Privacy policy

1. Controller

The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is:

Metalldetektoren.de
Andreas Licht
Prof.-Derra-Str. 3
96465 Neustadt bei Coburg, Germany
Phone: +49 173 870 70 75
Email: [email protected]

We have not appointed a data protection officer, as there is no legal obligation to do so. If you have any questions about data protection, please contact us directly at the address above.

2. General information

The protection of your personal data is important to us. We process your data solely on the basis of the statutory provisions, in particular the GDPR, the German Federal Data Protection Act (BDSG) and the German Telecommunications Digital Services Data Protection Act (TDDDG). Terms such as “personal data” or “processing” are defined in Art. 4 GDPR.

The most important legal bases are:

• Art. 6(1)(a) GDPR – your consent
• Art. 6(1)(b) GDPR – performance of a contract or pre-contractual measures, e.g. your order
• Art. 6(1)(c) GDPR – legal obligations, e.g. retention under commercial and tax law
• Art. 6(1)(f) GDPR – our legitimate interests, e.g. secure and stable operation of the website

Where we store or read information on your device (e.g. cookies), we do so under Section 25(2) TDDDG if this is strictly necessary for the service you have requested, and otherwise only with your consent under Section 25(1) TDDDG.

3. Hosting

Our website and shop are hosted by ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdorf, Germany. On our behalf, the host processes all data arising from visits to the website and from orders, on servers in Germany. We have concluded a data processing agreement with the host in accordance with Art. 28 GDPR. The legal basis is Art. 6(1)(b) and (f) GDPR.

4. Cloudflare

To protect against attacks and to ensure fast loading times, we use the content delivery network and security services of Cloudflare, Inc., 101 Townsend St., San Francisco, CA 94107, USA. Your browser connects to Cloudflare servers, which filter the traffic and cache content. In particular, your IP address, browser and device information and the pages you visit are processed. Cloudflare may set technically necessary cookies to detect bots.

The legal basis is our legitimate interest in a secure and fast website (Art. 6(1)(f) GDPR). We have concluded a data processing agreement with Cloudflare. Cloudflare is certified under the EU-US Data Privacy Framework, which ensures an adequate level of data protection for transfers to the USA (Art. 45 GDPR). Further information: https://www.cloudflare.com/privacypolicy/

5. Server log files

Each time you access our website, your browser automatically transmits data to our server. The following is stored:

• date and time of the request
• name and URL of the file requested
• page from which the file was requested (referrer)
• access status (e.g. successful, file not found)
• browser and operating system used
• IP address of the requesting device
• amount of data transferred

We need this data to deliver the website, to ensure its stability and security and to fend off attacks. The legal basis is Art. 6(1)(f) GDPR. After 14 days at the latest, the data is anonymised by shortening the IP address, so that it can no longer be linked to individual users. This data is not combined with other data.

6. Cookies and cookie settings

We use cookies and similar technologies. These are small files that your browser stores on your device.

• Technically necessary cookies are required to operate the shop, e.g. for the shopping basket, logging in to your customer account, the language setting and saving your cookie choices. The legal basis is Section 25(2) no. 2 TDDDG in conjunction with Art. 6(1)(b) and (f) GDPR.
• All other cookies and services, e.g. for statistics, videos or advertising, are only used if you have given your consent in our cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR).

You can withdraw or change your consent at any time with effect for the future via the cookie settings on our website. You can also delete or block cookies in your browser at any time. In that case, some functions of the shop may no longer work properly.

7. Customer account, orders and contract processing

When you place an order with us or create a customer account, we process the data you provide: name, address, email address, telephone number (optional), order details and payment method. We need this data to conclude and perform the contract, to deliver the goods and to keep you informed about the status of your order. The legal basis is Art. 6(1)(b) GDPR.

A customer account is optional. You can also order as a guest. You can have your customer account deleted at any time; an email to us is sufficient.

