Free shipping on orders of €45 or more (Germany)

Made in Germany since 1990

Your shopping cart

Your shopping cart is currently empty.

Continue shopping

Privacy policy

PRIVACY POLICY – As of September 2026

I. Name and Contact Information of the Data Controller

This privacy notice applies to data processing by: Data Controller:

Keralit Veterinär- und Pferdetechnik GmbH
Managing Director: Florian Ruff - Brenntenhau 1 - D-71106 Magstadt Tel.: (+49) 07159-42848
Email: info@keralit.de
Court of Registration: HRB Stuttgart 25400

As the operator of this website, we take the protection of your personal data very seriously.
We treat your personal data confidentially and in accordance with applicable data protection laws and this privacy policy.

II Data processing when visiting and using our websitekeralit


1. Hosting by Shopify
For this purpose, we use the online store platform provided by Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”), for the hosting and display of the online store on a processor-in-our-name basis. All data collected on our website is processed on Shopify’s servers. As part of the aforementioned services provided by Shopify, data may also be transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, as well as Shopify Data Processing (USA) Inc., Shopify Payments or Shopify (USA) Inc.

Shopify relies on the European Commission's adequacy decision regarding Canada to ensure the lawfulness of transfers of personal data to its parent company, Shopify Inc., which is incorporated in Canada.

If Shopify transfers personal data to Shopify affiliates in the United States, an adequate level of data protection is ensured through compliance with the provisions of the European Commission’s Adequacy Decision dated July 10, 2023 (Data Privacy Framework).

In addition, Shopify uses comprehensive data transfer and data processing agreements that incorporate the latest version of the Standard Contractual Clauses (SCCs) approved by the European Commission to govern the following:

  • All transfers within the Shopify Group

  • Further transfers to our subcontractors

    For more information about Shopify's privacy policy, please visit the following website: https://www.shopify.de/legal/datenschutz.

     

    2. visit the website 

When you visit our website at www.keralit.de, the browser on your device automatically sends information to our website’s server. This information is temporarily stored in a so-called log file. The following information is collected automatically without any action on your part and stored until it is automatically deleted:

• IP address of the requesting computer (anonymized)
• Date and time of access
• Name and URL of the file accessed
• Website from which the access originated (referrer URL)
• Browser used and, if applicable, your computer's operating system, as well as the name of your access—

Provider
We process the data listed above for the following purposes:

• Ensuring that the website connects smoothly • Ensuring a convenient user experience on our website
• Evaluating system security and stability
• Tracing unauthorized or illegal access.

The legal basis for data processing is Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest stems from the purposes of data collection listed above. In this context, we do not use the collected data to draw conclusions about your identity. The data will be deleted no earlier than 30 days after the end of the browser session, and no later than 12 months thereafter.

In addition, we use cookies when you visit our website. For more information, please see Section 4 of this Privacy Policy.

3. use of the contact form

You can access our contact form by clicking the “Contact” tab or section in the footer to get in touch with us. The following information is required:

Title (Ms./Mr./no title), name, valid email address, and your message to us, so that we know who the inquiry is from and can respond to it. You may voluntarily provide your phone number in the field provided for that purpose. If you provide us with your phone number, we assume that we may also contact you by phone for the purpose of responding to your inquiry.

The processing of the personal data you provide when contacting us is carried out in accordance with Article 6(1), sentence 1, subparagraph (b) of the GDPR for the purpose of fulfilling your request. The processing of your phone number (i.e., storing and using it for the purpose of responding to your inquiry) is justified based on your consent pursuant to Article 6(1), first sentence, letter a of the GDPR.

We will not contact you by email or telephone, apart from directly responding to your inquiry. The data you enter when contacting us will only be stored by us until the inquiry has been dealt with, unless a contract is concluded, in the context of which we are entitled to process and thus also store the contract data. We will only process your telephone number and e-mail address for purposes other than necessary on the basis of a separate consent given by you (Art. 6 para. 1 sentence 1 lit. a GDPR).

4. creation of customer accounts - corporate customer account / private customer account

In our store, you can set up a customer account in your name, whether you are a business customer or a private customer.

You can access the registration page in the upper right corner under the "My Account" icon (to the left of the shopping cart icon). You can then choose whether you'd like to set up a business account or a personal account by clicking the corresponding green button.

a) Corporate client account

To register, you must fill out or upload the required fields marked with an asterisk (*): company name, VAT ID, address, business registration, first name, last name, email address, and password. Clicking the green “Create Business Account” button will submit your registration to us.

b) Private customer account

To register, you must fill in the required fields marked with an asterisk (*): first name, last name, email address, and password. Clicking the green "Create Personal Account" button will submit your registration to us.

c) Confirmation/Activation

Regardless of whether you registered for a business account or a personal account, after you enter your email address, you will receive an email from us containing a link that you can use to activate your user account. Once you have clicked the link in the email, your account will be activated. The information you provided will then be saved as the default billing address in your password-protected customer account. You now also have the option to enter a default shipping address that is different from the billing address.

