Privacy policy
1) Introduction and Contact Information of the Data Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data is all data by which you can be personally identified.
1.2 The data controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is The Female Company GmbH, Karl-Marx-Allee 90, 10243 Berlin, Germany, Phone: +49 151 614 745 79, Email: love@thefemalecompany.com. The data controller is the natural or legal person who decides, alone or jointly with others, on the purposes and means of processing personal data.
1.3 The data controller has appointed a data protection officer, who can be reached as follows: "DataCo GmbH, Dachauer Straße 65, 80335 München, Germany, +49 89 7400 45840, www.dataguard.de"
2) Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Website visited by you
- Date and time of access
- Amount of data sent in bytes
- Source/reference from which you came to the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
3) Hosting & Content-Delivery-Network
3.1 Shopify
For hosting our website and displaying the page content, we use the system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc.
All data collected on our website is processed on the provider's servers. We have signed a data processing contract with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfer to Canada, an adequate level of data protection is ensured by a decision of adequacy by the European Commission.
For data transfer to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection standards.
3.2 Vercel
For hosting our website and displaying the page content, we use the system of the following provider: Vercel Inc., 340 S Lemon Ave #4133, Walnut, CA 91789, USA
All data collected on our website is processed on the provider's servers.
We have signed a data processing contract with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
3.3 Amazon Web Services
For hosting our website and displaying the page content, we use the system of the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
All data collected on our website is processed on the provider's servers. We have signed a data processing contract with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
3.4 AWS-CloudFront
We use a Content Delivery Network of the following provider: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
This service allows us to deliver large media files such as graphics, page content, or scripts faster through a network of regionally distributed servers. The processing is carried out in the interest of improving the stability and functionality of our website according to Art. 6 Abs. 1 lit. f GDPR. We have signed a data processing contract with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
3.5 Bunny
We use a Content Delivery Network of the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia
This service allows us to deliver large media files such as graphics, page content, or scripts faster through a network of regionally distributed servers. The processing is carried out in the interest of improving the stability and functionality of our website according to Art. 6 Abs. 1 lit. f GDPR.
We have signed a data processing contract with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
3.6 Cloudflare
We use a Content Delivery Network of the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service allows us to deliver large media files such as graphics, page content, or scripts faster through a network of regionally distributed servers. The processing is carried out in the interest of improving the stability and functionality of our website according to Art. 6 Abs. 1 lit. f GDPR. We have signed a data processing contract with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
3.7 Fastly
We use a Content Delivery Network of the following provider: Fastly Inc., 475 Brannan St. #300, San Francisco, CA 94107, USA
This service allows us to deliver large media files such as graphics, page content, or scripts faster through a network of regionally distributed servers. The processing is carried out in the interest of improving the stability and functionality of our website according to Art. 6 Abs. 1 lit. f GDPR. We have signed a data processing contract with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
4) Cookies
To make a visit to our website attractive and enable the use of specific features, we use cookies. These are small text files stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called "session cookies"). In contrast, other cookies remain on your device for a longer period, allowing the storage of your page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in your web browser's cookie settings overview.
If the cookies we use also process personal data, the processing is carried out according to Art. 6 para. 1 lit. b GDPR for contract execution or Art. 6 para. 1 lit. a GDPR in case of given consent or according to Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective page visit.
You can set your browser to inform you about cookie settings and decide individually on their acceptance, or you can exclude the acceptance of cookies in certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contacting us
5.1 Zendesk (formerly Zopim)
This website uses a live chat system from the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland.
The processing of personal data transmitted via chat is either in accordance with Art. 6 para. 1 lit b GDPR, necessary for contract initiation or performance, or in accordance with Art. 6 para. 1 lit. f GDPR due to our legitimate interest in effectively assisting our website visitors. The data you transmit this way will be deleted, subject to any opposing legal retention periods, once the matter is conclusively clarified.
