Data Protection Declaration
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is RaceChip Chiptuning GmbH & Co. KG, Manfred-Wörner-Straße 115, 73037 Göppingen, Germany, Phone.: +49 7161 1584 999, Fax: +49 7161 1581 899, e-mail: [email protected]. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 The controller has designated a data protection officer for this website. He can be reached as follows: "GERMANY, Examcert Deutschland GmbH, Claudia Schmid, An der Dünung 48, 23968 Wismar, (+49) 0800 – 5891262, [email protected]"
2) Data Collection When You Visit Our Website
2.1 When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the moment of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
3.1 Amazon Web Services
For the hosting of our website and the display of the page content, we use the system of the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
All data collected on our website is processed on the provider's servers. We have concluded an order processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorised disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
3.2 Cloudflare
We use a content delivery network offered by the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content or scripts faster via a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website pursuant to Art. 6 (1) point f GDPR. We have concluded an order processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorised disclosure to third parties.
4) Cookies
In order to make your visit to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. In some cases, these cookies are automatically deleted again after the browser is closed (so-called "session cookies"), in other cases, these cookies remain on your end device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the duration of the storage in the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies set by us, the processing is carried out either in accordance with Art. 6 (1) point b GDPR for the performance of the contract, in accordance with Art. 6 (1) point a GDPR in the case of consent given or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
You can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting Us
5.1 Zendesk
This website uses a live chat system offered by the following provider: Zendesk Inc, 1019 Market St, San Francisco, USA
The processing of personal data transmitted via chat is carried out either in accordance with Art. 6 (1) point b GDPR, to the extent necessary for the initiation or execution of the contract, or in accordance with Art. 6 (1) point f GDPR based on our legitimate interest in the effective support of our site visitors. Unless otherwise required by law, your data transmitted will be deleted once the relevant facts have been conclusively clarified. Furthermore, additional information may be collected and evaluated by means of cookies for the purpose of creating pseudonymised user profiles.
However, this information will not be used to identify you personally and will not be merged with other data records. To the extent this information has a personal reference, the processing is carried out in accordance with Art. 6 (1) point f GDPR based on our legitimate interest in the statistical analysis of user behaviour for optimisation purposes.
The placing of cookies may be prevented by appropriate browser settings. However, the functionality of our website may be restricted in such a case. You may object to the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future.
We have concluded an order processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorised disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.
5.2 Trusted Shops
For rating reminders, we use the services offered by the following provider: Trusted Shops AG , Subbelrather Str. 15c, 50823 Cologne, Germany
We transmit your e-mail address and, if applicable, other customer data to the provider exclusively on the basis of your express consent in accordance with Art. 6 (1) point a GDPR to allow the provider to contact you by e-mail with a rating reminder.
You can revoke your consent at any time with effect for the future vis-à-vis us or the provider.
We are jointly responsible with the provider for the processing described above in accordance with Art. 26
GDPR. The joint controllership agreement can be viewed here: https://help.etrusted.com
5.3 Trustpilot
For rating reminders, we use the services offered by the following provider: Trustpilot A/S, Pilestræde 58, 1112 Copenhagen, Denmark
We transmit your e-mail address and, if applicable, other customer data to the provider exclusively on the basis of your express consent in accordance with Art. 6 (1) point a GDPR to allow the provider to contact you by e-mail with a rating reminder.
You can revoke your consent at any time with effect for the future vis-à-vis us or the provider.
We have concluded an order processing contract with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorised disclosure to third parties.
5.4 Calendly
For the provision of an online appointment booking function, we use the services of the following provider: Calendly, LLC, BB&T Tower, 271 17th St NW, Atlanta, GA 30363, USA
For the purpose of making an appointment, your first name, surname and e-mail address (and telephone number, if a telephone appointment is requested) are collected in accordance with Art. 6 (1) point b GDPR and transferred to the provider in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in effective customer management and efficient appointment management and stored there for the purpose of organising the appointments.
After the appointment has been held or after the agreed appointment period has expired, your data will be deleted by the provider.
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
5.5 Zendesk
We use the e-mail ticketing system of the following provider to process customer requests: Zendesk International Ltd, 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland
If you make contact requests by e-mail via our website, these are stored and organised in the ticketing system to enable chronological processing and to improve the service experience. You can always view the current status of the processing of your request via the individually assigned ticket number.
For the organisation and processing of requests, personal data is collected according to the scope of its provision, but in any case surname, first name and e-mail address, transferred to the provider, stored there and processed.
The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, in answering your request as quickly as possible and in optimising our service offer in accordance with Art. 6 (1) point f GDPR.
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
5.6 When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration.
The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.
5.7 Babelforce
The website uses the services of "Babelforce", a customer service integration platform of babelforce GmbH, Mindspace, Friedrichstr. 68, 10117 Berlin, Germany ("babelforce") to manage telephony services.
Incoming and outgoing calls made to the service telephone numbers offered are recorded and documented by
babelforce, whereby information in the form of the date and time of the call, the duration of the call and
the anonymized telephone number of the caller or called party are subsequently stored in a traceable manner.
If personal data is processed in this context, this is done in accordance with Art. 6 para. 1 lit. f GPDR
based on our legitimate interest in effective customer management and the optimization of our services.
Telephone calls are only recorded when using babelforce if you have given us your express consent, which can
be revoked at any time, in accordance with Art. 6 para. 1 lit. a GDPR, at the start of the call.
We have concluded an order processing agreement with babelforce, by which we oblige babelforce to protect
our customers' data in accordance with the legal requirements.
Further information on babelforce's privacy policy can be found here: https://www.babelforce.com
6) Data Processing When Opening a Customer Account and for Contract Processing
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide us with this data when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.