No payment method is automatically preselected in your customer account.
Payment by credit card is only preselected during checkout when placing an order. However, you can then change the payment method to one of the other available options (Visa, Mastercard, American Express, Apple Pay, Google Pay, Klarna, Maestro, Union Pay, PayPal). Depending on the payment method you select, you’ll need to enter the required information in the designated fields.

You can update your billing or shipping address at any time in your customer account.

The customer information you enter will be used for the orders you place. You can view your orders in your order history.

Only you can access your customer account by entering your email address and the password you chose. The system stores only the hash value generated for this password. The original password cannot be recovered from this hash value. If you ever forget your password, you can reset it using the “Forgot Password” feature.

The processing of your personal data in connection with the registration and use of your customer account is carried out for the purpose of enabling the simplified login to our online store that you have requested, as well as the use of any additional services available exclusively through your customer account (e.g., viewing your order history, subscribing to the newsletter). The legal basis for this data processing is therefore Article 6(1)(b) of the GDPR.

5. Orders placed through our online stores

Our website provides access to an online store for consumers (B2C store) and an online store for business customers (B2B store). You can place orders with us through either store.

Depending on the store, orders can be placed using an existing customer account, after creating a customer account, or—if offered—as a guest without registering. For information on creating and using a customer account, see section 4 above.

a) Orders placed in the B2C store

When you, as a consumer, place an order in our B2C store, we process the personal data necessary to fulfill the order. This includes, in particular:

  • First and last name,

  • E-mail address,

  • Billing address and, if applicable, a different shipping address,

  • Details about the products ordered,

  • Selected payment method.

    We process this data to receive and fulfill your order, deliver the products you ordered, process payment and billing, and communicate with you regarding your order.

    The legal basis for this processing is Article 6(1), first sentence, subparagraph (b) of the GDPR. The processing is necessary for the initiation and performance of the sales contract concluded with you.

    b) Orders placed in the B2B store

Orders for businesses can be placed through our B2B store. In doing so, we process the data necessary to initiate and fulfill the respective order. This may include, in particular:

  • Company or business name,

  • First and last name of the person placing the order or the contact person,

  • business email address,

  • Billing address and, if applicable, a different shipping address,

  • customer number, if applicable,

  • VAT ID number, if applicable,

  • Details about the products ordered, as well as

  • Selected payment method.

To the extent that
is a sole proprietorship, the processing of your personal data is based on Article 6(1)(b) of the GDPR.

You yourself are a party to the contract entered into with us, specifically as

If the order is placed on behalf of a company or other organization that itself becomes a contracting party, we process the personal data of the individuals acting on behalf of that company pursuant to Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest consists in establishing, conducting, and managing the business relationship with the respective corporate customer.

c) Asserting and Defending Claims

To the extent necessary, we also process the data collected in connection with an order to assert, exercise, or defend legal claims. The legal basis for this is Article 6(1), first sentence, subparagraph (f) of the GDPR. Our legitimate interest consists in safeguarding and enforcing our legal claims, as well as in defending against unjustified claims.

6. Exercising the consumer’s right of withdrawal using the online withdrawal function

We serve provide consumers an electronic cancellation feature that allows them to submit statutory notices of cancellation online. When you use this feature, we process the personal data you provide—specifically your name, contact information, order number, contract details, and the information regarding your cancellation—in order to receive and process your cancellation and to rescind the contract.

The legal basis for the processing is Article 6(1), first sentence, letter c of the GDPR for the fulfillment of legal obligations, as well as Article 6(1), first sentence, letter b of the GDPR for the implementation of pre-contractual measures and the fulfillment of the contractual relationship. The data collected in connection with the notice of revocation will be stored only for as long as is necessary to process the revocation, to comply with statutory retention obligations, or to assert, exercise, or defend legal claims.

7. Subscribing to the Newsletter / Sending the Newsletter / Analyses

You can subscribe to our newsletter through our website. This involves the following data processing activities:

a) Subscribing to the newsletter

If you would like to subscribe to the newsletter offered on the website, we need your email address. Once you have confirmed your subscription to our newsletter on our website (opt-in), you will receive an email containing a confirmation link. You will only be added to the email distribution list after clicking on the link (the so-called double opt-in). Only after this full consent has been given will the data collected during newsletter registration be processed.

b) Purpose of the data processing

We use the data you provided when you subscribed to the newsletter to send the newsletter and for statistical analysis. For this analysis, the emails we send may contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. We use these to determine whether a newsletter message has been opened.