Furthermore, additional information can be collected and evaluated using cookies for the purpose of creating pseudonymous user profiles, which, however, do not serve your personal identification and are not merged with other data records. If this information is personally identifiable, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes.
Setting cookies can be prevented by appropriate browser settings. In this case, however, the functionality of our website may be restricted. You can object to the data collection and storage for the purpose of creating a pseudonymous user profile at any time with effect for the future.
We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
5.2 Zendesk
We use the email ticketing system of the following provider to process customer inquiries: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland.
If you submit contact requests via email on our website, they are stored and organized in the ticket system to allow chronological processing and enhance the service experience. You can always check the current processing status of your request using the individually assigned ticket number.
For organizing and processing requests, personal data is collected based on the extent of their provision, but at least your first name, last name, and email address. This data is transmitted to, stored by, and read by the provider.
The legal basis for processing this data is our legitimate interest in efficiently organizing our customer service, responding to your concerns as quickly as possible, and optimizing our service offer in accordance with Art. 6 para. 1 lit. f GDPR.
We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
5.3 WhatsApp Business
We offer visitors to our website the opportunity to contact us using the messaging service WhatsApp from WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called "business version" of WhatsApp.
If you contact us on WhatsApp regarding a specific transaction (e.g., a completed order), we will store and use your mobile number used on WhatsApp, and if provided, your first and last name according to Art. 6 para. 1 lit. b GDPR to process and respond to your concern. Based on the same legal basis, we may ask you on WhatsApp to provide additional data (order number, customer number, address, or email address) to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (e.g., about our range of services, availability, or our website), we store and use the mobile number you use on WhatsApp and, if provided, your first and last name according to Art. 6 para. 1 lit. f GDPR based on our legitimate interest in efficiently and promptly providing the requested information.
Your data will always be used to respond to your request via WhatsApp. There will be no transfer to third parties.
Please note that WhatsApp Business can access the address book of the mobile device we use and automatically transfer stored phone numbers to a server of the parent company Meta Platforms Inc. in the USA. For our WhatsApp Business account, we use a mobile device, in whose address book only the WhatsApp contact details of users stored who have also contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transfer of their WhatsApp phone number from the address books of their chat contacts according to Art. 6 para. 1 lit. a GDPR when using the app for the first time on their device. Data transfer of users who do not use WhatsApp and/or have not contacted us on WhatsApp is thus excluded.
For information on the purpose and scope of data collection and its further processing and use by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy
As part of the above-mentioned processing, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
5.4 When contacting us (e.g., via a contact form or email), personal data is processed exclusively for the purpose of processing and responding to your request, only to the extent necessary.
The legal basis for processing this data is our legitimate interest in responding to your concerns according to Art. 6 para. 1 lit. f GDPR. If the contact aims to conclude a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR.
6) Data Processing Upon Opening a Customer Account
According to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed to the extent necessary when you provide it to us for the opening of a customer account. The data required for account opening can be derived from the input mask of the corresponding form on our website.
You can delete your customer account at any time, which can be done by sending a message to the aforementioned address of the person responsible. After deleting your customer account, your data will be deleted, unless all contracts concluded via it have been fully processed, no legal retention periods apply, and there is no legitimate interest on our part in continued storage.
7) Use of Customer Data for Direct Advertising
7.1 Subscription to our Email Newsletter
When you sign up for our email newsletter, we regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of additional data is voluntary and is used to address you personally. For sending the newsletter, we use the so-called double opt-in procedure, ensuring you only receive the newsletter if you have expressly confirmed your consent to receive it by clicking a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address as recorded by your Internet Service Provider (ISP) as well as the date and time of registration to trace any potential misuse of your email address at a later date. The data we collect when you sign up for the newsletter is used strictly for its intended purpose.
