Privacy Policy

1) Information on the collection of personal data and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Smart Sleep GmbH, Alte Papierfabrik 20, 40699 Erkrath, Germany, Tel.: +49 (0)211/9507440, E-Mail: info@smartsleep.com. Der The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.

1.3 The controller has appointed a data protection officer, who can be contacted as follows:

Smart Sleep GmbH

Dr. Markus Dworak
Old Paper Mill 20

40699 Erkrath

Tel.: +49 (0)211/9507440
E-mail: info@smartsleep.com

1.4 This website uses cookies for security reasons and to protect the transmission of personal data and other confidential content (z.B. Orders or inquiries to the data controller are transmitted using SSL or TLS encryption. You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

2) Data collection when visiting our website

When you simply use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time of access
Amount of data sent in bytes
Source/referrer from which you accessed this page
Browser used
Operating system used
IP address used (possibly in anonymized form)

The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

3) Hosting

Hosting by Shopify
We use that Shopsystem of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), for the purpose of hosting and displaying the onlineShopThis is based on processing on our behalf. All data collected on our website is stored on the servers of Shopify processes. Shopify ensures, through appropriate technical and organizational measures, that data is processed only within the EU/EEA. Regarding the theoretical possibility of access by the Canadian parent company, which Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada. For Canada, there is an adequacy decision by the European Commission which states that an adequate level of data protection is ensured.Further information on data protection from ShopYou can obtain ify from the following website: https://www.shopify.de/legal/datenschutz and here: https://www.shopify.de/legal/privacy/customers

4) Cookies

We use so-called cookies. Cookies are small text files that are stored on your device and saved by your browser. Cookies help make our website more user-friendly, effective, and secure. There are different types of cookies, each used for different purposes.

Some cookies ensure that our services function correctly and that you are recognized on your device after successful registration ("necessary" cookies). By placing these necessary cookies, we make it easier for you to visit our websites and use the services available there. Other cookies are used to analyze user preferences and thus improve our services ("advanced cookies").

This also includes cookies and session data that are set when using our AI chat assistant (Claude/Anthropic) to provide the chat function and maintain the conversation during your session.

We only use non-essential cookies with your consent. When you visit our website for the first time, a pop-up will appear explaining our cookie policy. By clicking the corresponding consent button, you agree to our use of the selected cookies, as described in the pop-up and in this privacy policy.

You can configure your browser to notify you when cookies are set and to allow cookies only in individual cases, to accept cookies in certain cases or to generally reject them, and to automatically delete cookies when you close your browser. Please note that disabling cookies may limit the functionality of this website.

If personal data is processed when using "necessary" cookies, this is based on the legal basis of Art. 6 para. 1 sentence 1 lit. f GDPR due to legitimate interests in quality assurance and the technically flawless presentation of the website. The processing of personal data when using so-called "extended cookies" is based on your consent (legal basis: Art. 6 para. 1 sentence 1 lit. a GDPR). Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Making contact

When contacting us (z.B. Personal data is collected when you contact us via our contact form or email. The specific data collected via a contact form is indicated on the form itself. This data is stored and used solely for the purpose of responding to your inquiry, contacting you, and for the associated technical administration. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Otherwise, Article 6(1)(a) GDPR serves as the legal basis. Your data will be deleted after your inquiry has been fully processed. This is the case when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply.

6) Data processing when opening a customer account and for contract processing

In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The specific data collected is evident from the respective input forms.You can delete your customer account at any time by sending a message to the o.g. The address of the data controller will be provided. We store and use the data you provide for contract processing. After complete contract processing or deletion of your customer account, your data will be blocked in accordance with tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law.

7) Use of your data for direct marketing

7.1 Subscribe to our email newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send you the newsletter is your email address. Providing any further information is voluntary and is used to personalize our communications with you. We use the double opt-in procedure for sending our newsletter. This means that we will only send you an email newsletter after you have explicitly confirmed that you consent to receiving it. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR. When you subscribe to the newsletter, we store your IP address, which is registered by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for sending you promotional material via the newsletter. You can unsubscribe from the newsletter at any time via the unsubscribe link provided in the newsletter or by sending a corresponding message to the data controller named above. After you unsubscribe, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this privacy policy.

