Privacy policy

Privacy Policy

Controller

The party responsible for data processing is:

Campo Libre GmbH Reichenhaller Straße 35 81547 Munich Germany

Managing Directors authorised to represent the company: Markus Fischer and Philipp Schlösser Commercial Register: HRB 264416, Local Court of Munich (Amtsgericht München) VAT identification number: DE342402559

Email: support@campolibre.eu

General information on data protection

Thank you for your interest in our online shop. The protection of your privacy is very important to us. Below we provide detailed information on how we handle your data.

Unless otherwise stated below, the provision of your personal data is neither required by law or by contract, nor is it necessary for entering into a contract. You are under no obligation to provide the data. Failure to provide it has no consequences. This applies only where no other information is given for the individual processing operations described below. "Personal data" means any information relating to an identified or identifiable natural person.

Data processing when visiting the website

Server log files

You can visit our website without providing any information about yourself. Each time our website is accessed, usage data is transmitted via your internet browser to us or to our web host / IT service provider and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. Processing takes place on the basis of Art. 6(1)(f) GDPR.

Your data may be transferred to third countries outside the European Union for which an adequacy decision of the EU Commission exists. Where no adequacy decision of the EU Commission exists — for example, in the case of transfers to the USA — the data transfers are based on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

Contacting us

Contact us if you wish. The contact details of the party responsible for data processing can be found in our legal notice (Impressum).

Contacting us on your own initiative by email

If a customer contacts us on their own initiative by email, we collect only the personal data (name, email address, message text) to the extent that you provide it. This data processing serves to handle and respond to your enquiry.

If the contact serves to carry out pre-contractual measures (e.g. advising a prospective buyer, preparing a quotation) or relates to a contract already concluded between you and us, this data processing takes place on the basis of Art. 6(1)(b) GDPR.

If you contact us for other reasons, this data processing takes place on the basis of Art. 6(1)(f) GDPR. In this case you have the right, on grounds relating to your particular situation, to object at any time to this processing of your personal data carried out on the basis of Art. 6(1)(f) GDPR.

We use your email address exclusively to process your enquiry. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Orders and contract processing

Collection, processing and disclosure of personal data for orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfil and process your order and to handle your enquiries. Provision of the data is necessary for entering into the contract. Failure to provide the data means that no contract can be concluded. Processing takes place on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data will be passed on, for example, to the shipping companies and drop-shipping providers you have selected, to payment service providers, to service providers for order processing and to IT service providers. In all cases we strictly comply with the statutory requirements. The scope of the data transfer is limited to a minimum.

Where applicable, your data may be transferred to third countries outside the European Union for which the EU Commission has issued an adequacy decision. Where no adequacy decision of the EU Commission exists, the data transfers are based on standard contractual clauses as appropriate safeguards for the protection of personal data, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en

For orders from Switzerland, your data is additionally transmitted to the respective delivery service (DHL or its Swiss partner) and to the Swiss customs authority (Federal Office for Customs and Border Security, BAZG) for the purpose of preparing the customs declaration and handling customs clearance. This data transfer takes place on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of the contract.

Advertising and newsletter

Newsletter distribution via Klaviyo

For sending our newsletters we use the service of Klaviyo Inc. (125 Summer Street, Floor 7, Boston, MA 02111, USA; "Klaviyo"), provided that you have expressly consented.

The data you provide when signing up for the newsletter (email address and, where applicable, first and last name) is transmitted to Klaviyo and stored there. Klaviyo uses this data to send and evaluate the newsletters on our behalf. In addition, according to its own information, Klaviyo may use the following data to analyse and optimise newsletter campaigns: IP address, browser type, device information, and the time at which the newsletter is opened and links contained in it are clicked. This data may be used to create pseudonymised user profiles. The data collected is not used to identify you personally.

Your data is processed and stored on Klaviyo's servers in the USA. For the USA, an adequacy decision of the EU Commission has existed since 10 July 2023 (EU-US Data Privacy Framework). Klaviyo Inc. is certified under the EU-US Data Privacy Framework and has undertaken to comply with the European data protection principles. In addition, standard contractual clauses of the EU Commission have been concluded with Klaviyo as appropriate safeguards for the protection of your personal data.

The data processing takes place on the basis of your consent pursuant to Art. 6(1)(a) GDPR. You may withdraw your consent at any time with effect for the future, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal. You can unsubscribe from the newsletter at any time using the relevant unsubscribe link in the newsletter or by sending a message to support@campolibre.eu. Your email address will then be removed from the distribution list.

Further information on data protection at Klaviyo can be found at: https://www.klaviyo.com/legal/privacy/privacy-notice

Use of the email address for direct advertising

We use your email address, which we received in connection with the sale of a product or service, to send you electronic advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. Provision of the email address is necessary for entering into the contract. Failure to provide it means that no contract can be concluded. Processing takes place on the basis of Art. 6(1)(f) GDPR arising from our overriding legitimate interest in direct advertising.

You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in our legal notice (Impressum).

You can also use the link provided for this purpose in the advertising email. No costs other than the transmission costs according to the basic rates will be incurred for this.