You can unsubscribe from the newsletter at any time using the link provided in the newsletter or by sending a message to the person mentioned at the beginning. After unsubscribing, your email address will be immediately removed from our newsletter distribution list, unless you have expressly consented to the further use of your data, or we reserve the right to further use data which is permitted by law and about which we inform you in this declaration.
7.2 SMS Marketing
On our website, you have the opportunity to sign up for SMS notifications about current offers, promotions, and information on orders placed. Your mobile phone number is required for sending SMS notifications. Providing additional data is voluntary and will be used to address you personally. You can unsubscribe from the SMS service at any time by sending a message to the person responsible mentioned at the beginning, thereby revoking your consent with effect for the future. Once you have unsubscribed, your mobile phone number will be promptly removed from the distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data beyond this scope, which is legally permitted and about which we will inform you in this statement.
7.3 Email Notification of Product Availability
For temporarily unavailable items, you can sign up to receive email notifications about their availability. In this case, we will send you a one-time email notifying you of the availability of the item you have selected. The only mandatory information for sending this notification is your email address. The provision of additional data is voluntary and may be used to address you personally. For the email dispatch, we use the so-called double opt-in procedure, ensuring you only receive a notification if you have expressly confirmed your consent to receive it by clicking a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR. We store your IP address as recorded by your Internet Service Provider (ISP) as well as the date and time of registration to trace any potential misuse of your email address at a later date. The data we collect when you sign up for our email notification service about product availability is used strictly for its intended purpose.
You can unsubscribe from the availability notifications at any time by sending a message to the person mentioned at the beginning. After unsubscribing, your email address will be immediately removed from our distribution list set up for this purpose, unless you have expressly consented to the further use of your data, or we reserve the right to further use data which is permitted by law and about which we inform you in this declaration.
7.4 Email Reminders for Abandoned Carts
If you abandon your purchase with us before completing the order, you have the option of being reminded of the contents of your virtual shopping cart via email once.
The only mandatory information for sending this reminder is your email address. The provision of additional data is voluntary and may be used to address you personally. For the email dispatch, we use the so-called double opt-in procedure, ensuring you only receive a reminder if you have expressly confirmed your consent to receive it by clicking a verification link sent to the specified email address.
By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 para. 1 lit. a GDPR for sending a cart reminder. We store your IP address as recorded by your Internet Service Provider (ISP) as well as the date and time of registration to trace any potential misuse of your email address at a later date. The data we collect when you sign up for our email reminder service is used strictly for its intended purpose.
You can unsubscribe from the cart reminders at any time by sending a message to the person mentioned at the beginning. After unsubscribing, your email address will be immediately removed from our distribution list set up for this purpose, unless you have expressly consented to the further use of your data, or we reserve the right to further use data which is permitted by law and about which we inform you in this declaration.
7.5 Direct Mail Advertising via CMC
For the distribution of advertising material by postal mail, we use the services of the following provider: Collaborative Marketing Club - CMC GmbH, Kopernikusstraße 3, 10243 Berlin
Based on our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR, we pass on certain customer information received from you during the contractual relationship (name, address data, possibly date of birth) to the provider and commission them to print and send interest-based advertising information about our offers as part of individual campaigns.
You can object to the storage and use of your data for the purposes of postal direct advertising at any time.
We have entered into a data processing agreement with the provider, ensuring the protection of our website visitors' data and prohibiting unauthorized disclosure to third parties.
8) Data Processing for Order Handling
8.1 As far as necessary for contract execution for delivery and payment purposes, the personal data collected by us is transferred to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on an appropriate contract, we process the contact details (name, address, email address) you provided during the order to inform you personally about upcoming updates within the legally specified period in accordance with our legal information obligations according to Art. 6 para. 1 lit. c GDPR through suitable communication channels (e.g. by mail or email). Your contact details are used strictly for the purpose of informing about updates owed by us and are processed by us only to the extent necessary for the respective information.
We also work with the following service provider(s) to process your order, who fully or partly support us in fulfilling closed contracts. Certain personal data is transmitted to these service providers according to the following information.