7) Use of Client Data for Direct Advertising
7.1 Subscribe to our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. The only mandatory data for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an appropriate link.
By activating the confirmation link, you give us your consent for the use of your personal data pursuant to Art. 6 (1) point a GPPR. When you register for the newsletter, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration for the purpose of tracing any possible misuse of your e-mail address at a later date. The data collected by us when you register for the newsletter is used exclusively for the promotional purposes by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data, or we reserve the right to a more extensive use your data which is permitted by law and about which we inform you in this declaration.
7.2 Sending the newsletter to existing customers
If you have provided us with your e-mail address when purchasing products, we reserve the right to regularly send you offers for products similar to those already purchased by e-mail. Pursuant to Section 7 (3) German law against unfair competition, we do not need to obtain separate consent from you. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1) point f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the future use of your e-mail address for the aforementioned advertising purpose at any time by notifying the controller named at the beginning of this document. In this regard, you only have to pay the transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
7.3 Amazon SES
Our e-mail newsletters are sent via this provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle WA 98109, USA
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) point f GDPR so that they can send the newsletter on our behalf.
Subject to your express consent pursuant to Art. 6 (1) point a GDPR, the provider also carries out a
statistical analysis of the success of newsletter campaigns by means of web beacons or tracking pixels in
the emails sent, which can measure opening rates and specific interactions with the newsletter content. In
the process, end device information (e.g. time of page view, IP address, browser type and operating system)
is also collected and analysed, but not combined with other data records.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded an order processing agreement with the provider, which safeguards the data of our website visitors and prohibits a transfer to third parties.
7.4 Klaviyo
Our e-mail newsletters are sent via this provider: Klaviyo", 225 Franklin St, Boston, MA 02110, USA
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) point f GDPR so that they can send the newsletter on our behalf.
Subject to your express consent pursuant to Art. 6 (1) point a GDPR, the provider also carries out a
statistical analysis of the success of newsletter campaigns by means of web beacons or tracking pixels in
the emails sent, which can measure opening rates and specific interactions with the newsletter content. In
the process, end device information (e.g. time of page view, IP address, browser type and operating system)
is also collected and analysed, but not combined with other data records.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded an order processing agreement with the provider, which safeguards the data of our website visitors and prohibits a transfer to third parties.
7.5 MailChimp
Our e-mail newsletters are sent via this provider: The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) point f GDPR so that they can send the newsletter on our behalf.
Subject to your express consent pursuant to Art. 6 (1) point a GDPR, the provider also carries out a
statistical analysis of the success of newsletter campaigns by means of web beacons or tracking pixels in
the emails sent, which can measure opening rates and specific interactions with the newsletter content. In
the process, end device information (e.g. time of page view, IP address, browser type and operating system)
is also collected and analysed, but not combined with other data records.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded an order processing agreement with the provider, which safeguards the data of our website visitors and prohibits a transfer to third parties.
7.6 Rapidmail
Our e-mail newsletters are sent via this provider: rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany
On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Art. 6 (1) point f GDPR so that they can send the newsletter on our behalf.
Subject to your express consent pursuant to Art. 6 (1) point a GDPR, the provider also carries out a
statistical analysis of the success of newsletter campaigns by means of web beacons or tracking pixels in
the emails sent, which can measure opening rates and specific interactions with the newsletter content. In
the process, end device information (e.g. time of page view, IP address, browser type and operating system)
is also collected and analysed, but not combined with other data records.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded an order processing agreement with the provider, which safeguards the data of our website visitors and prohibits a transfer to third parties.
8) Processing of Data for the Purpose of Order Handling
8.1 Transmission of image files for order processing by e-mail
On our website, we offer customers the opportunity to order the customization of products by sending image files via e-mail. The submitted image motif is used as a template for the customization of the selected product.
Using the e-mail address provided on the website, the customer can transmit one or more image files to us from the memory of the end device used. We then collect, store, and use files transmitted in this way exclusively to produce the customized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed in the following paragraphs. Any further disclosure will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) point b GDPR. After final processing of the order, the transmitted image files are automatically and completely deleted.
8.2 Transmission of image files for order processing via upload function
On our website, we offer customers the opportunity to order the customization of products by sending image files via an upload function. The submitted image motif is used as a template for the customization of the selected product.
Using the upload function on the website, the customer can transmit one or more image files from the memory of the end device used directly to us via automated, encrypted data transmission. We then collect, store, and use files transmitted in this way exclusively to produce the customized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed in the following paragraphs. Any further disclosure will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 (1) point b GDPR. After final processing of the order, the transmitted image files are automatically and completely deleted.
8.3 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally by suitable means of communication (e.g. by post or e-mail) about upcoming updates within the legally stipulated period of time within the framework of our statutory duty to inform pursuant to Art. 6 Para. 1 lit. c GDPR. Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.
In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.
8.4 We work with external shipping partners to fulfil our contractual obligations to our customers. We pass on your name as well as your delivery address exclusively for the purpose of delivering goods to a shipping partner selected by us, pursuant to Art. 6 (1) point b GDPR.
8.5 Passing on Personal Data to Shipping Service Providers
- DHL
We use the following provider as transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
We pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, if you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The transmission only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person
named above or vis-à-vis the provider.
- FedEx
We use the following provider as transport service provider: FedEx Express Germany GmbH, Langer Kornweg 34 k, 65451 Kelsterbach, Germany
We pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, if you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The transmission only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person
named above or vis-à-vis the provider.
- UPS
We use the following provider as transport service provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany
We pass on your e-mail address and/or telephone number to the provider in accordance with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, if you have given your express consent in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The transmission only takes place to the extent necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the supplier or the delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.
