Privacy policy

This English translation is provided for convenience only. The German version is legally binding.

Last updated: 13 December 2025

This privacy policy applies to the website besports-matratzen.de (hereinafter “website” or “shop”) and to all services offered through it.

Controller within the meaning of the General Data Protection Regulation (GDPR):

BeNeon UG (haftungsbeschränkt)
Bessemerstraße 51 (1st floor)
D-12103 Berlin
Germany

Commercial register: HRB 278832 B
Register court: Amtsgericht Charlottenburg (Charlottenburg Local Court)

Managing directors: Florian Schnoor, Christian Bardeleben
Email: info@be-neon.com

1. General information on data processing

We process personal data exclusively within the framework of the statutory provisions, in particular the General Data Protection Regulation (GDPR) and the German Federal Data Protection Act (BDSG).

Personal data is any information relating to an identified or identifiable natural person.

2. Hosting and shop system (Shopify)

Our online shop is technically operated via:

Shopify Inc.
151 O’Connor Street
Ottawa, ON K2P 2L8
Canada

Shopify provides the e-commerce platform through which we offer our products.

When you use our shop, personal data is also processed by Shopify. The processing is carried out on the basis of a data processing agreement pursuant to Art. 28 GDPR.

Data may be transferred to third countries (in particular Canada and the USA). For Canada, an adequacy decision of the European Commission exists. For data transfers to the USA, standard contractual clauses pursuant to Art. 46 GDPR are used.

Further information can be found at:
https://www.shopify.com/legal/privacy

3. Which personal data we process

Depending on how you use our website, we process in particular the following categories of data:

3.1 Order and contract data

  • First and last name

  • Billing and delivery address

  • Email address

  • Phone number

  • Products ordered

  • Payment method

  • Transaction details

Purpose: performance of the contract
Legal basis: Art. 6(1)(b) GDPR

3.2 Payment data

Payments are processed by external payment service providers (e.g. PayPal, Klarna, credit card providers, Apple Pay, Google Pay).

Payment data is collected directly by the respective payment service provider. As a rule, we only receive confirmation or status information.

Legal basis: Art. 6(1)(b) GDPR

3.3 Server log data

When you access the website, the following is recorded automatically:

  • IP address

  • Date and time of access

  • Browser type

  • Operating system

  • Referrer URL

Purpose: ensuring system security
Legal basis: Art. 6(1)(f) GDPR
(Legitimate interest in technical stability and security)

3.4 Contacting us

If you contact us by email, we process:

  • Your name

  • Your email address

  • Your message

Purpose: handling your enquiry
Legal basis: Art. 6(1)(b) or (f) GDPR

4. Cookies and tracking technologies

Our website uses cookies.

Cookies serve in particular:

  • the technical provision of the shop

  • storing shopping cart contents

  • analysing user behaviour

  • marketing and advertising purposes

Cookies that are not technically necessary are only set with your explicit consent.

Legal basis:

  • Art. 6(1)(a) GDPR (consent)

  • § 25 TTDSG

You can adjust your cookie settings at any time via the consent tool.

5. Marketing and newsletter

If you have given your explicit consent, we use your email address for marketing purposes.

Legal basis: Art. 6(1)(a) GDPR

You can withdraw your consent at any time without incurring any costs other than the transmission costs according to the basic rates.

6. Disclosure of data

Personal data is only disclosed:

  • to payment service providers

  • to shipping and logistics companies

  • to IT service providers (e.g. hosting)

  • to authorities where required by law

No further disclosure takes place.

7. Storage period

We store personal data only for as long as is necessary for the respective purposes.

Retention periods under commercial and tax law remain unaffected (generally 6 or 10 years).

8. Your rights under the GDPR

You have the right to:

  • access (Art. 15 GDPR)

  • rectification (Art. 16 GDPR)

  • erasure (Art. 17 GDPR)

  • restriction of processing (Art. 18 GDPR)

  • data portability (Art. 20 GDPR)

  • object to processing (Art. 21 GDPR)

  • withdraw consent given (Art. 7(3) GDPR)

To exercise your rights, an informal message to the following address is sufficient:
info@be-neon.com

9. Right to lodge a complaint with the supervisory authority

You have the right to lodge a complaint with a data protection supervisory authority.

The competent authority for Berlin is:

Berliner Beauftragte für Datenschutz und Informationsfreiheit (Berlin Commissioner for Data Protection and Freedom of Information)
Alt-Moabit 59–61
10555 Berlin

10. Data security

We use appropriate technical and organisational measures to protect your data against loss, manipulation and unauthorised access.

However, complete security of data transmission over the internet cannot be guaranteed.

11. Data of minors

Our offer is not directed at persons under the age of 16. We do not knowingly collect data from minors.

12. Changes to this privacy policy

We reserve the right to amend this privacy policy if this is necessary for legal or technical reasons.

The current version is available on our website at any time.

13. Our presence on Instagram

We operate a company profile on Instagram (@besports_matratzen.de) to provide information about our products and to communicate with prospective and existing customers. The platform is provided by Meta Platforms Ireland Limited, Merrion Road, Dublin 4, D04 X2K5, Ireland (“Meta”).

If you visit our profile or interact with us (e.g. through comments, “likes”, sharing posts or direct messages), we process the data you provide to us in doing so or that is visible to us – in particular your username, your public profile and the content of your comments and messages. We use this data to answer enquiries and to communicate with you.

The legal basis is Art. 6(1)(f) GDPR. Our legitimate interest lies in public relations and communication with prospective and existing customers. Where your enquiry is aimed at the conclusion or performance of a contract, the legal basis is Art. 6(1)(b) GDPR.

Meta provides us with aggregated, anonymised statistics for our profile (“Insights”), e.g. on reach and interactions. We are jointly responsible with Meta for this processing (Art. 26 GDPR). The joint controller agreement can be found at: https://www.facebook.com/legal/terms/page_controller_addendum

In addition, Meta processes your data under its own responsibility, possibly also in countries outside the European Union. We have no influence over this processing. Information on this and on your setting and objection options can be found in Instagram’s privacy policy: https://privacycenter.instagram.com/policy

You can assert your rights both against us and against Meta. Information about the data processed by Meta can be provided most effectively by Meta itself.

Giveaways

If you take part in one of our giveaways, we process the data required to run it. This is your Instagram username and your participation actions (e.g. a comment) and – if you win – your name, your delivery address and, where applicable, your phone number for delivery.

We use this data exclusively to run the giveaway, to determine and notify the winners and to send the prize. The legal basis is Art. 6(1)(b) GDPR (running the giveaway on the basis of the terms of participation).

Data is only passed on to the service providers required for shipping the prize (manufacturer or logistics partner and shipping company). It is not used for advertising purposes.

We delete participants’ data after the giveaway has ended. We delete winners’ data once the process has been fully completed, unless statutory retention obligations apply.

Participation is voluntary. Without the data mentioned, participation or delivery of the prize is not possible.