7.2 Sending the email newsletter to existing customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our product range via email. According to Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. The data processing is based solely on our legitimate interest in personalized direct marketing pursuant to Article 6 Paragraph 1 Letter f of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the data controller named at the beginning of this document. You will only incur transmission costs according to the basic rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

7.3 Newsletter distribution via Klavio
Our email newsletters are sent via the technical service provider Klavio, Inc., 125 Summer St, Floor 6 Boston, MA 02111 United States (https://www.klaviyo.com/), to whom we transfer the data you provided when subscribing to the newsletter. This transfer is carried out in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system.
Klavio uses this information to send and statistically analyze newsletters on our behalf. For this analysis, the emails we send contain web beacons or tracking pixels, which are single-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. Using these web beacons, Klavio automatically generates general, non-personal statistics about the response to newsletter campaigns. Based on our legitimate interest in the statistical analysis of newsletter campaigns to optimize our advertising communication and better target recipient interests, the web beacons also collect and process data from the respective newsletter recipient (email address, time of access, IP address, browser type, and operating system) in accordance with Article 6 Paragraph 1 Letter f of the GDPR. This data allows for individual inferences about the newsletter recipient and is processed by Mailchimp to automatically create statistics that show whether a particular recipient has opened a newsletter message.
If you wish to deactivate data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Klavio may also use this data itself, in accordance with Article 6(1)(f) GDPR, based on its own legitimate interest in the needs-based design and optimization of the service, as well as for market research purposes, for example, to determine the countries of origin of the recipients. However, Klavio does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties.
To protect your data in the USA, we have concluded a data processing agreement with Klavio based on the European Commission's standard contractual clauses to enable the transfer of your personal data to Klavio. This data processing agreement can be viewed at the following web address: https://www.klaviyo.com/privacy/dpa/. Please note that your data is generally transferred to and stored on a Klavio server in the USA. To ensure an adequate level of data protection, the provider has implemented the so-called Standard Contractual Clauses of the European Union. In addition, we conduct a case-by-case risk analysis to ensure data protection that goes beyond the Standard Contractual Clauses. You can view Klavio's privacy policy here: https://www.klaviyo.com/privacy/policy

7.5 Advertising by postal mail

Based on our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation in accordance with Art. 6 para. 1 lit. f GDPR and to use it for sending you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the responsible party.

7.6 Product availability notification via email

Provided that we in our online-Shop For selected items that are temporarily unavailable, we offer the option of informing you by email when they become available. You can subscribe to our email notification service for product availability. By subscribing, you will receive a one-time email notification informing you when your selected item is available. The only required information for sending this notification is your email address. Providing additional information is voluntary and may be used to personalize our communications with you. We use a double opt-in process for sending these notifications. This means that we will only send you a notification after you have explicitly confirmed your consent to receive such messages. We will send you a confirmation email asking you to click a link to confirm that you wish to receive these notifications.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a GDPR. When you register for our email notification service regarding product availability, we store your IP address, which is registered by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you register for our email notification service regarding product availability is used exclusively for the purpose of informing you about the availability of a specific item in our online shop.Shop You can unsubscribe from the email notification service regarding product availability at any time by sending a message to the data controller named above. After unsubscribing, your email address will be immediately deleted from our mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is permitted by law and about which we inform you in this statement.

8) Data processing for order processing

8.1 To process your order, we work with the following service providers, who support us in whole or in part in fulfilling concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

The personal data we collect will be shared with the transport company commissioned with delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We will share your payment data with the commissioned bank as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Article 6 Paragraph 1 Letter b GDPR.

8.2 Use of payment service providers (payment services)

- Amazon Pay
When selecting the payment method "Amazon Pay", payment processing is handled by the payment service provider Amazon Payments Europe. s.c.a. , 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: “Amazon Payments”), to whom we will transfer your information provided during the ordering process, along with information about your order, in accordance with Art. 6 para. 1 lit. b GDPR.Your data will only be shared with the payment service provider Amazon Payments for the purpose of processing your payment and only to the extent necessary for this purpose. You can find further information about Amazon Payments' privacy policy at the following web address: https://pay.amazon.com/de/help/201751600