The additional technical information collected (e.g., time of access, IP address, browser type, and operating system) is collected exclusively in pseudonymized form. It is not linked to your other personal data, so any connection to your identity is ruled out. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses are used to optimize future newsletters. If you wish to object to the analysis of your data for statistical purposes, you must unsubscribe from the newsletter.

c) Service provider Shopify

We use the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”) to send email newsletter, we use the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”). As part of this service, the data you provide when subscribing to the newsletter will be shared with Shopify. You can view Shopify’s privacy policy here: https://www.shopify.de/legal/datenschutz

d) Transfer of Data – EU Adequacy Decision (see II.1, para. 2 above)

e) Legal basis

The legal basis for the aforementioned processing of your data is your consent via the double opt-in procedure and, accordingly, Article 6(1), first sentence, letter a of the GDPR.

Shopify may itself use the aforementioned data in accordance with Article 6(1)(f) of the GDPR based on its own legitimate interest in tailoring the service to user needs and optimizing it, as well as for market research purposes—such as to determine which countries the recipients are from. However, Shopify does not use the data of our newsletter subscribers to contact them directly or to disclose the data to third parties. We have entered into a

We have entered into a data processing agreement that requires Shopify to protect our customers' data and not to disclose it to third parties.

f) Withdrawal of consent

You can revoke your consent or unsubscribe from the newsletter at any time. You can do this, for example, by clicking the link at the bottom of each newsletter. Alternatively, you are welcome to send your request to unsubscribe at any time to info@keralit.de . You will be removed from the mailing list immediately after you revoke your consent or unsubscribe.

Please note that revocation or unsubscription does not affect the lawfulness of data processing operations carried out prior to such revocation.

We will store the data you provided when you subscribed to our newsletter until you unsubscribe, at which point it will be deleted from our servers. Data that we have stored for other purposes (e.g., in connection with a customer account you may have created) is not affected by this and is subject to separate retention and deletion periods.

8. Data Processing Using Cookies

We use cookies on our website.

a) General Information / Consent – Modification and Withdrawal / Information About Cookies Used on This Website
A “cookie” is a small amount of data—usually just a few bytes—that your browser automatically creates and that may be stored on your device (laptop, tablet, smartphone, etc.) in a text file when you visit our website. Cookies do not cause any damage to your device and do not contain viruses, Trojans, or other malware.

Cookies store information that is specific to the device you are using. However, this does not mean that we thereby gain direct knowledge of your identity.

The use of cookies serves, on the one hand, to make your experience with our online store more enjoyable—for example, through the “shopping cart” feature. It also allows us to track which specific pages you have visited and when you may have abandoned an order, so that we can use this data to optimize the online store for you.

b) Necessary cookies - can be used without consent

Cookies are necessary for some features of our website, such as the shopping cart function. The online store uses a cookie to remember the items you have added to your virtual shopping cart; this cookie remains stored on your device until you complete your order. Functional cookies also include those that are set on your device when you click a link to our website on an advertising partner’s website and are redirected to our website as a result. Their use is necessary to provide the redirect to our website that you requested, so that we can compensate our advertising partner

credit any commission that may be due. The data stored in the cookie is limited to what is necessary for this purpose.
The use of these cookies is justified under Article 6(1)(b) of the GDPR in order to properly fulfill the function you have requested. Therefore, your separate consent is not required for the use of these cookies.

c) Functional cookies

These cookies enable the website to provide enhanced functionality and personalization. They may be set by us and by our data processor, Shopify, whose services we have integrated into our site. If you do not allow these cookies, some of these services may not function properly.

Functional cookies include, for example, cookies that are placed on your device to recognize you the next time you visit our website, thereby improving your shopping experience. We also use cookies to remind you of an order you may have abandoned.

The use of these cookies is justified under Article 6(1), first sentence, letter a of the GDPR, provided that you have expressly given us your consent. You may withdraw your consent at any time.

d) Deactivation of cookies

Most browsers automatically accept cookies. However, you can configure your browser so that cookies are not stored on your computer or so that a notification always appears before new cookies are created. Please note, however, that completely disabling cookies may prevent you from using all the features of our website.