8.6 Use of Payment Service Providers
- Apple Pay
If you choose the payment method "Apple Pay" of Apple Distribution International (Apple),
Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the
"Apple Pay" function of your terminal device operated with iOS, watchOS or macOS by debiting a
payment card deposited with "Apple Pay". Apple Pay uses security features built into the hardware
and software of your device to protect your transactions. In order to release a payment, it is therefore
necessary to enter a code previously defined by you and to verify it using the "Face ID" or
"Touch ID" function of your terminal.
For the purpose of payment processing, your information provided during the ordering process, along with
information about your order, will be transmitted to Apple in encrypted form. Apple then encrypts this data
again with a developer-specific key before the data is transmitted to the payment service provider of the
payment card stored in Apple Pay for payment processing. The encryption ensures that only the website from
which the purchase was made can access the payment information. After the payment is made, Apple sends your
device account number and a transaction-specific dynamic security code to the originating website to confirm
the payment.
If personal data is processed in the described transmissions, the processing is carried out exclusively for
the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple retains anonymised transaction data, including the approximate amount of the purchase, the approximate
date and time and whether the transaction was completed successfully. Anonymisation completely excludes any
personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and
services.
When you use Apple Pay on iPhone or the Apple Watch to complete a purchase made through Safari on Mac, the
Mac and the authorization device communicate through an encrypted channel on Apple's servers. Apple does not
process or store this information in any format that can identify you personally. You can disable the
ability to use Apple Pay on your Mac in your iPhone preferences. Go to "Wallet & Apple Pay"
and disable "Allow payments on Mac".
For more information about Apple Pay privacy, please visit the following web address: https://support.apple.com
- EPS-Überweisung
Online payment methods from the following provider are available on this website: PSA Payment Services Austria GmbH, Handelskai 92, Gate 2,1200 Vienna, Austria
If you select a payment method of the provider for which you make an advance payment (e.g. credit card
payment), your payment data provided during the ordering process (including name, address, bank and payment
card information, currency and transaction number) as well as information about the content of your order
will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will
only be passed on for the purpose of processing payment with the provider and only to the extent necessary
for this purpose.
- giropay
Online payment methods from the following provider are available on this website: paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany
If you select a payment method of the provider for which you make an advance payment (e.g. credit card
payment), your payment data provided during the ordering process (including name, address, bank and payment
card information, currency and transaction number) as well as information about the content of your order
will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will
only be passed on for the purpose of processing payment with the provider and only to the extent necessary
for this purpose.
- Google Pay
If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow
St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing is carried out via the
"Google Pay" application of your mobile device running at least Android 4.4 ("KitKat")
and having an NFC function by charging a payment card deposited at Google Pay or a payment system verified
there (e.g. PayPal). For the release of a payment via Google Pay in the amount of more than 25,- € the
prior unlocking of your mobile device by the respective verification measure (e.g. face recognition,
password, fingerprint or pattern) is required.
For the purpose of payment processing, your information provided during the ordering process, together with
the information about your order, will be forwarded to Google. Google then transmits your payment
information stored in Google Pay in the form of a unique transaction number to the source website, which is
used to verify a payment. This transaction number does not contain any information about the real payment
data of your means of payment deposited with Google Pay, but is created and transmitted as a uniquely valid
numeric token. For all transactions via Google Pay, Google acts merely as an intermediary to process the
payment transaction. The transaction is carried out exclusively in the relationship between the user and the
source website by debiting the means of payment deposited with Google Pay.
If personal data are processed in the described transmissions, the processing is carried out exclusively for
the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store and evaluate certain transaction-specific information for each
transaction made via Google Pay. This includes the date, time and amount of the transaction, the merchant's
location and description, a description provided by the merchant of the goods or services purchased, photos
that you have attached to the transaction, the name and email address of the seller and buyer or the sender
and recipient, the payment method used, your description of the reason for the transaction and, if
applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f
GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data and
optimisation and maintenance of the functionality of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information which is
collected and stored by Google when using other Google services.
The terms of use of Google Pay can be found here:
https://payments.google.com
Further information on data protection at Google Pay can be found at the following Internet address:
https://payments.google.com
- iDeal
Online payment methods from the following provider are available on this website: Currence Holding BV, Beethovenstraat 300 Amsterdam, The Netherlands
If you select a payment method of the provider for which you make an advance payment (e.g. credit card
payment), your payment data provided during the ordering process (including name, address, bank and payment
card information, currency and transaction number) as well as information about the content of your order
will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will
only be passed on for the purpose of processing payment with the provider and only to the extent necessary
for this purpose.
- Mollie
Online payment methods from the following provider are available on this website: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands
If you select a payment method of the provider for which you make an advance payment (e.g. credit card
payment), your payment data provided during the ordering process (including name, address, bank and payment
card information, currency and transaction number) as well as information about the content of your order
will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will
only be passed on for the purpose of processing payment with the provider and only to the extent necessary
for this purpose.
- PAYONE
Online payment methods from the following provider are available on this website: PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, Germany
If you select a payment method of the provider for which you make an advance payment (e.g. credit card
payment), your payment data provided during the ordering process (including name, address, bank and payment
card information, currency and transaction number) as well as information about the content of your order
will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will
only be passed on for the purpose of processing payment with the provider and only to the extent necessary
for this purpose.
- Paypal
Online payment methods from the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method of the provider for which you make an advance payment, your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
When selecting a payment method of the provider with which the provider makes advance payments, you will also be asked to provide certain personal data (first name and surname, street, house number, postcode, city, date of birth, e-mail address, telephone number, if applicable data on alternative means of payment) during the ordering process.
In order to safeguard our legitimate interest in determining the solvency of our customers, this data is passed on to the provider by us for the purpose of a credit check in accordance with Art. 6 (1) point f GDPR. On the basis of the personal data provided by you as well as further data (such as shopping cart, invoice total, order history, payment history), the provider checks whether the payment option selected by you can be granted with regard to payment and/or bad debt risks.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider.