- Apple Pay
If you choose the payment method "Apple Pay" from Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is handled via the "Apple Pay" function of your iOS, watchOS, or macOS device by charging a payment card stored with "Apple Pay." Apple Pay uses security features built into the hardware and SoftThe security features integrated into your device are designed to protect your transactions. Therefore, authorizing a payment requires entering a code you have previously set and verifying it using your device's "Face ID" or "Touch ID" function.
For payment processing purposes, the information you provide during the ordering process, along with details of your order, will be transmitted to Apple in encrypted form. Apple then re-encrypts this data with a developer-specific key before transmitting it to the payment service provider of the payment card stored in Apple Pay. This encryption ensures that only the website where the purchase was made can access the payment information. After the payment has been processed, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the successful payment.
If personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Apple retains anonymized transaction data, including the approximate purchase amount, date, and time, as well as whether the transaction was successful. Anonymization completely eliminates any possibility of identifying individuals. Apple uses this anonymized data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, your Mac and the authorizing device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone's settings. Go to "Wallet". & Apple Pay”, and disable “Allow Payments on Mac”.
Further information on data protection with Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027

- Klarna
When selecting a Klarna payment service, payment processing is handled by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment processing, your personal data (first and last name, street, house number, postal code, city, gender, email address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, items, delivery method) will be passed on to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR during the ordering process.You can see which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). If score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the factors, but not the only one, used in calculating the score values. Klarna uses the information obtained about the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship.
You can withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for processing payments in accordance with the contract.
Your personal data will be processed in accordance with applicable data protection regulations and as described in Klarna's privacy policy for data subjects residing in Germany. https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for those affected who are based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
treated.

- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, we will transmit your payment data to PayPal (Europe) as part of the payment processing. S.a.r.l. et Cie, S.C.A. , 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). This transfer is carried out in accordance with Article 6(1)(b) GDPR and only to the extent necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to offer the respective payment method. The credit check may contain probability values (so-called score values). If score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the data used, but not the only data, in the calculation of the score values. For further information on data protection, including the credit agencies used, please refer to PayPal's Privacy Statement. https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

- Mollie Payments
We use the payment service provider "Mollie", Mollie HQ, Keizersgracht 126, 1015CW Amsterdam, Netherlands. If you select a payment method offered via the "Mollie Payments" service, payment processing will be handled by the payment service provider Mollie. B.V. , Keizersgracht 126, 1015 CW Amsterdam, the Netherlands (hereinafter: "Mollie"). The individual payment methods offered via Mollie are displayed to the customer in the online shop.Shop The seller has informed the customer of the available payment methods. These are iDEAL, Giropay, credit card, Apple Pay, and Klarna. Mollie may use additional payment services to process payments, for which special terms and conditions may apply; the customer will be notified separately of any such conditions.Further information about "Mollie Payments" can be found online at https://www.mollie.com/de available.

- IMMEDIATELY
When selecting the payment method "SOFORT," payment processing is handled by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we transfer the information you provided during the ordering process, along with information about your order, in accordance with Article 6 Paragraph 1 Letter b GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can find further information about SOFORT's data protection policy at the following web address: https://www.klarna.com/sofort/datenschutz.

9) Contacting us to send a review reminder

Own review reminder (not sent via a customer review system)
We use your email address to send you a one-time reminder to submit a review of your order for our rating system, provided you have given us your explicit consent to do so during or after your order in accordance with Art. 6 para. 1 lit. a GDPR.
You can withdraw your consent at any time by sending a message to the data controller.

10) Online Marketing

10.1 Facebook Pixel for creating Custom Audiences with advanced data matching
Within our online service, the so-called "Facebook pixel" of the social network Facebook is used in the mode of extended data matching, which is operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
Based on the user's explicit consent, when a user clicks on an advertisement we have placed on Facebook, the Facebook Pixel adds a parameter to the URL of our linked page. This URL parameter is then stored in the user's browser via a cookie set by our linked page itself. This cookie also collects specific customer data, such as the email address, which we collect on our website linked to the Facebook ad during processes like purchases, account logins, or registrations (extended matching). The Facebook Pixel then reads the cookie and enables the data, including the specific customer data, to be transmitted to Facebook. The information generated by Facebook is generally transferred to and stored on a Facebook server; this may also involve transmission to the servers of Facebook Inc. in the USA. To ensure an adequate level of data protection, the provider has implemented the so-called Standard Contractual Clauses of the European Union. In addition, we conduct a case-by-case risk analysis to ensure data protection that goes beyond the standard contractual clauses.
With the help of the Facebook pixel and advanced matching, Facebook can precisely identify visitors to our website as a target audience for displaying advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel with advanced matching to ensure that the Facebook ads we place are only shown to Facebook users who have demonstrated an interest in our website or who possess certain characteristics (z.B. Interests in specific topics or products, determined based on the websites visited), which we transmit to Facebook (so-called "Custom Audiences").With the help of the Facebook pixel and advanced matching, we also want to ensure that our Facebook ads match the potential interests of users and are not perceived as intrusive. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of the Facebook pixel, the advanced matching function helps us to better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook uses the data for its own advertising purposes, in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/) can use the data. This data can enable Facebook and its partners to display advertisements on and off Facebook.
These processing operations only take place with your explicit consent in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time by deactivating Facebook pixel tracking. To do this, you can set an opt-out cookie by clicking on the link below, which will deactivate Facebook pixel tracking:
Disable Facebook pixel
This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click the link above again.