Merchandise management (ERP)

We use a merchandise management system (ERP) for contract processing within the scope of order handling. For this purpose, the personal data collected in connection with your order is transferred to ProChannel GmbH, Siemensstr. 7, 86368 Gersthofen, Germany.

Payment processing via PayPal

All PayPal transactions are subject to the PayPal privacy policy. You can find this at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Cookies and tracking

General information on cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser, or by the internet browser, on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies that have already been stored can be deleted at any time. However, we would point out that in this case you may not be able to use all functions of this website to their full extent.

The following links explain how to manage cookies (including disabling them) in the most common browsers:

Chrome: https://support.google.com/chrome/answer/95647
Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer
Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated in this privacy policy, we use only these technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser even after you change pages and to offer you services. Some functions of our website cannot be provided without the use of cookies. For these, it is necessary for the browser to be recognised even after a change of page.

The use of cookies or comparable technologies takes place on the basis of § 25(2) no. 2 TDDDG (German Digital Services Data Protection Act). Your personal data is processed on the basis of Art. 6(1)(f) GDPR.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Use of Consentmo (cookie consent tool)

On our website we use the cookie consent tool "Consentmo GDPR Compliance" from iSenseLabs (Prof. Georgi Bradistilov Str. No. 4, 1700 Sofia, Bulgaria; EU registration number: 112660079; "Consentmo").

The tool enables you to consent to the data processing carried out via the website, in particular the setting of cookies, to personalise your selection, and to exercise your right to withdraw consent already given.

The data processing serves the purpose of obtaining and documenting the consents required for the data processing and thereby complying with the statutory obligations under Art. 7 GDPR.

In connection with the use of Consentmo, the following data in particular is processed: date and time of the page visit, information about the browser and device used, anonymised IP address, unique anonymous identifier (UID), opt-in and opt-out data for the individual cookie categories.

The data processing is carried out to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR. As the provider is based within the European Union (Bulgaria), no transfer to a third country takes place.

Further information on data protection at Consentmo can be found at: https://www.consentmo.com/privacy-policy-en

Third-party tools

Google Analytics

On our website we use the web analytics service Google Analytics provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If your habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and complying with the applicable data protection laws.

The data processing serves the purpose of analysing this website and its visitors, as well as marketing and advertising purposes. For this purpose, Google will use the information received on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with further services associated with website and internet use. Among other things, the following information may be collected: IP address, date and time of the page visit, click path, information about the browser and device you use, pages visited, referrer URL (the website through which you found our website), location data, purchase activity. The IP address transmitted by your browser as part of Google Analytics is not merged with other data held by Google.

Google Analytics uses technologies such as cookies, web storage in the browser and counting pixels that enable an analysis of your use of the website. The information generated about your use of this website is generally transmitted to a Google server in the USA and stored there. For the USA, an adequacy decision of the EU Commission has existed since 10 July 2023 (EU-US Data Privacy Framework). Google LLC is certified under the EU-US Data Privacy Framework. In addition, standard contractual clauses of the EU Commission are used as appropriate safeguards for the protection of personal data, available at: https://policies.google.com/privacy/frameworks. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data Google holds about you.

IP anonymisation is activated on this website. As a result, your IP address is truncated by Google beforehand within member states of the European Union or in other states party to the Agreement on the European Economic Area. Only in exceptional cases is the full IP address transmitted to a Google server in the USA and truncated there.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25(1) TDDDG in conjunction with Art. 6(1)(a) GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to the withdrawal.

Further information on the terms of use and data protection can be found at https://www.google.com/analytics/terms/ and at https://policies.google.com/ and at https://policies.google.com/technologies/cookies.

Facebook Pixel (Meta)

We use the "Custom Audiences" remarketing function of Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Facebook") on our website.

Facebook Ireland and we are jointly responsible for collecting your data when the service is integrated and for transmitting this data to Facebook. This is based on an agreement between us and Facebook Ireland on the joint processing of personal data, which sets out the respective responsibilities. The agreement is available at https://www.facebook.com/legal/controller_addendum. Accordingly, we are responsible in particular for fulfilling the information obligations under Art. 13, 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Art. 33, 34 GDPR insofar as a personal data breach affects our obligations under the joint processing agreement. Facebook Ireland is responsible for enforcing the rights of the data subject under Art. 15–20 GDPR, in compliance with the security requirements of Art. 32 GDPR with regard to the security of the service, and for the obligations under Art. 33, 34 GDPR insofar as a personal data breach affects Facebook Ireland's obligations under the joint processing agreement.

The purpose of the application is to address website visitors with interest-based advertising on the Facebook social network. For this purpose, Facebook's remarketing tag has been implemented on the website. Via this tag, a direct connection to Facebook's servers is established when the website is visited. In doing so, the Facebook server is informed which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the Facebook social network, personalised, interest-based Facebook ads are then displayed to you. Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission has existed since 10 July 2023 (EU-US Data Privacy Framework). Meta Platforms Inc. is certified under the EU-US Data Privacy Framework. In addition, standard contractual clauses of the EU Commission are used as appropriate safeguards, available at: https://www.facebook.com/legal/EU_data_transfer_addendum.