Due to retention obligations under German commercial and tax law (Section 257 HGB, Section 147 AO), we store order and invoice data for the legally required period, generally up to ten years (Art. 6(1)(c) GDPR). After that, the data is deleted.

Sign in with Google

Instead of using your email address and password, you can also sign in with your Google account. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. If you use this function, you will be redirected to Google. After your confirmation, Google sends us your name and email address so that we can create your customer account or sign you in. The legal basis is Art. 6(1)(b) GDPR. Use of this function is optional. Google’s privacy policy: https://policies.google.com/privacy?hl=en

8. Shipping with DHL

We ship exclusively with DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany). For delivery, we pass on your name and delivery address to DHL (Art. 6(1)(b) GDPR).

We only pass on your email address and, where applicable, your telephone number to DHL if you have expressly consented to this during the ordering process (Art. 6(1)(a) GDPR). DHL uses this data to notify you of the delivery date and to coordinate delivery with you. You can withdraw this consent at any time, either from us or from DHL.

9. Payment service providers

Depending on the payment method you choose, we pass on the data required for payment to the respective payment service provider, e.g. name, address, email address, order number and amount. The legal basis is Art. 6(1)(b) GDPR. For prepayment, invoice (for regular customers) and cash on delivery, no data is transferred to a payment service provider.

PayPal (including credit card, direct debit, Apple Pay and Google Pay)

The provider is PayPal (Europe) S.à r.l. et Cie, S.C.A., 22–24 Boulevard Royal, L-2449 Luxembourg. Payments by credit card, direct debit, Apple Pay and Google Pay are also processed via PayPal. For payment methods such as pay later or instalments via PayPal, PayPal may carry out a credit check, for which PayPal is itself responsible. Privacy statement: https://www.paypal.com/de/legalhub/privacy-full

When you pay with Apple Pay or Google Pay, Apple (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland) or Google (Google Ireland Limited, Dublin) also process data in accordance with their own privacy policies.

Klarna

The provider is Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden. For purchase on invoice and instalment payments, Klarna may carry out an identity and credit check and exchange data with credit agencies for this purpose. Klarna itself decides which payment methods are offered to you. Privacy notice: https://www.klarna.com/de/datenschutz/

Amazon Pay

The provider is Amazon Payments Europe S.C.A., 38 avenue J.F. Kennedy, L-1855 Luxembourg. If you choose Amazon Pay, you sign in with your Amazon account. Amazon then sends us the data required for the order (name, delivery address, email address). Privacy notice: https://pay.amazon.de/help/201212490

10. Contact by email, telephone, contact form and callback service

If you contact us by email, telephone, contact form or via our callback service, we process the information you provide (e.g. name, email address, telephone number, your message) in order to handle your enquiry. The legal basis is Art. 6(1)(b) GDPR if your enquiry relates to a contract or a planned order, and otherwise our legitimate interest in responding to your enquiry (Art. 6(1)(f) GDPR). We delete the data once your enquiry has been dealt with and no retention obligations apply.

11. Online withdrawal form

If you use our online withdrawal form, we process the data you enter there (order number, order date, items, name, address, email address and, if given, the reason) in order to process your withdrawal, and we send you a confirmation of receipt by email. The legal basis is Art. 6(1)(b) and (c) GDPR.

12. AI advisor (chat)

On our website you can use our AI advisor, a chat that answers questions about metal detectors and our product range. Use is optional. When you use the chat, your input is transferred to our server and forwarded from there to the AI service Anthropic (Anthropic, PBC, San Francisco, USA) to generate the answer. Your IP address is not transmitted to Anthropic. Anthropic does not use data submitted via its interface to train its AI models.

Chat histories are logged on our server so that we can improve the service and detect misuse, and are automatically deleted after 14 days. The legal basis is Art. 6(1)(f) GDPR and, for questions about an order, Art. 6(1)(b) GDPR. For the transfer to the USA, we have agreed EU standard contractual clauses with Anthropic (Art. 46(2)(c) GDPR).