To the extent that data collected via the Facebook pixel (e.g., email addresses through extended data matching) is used to personalize the AI chat assistant, this is done exclusively with your explicit consent. This data will only be shared with Anthropic, PBC if you have expressly consented to this.

10.2 Use of Google Ads conversion tracking

This website uses the online advertising program "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to advertise our attractive offers on external websites using advertising materials (so-called Google AdWords). Based on the data from these advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is relevant to you, to make our website more interesting for you, and to ensure a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on a Google ad. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of different Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag.However, you will not receive any personally identifiable information. If you do not wish to participate in tracking, you can block this by disabling the Google Conversion Tracking cookie in your internet browser under "User settings." You will then not be included in the conversion tracking statistics. We only use Google Ads with your consent in accordance with Art. 6 Para. 1 lit. a GDPR. When using Google Ads, personal data may also be transferred to the servers of Google LLC in the USA. To ensure an adequate level of data protection, the provider has implemented the so-called Standard Contractual Clauses of the European Union. In addition, we conduct a case-by-case risk analysis to ensure data protection that goes beyond the Standard Contractual Clauses.

You can find further information about Google's privacy policy at the following web address: https://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by adjusting your browser settings accordingly.SoftPrevent the delivery of the product or download and install the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled the use of cookies.

Where legally required, we have obtained your consent for the processing of your data as described above, in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future. To exercise your right of withdrawal, please follow the instructions for submitting an objection as described above.

10.3 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform, operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).

GMP uses cookies to display relevant ads to users, improve campaign performance reports, and prevent users from seeing the same ads multiple times. Google uses a cookie ID to track which ads are displayed in which browser and can thus prevent them from being shown repeatedly. This processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.

Furthermore, GMP can use cookie IDs to track conversions related to ad requests. This occurs, for example, when a user sees a GMP ad and later, using the same browser, visits the advertiser's website and makes a purchase. According to Google, GMP cookies do not contain any personally identifiable information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no control over the scope and further use of the data collected by Google through the use of this tool and therefore inform you as follows, based on our current knowledge: By integrating Google Marketing Platform (GMP), Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider will learn and store your IP address. The use of GMP may also involve the transfer of personal data to the servers of Google LLC.in the USA. To ensure an adequate level of data protection, the provider has implemented the so-called Standard Contractual Clauses of the European Union. In addition, we conduct a case-by-case risk analysis to ensure data protection that goes beyond the Standard Contractual Clauses.

If you wish to object to participation in this tracking process, you can disable cookies for conversion tracking by configuring your browser to accept cookies from the domain www.googleadservices.com be blocked, (see https://www.google.de/settings/ads), although this setting will be deleted if you disable cookies. Alternatively, you can contact the Digital Advertising Alliance at the following web address: www.aboutads.info You can be informed about the use of cookies and adjust your preferences. You can configure your browser to notify you when cookies are being set, allowing you to decide whether to accept them individually, or to block cookies in certain cases or entirely. Please note that disabling cookies may limit the functionality of our website.

You can find further information about the data protection regulations of GMP by Google at the following web address: https://www.google.de/policies/privacy/

10.4 Google Maps

For the visual display of geographical information, Google Maps collects data about your use of the map functions, in particular your IP address and location data, transmits this data to Google, and Google then processes it. We have no influence on this subsequent data processing.

10.5. YouTube Video Plugin

To integrate third-party content, data (IP address, time of visit, device and browser information) is collected via the YouTube video plugin in the extended privacy mode we use, transmitted to Google and subsequently processed by Google, only if you play a video.