Further information on the collection and use of data by Facebook, on your related rights and on options for protecting your privacy, can be found in Facebook's data protection notices at https://www.facebook.com/about/privacy/.

Google Ads conversion tracking

On our website we use the online advertising programme "Google Ads" and, in this context, conversion tracking (evaluation of visits). Google conversion tracking is an analytics service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If your habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and complying with the applicable data protection laws.

If you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have limited validity, contain no personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, we and Google can recognise that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked across the websites of Ads customers.

The information obtained with the help of the conversion cookie is used to compile conversion statistics. In doing so, we learn the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information with which users can be personally identified.

Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission has existed since 10 July 2023 (EU-US Data Privacy Framework). Google LLC is certified under the EU-US Data Privacy Framework. In addition, standard contractual clauses of the EU Commission are used as appropriate safeguards, available at: https://policies.google.com/privacy/frameworks.

Further information and Google's privacy policy can be found at: https://policies.google.com/privacy

Google Remarketing / Similar Audiences

On our website we use the remarketing / "Similar Audiences" function of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If your habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and complying with the applicable data protection laws.

The application serves to analyse visitor behaviour and visitor interests. Google uses cookies to carry out an analysis of website use, which forms the basis for creating interest-based advertising. The cookies are used to record visits to the website and anonymised data on the use of the website. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account product and information areas you have previously accessed.

Further information on Google Remarketing and the associated privacy policy can be found at: https://policies.google.com/technologies/ads

Plug-ins and other

Google Tag Manager

On our website we use the Google Tag Manager provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google"). If your habitual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller of your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and complying with the applicable data protection laws.

This application manages JavaScript tags and HTML tags that are used in particular to implement tracking and analytics tools. The data processing serves the purpose of the needs-based design and optimisation of our website.

The Google Tag Manager itself neither stores cookies nor processes personal data via them. However, it does enable the triggering of additional tags that may collect and process personal data.

Further information on the terms of use and data protection can be found on the Google website.

Cloudflare

We use the content delivery network Cloudflare CDN from Cloudflare Inc. (101 Townsend St, San Francisco, CA 94107, USA; "Cloudflare") on our website. This is a global network of servers in various data centres to which our web server connects and via which certain content of our website is delivered.

The data processing serves the purpose of optimising the loading times of our website and thus making our offering more user-friendly.

Among other things, the following information may be collected: IP address, system configuration information, information about traffic to and from customer websites (so-called server log files).

Your data may be transferred to the USA. For the USA, an adequacy decision of the EU Commission has existed since 10 July 2023 (EU-US Data Privacy Framework). Cloudflare Inc. is certified under the EU-US Data Privacy Framework. In addition, standard contractual clauses of the EU Commission are used as appropriate safeguards, available at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_en.

Further information on data protection when using Cloudflare can be found at https://www.cloudflare.com/privacypolicy/.

YouTube

We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; "Google").

The function displays videos stored on YouTube in an iFrame on the website. The "enhanced privacy mode" option is activated. YouTube therefore does not store any information about visitors to the website. Only when you watch a video is information about it transmitted to YouTube and stored there.

Further information on the collection and use of data by YouTube and Google, on your related rights and on options for protecting your privacy, can be found in YouTube's data protection notices at https://www.youtube.com/t/privacy.

Your rights as a data subject

Storage period

Once the contract has been fully processed, the data is initially stored for the duration of the warranty period, then — taking into account statutory retention periods, in particular under tax and commercial law — and deleted after the period has expired, unless you have consented to further processing and use.

Rights under the GDPR

Where the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing, and data portability.

In addition, under Art. 21(1) GDPR, you have a right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for the purpose of direct advertising.

Right to lodge a complaint with a supervisory authority

Under Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you consider that the processing of personal data concerning you is unlawful.

Right to object

If the processing of personal data set out here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right to object to this processing at any time with effect for the future, on grounds relating to your particular situation.

Following an objection, processing of the data concerned will cease, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or where the processing serves to assert, exercise or defend legal claims.

If personal data is processed for the purpose of direct advertising, you can object to this processing at any time by notifying us. Following an objection, we will cease processing the data concerned for the purpose of direct advertising.

Information for customers from Switzerland

When processing the personal data of customers resident in Switzerland, Campo Libre observes not only the EU General Data Protection Regulation (GDPR) but also the provisions of the revised Swiss Federal Act on Data Protection (revDSG, in force since 1 September 2023).

Controller under the revDSG: Campo Libre GmbH, Reichenhaller Straße 35, 81547 Munich, Germany, support@campolibre.eu

Personal data of customers from Switzerland is transferred to the European Union for contract processing. From the Swiss perspective, the EU provides an adequate level of data protection (recognised by the Swiss Federal Council).

Under the revDSG, Swiss customers have in particular the following rights: the right of access (Art. 25 revDSG), the right to the release and transfer of data (Art. 28 revDSG), and the right to rectification, erasure and objection.

If you are of the opinion that the processing of your personal data infringes Swiss data protection law, you have the right to lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC / EDÖB). Contact information is available at www.edoeb.admin.ch.

Last update: April 2026

Cart0 items