8.2 Billbee
We use the following provider for order processing: Billbee GmbH, Arolser Str. 10, 34477 Twistetal, Germany
Name, address, and possibly other personal data are transferred exclusively for the purpose of processing the online order to the provider in accordance with Art. 6 para. 1 lit. b GDPR. Your data is only passed on as far as it is actually necessary for order processing.
8.3 Transfer of Personal Data to Shipping Service Providers
- Deutsche Post
We use the following provider as a transport service: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany
We will forward your email address and/or phone number to the provider before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification according to Art. 6 Abs. 1 lit. a GDPR, if you have given your explicit consent during the ordering process. Otherwise, only the name of the recipient and the delivery address are passed on to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. This data is only passed on as necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or delivery announcement is not possible.
The consent can be revoked at any time with effect for the future against the above-mentioned responsible person or the provider.
- DHL
We use the following provider as a transport service: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We will forward your email address and/or phone number to the provider before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification according to Art. 6 Abs. 1 lit. a GDPR, if you have given your explicit consent during the ordering process. Otherwise, only the name of the recipient and the delivery address are passed on to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. This data is only passed on as necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or delivery announcement is not possible.
The consent can be revoked at any time with effect for the future against the above-mentioned responsible person or the provider.
- DHL Express
We use the following provider as a transport service: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany
We will forward your email address and/or phone number to the provider before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification according to Art. 6 Abs. 1 lit. a GDPR, if you have given your explicit consent during the ordering process. Otherwise, only the name of the recipient and the delivery address are passed on to the provider for the purpose of delivery in accordance with Art. 6 para. 1 lit. b GDPR. This data is only passed on as necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or delivery announcement is not possible.
The consent can be revoked at any time with effect for the future against the above-mentioned responsible person or the provider.
8.4 Use of Payment Service Providers (Payment Services)
- Amazon Pay
One or more online payment methods from the following provider are available on this website: Amazon Payments Europe S.C.A., 38 Avenue J.F. Kennedy, L-1855 Luxembourg, Luxembourg
If you choose a payment method offered by this provider, your personal data will be automatically transferred to the provider for the purpose of the payment process. This usually includes your name, address, telephone number, IP address, and other data necessary for processing your payment, such as the amount of the order and the item number.
This data transfer is necessary to identify you again with the provider and to establish a contract with the provider. Furthermore, the provider may pass on the personal data received from you to third parties, such as credit institutions or other service providers involved in the payment process.
The data you send is stored by the provider and may be transferred to credit reference agencies for the purpose of a credit check. In this context, the provider checks whether there are any negative entries against you. Based on this check, the provider decides on the establishment, implementation, or termination of a contractual relationship.
Furthermore, the provider uses your data to detect and prevent fraud, to improve the offered payment methods and to fulfill legal obligations or court orders.
Your data is processed exclusively for the purpose of the payment process and stored as required by the provider in compliance with the applicable laws.
8.5 Further Processing Operations
In addition, personal data is only processed if you give your express consent according to Art. 6 para. 1 lit. a GDPR or if this is necessary to protect our legitimate interests and no reasons are apparent which suggest that you have an overriding worthy interest in not processing your data.
- Paypal
On this website, one or more online payment methods are available from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.
If you choose a payment method from this provider where you pay in advance, the payment data you provide during the ordering process (including name, address, bank and card information, currency, and transaction number) as well as information about the content of your order will be passed on to them in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data is only shared for the purpose of processing the payment with the provider and only to the extent necessary.
If you choose a payment method where we pay in advance, during the order process you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, telephone number, possibly data about an alternative payment method).
In such cases, to protect our legitimate interest in determining your creditworthiness, this data will be forwarded to the provider for a credit check in accordance with Art. 6 Para. 1 lit. f GDPR. The provider checks, based on the personal data you provide and other data (such as shopping cart, invoice amount, order history, payment experiences), whether the payment option you have chosen can be granted considering payment and/or default risks.
