EP EURO POOL GmbH c/o Secret Brands, Akazienweg 1a, 99195 Riethnordhausen (hereinafter referred to as "Provider" or "we") is the operator of "purlo". We take the protection of your personal data very seriously and comply with the requirements of the European General Data Protection Regulation (GDPR), the German Federal Data Protection Act (BDSG), and the German Telemedia Act (TMG) when collecting, processing, and using your data. The following statement provides an overview of how we ensure data protection and what type of data is collected for what purposes.
Controller
The controller for data processing is:
EP EURO POOL GmbH c/o Secret Brands
Akazienweg 1a, 99195 Riethnordhausen
E-mail: service@aktion24.com
1. Collection, Processing, and Use of Personal Data
"Personal data" means any information relating to your personal or material circumstances. This includes all information that allows for identifying you (e.g., name, address, e-mail address, bank details, etc.). The collection, storage, and processing of personal data are exclusively governed by applicable law. Our systems are protected by technical and organizational measures against loss, destruction, access, alteration, or dissemination of your data by unauthorized persons.
2. Purposes of Processing Your Data
We process personal data to operate, provide, and improve our services – in particular, to provide you with our services, identify you as a registered user, process payments, offer logistics services including shipment tracking, improve our website and services, answer your questions and provide customer services, send you newsletters – if consented to, carry out internal business measures (e.g., data analysis, fraud prevention), and comply with legal requirements.
3. Data Collection When Visiting Our Website
When using our website for informational purposes only, we only collect data that your browser transmits to our server (so-called "server log files"): visited page, date and time of access, amount of data sent, source/referrer, browser used, operating system used, and the (possibly anonymized) IP address. The processing is carried out in accordance with Art. 6 (1) lit. f GDPR based on our legitimate interest in the stability and functionality of our website.
4. Newsletter and SMS Notifications
You can subscribe to our newsletter on our website. Registration is done using a double opt-in procedure. When registering, we store the IP address as well as the date and time of registration for legal certainty. The collected data will only be used for sending the newsletter and will not be passed on to third parties. You can revoke your consent at any time with effect for the future – via the unsubscribe link in each newsletter or by e-mail to service@aktion24.com.
By subscribing to SMS/text notifications, you agree to receive recurring automated marketing messages at the provided phone number. Consent is not a condition of purchase. Reply STOP to unsubscribe.
5. Data Processing for Opening a Customer Account and for Contract Fulfillment
In accordance with Art. 6 (1) lit. b GDPR, personal data is collected and processed if you provide it to us for the purpose of concluding a contract or when opening a customer account. Your customer account can be deleted at any time by sending a message to service@aktion24.com. After complete execution of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods have expired. For the fulfillment of your order, we pass data on to the transport company commissioned with the delivery and, within the scope of payment processing, to the commissioned credit institution or payment service provider, as far as this is necessary (Art. 6 (1) lit. b GDPR).
6. Hosting via Shopify
Our online shop is operated on the Shopify International Ltd. platform (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland). Shopify processes the data required for order processing on our behalf. Further information can be found in Shopify's privacy policy at shopify.com/legal/privacy.
7. Integration of Facebook / Meta
We offer you the possibility to recommend offers and products via Facebook. For this purpose, we use social plugins from Facebook, offered by Meta Platforms Ireland Ltd. If you are logged in to Facebook during your visit to aktion24.com, Facebook can assign the pages you visited to your account. You can prevent this by logging out of Facebook before your visit. You can find Facebook's data protection notices at facebook.com/about/privacy.
8. YouTube Plugin
This website uses plugins from YouTube, provided by Google Ireland Ltd. When you access the website, the YouTube button code is requested and embedded from a YouTube/Google server. If you are logged in to YouTube, the collected information will be assigned to your account. Further information at policies.google.com/privacy.
9. Instagram Plugin
This website uses plugins from Instagram (Meta Platforms Ireland Ltd.). When the website is built, the Instagram plugin code is requested and embedded from an Instagram server. Further information at help.instagram.com.
10. Google Analytics
This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd. Google Analytics uses cookies that enable an analysis of the use of the website. The IP address is anonymized (IP masking). You can prevent the storage of cookies by setting your browser software accordingly and also prevent the collection by the browser plugin available at this link.
11. Google Ads and Conversion Tracking
We use the online advertising program "Google Ads" and Google's conversion tracking. The cookie for conversion tracking is set when a user clicks on an ad placed by Google and expires after 30 days. The information serves to generate conversion statistics; it does not personally identify you. Further information at policies.google.com/privacy.
12. Cookies
Cookies are small units of information that the website stores on your device. We use both temporary session cookies, which are deleted after closing the browser, and permanent cookies. Cookies are used, among other things, to generate statistics, monitor website performance, for the login process, and to improve functionality and display relevant advertisements. You can prevent the setting of cookies by adjusting your browser settings accordingly and delete stored cookies at any time.
13. Legal Basis for Processing
The legal basis for processing based on consent is Art. 6 (1) lit. a GDPR. For processing for the fulfillment of a contract or pre-contractual measures, Art. 6 (1) lit. b GDPR applies. For the fulfillment of legal obligations, Art. 6 (1) lit. c GDPR applies. Processing for the protection of legitimate interests is based on Art. 6 (1) lit. f GDPR.
14. Legal Obligation to Disclose Personal Data
We point out that we are legally obliged to disclose your personal data to third parties in certain cases (e.g., in the case of law enforcement measures).
15. Your Rights
You have the right to information (Art. 15 GDPR), rectification (Art. 16 GDPR), erasure (Art. 17 GDPR), restriction of processing (Art. 18 GDPR), data portability (Art. 20 GDPR), and a right to object (Art. 21 GDPR). To exercise these rights, simply send an e-mail to service@aktion24.com. In addition, you have the right to lodge a complaint with a data protection supervisory authority.
16. Further Information and Contact
Your trust in the protection of your personal data is important to us. If you have any questions that this privacy policy could not answer, you can contact us at any time at service@aktion24.com.
Status: July 2026