However, the provider may still be entitled to process your personal data if this is necessary for the
contractual processing of payments.
- Paypal Checkout
This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay Later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only insofar as this is necessary for the payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal - PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
If you select the PayPal payment method "purchase on account", your payment data will first be
transferred to PayPal in preparation for payment, whereupon PayPal will forward them to Ratepay GmbH,
Franklinstraße 28-29, 10587 Berlin ("Ratepay") in order to carry out the payment. The legal
basis in each case is Art. 6 para. 1 lit. b GDPR. In this case, RatePay carries out an identity and
creditworthiness check on its own behalf to determine solvency in accordance with the principle already
mentioned above and passes on your payment data to credit agencies on the basis of the legitimate interest
in determining solvency in accordance with Art. 6 Para. 1 lit. f GDPR. A list of the credit agencies that
Ratepay may use can be found here: https://www.ratepay.com
When using the payment method of a local third party provider, your payment data will first be forwarded to PayPal for the preparation of the payment in accordance with Art. 6 (1) lit. b GDPR. Depending on your selection of an available local payment method, PayPal will then transfer your payment data to the corresponding provider in order to carry out the payment in accordance with Art. 6 Para. 1 lit. b GDPR:
- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork,
Irland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Irland)
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany).
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw,
Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland).
For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com
- SOFORT
Online payment methods from the following provider are available on this website: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany
If you select a payment method of the provider for which you make an advance payment (e.g. credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order will be passed on to the provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the purpose of processing payment with the provider and only to the extent necessary for this purpose.
9) Online Marketing
9.1 Google AdSense
This website uses Google AdSense, a web ad service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland ("Google"). Google AdSense uses so-called cookies. These are text files are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses "web beacons" (small invisible graphics) to collect information, which can be used to record, collect and evaluate simple actions such as visitor traffic on the website. The information generated by those cookies and/or web beacons (including your IP address) about your use of this website will normally be transmitted to a server of Google and will be stored there. When using Google AdSense, personal data may also be transmitted to the servers of Google LLC. in the USA.
Google will use the information obtained in this way to analyze your usage of this website with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. The information collected by Google may be transferred to third parties, if this is prescribed by law and/or if third parties process this data by request of Google.
All processing described above, in particular the reading of information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GPDR. Without this consent, Google AdSense will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
For more information about Google's privacy policy, please visit: https://privacy.google.com
9.2 AWIN Performance Advertising Network
We participate in the affiliate programme of the following provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany
In this context, we have placed links on our website that lead to offers on websites of the provider or third
parties ("affiliate sites").
In order to measure the success of an affiliate link, the analysis of orders generated via such a link and
the corresponding settlement of commission payments, the provider uses cookies and/or similar technologies
which are generally set on the affiliate sites and for which we are not responsible in this respect under
data protection law. In doing so, the provider also regularly processes the IP address and, if applicable,
further end device information.
All of the processing described above, in particular the reading or saving of information on the end device used by you, will only be carried out if you have given your express consent to this in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the affiliate sites.
9.3 CJ Affiliate Partner Network
We are a member of the partner network by CJ Affiliate (Conversant Europe Limited, 1st Floor, 40 Dukes
Place, London, EC3A 7NH). In this context, we have placed advertisements as links on the pages of affiliate
partners that lead to offers on our website. CJ Affiliate uses cookies, which are generally set on the
partner site and for which we are not responsible under data protection law. Cookies are small text files
that are stored on your end device in order to be able to trace the origin of transactions (e.g. "sales
leads") that were generated via such links. Among other things, CJ Affiliate can recognize that you
have clicked on the partner link and been redirected to our website. This information is used to process
payments between us and CJ Affiliate. If the information also contains personal data, the processing
described above is based on our legitimate financial interest in processing commission payments with CJ
Affiliate.
Further information on the use of data by CJ Affiliate can be found at https://www.conversantmedia.com
If you wish to block the evaluation of user behavior via cookies, you can set your browser so that you are
informed about the setting of cookies and decide individually whether to accept them or to exclude the
acceptance of cookies for certain cases or in general.
We participate in the affiliate program of eBay Partner Network, Inc, 2145 Hamilton Ave, San Jose, CA 95125,
USA (hereinafter "EPN"). In this context, we have placed advertisements on our website as links
that lead to offers on various eBay websites. EPN uses cookies, which are small text files that are stored
on your end device to be able to trace the origin of clicks, orders etc. that were generated via such links.
Among other things, EPN can recognize that you have clicked the partner link on this website. This
information is required to process payments between us and eBay. If the information also contains personal
data, the described processing is carried out on the basis of our legitimate financial interest in the
processing of commission payments with eBay.
For more information on EPN's use of data, please refer to the company's privacy policy at: https://www.ebayprivacycenter.com
If you wish to block the evaluation of user behavior via cookies, you can set your browser so that you are
informed about the setting of cookies and decide individually whether to accept them, or whether to exclude
the acceptance of cookies in certain cases or in general.
10) Web Analysis Services
10.1 Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which can be used to analyze the use of websites.
When using Google Analytics 4, so-called "cookies" are used as standard. Cookies are text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, a company based in the USA, where the information is further processed.
When using Google Analytics 4, the IP address transmitted by your terminal device when you use the website is always collected and processed by default and automatically only in an anonymized manner, so that a direct personal reference of the collected information is excluded. This automatic anonymization is carried out by shortening the IP address transmitted by your terminal device by Google within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.