The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values includes, among other things but not exclusively, address data.
You can object to this processing of your data at any time by sending a message to us or the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Paypal Checkout
This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third parties.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "Pay Later" via PayPal, we pass on your payment data for payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for payment processing.
For the payment methods credit card via PayPal, direct debit via PayPal, or – if offered - "Pay later" via PayPal, PayPal reserves the right to carry out a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check in terms of the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Among other things but not exclusively, address data is included in the calculation of the score values. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
When selecting the PayPal payment method "Purchase on account", your payment data is first transmitted to PayPal to prepare for the payment, after which PayPal forwards this data for payment processing to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay"). The legal basis is always Art. 6 Para. 1 lit. b GDPR. In this case, RatePay carries out an identity and credit check to determine payment ability according to the principle already mentioned above and passes on your payment data to credit agencies based on the legitimate interest in determining payment ability in accordance with Art. 6 Para. 1 lit. f GDPR. A list of credit agencies Ratepay can refer to can be found here:
https://www.ratepay.com/legal-payment-creditagencies/
When using the payment method of a local third-party provider, your payment data is initially passed on to PayPal for payment preparation in accordance with Art. 6 Para. 1 lit. b GDPR. Depending on your selection of an available local payment method, PayPal then forwards your payment data for payment processing to the respective provider in accordance with Art. 6 Para. 1 lit. b GDPR:
- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)
- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands)
- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)
- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2 1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For further data protection information, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
8.5 Electronic Termination Option for Continuous Debt Relationships with Consumers
Consumers who have entered into contracts for chargeable continuous debt relationships (such as subscription contracts) on this website have the option to terminate them electronically in accordance with the applicable notice periods via a button.
Clicking on the button takes the consumer to a confirmation page where they can provide detailed information about the termination, clearly identify themselves, and subsequently declare their termination electronically.
The collection of personal data and its transmission to us is carried out in accordance with Art. 6 Para. 1 lit. b GDPR and only to the extent necessary for the proper processing of the termination. Also, based on Art. 6 Para. 1 lit. b GDPR, the provided personal data is used to confirm the receipt of the termination declaration and the time of termination electronically in text form. Another legal basis for the processing is Art. 6 Para. 1 lit. c GDPR. We are legally obligated to maintain an electronic termination option for consumer contracts on chargeable continuous debt relationships concluded via electronic commerce.
9) Online Marketing
9.1 Google AdSense
This website uses Google AdSense, a web advertising service from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files stored on your computer, allowing an analysis of your use of the website. In addition, Google AdSense uses "web beacons" (small invisible graphics) to collect information, with which simple actions such as the website's visitor traffic can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon (including your IP address) related to your use of this website is usually transferred to a Google server and stored there. This can also involve a transfer to the servers of Google LLC. in the USA.
Google uses the information obtained in this manner to evaluate your usage behavior concerning the AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense is not merged with other Google data. The information collected by Google may be disclosed to third parties if required by law and/or if third parties process this data on behalf of Google.
All processing described above, especially reading information from the device you're using via cookies and/or web beacons, only takes place if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, Google AdSense will not be used during your website visit.
You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision on adequacy by the European Commission.
Google's privacy policies can be viewed here: https://www.google.de/policies/privacy/
9.2 Metorik
This website uses the software-based marketing service of the following provider for the provision and synchronization of various customer management services: UJU Pty Ltd., PO Box 2242, Caulfield Junction, VIC 3161, Australia
The service enables automated processing of feed activities, control of advertising in the marketing channels used, and success analysis of marketing measures as well as centralized email marketing and contact management.
To fulfill the various functions, cookies are used. These are small text files that are stored locally in your web browser's cache on your device and allow us to analyze your use of the website. Here, the cookies capture certain information, such as the IP address, location, and time of the page call.