You can also disable third-party cookies by visiting the Network Advertising Initiative's opt-out page at https://www.networkadvertising.org/choices/ and following the opt-out instructions provided there.

e) Duration of Storage/Deletion of Cookies

We will inform you about how long the data processed using the respective cookies will be stored as part of your consent via the cookie banner.

7. Google Analytics 4

This website uses features of the web analytics service Google Analytics 4, a service provided by Google Ireland Limited (“Google”), Gordon House, Barrow Street, Dublin 4, Ireland. We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities regarding the use of Google Analytics.

Google Analytics allows us to analyze the behavior of visitors to our website. We receive various usage data, such as page views, time spent on the site, operating systems used, and the visitor’s location. This data is aggregated into a user ID and assigned to the website visitor’s respective device.

In addition, Google Analytics allows us to track, among other things, your mouse and scroll movements and clicks. In addition, Google Analytics uses various modeling approaches to supplement the collected data sets and employs machine learning technologies in its data analysis. Google Analytics uses technologies that enable user recognition for the purpose of analyzing user behavior (e.g., cookies or device fingerprinting).

We have enabled the IP anonymization feature on this website. This means that Google will truncate your IP address within member states of the European Union or in other signatory states to the Agreement on the European Economic Area before transmitting it to the United States. Only in exceptional cases will the full IP address be transmitted to a Google server in the United States and truncated there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide other services related to website and internet usage to the website operator. The IP address transmitted by your browser as part of Google Analytics will not be merged with other data held by Google.

The Data transfers to the U.S. is carried out in accordance with the provisions of the new Transatlantic Data Privacy Framework.

For more information on how Google Analytics handles user data, please see Google's Privacy Policy:
https://support.google.com/analytics/answer/6004245?hl=de
For more information about Google’s advertising technologies, click here: https://policies.google.com/technologies/ads and

https://www.google.de/intl/de/policies/privacy/.
This analytics tool is used only with your consent. The legal basis is Art. 6(1), Sent. 1, lit. a of the GDPR. You may revoke your consent at any time with future effect.
Regardless of this, you can prevent the collection and processing of your data by Google by downloading and installing the browser plugin available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de.

8. hCaptcha

To ensure that a login is performed by a human and not by an automated process, we use the tool hCaptcha from Intuition Machines, Inc., 350 Alabama St, #10, San Francisco, CA 94110, USA. You can find hCaptcha’s privacy policy at https://www.hcaptcha.com/privacy.

hCaptcha generally processes technical information about how you use our website, such as mouse movements, scroll positions, keystrokes, and touch events on touchscreens. hCaptcha processes this data on our behalf and solely to protect our website from bots and spam.

For more information about hCaptcha, as well as its privacy policy and terms of use, please visit the following links:

https://hcaptcha.com/privacy/ and https://hcaptcha.com/terms.

hCaptcha is certified under the EU-U.S. Data Privacy Framework. The service is used to ensure the availability of the website, to protect it from bots, and thus—while also balancing your legitimate interests—based on our legitimate interests pursuant to Article 6(1)(f) of the GDPR.

9. Use of Data for Email Marketing and the Right to Object
If we receive your email address in connection with the conclusion of a contract for one of our products and you have not objected to its use for promotional emails, we reserve the right to periodically send you offers for similar products from our lineup via email. You may object to this use of your email address at any time by sending a message to the contact information provided below or by clicking a link provided for this purpose in the promotional email, without incurring any costs other than the transmission costs according to the standard rates.

The legal basis for this processing is our legitimate interest in carrying out promotional activities and targeted advertising toward our customers, and thus Article 6(1)(b) of the GDPR in conjunction with Section 15(3) of the German Telemedia Act (TMG) and Section 7(3) of the German Unfair Competition Act (UWG).

III Data processing outside our website


1. Data Processing When Contact Is Made Through Other Channels (e.g., Phone, Email, Trade Show Booth)

If you contact us by email, phone, or in person, we generally collect your first and last name, as well as your address and contact information, if applicable. In addition, we may collect other data, such as order details, payment information, and the types of horses you own. Otherwise, data processing is based on the content of your inquiry or order.

Depending on the content of the inquiry or order, the legal basis for processing is Article 6(1), first sentence, subparagraph (b) of the GDPR, for the purpose of responding to your inquiry or fulfilling your order.

When using a contact form available on-site (e.g., at a trade show), data processing—unless it is necessary to respond to an inquiry (see above)—is based on your consent pursuant to Article 6(1), first sentence, letter a of the GDPR.