On our behalf, Google uses this and other information to evaluate your use of the website, to compile reports (reports) on your website activities or your usage behavior and to provide us with other services related to your website usage and internet usage. In this context, the IP address transmitted and shortened by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be retained for 2 months and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called "demographic characteristics". This makes it possible to determine and distinguish between groups of website users for the purpose of targeting marketing measures. However, data collected via the "demographic characteristics" cannot be assigned to a specific person and thus not to you personally. This data collected via the "demographic characteristics" function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website.
You can revoke your consent once given at any time with effect for the future. To exercise your revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website.
Google Signals
On this website, the "Google Signals" service can also be used as an extension of Google Analytics
4. With Google Signals, cross-device reports can be created by Google (so-called "cross-device
tracking"). If you have activated "personalised ads" in your Google account settings and you
have linked your internet-enabled devices to your Google account, Google can analyse user behaviour across
devices and create database models based on this, provided you have given your consent to the use of Google
Analytics in accordance with Art. 6 Para. 1 letter a GDPR (see above). The logins and device types of all
page visitors who were logged into a Google account and performed a conversion are taken into account. The
data shows, among other things, on which device you first clicked on an ad and on which device the
associated conversion took place. Insofar as Google Signals is used, we do not receive any personal data
from Google, but only statistics compiled on the basis of Google Signals. You have the option of
deactivating the "personalised ads" function in the settings of your Google account and thus
turning off the cross-device analysis. To do this, follow the instructions on this page: https://support.google.com
Further information can be found here: https://support.google.com
UserIDs
As an extension of Google Analytics 4, the "UserIDs" function can also be used on this website. By
assigning individual UserIDs, we can have Google create cross-device reports (so-called "cross-device
tracking"). This means that your usage behaviour can also be analysed across devices if you have given
your corresponding consent to the use of Google Analytics in accordance with Art. 6 Para. 1 letter a GDPR,
if you have set up a personal account by registering on this website and are logged into your personal
account on different end devices with your relevant login data. The data collected in this way shows, among
other things, on which end device you clicked on an ad for the first time and on which end device the
relevant conversion took place.
We have concluded a so-called data processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to pass it on to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further legal information on Google Analytics 4 can be found at the following link: https://business.safety.google
Details on the processing triggered by Google Analytics 4 and Google's handling of data from websites can be
found here: https://policies.google.com
10.2 Cloudflare Web Analytics
This website uses the web analytics service provided by the following provider: Cloudflare, Inc., 101 Townsend St. San Francisco, CA 94107, USA
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), the service collects and stores pseudonymised visitor data, including information on the end device used such as the IP address and browser information, in order to evaluate it for statistical analyses of user behaviour on our website and to create pseudonymised user profiles. Among other things, this enables the analysis of movement patterns (so-called heat maps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation generally excludes the possibility of direct personal reference. Your personal data will not be combined with data collected in any other way.
All processing described above, in particular the reading or saving of information on the end device used, is only carried out if you have given us your express consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
10.3 Google Tag Manager
This website uses the "Google Tag Manager", a service of Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking
and analysis services, and for calibrating, controlling and attaching conditions to them via a uniform user
interface.
Google Tag Manager itself does not store any information on user end devices or read them. The service also
does not perform any independent data analyses.
However, the Google Tag Manager transmits your IP
address to Google when you visit a page and may store it there. Also a transmission to servers of Google LLC
in the USA is possible.
This processing is only carried out if you have given us your express consent to do so in accordance with
Art. 6 (1) point a GDPR. Without this consent, Google Tag Manager will not be used during your visit to the
website.
You can revoke your consent at any time with effect for the future. To exercise your
revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
We have concluded an order processing agreement with Google, which obliges Google to protect the data of our website visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google invokes so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further privacy information on Google Tag Manager can be found here: https://business.safety.google
You will find separate information on data protection-relevant services and applications that have been
merged in Google Tag Manager in the corresponding sections of this privacy policy.
10.4 Microsoft Clarity
This website uses the web analytics service provided by the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), the service collects and stores pseudonymised visitor data, including information on the end device used such as the IP address and browser information, in order to evaluate it for statistical analyses of user behaviour on our website and to create pseudonymised user profiles. Among other things, this enables the analysis of movement patterns (so-called heat maps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation generally excludes the possibility of direct personal reference. Your personal data will not be combined with data collected in any other way.
All processing described above, in particular the reading or saving of information on the end device used, is only carried out if you have given us your express consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
10.5 New Relic
This website uses the web analytics service provided by the following provider: New Relic, Inc, 188 Spear St, San Francisco, CA 94105, USA
Using cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), the service collects and stores pseudonymised visitor data, including information on the end device used such as the IP address and browser information, in order to evaluate it for statistical analyses of user behaviour on our website and to create pseudonymised user profiles. Among other things, this enables the analysis of movement patterns (so-called heat maps), which show the duration of page visits and interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymisation generally excludes the possibility of direct personal reference. Your personal data will not be combined with data collected in any other way.
All processing described above, in particular the reading or saving of information on the end device used, is only carried out if you have given us your express consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
11) Retargeting/Remarketing/ Referral Advertising
11.1 Meta Pixel with extended data synchronisation
Within our online offering, we use the "Meta Pixel" service of the following provider in extended data synchronisation mode: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta")
If a user clicks on an advert placed by us on Facebook or Instagram, "Meta Pixel" is used to add a parameter to the URL of our linked page. This URL parameter is then entered in the user's browser after redirection by a cookie that our linked page sets itself. In addition, this cookie collects specific customer data, such as the email address, which we collect on our website linked to the Facebook or Instagram ad during processes such as purchase transactions, account logins or registrations (extended data synchronisation). The cookie is then read and enables the data, including specific customer data, to be transmitted to Meta.
We use "Meta Pixel" with extended data matching to make our adverts (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to the interests of users or have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Meta (so-called "Custom Audiences").