All processing described above, especially the setting of cookies for reading information from the device you're using, only takes place if you have given us your explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Other legal bases for data processing, which apply within the scope of specific service functions (e.g., the necessity of explicit consent according to Art.6 Para. 1 lit. a GDPR for sending newsletters), remain unaffected.
We have concluded a contract for order processing with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
9.3 Coupon Offers from Sovendus GmbH
For the selection of a voucher offer currently interesting for you, we transmit pseudonymized and encrypted the hash value of your e-mail address and your IP address to Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe (Sovendus) (Art. 6 para.1 f GDPR). The pseudonymized hash value of the e-mail address is used to consider a possible existing objection to advertising by Sovendus (Art. 21 para.3, Art. 6 para.1 c GDPR). The IP address is used by Sovendus exclusively for data security purposes and is usually anonymized after seven days (Art. 6 para.1 f GDPR). In addition, for billing purposes, we transmit pseudonymized order number, order value with currency, session ID, coupon code, and timestamp to Sovendus (Art. 6 para.1 f GDPR). If you are interested in a voucher offer from Sovendus, there is no advertising objection to your e-mail address and you click on the voucher banner displayed only in this case, we transmit encrypted salutation, name, postal code, country, and your e-mail address to Sovendus for the preparation of the voucher (Art. 6 para.1 b, f GDPR).
For further information on the processing of your data by Sovendus, please refer to the online data protection notes at www.sovendus.de/datenschutz.
- Goaffpro
We participate in the affiliate program of the following provider: Oxybit Enterprises Pvt Ltd, 16, Sector 20, Part 1, HUDA, Sirsa, Haryana -125055, India
In this context, we have placed links on our website that lead to offers on the provider's websites or third-party websites ("partner sites").
To measure the success of an affiliate link, evaluate orders generated via such a link, and the corresponding invoicing of commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites for which we are not responsible for data protection purposes. The provider regularly processes the IP address and possibly other device information.
All processing described above, especially reading or storing information on the device you are using, only occurs if you have given explicit consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your once-given consent at any time with effect for the future by using the cookie consent management options on the partner sites.
10) Web Analytics Services
10.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows for an analysis of your use of our website.
By default, when you visit the website, Google (Universal) Analytics sets cookies that are stored as small text blocks on your device and collect certain information. This information also includes your IP address, which, however, is shortened by Google by the last digits to prevent direct personal identification.
The information is transferred to Google's servers and processed there. Transmissions to Google LLC, based in the USA, are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The IP address transmitted and shortened by your browser within the scope of Google Analytics is not combined with other data from Google. The data collected through the use of Google (Universal) Analytics is stored for a period of two months and then deleted.
All of the above-described processes, especially the setting of cookies on the used device, occur only if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR.
Without your consent, Google (Universal) Analytics will not be used during your site visit. You can revoke your given consent for the future at any time. To exercise your right of revocation, please deactivate this service using the "Cookie-Consent-Tool" provided on the website.
We have entered into a data processing agreement with Google that ensures the protection of the data of our site visitors and prohibits unauthorized transmission to third parties.
Further legal information about Google (Universal) Analytics can be found at https://policies.google.com/privacy?hl=en&gl=en and at https://policies.google.com/technologies/partner-sites
Demographic Features
Google (Universal) Analytics uses the special function "demographic features" and can generate statistics that provide information about the age, gender, and interests of site visitors. This is done through the analysis of advertising and third-party information. This can identify target audiences for marketing activities. However, the collected data cannot be attributed to a specific individual and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google (Universal) Analytics, this website may use Google Signals to generate cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can, subject to your consent to use Google Analytics according to Art. 6 Para. 1 lit. a GDPR, analyze your user behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized Advertising" feature in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=en More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=en
UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" function can be used on this website. If you have consented to the use of Google (Universal) Analytics according to Art. 6 Para. 1 lit. a GDPR, set up an account on this website, and sign in on various devices with this account, your activities, including conversions, can be analyzed across devices.