The disclosure of your personal data generated in connection with the processes described above is based on Article 6(1), first sentence, subparagraph (b) of the GDPR, provided that such disclosure is necessary to respond to your inquiry or fulfill your order. If the disclosure serves to optimize our market presence (statistics, direct marketing), it is based on our legitimate interest and is justified pursuant to Article 6(1), first sentence, letter f of the GDPR.

2. Dealer Inquiries

For inquiries from merchants, the information provided above in Section 1, first sentence, applies accordingly. Depending on the content of your inquiry, data related to your business operations will be processed. We note in

In this context, please note that we reserve the right to disclose information to third parties in connection with a credit check. We will notify you separately in advance if necessary.

3. Contact Information for Points of Contact/Government Officials

We store the contact information (last name, first name, address, phone number, email address, company affiliation) of our business partners’ points of contact as well as of government officials for the purpose of establishing direct contact, particularly in connection with the preparation and execution of contracts. The legal basis for this processing is Article 6(1), first sentence, subparagraph (f) of the GDPR. In the interest of simplifying and, in particular, facilitating direct contact with the respective contact persons, we have a legitimate interest in processing the personal data necessary for this purpose.

4. data processing for applications and in the application process

In connection with job applications, we collect and process applicants’ personal data for the purpose of handling the application process. The legal basis for this processing is Article 88 of the GDPR in conjunction with Section 26 of the Federal Data Protection Act. Processing may also be carried out electronically.

This is particularly the case when an applicant submits the relevant application materials to us electronically, for example via email or through a contact form on our website. If we enter into a contract with an applicant, the data provided will be stored for the purpose of fulfilling the contractual relationship in accordance with applicable legal requirements. The legal basis for this is Article 6(1)(b) of the GDPR.

5. Data from Existing Customers – Advertising

If a contract has been concluded with you and you have provided us with your email address in connection with that contract, we will also use that email address, as well as your first and last name, to send you information about our own products and/or services that are similar to the products or services you have purchased. This is subject to the condition that you have not objected to the use of your email address for promotional purposes.

The legal basis for the processing is Article 6(1), first sentence, letter f of the GDPR in conjunction with Section 7(3) of the German Unfair Competition Act (UWG). We have a legitimate interest in informing our existing customers about our products and services, as well as in sending them Christmas greetings to foster customer loyalty. The interests of our customers are sufficiently safeguarded by their right of withdrawal (see Section VIII below), which is communicated to them in every email.

IV. Forwarding of data


1. Authorization to Disclose
Your personal data will not be disclosed to third parties for purposes other than those listed below under b) and c).

We will only share your personal information with third parties if:

  • this is permitted by law and is necessary, pursuant to Article 6(1), first sentence, subparagraph (b) of the GDPR, for the performance of contractual relationships with you,

  • there is a legal obligation to disclose the data pursuant to Article 6(1), sentence 1, subparagraph (c) of the GDPR, and/or

  • the disclosure is necessary under Article 6(1), first sentence, subparagraph (f) of the GDPR to assert, exercise, or defend legal claims, and there is no reason to believe that you have an overriding legitimate interest in preventing the disclosure of your data.

    We will only disclose your personal data for purposes other than those specified there if you have given your explicit consent, in accordance with Article 6(1)(a) of the GDPR.

    2. Recipients, in general

    We primarily disclose your personal data to third parties who are involved in the fulfillment of the contract, such as the logistics company responsible for delivery and the financial institution responsible for payment processing. In addition, under certain conditions, we may transfer your data to the payment service provider PayPal (see section c) below). Finally, contract data is transferred to our tax advisor and the relevant authorities (in particular, the tax authority). Furthermore, the transfer of your data to the following third parties may occur within the scope of legally permissible disclosure: data processors to whom we transfer personal data in order to carry out the business relationship with you or to whom we grant access to your data stored with us. Specifically: support/maintenance of IT applications; archiving; data destruction; debt collection; website management.

    However, in cases where your personal data is disclosed to third parties, the scope of the data transferred is limited to the minimum necessary.
    The disclosure of the data is necessary for the purposes of entering into and/or fulfilling a contract and is therefore justified pursuant to Article 6(1), sentence 1, subparagraph (b) of the GDPR.

    3. Payee in Connection with the Payment/Payment Service Provider

    On our website, we offer various payment options: Visa, Mastercard, American Express, Apple Pay, Google Pay, Klarna, Maestro, Union Pay, and PayPal. For this purpose, payment information is transmitted to the respective payment service providers. The data is shared exclusively and only to the extent necessary for the purpose of processing the payment. You can find more information here:

    a) PayPal

    The data controller has integrated PayPal components into this website. PayPal is an online payment service provider. Payments are processed through so-called PayPal accounts, which are virtual personal or business accounts. PayPal also allows users to make virtual payments via credit card if they do not have a PayPal account. A PayPal account is managed using an email address, which is why there is no traditional account number. PayPal enables users to initiate online payments to third parties or to receive payments. PayPal also acts as an escrow service and offers buyer protection services.