11) Web analytics services

Google (Universal) Analytics

Google (Universal) Analytics with Google Signals
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google (Universal) Analytics uses so-called “cookies,” which are text files placed on your computer to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your truncated IP address) will generally be transmitted to and stored by Google on servers in the United States.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and prevents direct identification of individuals. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server. LLC.in The data is transferred to the USA and shortened there. To ensure an adequate level of data protection, the provider has implemented the so-called standard contractual clauses of the European Union.In addition, we conduct a case-by-case risk analysis to ensure data protection that goes beyond the standard contractual clauses.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data.
You can prevent the storage of cookies by adjusting your browser settings accordingly.Softto prevent this. However, please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link:
https://tools.google.com/dlpage/gaoptout?hl=de
As an alternative to the browser plugin, or when using browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you will need to click this link again): Disable Google Analytics
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de
This website uses Google Signals as an extension of Google Analytics. Google Signals allows us to have Google generate cross-device reports (so-called "cross-device tracking"). If you have enabled "personalized ads" in your Google account settings and have linked your internet-enabled devices to your Google account, Google can analyze user behavior across devices and create database models based on this analysis. This includes considering the logins and device types of all website visitors who were logged into a Google account and completed a conversion. The data shows, among other things, which device you first clicked on an ad with and on which device the corresponding conversion took place. We do not receive any personally identifiable information from Google, but only statistics generated by Google Signals. This processing is carried out in accordance with Article 6 Paragraph 1 Letter a of the GDPR based on your consent.

12) Retargeting/ Remarketing/ Referral Advertising

Google Ads Remarketing
Our website uses Google Ads Remarketing features to advertise this website in Google search results and on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. This processing is based on your consent pursuant to Art. 6 para. 1 lit. a GDPR.
Further data processing only takes place if you have agreed to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads you view on the web.If you are logged into Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target audiences. As part of using Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the USA.
You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can contact the Digital Advertising Alliance at the following web address www.aboutads.info You can learn about the use of cookies and adjust your settings accordingly. You can configure your browser to notify you when cookies are being set, allowing you to decide whether to accept them individually, or to block cookies entirely or for specific cases. Please note that disabling cookies may limit the functionality of our website.
In the event that personal data is transferred to Google LLC, based in the USA, the provider has implemented the so-called Standard Contractual Clauses of the European Union to ensure an adequate level of data protection. In addition, we conduct a case-by-case risk analysis to ensure data protection that goes beyond the Standard Contractual Clauses. Further information and the privacy policy regarding advertising and Google can be found here:
https://www.google.com/policies/technologies/ads/.

14) Tools and other items

14.1 Google reCAPTCHA

This website also uses the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function primarily serves to distinguish whether an entry is made by a natural person or is being misused through automated processing. The service involves sending the IP address and, if applicable, other data required by Google for the reCAPTCHA service to Google, and is carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of our legitimate interest in establishing individual accountability on the internet and preventing misuse and spam. When using Google reCAPTCHA, personal data may also be transferred to the servers of Google LLC in the USA. Insofar as data is transferred to the USA, the provider has implemented the so-called Standard Contractual Clauses of the European Union to ensure an adequate level of data protection. In addition, we conduct a case-by-case risk analysis to ensure data protection that goes beyond the Standard Contractual Clauses.

Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

14.2 Google Customer Reviews (formerly Google Certified Shops)

We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in an email survey from Google. If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. Your rating will then be aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating will also be used for Google Seller Ratings. The use of Google Customer Reviews may also involve the transfer of personal data to the servers of Google LLC in the USA. Where data is transferred to the USA, the provider has implemented the so-called Standard Contractual Clauses of the European Union to ensure an adequate level of data protection. In addition, we conduct a case-by-case risk analysis to ensure data protection that goes beyond the standard contractual clauses.

Further information on Google's data protection practices in connection with the Google Customer Reviews program can be found at the following link: https://support.google.com/merchants/answer/7188525?hl=de

You can find more information about Google Seller Ratings' privacy policy at this link: https://support.google.com/google-ads/answer/2375474

14.3 Growave

Our website uses Growave. This is a tool for managing customer reviews, wish lists, and more. smartsleep Club, through which we provide our customers with loyalty points and the opportunity to earn rewards. Further information on how Growave handles user data can be found at: https://www.growave.io/legal.