For data transmissions to the USA, the provider has joined the EU-US Data Privacy Framework, which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection.
10.2 Google Analytics 4
This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows an analysis of your use of our website.
By default, when visiting the website, Google Analytics 4 sets cookies, which are small text blocks stored on your device and collect certain information. This information also includes your IP address, which, however, is truncated by Google to exclude any direct personal reference.
The information is transferred to Google servers and processed there. Transmissions to Google LLC based in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The IP address sent by your browser as part of Google Analytics and truncated will not be merged with other Google data. The data collected by Google Analytics 4 is stored for a period of two months and then deleted.
All the aforementioned processes, especially the setting of cookies on the device used, only take place if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR.
Without your consent, Google Analytics 4 will not be used during your site visit. You can revoke your given consent with effect for the future at any time. To exercise your right of withdrawal, please deactivate this service using the "Cookie-Consent-Tool" provided on the website.
We have entered into a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For more legal information about Google Analytics 4, please visit https://policies.google.com/privacy?hl=de&gl=de and https://policies.google.com/technologies/partner-sites
Demographic Features
Google Analytics 4 uses the special "demographic features" function and can use it to generate statistics that provide information about the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third parties. This can identify target groups for marketing activities. However, the collected data cannot be assigned to a specific person and is deleted after being stored for two months.
Google Signals
As an extension to Google Analytics 4, this website may use Google Signals to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can, subject to your consent to use Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including for cross-device conversions. We receive no personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized Advertising" function in your Google account settings. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de For more information on Google Signals, please visit the following link: https://support.google.com/analytics/answer/7532985?hl=de
UserIDs
As an extension to Google Analytics 4, this website may use the "UserIDs" function. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 Para. 1 lit. a GDPR, set up an account on this website and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which ensures compliance with European data protection levels based on a decision of adequacy by the European Commission.
10.3 Hotjar
This website uses the web analysis service from the following provider: Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information from the device used, such as IP address and browser information. This data is used for statistical analyses of user behavior on our website and the creation of pseudonymized user profiles. Among other things, this allows the evaluation of movement patterns (so-called heat maps) which show the duration of page visits and interactions with page content (e.g., text input, scrolling, clicks, and mouse-overs). Pseudonymization generally prevents direct personal reference. No merging with other clear data about you takes place.
All the processes described above, especially reading or saving information on the device used, are only carried out if you have given us your express consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time for the future by disabling this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a contract processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
10.4 New Relic
This website uses the web analysis service from the following provider: New Relic, Inc., 188 Spear St, San Francisco, CA 94105, USA
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information from the device used such as the IP address and browser information. This data is used for statistical analyses of user behavior on our website and the creation of pseudonymized user profiles. Among other things, this allows the evaluation of movement patterns (so-called heat maps) which show the duration of page visits and interactions with page content (e.g., text input, scrolling, clicks, and mouse-overs). Pseudonymization generally prevents direct personal reference. No merging with other clear data about you takes place.
All the processes described above, especially reading or saving information on the device used, are only carried out if you have given us your express consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time for the future by disabling this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a contract processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which based on a decision of appropriateness by the European Commission, ensures compliance with European data protection levels.
10.5 Tracify
This website uses the web analysis service "Tracify" from Tracify GmbH, Agnes-Pockels-Bogen 1, 80992 Munich. With the help of Tracify, certain usage data from site visitors (date and time of access, browser's user agent) is collected in an anonymized form, evaluated, and automatically compiled into reports. These allow us on the one hand, a continuous optimization of our online offer and, on the other hand, to detect and correct technical problems such as error messages on page views or search engine problems. Tracify operates using a simple script code without the use of cookies, meaning Tracify never sets cookies on your device.