PayPal’s European operating company is PayPal (Europe) S.à.r.l. & Cie. S.C.A., 22-24 Boulevard Royal, 2449 Luxembourg, Luxembourg. If the data subject selects “PayPal” as the payment method during the ordering process in our online store, the data subject’s information is automatically transmitted to PayPal.

The personal data transmitted to PayPal generally includes first name, last name, address, email address, IP address, telephone number, cell phone number, or other data necessary for payment processing. Personal data related to the respective order is also necessary for the fulfillment of the purchase agreement. The purpose of transmitting this data is to process payments and prevent fraud. The data controller will transfer personal data to PayPal, in particular, when there is a legitimate interest in doing so. The personal data exchanged between PayPal and the data controller may be transferred by PayPal to credit reporting agencies. The purpose of this transfer is to verify identity and creditworthiness. PayPal may disclose the personal data to affiliated companies, service providers, or subcontractors to the extent necessary to fulfill contractual obligations or where the data is to be processed on its behalf.

b) Shopify Payments

The other payment methods offered are processed by us through the payment service provider "Shopify Payments," 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered through the payment service provider Shopify Payments, payment processing is handled by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will disclose the information you provide during the ordering process, along with details about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency, and transaction number) in accordance with Article 6(1)(b) of the GDPR. Your data is transferred to Stripe Payments Europe Ltd. exclusively for the purpose of payment processing and only to the extent necessary for this purpose. For more information on Shopify Payments’ privacy policy, please visit the following website: https://www.shopify.com/legal/privacy.

V. Social media - Facebook, Instagram, YouTube


1. No Plug-Ins
We do not use any social plug-ins on our website, particularly those from social networks such as Facebook, Instagram, or YouTube.

2. Data Processing on Our Social Media Platforms

We have set up our own pages on Facebook and Instagram (hereinafter referred to as “fan pages”) as well as our own channel on YouTube. Through these social media channels, we keep you informed about the latest news regarding our company, our products, discount promotions, contests, and much more related to hoof care.

a) FACEBOOK/INSTAGRAM FAN PAGES General Information

Please note that you use our Facebook and Instagram pages and their features at your own risk. This applies in particular to the use of interactive features (e.g., commenting, sharing, rating).

Facebook and Instagram are operated by Meta Platforms Inc. (formerly Facebook Inc.), 1601 S. California Ave, Palo Alto, CA 94304, USA.
The data controller is:
Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland.

Meta Platforms Ireland (hereinafter referred to as “Facebook”) provides information at https://www.facebook.com/about/privacy/ provides information about the specific data processing activities, their purposes, the categories of data recipients, the legal basis for processing this data, and the option to revoke any consent you have given to Facebook.

Under: https://www.facebook.com/settings?tab=ads you can change your Facebook ad settings. To do this, you must log in to your Facebook account.

Data Processing by Facebook

When you access a Facebook page, the IP address assigned to your device is transmitted to Facebook. According to Facebook, this IP address is anonymized (for “German” IP addresses). Facebook also stores information about its users’ devices (e.g., as part of the “Login Notification” feature); in some cases, this may allow Facebook to associate IP addresses with individual users. If and as long as you are logged into Facebook while visiting our fan page, a cookie containing your Facebook ID is stored on your device. This enables Facebook to track that you have visited this page and how you used it. This also applies to all other Facebook pages. Based on this data, content or advertising can be tailored to you.

If you do not wish this to happen, you should log out of Facebook or disable the “Stay Logged In” feature, delete the cookies stored on your device, and close and restart your browser. This will delete Facebook information that can be used to directly identify you. This allows you to use our Facebook page without revealing your Facebook ID. However, to access the page’s interactive features (Like, Comment, Share, Messages, etc.), you must be logged in to Facebook. You will then once again be recognizable to Facebook as a specific user.

Data Processing by Us

Facebook provides us with so-called Page Insights—in anonymized form—regarding how visitors use our fan pages. We are unable to draw conclusions about individual visitors or match this data to visitor profiles. For more information about this data processing, please visit: https://www.facebook.com/legal/terms/information_about_page_insights_data

Joint Responsibility – Exercising Data Subjects’ Rights – Disclosure of Personal Data by Facebook

All other processing of personal data is carried out by Facebook and us as joint controllers. We have entered into an agreement with Facebook regarding processing as joint controllers, which specifies the allocation of data protection obligations between us and Facebook. Details of this agreement are available at https://www.facebook.com/legal/terms/page_controller_addendum .