Please do not enter any sensitive personal data in the chat, e.g. bank or credit card details. The answers are generated automatically and may contain errors. Only the information in our shop and in the purchase contract is binding.

13. Community, second-hand market and surveys

If you publish questions or answers in our community, place an ad in the second-hand market or take part in our “Survey of the month”, we process the data you provide. Posts and ads are displayed publicly with the name or user name you have given; your email address is not published. For surveys, we only evaluate the answers in aggregated form. The legal basis is Art. 6(1)(b) GDPR (use of the respective function) or Art. 6(1)(f) GDPR. You can request the deletion of your posts and ads at any time by email.

14. Customer reviews

If you review a product, we publish your review together with the name you have given. The legal basis is Art. 6(1)(a) GDPR. You can request the deletion of your review at any time.

15. Newsletter and email reminders

Newsletter: You will only receive our newsletter if you have expressly subscribed to it and confirmed your subscription via the confirmation link in our email (double opt-in, Art. 6(1)(a) GDPR). We log the subscription and confirmation so that we can prove them. You can unsubscribe at any time via the unsubscribe link in every issue or by sending us an email.

Reminders and service emails (MailBeez): To send emails relating to your order, we use the MailBeez module integrated into our shop; it runs on our own server. We use it, for example, to send you a reminder if an order process was not completed. We only send such reminders if you have consented (Art. 6(1)(a) GDPR) or if you have already bought from us and we are permitted under Section 7(3) of the German Unfair Competition Act (UWG) to send you information about similar goods (Art. 6(1)(f) GDPR). You can object to these emails at any time, e.g. via the unsubscribe link in every email, without incurring any costs other than the transmission costs at the basic rates.

16. Prize draws and promotions

If you take part in a promotion or prize draw, e.g. our prize wheel, we process the data required to carry out the promotion and to allocate prizes or vouchers (Art. 6(1)(b) GDPR). The data is deleted after the end of the promotion unless retention obligations apply.

17. Web analytics with Matomo

We use the open-source software Matomo to statistically analyse the use of our website and to improve our offering. Matomo runs on our own server; the data collected is not passed on to third parties. Among other things, the pages visited, time spent on the site, origin of the visit, browser, operating system, screen resolution and your IP address in shortened, pseudonymised form are recorded. Matomo may set cookies to recognise returning visitors.

We only use Matomo with cookies if you have given your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings. You can also object to the tracking here:

18. OpenAI pixel (advertising in ChatGPT)

We advertise in ChatGPT and measure the success of these ads with the conversion pixel of OpenAI (OpenAI OpCo, LLC, San Francisco, USA; for users in the EEA, OpenAI Ireland Limited, Dublin, Ireland). If you reach us via one of our ads in ChatGPT, the pixel records which pages you visit and whether you complete an order. This involves processing your IP address, browser and device information, the pages visited and a click ID, among other things. This allows us to determine whether our ads are worthwhile. Personal data may also be transferred to the USA in the process.

The pixel is only loaded if you have given your consent in the cookie banner (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). You can withdraw your consent at any time via the cookie settings. OpenAI’s privacy policy: https://openai.com/policies/privacy-policy/

19. Google Ads and Google Analytics (conversion measurement)

We run advertisements on Google (Google Ads) and use the Google tag to measure whether a visit via one of our ads leads to an order (conversion measurement). For this purpose, we use Google Ads and Google Analytics 4. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. We use Google Analytics exclusively for measuring the success of our ads; general statistics for our website are collected with Matomo (see section 17).

The data processed includes a pseudonymous cookie ID, an ad click ID, the pages visited, date and time, browser and device information, approximate location and details of a completed order (e.g. order value). Google Analytics 4 does not store your IP address. Among others, the cookies “_ga” (stored for up to 2 years) and “_gcl_au” (up to 90 days) are set. We only receive aggregated reports from Google that do not allow us to identify individual persons. Google may link the data with other data, for example if you are logged in to your Google account, and to that extent processes it under its own responsibility.