14.4. Hotjar

For website analytics purposes, technologies from Hotjar Ltd., Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 3155, Malta ("Hotjar") are used to automatically collect and store data (IP address, time of visit, device and browser information, and information about your use of our website), from which user profiles are created using pseudonyms. Cookies may be used for this purpose. The pseudonymized user profiles will not be merged with personal data about the holder of the pseudonym without separately granted, explicit consent. Hotjar acts on our behalf.

14.5. Integration of the Trusted Shops Trustbadge

To display our Trusted Shops seal of approval and any collected reviews, as well as the Trusted offer ShopThe products for buyers after an order are on this website the Trusted product label. Shops Trustbadge integrated.

This serves to protect our overriding legitimate interests in optimal marketing by enabling secure purchasing, in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. The Trustbadge and the services advertised with it are an offering from Trusted. Shops GmbH, Subbelrather Str. 15C, 50823 Cologne. The Trustbadge is provided by a CDN provider (Content Delivery Network) as part of order processing. The Trusted Shops GmbH also uses service providers from the USA. An adequate level of data protection is ensured. Further information on data protection at Trusted ShopYou can find s GmbH here.

When the Trustbadge is accessed, the web server automatically saves a server log file containing your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), thus documenting the access. Individual access data is stored in a security database for the analysis of security incidents. The log files are automatically deleted no later than 90 days after creation.

Further personal data will be transferred to Trusted Shops GmbH if you opt in to use Trusted after completing an order ShopYou decide on products or have already registered to use them. The agreement between you and Trusted applies. ShopThe contractual agreement reached requires the automatic collection of personal data from the order data. Whether you, as the buyer, are already registered for product use is automatically checked using a neutral parameter: your email address, hashed via a cryptographic one-way function. The email address is encrypted for Trusted before being transmitted to this system. ShopThe parameter is converted into an undecipherable hash value. After checking for a match, the parameter is automatically deleted.

14.6. Social Media

14.6.1 Social media plugins from Facebook, Instagram, LinkedIn, Pinterest

Our website uses social media buttons from social networks. These are simply embedded as HTML links, so no connection is established with the servers of the respective provider when you visit our website. Clicking on one of the buttons will open the website of the respective social network in a new browser window. There you can z.B. Click the Like or Share button.

14.6.2 Our online presence on Facebook, Instagram, YouTube, Pinterest, LinkedIn, Xing

If you have given your consent to the respective social media operator in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, your data will be automatically collected and stored when you visit our online presence on the aforementioned social media platforms for market research and advertising purposes. Pseudonymous user profiles will be created from this data. These profiles can be used to z.B. To display advertisements both on and off the platforms that are likely to match your interests, cookies are generally used for this purpose. Detailed information on the processing and use of data by the respective social media provider, as well as contact options and your rights and settings for protecting your privacy, can be found in the providers' privacy policies linked below. Should you still require assistance, please feel free to contact us.

Facebook is a service provided by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). Information about your use of our online presence on Facebook, automatically collected by Facebook Ireland, is generally transferred to and stored on a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses issued by the European Commission. Data processing in connection with visits to a Facebook fan page is based on a joint controllership agreement pursuant to Article 26 GDPR. Further information (information on Insights data) can be found here.

Opt-out: https://www.facebook.com/settings?tab=ads

Instagram This service is offered by Facebook Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland (“Facebook Ireland”). Information about your use of our online presence on Instagram, automatically collected by Facebook Ireland, is generally transferred to and stored on a server of Facebook, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses issued by the European Commission. Data processing in connection with visits to an Instagram fan page is based on a joint controllership agreement pursuant to Article 26 GDPR. Further information (information on Insights data) can be found here.

Opt-out: https://help.instagram.com/519522125107875

YouTube This is a service provided by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland (“Google”). The information automatically collected by Google about your use of our online presence on YouTube is generally transmitted to and stored on a server of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses issued by the European Commission.

Opt-out: https://adssettings.google.com/authenticated

Pinterest This is a service provided by Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland (“Pinterest”). Information about your use of our online presence on Pinterest, which is automatically collected by Pinterest, is generally transmitted to and stored on a server of Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses issued by the European Commission.

Opt-out: https://about.pinterest.com/de/privacy-policy

LinkedIn This is a service provided by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland (“LinkedIn”). Information automatically collected by LinkedIn about your use of our online presence on Pinterest is generally transferred to and stored on a server of LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA. The European Commission has not issued an adequacy decision for the USA. Our cooperation is based on standard data protection clauses issued by the European Commission.