With regard to this data processing, you may also exercise your data subject rights (see “Data Subject Rights” below) with Facebook. For more information, please see Facebook’s Privacy Policy at https://www.facebook.com/privacy/explanation.

We expressly draw your attention to the fact that, in accordance with Facebook’s Privacy Policy, your user data may also be processed in non-EU countries. However, according to Facebook, it transfers user data only to countries for which the European Commission has issued an adequacy decision pursuant to Article 45 of the GDPR; otherwise, such transfers are made only on the basis of appropriate safeguards pursuant to Article 46 of the GDPR.

Legal basis for the data processing we perform

If you contact us via the platforms’ chat feature, we will process your information for the purpose of communicating with you. The legal basis for this data processing is a contract or a precontractual measure pursuant to Article 6(1), first sentence, subparagraph (b) of the GDPR.

Furthermore, data processing through our Facebook fan page serves our legitimate interest in promoting our products and services in an optimal and up-to-date manner; this also includes the (anonymized) analysis of how our fan pages are used. The legal basis for this processing is Article 6(1), first sentence, subparagraph (f) of the GDPR.

Retention/Deletion Periods

If we process your personal data in connection with our social media presence on Facebook and Instagram, we store this data only for as long as it is necessary, within the scope of the normal use of the respective platform, to fulfill the purposes for which the data was provided, or for as long as required by law. Once the purpose has been fulfilled and/or the statutory retention periods have expired, we will delete or block the data. For information on data storage by Facebook, please refer to their Privacy Policy: https://de-de.facebook.com/privacy/policy/

b) YouTube
General Information
We have set up our own “ Keralit ” channel on the YouTube video portal. YouTube is operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. You can watch the video clips we’ve posted here for free; you can also rate, share, and save the videos.

Please note that you use the YouTube channel offered here and its features at your own risk. The content presented on this channel is not intended for children under

16 years of age. This restriction stems solely from the provisions of the General Data Protection Regulation (Art. 8 GDPR) and does not relate to the guidelines of the FSM (Voluntary Self-Regulation of Multimedia Service Providers).

For information on what data Google processes and for what purposes it is used, please see Google's Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de#infocollect

Data Processing by Google

Google processes, on the one hand, the data you voluntarily provide, such as your name, username, email address, and phone number. Google also processes the content you create, upload, or receive from others while using its services. This includes, for example, comments you post on YouTube videos. On the other hand, Google also analyzes the content you share to determine which topics interest you, stores and processes private messages you send directly to other users, and can determine your location using GPS data, information about wireless networks, or your IP address in order to provide you with advertisements or other content.

Google receives information—such as the fact that you are viewing content—even if you have not created an account. This so-called “log data” may include your IP address, browser type, operating system, information about the website you visited previously and the pages you accessed, your location, your mobile carrier, the device you are using (including device ID and app ID), the search terms you used, and cookie information.

We have no influence over the nature and scope of the data processed by Google, the manner in which it is processed and used, or the disclosure of this data to third parties. Nor do we have any effective means of control in this regard.

Data Transmission by Google

When you use YouTube, your personal data is not only collected, transferred, stored, disclosed, and used by Google, but is also transferred to Ireland and any other country in which Google conducts business, regardless of your place of residence, and is stored and used there. Your personal data is transferred to companies affiliated with Google, as well as to other companies or individuals who process it on Google’s behalf.

Data Analysis by Google

For analysis purposes, Google may use analytics tools such as Google Analytics. We have no control over Google’s use of such tools and have not been informed of any such potential use. Should Google use tools of this kind for our YouTube channel, we have neither commissioned nor otherwise supported such use in any way. We have no means of preventing or stopping the use of such tools on our YouTube channel. Furthermore, the data obtained through the analysis is not made available to us.

Your Options for Limiting Data Processing by Google

You can restrict the processing of your data by changing the general settings of your Google Account accordingly.

Google also offers specific privacy settings for YouTube. You can learn more about this in Google's guide to privacy in Google products: https://policies.google.com/technologies/product-privacy?hl=de&gl=de

For more information on these topics, please refer to Google's Privacy Policy under the heading "Privacy Settings": https://policies.google.com/privacy?hl=de&gl=de#infochoices

Data Processing by Us/Legal Basis

We also process your data when you communicate with us via YouTube, for example, by clicking the “Like” button. This processing is carried out for the purpose of—and in the legitimate interest of—improving our advertising and public relations efforts. It is therefore justified under Article 6(1), first sentence, letter f of the GDPR.