The Google tag is loaded directly from Google. Personal data may also be transferred to the USA; Google is certified under the EU-US Data Privacy Framework.

The Google tag is only loaded if you have given your consent in the cookie banner under “Google Conversion” (marketing) (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Without your consent, no data is transmitted to Google. You can withdraw your consent at any time with effect for the future via the cookie settings. Further information: https://policies.google.com/privacy?hl=en and https://business.safety.google/privacy/

20. YouTube videos

We embed videos from the YouTube platform. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The videos are only loaded when you click on them (e.g. “Load video”) or have given your consent in the cookie banner. Only then is a connection to YouTube established, and your IP address, device and browser information, the page visited and – if you are logged in there – your Google account information, among other things, are transmitted to Google. Google may link this data with other Google services and also transfer it to the USA; Google is certified under the EU-US Data Privacy Framework. The legal basis is your consent (Section 25(1) TDDDG, Art. 6(1)(a) GDPR). Further information: https://policies.google.com/privacy?hl=en and https://business.safety.google/privacy/

21. Google Shopping (Merchant Center)

Our products are shown on Google Shopping via the Google Merchant Center. For this purpose, we only transmit product data (e.g. item name, price, availability) to Google, no personal data of our customers. If you click on one of our products on Google Shopping, Google processes data under its own responsibility in accordance with its privacy policy.

22. Sales via eBay

We also sell our items on the eBay marketplace (eBay GmbH, Albert-Einstein-Ring 2–6, 14532 Kleinmachnow, Germany). If you buy from us there, we receive the data required for processing from eBay (name, address, email address, order details) and process it like an order in our shop (Art. 6(1)(b) GDPR). The connection to our shop is made via the magnalister software. eBay’s privacy policy applies to data processing on eBay itself.

23. Links to social networks

Social networks such as Instagram or Facebook are only included on our website as simple links. Only when you click on such a link are you redirected to the respective provider, and only then is data transmitted to that provider. The privacy policy of the respective provider applies there.

24. Recipients of your data

We only pass on your data to third parties if this is described in this privacy policy, if you have given your consent, if it is necessary for the performance of a contract, if we are legally obliged to do so or if it is necessary to assert or defend legal claims. Service providers who process data on our behalf (e.g. hosting, sending emails, maintaining our IT) are contractually bound under Art. 28 GDPR and may only use the data in accordance with our instructions.

25. Data security

In accordance with Art. 32 GDPR, we take appropriate technical and organisational measures to protect your data. Our website is encrypted throughout using SSL/TLS; you can recognise this by the padlock symbol and “https://” in your browser’s address bar.

26. Storage period

We only store personal data for as long as is necessary for the respective purpose or as required by statutory retention periods. After that, the data is routinely deleted. If you have withdrawn your consent or objected to processing, we delete your data unless there is another legal basis for further processing.

27. Your rights

You have the right at any time to:

• access the data we hold about you (Art. 15 GDPR)
• rectification of inaccurate data (Art. 16 GDPR)
• erasure of your data (Art. 17 GDPR)
• restriction of processing (Art. 18 GDPR)
• data portability (Art. 20 GDPR)
• withdraw any consent you have given, with effect for the future (Art. 7(3) GDPR)
• lodge a complaint with a data protection supervisory authority (Art. 77 GDPR). The authority responsible for us is the Bavarian State Office for Data Protection Supervision (BayLDA), Promenade 18, 91522 Ansbach, Germany, www.lda.bayern.de. You can also contact the authority in your place of residence.

28. Right to object (Art. 21 GDPR)

Where we process your data on the basis of our legitimate interests (Art. 6(1)(f) GDPR), you may object to this processing at any time on grounds relating to your particular situation. You may object to the processing of your data for direct marketing at any time without giving reasons.

To object or withdraw consent, simply send an email to: [email protected]

29. Changes to this privacy policy

We update this privacy policy when our services or the legal requirements change. The version published here applies.

Last updated: 29 October 2026