In addition, we analyse the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (conversion). Compared to the standard version of "Meta Pixel", the extended data synchronisation function helps us to better measure the effectiveness of our advertising campaigns by recording more associated conversions.
All transmitted data is stored and processed by Meta so that an assignment to the respective user profile is
possible and Meta can use the data for its own advertising purposes in accordance with Meta's data usage
guidelines (https://www.facebook.com
All processing described above, in particular the setting of cookies for reading information on the terminal device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorised disclosure to third parties.
The information generated by Meta is usually transferred to a Meta server and stored there; in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.2 Criteo
This website uses retargeting technology from the following provider: Criteo SA, 32 Rue Blanche, 75009 Paris, France
This enables us to target visitors to our website with personalized, interest-related advertising who have already shown interest in our shop and our products. The advertising material is displayed based on a cookie-based analysis of previous and current user behavior; whereby no personal data is stored. In the cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You are thus shown advertising that is most likely to match your product and information interests.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.
11.3 Google Ads Remarketing
This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. In this way, we pursue the concern of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize if the user has clicked on the ad and has been directed to this page. Each Google Ads customer receives a different cookie. Cookies therefore cannot be tracked across Google Ads customers’ websites. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have chosen conversion tracking. Customers learn the total number of users who clicked on their ad and who were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in the USA.
Details on the processing operations initiated by Google Ads conversion tracking and on Google's handling of
data collected from websites can be found here: https://policies.google.com
All processing described above, in particular the setting of cookies for the reading of information on the
end device used, will only be carried out if you have given us your express consent to do so in accordance
with Art. 6 (1) point a GDPR. Without this consent, Google Conversion Tracking will not be used during your
visit to the website.
You can permanently disable the setting of cookies by Google Ads Conversion Tracking for advertising
preferences. You may download and install the browser plug-in available at the following link: https://support.google.com
Please note that certain functions of this website may not be available or may be restricted if you have
deactivated the use of cookies.
Further information about Google’s privacy policy can be viewed at: https://business.safety.google
11.4 LinkedIn Insight
This website uses retargeting technology from the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
This enables us to target visitors to our website with personalized, interest-related advertising who have already shown interest in our shop and our products. The advertising material is displayed based on a cookie-based analysis of previous and current user behavior; whereby no personal data is stored. In the cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You are thus shown advertising that is most likely to match your product and information interests.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.
11.5 LinkedIn Marketing Solutions
This website uses retargeting technology from the following provider: LinkedIn Ireland Unlimited Company, Wilton Plaza, Wilton Place, Dublin 2, Ireland
This enables us to target visitors to our website with personalized, interest-related advertising who have already shown interest in our shop and our products. The advertising material is displayed based on a cookie-based analysis of previous and current user behavior; whereby no personal data is stored. In the cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You are thus shown advertising that is most likely to match your product and information interests.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.
11.6 Microsoft Advertising
This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
This enables us to target visitors to our website with personalized, interest-related advertising who have already shown interest in our shop and our products. The advertising material is displayed based on a cookie-based analysis of previous and current user behavior; whereby no personal data is stored. In the cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You are thus shown advertising that is most likely to match your product and information interests.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.
11.7 Outbrain
This website uses retargeting technology from the following provider: Outbrain Inc, 39 W 13th Street, New York, NY 10011, USA
This enables us to target visitors to our website with personalized, interest-related advertising who have already shown interest in our shop and our products. The advertising material is displayed based on a cookie-based analysis of previous and current user behavior; whereby no personal data is stored. In the cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You are thus shown advertising that is most likely to match your product and information interests.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.
11.8 Taboola
This website uses retargeting technology from the following provider: Taboola Inc, 16 Madison Square West 7th Floor, New York, NY 10010, USA
This enables us to target visitors to our website with personalized, interest-related advertising who have already shown interest in our shop and our products. The advertising material is displayed based on a cookie-based analysis of previous and current user behavior; whereby no personal data is stored. In the cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You are thus shown advertising that is most likely to match your product and information interests.
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. Without this consent, retargeting technology will not be used during your visit to the website.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "cookie consent tool" provided on the website.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.
11.9 Google Ads Conversion-Tracking
This website uses the online advertising program "Google Ads" and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text
files that are stored on your end device. These cookies usually lose their validity after 30 days and are
not used for personal identification. If the user visits certain pages of this website and the cookie has
not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this
page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across
Google Ads clients' websites. The information obtained using the conversion cookie is used to create
conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients learn the
total number of users who clicked on their ad and were redirected to a page tagged with a conversion
tracking tag. However, they do not receive any information that can be used to personally identify
users.
The use of Google Ads may also result in the transmission of personal data to the servers of Google LLC. in
the USA.
Details on the processing triggered by Google Ads Conversion Tracking and on Google's handling of data from
websites can be found here: https://policies.google.com
All of the processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading
and installing the Google browser plug-in available at the following link:
https://www.google.com
In order to address users whose data we have received in the context of business or business-like relationships in a more interest-oriented advertising manner, we use a customer matching function in the context of Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily email addresses and telephone numbers) electronically to Google. Google does not have access to clear data, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to assign it to existing Google accounts that the data subjects have set up. This enables personalized advertising to be played via all Google services linked to the respective Google account.
Customer data will only be transferred to Google if you have given us your express consent to do so in
accordance with Art. 6 (1) a GDPR You can revoke this consent at any time with effect for the future.
Further information on Google's data protection measures in relation to the customer matching function can
be found here: https://support.google.com
Further information on Google's privacy standards can be found here: https://policies.google.com
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.10 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to serve ads relevant to users, to improve campaign performance reports or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to identify which ads are shown in which browser and to prevent them from being shown more than once.