Recipients of the data

The initial recipient of the data is Google, where it may be shared with third parties for Google’s own purposes and under Google’s responsibility. We do not share the data with third parties ourselves.

Retention Periods/Deletion Deadlines

We delete the data we process in connection with the operation of our YouTube channel no later than 10 years after it is collected or upon the channel’s closure.

To the extent that YouTube processes personal data in connection with its YouTube platform (including our YouTube channel), the respective retention period is described by YouTube in Google’s Privacy Policy. https://policies.google.com/privacy?hl=de&gl=de#infochoices

You also have the option to set the retention period yourself in your Google Account.

VI. Retention Periods - Deletion Deadlines

The data we process in accordance with the information provided above will be deleted as soon as it is no longer necessary for the purpose for which it was processed or for the assertion of our claims, and we are not required by law to retain it for a longer period.

Data from individuals who have applied for a position with us will be deleted—if no contract is concluded with the applicant—3 months after the conclusion of the application process. This applies only to the extent that no other legitimate interests on our part preclude such deletion. Another legitimate interest in this context is, for example, the burden of proof in proceedings under the General Equal Treatment Act (AGG).

VII Rights of data subjects

You have the right

  • - pursuant to Article 15 of the GDPR, the right to receive, free of charge, information about your personal data processed by us

    personal data. In particular, you may request information regarding the purposes of processing, the category of personal data, the categories of recipients to whom your data has been or will be disclosed, the planned retention period, the existence of a right to rectification, erasure, restriction of processing, or objection; the existence of a right to lodge a complaint; the origin of your data, if it was not collected by us; and whether automated decision-making—including profiling—is taking place, along with relevant information about the specifics thereof;

  • - to request, in accordance with Article 16 of the GDPR, the immediate correction of inaccurate personal data or the completion of your personal data stored by us;

  • - to request the erasure of your personal data stored by us in accordance with Article 17 of the GDPR, unless the processing is necessary for the exercise of the right to freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims;

  • - to request the restriction of the processing of your personal data pursuant to Article 18 of the GDPR, provided that you contest the accuracy of the data, the processing is unlawful but you object to its erasure, and we no longer need the data but you need it to assert, exercise, or defend legal claims, or you

  • - have objected to the processing pursuant to Article 21 of the GDPR;

  • - In accordance with Article 20 of the GDPR, the personal data you have provided to us in a

    in a structured, commonly used, and machine-readable format, or to have it transmitted to

    to request a different data controller;

  • - in accordance with Article 7(3) of the GDPR, to withdraw your consent at any time by notifying us

    revoke. As a result, we will cease processing the data based on this consent

    was based on, may no longer continue in the future, and

  • - to file a complaint with a supervisory authority pursuant to Article 77 of the GDPR. As a general rule, you may

    contact the supervisory authority at your usual place of residence or workplace, or at our company headquarters.

    VIII. Right of objection

    If your personal data is processed on the basis of legitimate interests pursuant to Article 6(1), first sentence, letter f of the GDPR, you have the right, pursuant to Article 21 of the GDPR, to object to the processing of your personal data, provided there are grounds for doing so that arise from your particular situation or the objection is directed against direct marketing.

    In the latter case, you have a general right to object, which we will honor without requiring you to specify a particular situation. If you wish to exercise your right of withdrawal or your right to object, you may do so at any time, free of charge and without having to follow any specific formalities—for example, by sending an email to info@keralit.de

IX. Data security

During your visit to our website, we use the widely adopted SSL (Secure Socket Layer) protocol in conjunction with the highest encryption level supported by your browser. This is typically 256-bit encryption. If your browser does not support 256-bit encryption, we will use 128-bit v3 technology instead. You can recognize an encrypted connection by the fact that the browser’s address bar changes from “http://” to “https://” and by the padlock icon in your browser’s address bar. When SSL encryption is enabled, the data you transmit to us cannot be read by third parties.

We also employ appropriate technical and organizational security measures to protect your data against accidental or intentional tampering, partial or complete loss, destruction, or unauthorized access by third parties. Our security measures are continuously improved in line with technological developments.

X. Current Status and Changes to This Privacy Policy

This Privacy Policy is currently in effect. As our website and the services we offer through it continue to evolve, or due to changes in legal or regulatory requirements, it may become necessary to amend this Privacy Policy. You can view and print the most current version of the Privacy Policy at any time on our website at https://www.k.de/kontakt/datenschutzerklaerung/ .