Opt-out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out

Xing This is an offer from New Work SE, Dammtorstraße 30, 20354 Hamburg.

Opt-out: https://privacy.xing.com/de/datenschutzerklaerung/welche-rechte-koennen-sie-geltend-machen/widerspruchsrecht

This is for the fulfillment of our and Trusted ShopThe processing is necessary for the purposes of the legitimate interests pursued by the controller in providing buyer protection and transactional review services linked to the specific order, in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR. Further details, including information on how to object, can be found in the Trusted Privacy Policy linked above and in the Trustbadge. ShopSee the privacy policy.

14.7 AI Assistant (Claude/Anthropic)

On our website we use the AI-powered chat assistant “Claude” from the provider Anthropic, PBC, 548 Market St, San Francisco, CA 94105, USA (“Anthropic”).The assistant serves for interactive customer advice and answering questions about our products and services.

When using the chat assistant, the following personal data is transmitted to Anthropic: the chat messages you enter, your IP address, and technical device information (browser type, operating system, time of use). This data is processed solely for the purpose of providing and improving the chat service.

The processing of your data is based on your explicit consent in accordance with Article 6(1)(a) GDPR. The chat assistant will only be activated after you have given your consent via our cookie consent banner. You can withdraw your consent at any time with effect for the future by adjusting your cookie settings on our website or by contacting us at info@smartsleep.com contact.

Since Anthropic is based in the USA, your data will be transferred to the USA. To ensure an adequate level of data protection, we have concluded a data processing agreement with Anthropic based on the European Commission's Standard Contractual Clauses pursuant to Art. 46 para. 2 lit. c GDPR. In addition, we conduct a case-by-case risk analysis to ensure a level of protection for your data that goes beyond the Standard Contractual Clauses.

You can view Anthropic's privacy policy here: https://www.anthropic.com/privacy

15) Rights of the data subject

15.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, about which we inform you below:

Right of access pursuant to Art. 15 GDPR: In particular, you have the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if they were not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Article 46 GDPR relating to the transfer of your data to third countries;
Right to rectification pursuant to Article 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored with us;
Right to erasure pursuant to Article 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Article 17(1) GDPR are met. However, this right does not exist, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
Right to restriction of processing pursuant to Art.Article 18 GDPR: You have the right to request the restriction of the processing of your personal data while the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you need your data for the establishment, exercise or defense of legal claims after we no longer need this data for the purposes for which it was collected; or if you have objected on grounds relating to your particular situation, pending the verification whether our legitimate grounds override yours.
Right to information pursuant to Article 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing against the data controller, the controller is obligated to communicate this rectification, erasure, or restriction of processing to all recipients to whom your personal data has been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
Right to data portability pursuant to Article 20 GDPR: You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller, insofar as this is technically feasible;
Right to withdraw consent pursuant to Art. 7 para. 3 GDPR: You have the right to withdraw your consent to the processing of your data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing is permitted by another legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
Right to lodge a complaint pursuant to Article 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement, without prejudice to any other administrative or judicial remedy.

15.2 Right to object

If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the data in question. However, further processing remains possible if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the establishment, exercise or defense of legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above. If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.

16) Duration of storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the processing purpose and – if applicable – additionally by the respective statutory retention period (z.B. Commercial and tax law retention periods).

When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the data subject withdraws his or her consent.

If statutory retention periods exist for data processed in the context of contractual or quasi-contractual obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the expiry of the retention periods, provided that it is no longer required for the performance of a contract or for initiating a contract and/or we no longer have a legitimate interest in its continued storage.

When processing personal data on the basis of Article 6(1)(f) GDPR, this data will be stored until the data subject exercises their right to object pursuant to Article 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of establishing, exercising or defending legal claims.

When processing personal data for direct marketing purposes on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 para. 2 GDPR.

Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

* As part of our SALEYou can get it with the discount code “SMART“ 15% discount on supplements, 20% discount on pillows, blankets and pillowcases, and 25% discount on mattress toppers. The discount will be automatically deducted after entering the code in the shopping cart.

The promotional prices are valid only during the promotional period. The discount code “SMART“This offer cannot be combined with other discount promotions, vouchers or discount codes.