmission of data through "pings" and the possible setting of Google Analytics cookies, takes place only if you have given us your express consent in accordance with Article 6(1)(a) GDPR.

Without your consent, Google Analytics 4 is not used during your visit to the website. You may withdraw your consent at any time with future effect. To exercise your right to withdraw consent, please disable this service using the "cookie consent tool" provided on the website.

We have entered into a data processing agreement with Google, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further legal information about Google Analytics 4 is available at https://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites.

Demographics
Google Analytics 4 uses the special "demographics" feature and can use it to generate statistics about the age, gender and interests of website visitors. This is done by analysing advertising and information from third-party providers. This allows target groups to be identified for marketing activities. However, the data collected cannot be attributed to any specific individual and is deleted after being stored for two months.

Google Signals
As an extension to Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalised advertising and linked your devices to your Google account, Google may analyse your usage behaviour across devices and create database models, including models relating to cross-device conversions, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) GDPR. We do not receive personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the "Personalised ads" feature in your Google account settings. To do so, follow the instructions on this page: https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
Further information about Google Signals is available at: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the "UserIDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) GDPR, created an account on this website and sign in to that account on different devices, your activities, including conversions, can be analysed across devices.

For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.

9) Website functions

9.1 ShopVote graphics

Our website incorporates graphical elements from the following provider to display external customer reviews and/or an externally awarded trust mark: Blickreif GmbH, Schulstraße 46, 80634 München, Germany.

When you access a page of our website containing such graphical elements, your browser establishes a direct connection to the provider's servers so that the elements can load correctly. Certain browser information, including your IP address, is transmitted to the provider in the process.

If personal data is also processed in this context, processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in marketing our offering effectively and presenting our website attractively.

9.2 - Google reCAPTCHA

On this website, we use the CAPTCHA service provided by: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland.

Data may also be transmitted to: Google LLC, USA.

The provider uses "Google Fonts", meaning fonts loaded from the internet by Google, for the visual design of the CAPTCHA window. This does not involve processing any information beyond the information mentioned above that is already transmitted to Google through the functionality of reCAPTCHA.

The service checks whether an entry is made by a natural person or abusively through machine-based and automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is performed by a human rather than an automated bot, the provider collects the IP address of the device used, identifying information about the browser and operating system type, and the date and duration of the visit, and transmits this data to the provider's servers for analysis. Cookies may be used for this purpose, meaning small text files stored in the browser on the device.

Where the processing described above relies on cookies, these are only set if you have given us your express consent in accordance with Article 6(1)(a) GDPR. You may withdraw your consent at any time with future effect by disabling this service in the "cookie consent tool" provided on the website.

Where the processing described above takes place without the use of cookies, the legal basis is our legitimate interest in establishing individual responsibility on the internet and preventing abuse and spam in accordance with Article 6(1)(f) GDPR.

We have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

10) Tools and other matters

Cookie consent tool

This website uses a "cookie consent tool" to obtain valid user consent for cookies and cookie-based applications requiring consent. When users access the website, the cookie consent tool is displayed as an interactive user interface in which they can consent to specific cookies and/or cookie-based applications by selecting checkboxes. The tool ensures that all cookies/services requiring consent are loaded only when the user has given the corresponding consent by selecting the relevant checkboxes. This ensures that such cookies are set on the user's device only if consent has been given.

The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed in this context.

If, in individual cases, personal data (such as an IP address) is nevertheless processed for the purpose of saving, assigning or recording cookie settings, this processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and, consequently, the legally compliant design of our website.

Article 6(1)(c) GDPR provides a further legal basis for the processing. As the controller, we are legally obliged to make the use of cookies that are not technically necessary dependent on the user's consent.

Where required, we have entered into a data processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.

Further information about the operator and the settings available in the cookie consent tool can be found directly in the relevant user interface on our website.

11) Rights of the data subject

11.1 Applicable data protection law grants you the following rights against the controller in relation to the processing of your personal data (rights of access and intervention). The conditions for exercising each right are set out in the legal provisions cited:

Right of access under Article 15 GDPR;
Right to rectification under Article 16 GDPR;
Right to erasure under Article 17 GDPR;
Right to restriction of processing under Article 18 GDPR;
Right to be informed under Article 19 GDPR;
Right to data portability under Article 20 GDPR;
Right to withdraw consent under Article 7(3) GDPR;
Right to lodge a complaint under Article 77 GDPR.

11.2 RIGHT TO OBJECT

IF, FOLLOWING A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME, WITH FUTURE EFFECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU MAY EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

12) Duration of storage of personal data

The period for which personal data is stored is determined by the relevant legal basis, the purpose of processing and, where applicable, the relevant statutory retention period (for example, retention periods under commercial and tax law).

Where personal data is processed on the basis of express consent in accordance with Article 6(1)(a) GDPR, the data concerned is stored until you withdraw your consent.

If statutory retention periods apply to data processed in connection with contractual or similar obligations on the basis of Article 6(1)(b) GDPR, this data is routinely deleted after those retention periods expire, provided that it is no longer required for the performance or initiation of a contract and/or we no longer have a legitimate interest in retaining it.

Where personal data is processed on the basis of Article 6(1)(f) GDPR, it is stored until you exercise your right to object under Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.

Where personal data is processed for direct marketing purposes on the basis of Article 6(1)(f) GDPR, it is stored until you exercise your right to object under Article 21(2) GDPR.

Unless otherwise stated in the other information in this policy concerning specific processing situations, stored personal data is otherwise deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Last updated: 30.04.2026, 03:39:16