In addition, GMP can use cookie IDs to record so-called conversions that relate to ad requests. This is the case, for example, when a user sees a GMP advertisement and later, using the same browser, calls up the advertiser's website and makes a purchase via this website. According to Google, GMP cookies contain no personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of these tools and therefore inform you as follows according to our state of knowledge: By integrating GMP, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can allocate the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and save your IP address. In the context of the use of GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.
All processing described above, in particular the reading of information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GPDR. Without this consent, GMP will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
You can obtain further information about the data protection regulations of GMP by Google at the following
Internet addresses: https://policies.google.com
11.11 Microsoft Advertising Universal Event Tracking
This website uses the conversion tracking technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
If you have accessed our website from an advertisement on the provider's domain, the success of the
advertisement can be tracked with the help of cookies and/or comparable technologies (tracking pixels, web
beacons, pings, or HTTP requests).
For this purpose, certain end device and browser information, including your IP address if applicable, is
read via the tracking technology in order to record and evaluate user actions predefined by us (e.g.,
completed transactions, leads, search queries on the website, calls to product pages). This enables us to
compile statistics on user behavior on our website after forwarding from an advertisement, which we use to
optimize our offer.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
11.12 TikTok Pixel
This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
If you have accessed our website from an advertisement on the provider's domain, the success of the
advertisement can be tracked with the help of cookies and/or comparable technologies (tracking pixels, web
beacons, pings, or HTTP requests).
For this purpose, certain end device and browser information, including your IP address if applicable, is
read via the tracking technology in order to record and evaluate user actions predefined by us (e.g.,
completed transactions, leads, search queries on the website, calls to product pages). This enables us to
compile statistics on user behavior on our website after forwarding from an advertisement, which we use to
optimize our offer.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with future effect by deactivating this service in the "cookie consent tool" provided on the website.
We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
12) Site Functionalities
12.1 Facebook plugins
Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Facebook)
These plugins allow direct interaction with content on the social network.
In order to increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page by means of a so-called "2-click" or "Shariff" solution. This integration ensures that when you access a page of our website that contains such plugins, no connection is yet established with the servers of the provider.
Your browser only establishes a direct connection to the servers of the provider when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 (1) point a GDPR. In this process, regardless of whether you log into an existing user profile, a certain amount of information about your end device used (including your IP address), your browser and your page history is transferred to the provider and may be further processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.
Data can also be transferred to: Meta Platforms Inc., USA
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.
12.2 Instagram plugins
Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland (Instagram)
These plugins allow direct interaction with content on the social network.
In order to increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page by means of a so-called "2-click" or "Shariff" solution. This integration ensures that when you access a page of our website that contains such plugins, no connection is yet established with the servers of the provider.
Your browser only establishes a direct connection to the servers of the provider when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 (1) point a GDPR. In this process, regardless of whether you log into an existing user profile, a certain amount of information about your end device used (including your IP address), your browser and your page history is transferred to the provider and may be further processed there.
If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation has no influence on the data that has already been transferred to the provider.
Data can also be transferred to: Meta Platforms Inc., USA
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors’ data and prohibits unauthorised disclosure to third parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are meant to ensure compliance with the European level of data protection.
12.3 YouTube Videos
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland
Data may also be transmitted to: Google LLC., USA.
When you call up a page of our website that contains such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. This involves certain information, including your IP address, being transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, to create playback statistics and to prevent abusive behavior.
If you are logged into a user account maintained by the provider during your visit to the site, your data will be directly assigned to your account when you click on a video. If you do not wish to have your data assigned to your account, you must log out before clicking on the play button.
All the above-mentioned processing, in particular the setting of cookies for reading out information on the end device used, only takes place if you have given us your express consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "cookie consent tool" provided on the website.
12.4 Trusted Shops Trustbadge
Graphic elements of the following provider are integrated on our website to display external customer ratings and/or externally awarded quality marks: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany
If you access a page of our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers to load the elements properly. This involves the transmission of certain browser information, including your IP address, to the provider.
If personal data is processed in this context, this is done in accordance with Art. 6 (1) point f GDPR based on our legitimate interest in the optimal marketing of our offer and the appealing design of our website.
12.5 Google Maps
Our website uses Google Maps (AP’I) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04
E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (country) maps
in order to display geographical information visually. Using this service will show you our location and
will make it easier for you to find us.
When you access the sub-pages that contain the Google Maps map, information about your use of our website
(such as your IP address) is transmitted to and stored by Google on servers. When using Google Maps,
personal data may also be transmitted to the servers of Google LLC. in the USA. This is regardless of
whether Google provides a user account that you are logged in with or whether no user account exists. If you
are logged in to Google, your information will be directly associated with your account. If you do not wish
to be associated with your profile on Google, you must log out before activating the button. Google saves
your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation
takes place according to Art. 6 (1) point f GDPR, on the basis of the legitimate interests of Google in the
insertion of personalized advertising, market research and/or demand-oriented design of its website. You
have the right to object to the creation of these user profiles. If you want to do so, you must contact
Google to exercise this right.
If you do not agree to the future transmission of your data to Google in the context of using Google Maps,
you may completely deactivate the Google Maps web service by switching off the JavaScript application in
your browser. In this case, Google Maps as well as the map display on this website cannot be used.
The Google terms of use can be found at: https://policies.google.com
You can find detailed information on data protection in connection with the use of Google Maps on Google's
website ("Google Privacy Policy") at: https://business.safety.google
To the extent required by law, we have obtained your consent to the processing of your data as described
above in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for
the future. In order to exercise your revocation, please follow the procedure described above for submitting
an objection.
12.6 Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA window, the provider uses "Google Fonts", i.e., fonts loaded from the Internet by Google. No further information is processed except that mentioned above, which is already transmitted to Google via the functionality of ReCaptcha.
The service checks whether an input is made by a natural person or abusively by machine and automated processing with the aim of blocking spam, DDoS attacks and similar automated malicious attacks. To ensure whether an action is performed by a human being and not by an automated bot, the provider collects the IP address of the end device used, the recognition data of the browser, the operating system type and the date and duration of the visit and transmits these data to the provider's servers to be evaluated.
This process is based on our legitimate interest in determining individual responsibility when using the Internet and in preventing abuse and spam in accordance with Art. 6 Para. 1 lit. f GDPR.
We have concluded an order processing contract with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision by the European Commission.
Further information on Google's privacy standards can be found here: https://business.safety.google
12.7 SurveyMonkey
We use the services of the following provider to conduct surveys or for online forms: Momentive Europe UC, 2nd Floor, 2 Shelbourne Buildings, Shelbourne Road, Dublin, Irland
The provider enables us to design and analyse surveys and online forms. In addition to the personal data that you enter into the forms, information on your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transferred to the provider and stored on the provider's servers.
The information you enter in the forms is stored under password protection to ensure that third party access is excluded and that only we can analyse the data for the purpose specified in the form.
For the processing of personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Art. 6 (1) point b GDPR serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 (1) point a GDPR. Consent given can be revoked at any time with effect for the future.
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
12.8 Applications for job advertisements using a form
On our website, we offer those interested in a job the possibility to apply online using an appropriate
form. In order to be included in the application process, applicants must provide us with all personal data
required for a well-founded and informed assessment and selection.
The required data includes general personal information (name, address, telephone or electronic contact
details) as well as performance-specific evidence of the qualifications required for a position. Where
appropriate, health-related information may also be required, which, in the interests of social protection,
must be given special consideration in the applicant's own person under labour and social law.
In the course of sending the form, the applicant's data will be encrypted according to the state of the art,
transmitted to us, stored by us and evaluated exclusively for the purpose of processing the
application.
The legal basis for these processing operations is generally Art. 6 Para. 1 lit. b, in the sense of which
passing through the application procedure is considered to be the initiation of an employment
contract.
Insofar as special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data
such as information on the status of severely disabled persons) are requested from applicants in the context
of the application procedure, processing is carried out in accordance with Art. Art. 9 para. 2 lit. b. GDPR
so that we can exercise the rights arising from labour law and social security and social protection law and
fulfil our obligations in this respect.
Cumulatively or alternatively, the processing of the special categories of data may also be based on Art. 9
para. 1 lit. h GDPR, if it is carried out for purposes of preventive health care or occupational medicine,
for the assessment of the applicant's ability to work, for medical diagnosis, care or treatment in the
health or social field or for the management of systems and services in the health or social field.
If, in the course of the evaluation described above, the applicant is not selected, or if an applicant
withdraws his or her application prematurely, the data submitted on the application form will be deleted
after 6 months at the latest after notification. This period is calculated on the basis of our legitimate
interest in being able to answer any follow-up questions about the application and, if necessary, to comply
with our obligation to provide evidence in accordance with the regulations on the equal treatment of
applicants.
In the event of a successful application, the data provided will be further processed on the basis of Art. 6
para. 1 lit. b GDPR for the purposes of the employment relationship.
13) Tools and Miscellaneous
13.1 - DATEV
For the execution of the accounting, we use the service of the cloud-based accounting software of the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany
The provider processes incoming and outgoing invoices and, if applicable, also the bank transactions of our company in order to automatically record invoices, match them to the transactions and create the financial accounting from this in a semi-automated process.
Insofar as personal data is also processed in this context, the processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in the efficient organisation and documentation of our business transactions.
13.2 This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users in the form of an interactive user interface when they access the page, on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box.
Using the tool, all cookies/services requiring consent are only loaded if the respective user provides the corresponding consent by ticking the corresponding box. This ensures that such cookies are only set on the respective end device of the user if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally
not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing,
assigning or logging cookie settings, this is done in accordance with Art. 6 (1) point GDPR based on our
legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and
thus in a legally compliant design of our website.
Further legal basis for the processing is Art. 6 (1) point c GDPR. As the responsible party, we are subject
to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user
consent.
Further information on the operator and the setting options of the cookie consent tool can be found directly
in the corresponding user interface on our website.
13.3 Cloudflare
For security purposes, this website uses the service of the following provider: Cloudflare, Inc, 101 Townsend St. San Francisco, CA 94107, USA
The provider protects the website and the associated IT infrastructure from unauthorised third-party access, cyber attacks and viruses and malware. The provider collects the IP addresses of users and, if necessary, further data on their behaviour on our website (in particular URLs accessed and header information) in order to detect and defend against illegitimate page accesses and dangers. In doing so, the collected IP address is compared with a list of known attackers. If the captured IP address is identified as a security risk, the provider can automatically block it from accessing the website. The information collected in this way is transferred to a server of the provider and stored there.
The described data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interests in protecting the website from harmful cyber attacks and in maintaining structural and data integrity and security.
We have concluded an order processing agreement with the provider, which ensures the protection of our website visitors' data and prohibits unauthorised disclosure to third parties.
14) Rights of the Data Subject
14.1 The applicable data protection law grants you the following comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data:
- Right of access by the data subject pursuant to Art. 15 GDPR;
- Right to rectification pursuant to Art. 16 GDPR;
- Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
- Right to restriction of processing pursuant to Art. 18 GDPR;
- Right to be informed pursuant to Art. 19 GDPR;
- Right to data portability pursuant to Art. 20 GDPR;
- Right to withdraw a given consent pursuant to Art. 7 (3) GDPR;
- Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
15) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).
If personal data is processed basis on an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes his consent.
If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing based on Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.