The information processed through Tracify does not have any personal reference at any time and therefore does not allow any conclusions about your person.
All the processes described above, especially reading information from the device used, are only carried out if you have given us your express consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time for the future by disabling this service in the "Cookie-Consent-Tool" provided on the website.
10.6 Google Optimize
This website uses "Google Optimize", a service from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Based on "Google Analytics", the service allows a statistical evaluation of the use of new functions and content on the website by playing test variants to specific user groups. In this way, we can understand which variants are preferred by users, in the interest of improving the appeal of our presentation.
Google Optimize uses cookies, small text files stored on your device, to enable analysis of your use of a website. The information collected by cookies about your use of the website is usually transmitted to and stored on a Google server. This may also result in the transmission of information to the servers of Google LLC based in the USA, where the information is further processed.
All the processes described above, especially setting cookies for storage and reading information on the device you use to access the website, are only carried out if you have given us your express consent according to Art. 6 para. 1 lit. a GDPR. Without your consent, Google Optimize is not used during your visit to the website. You can revoke your given consent at any time for the future. To exercise your revocation, please deactivate this service using the "Cookie-Consent-Tool" provided on the website.
We have concluded a contract processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which based on a decision of appropriateness by the European Commission, ensures compliance with European data protection levels.
10.7 Google Tag Manager
This website uses the "Google Tag Manager", a service from the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (referred to as "Google").
The Google Tag Manager offers a technical foundation for bundling various web applications, including tracking and analysis services, and calibrating, controlling, and linking them through a unified user interface. The Google Tag Manager itself does not store or read any information on user devices. Nor does the service perform independent data analyses. However, when a page is accessed, your IP address is transmitted to Google and may be stored there. Transmission to servers of Google LLC in the USA is also possible.
This processing is only carried out if you have given us your express consent according to Art. 6 para. 1 lit. a GDPR. Without granting this consent, Google Tag Manager is not used during your visit to the website. You can revoke your given consent at any time for the future. To do this, please deactivate the Google Tag Manager using the "Cookie-Consent-Tool" provided on the website.
We have concluded a contract processing agreement with the provider that ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which based on a decision of appropriateness by the European Commission, ensures compliance with European data protection levels.
11) Retargeting/ Remarketing and Conversion Tracking
11.1 Facebook Pixel for Creating Custom Audiences
Within our online offering, we use the service "Facebook Pixel" from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook")
When a user clicks on an advertisement we have placed on Facebook, the URL of our linked page is extended by a parameter using "Facebook Pixel". This URL parameter is then entered into the user's browser through a cookie set by our linked page itself.
This enables Facebook to determine visitors to our online offer as a target audience for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the service to show the Facebook Ads we have placed only to those Facebook users who have also shown interest in our online offer or who have certain characteristics (e.g., interests in certain topics or products determined by the websites visited) that we transmit to Facebook (so-called "Custom Audiences").
On the other hand, with "Facebook Pixel", it can be traced whether users were redirected to our website after clicking on a Facebook advertisement and which actions they take there (so-called "Conversion Tracking").
The data collected is anonymous for us, so it does not provide any information about the identity of the users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible, and Facebook can use the data for its own advertising purposes.
All processing described above, especially setting cookies to read out information on the used end device, will only be carried out if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a contract processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
The information generated by Facebook is usually transferred to a server of Facebook and stored there; in this context, it can also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with European data protection levels.
11.2 Google Ads Remarketing
This website uses the retargeting technology of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Further data processing only takes place if you have agreed to Google linking your web and app browser history with their Google account and using information from their Google account to personalize ads they view on the web. If you are logged into Google during your visit to our website in this case, Google uses your data in combination with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, your personal data is temporarily linked by Google with Google Analytics data to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC. in the USA.
All processing described above, especially setting cookies to read out information on the used end device, will only be carried out if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with European data protection levels.
11.3 Microsoft Advertising
This website uses the retargeting technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
This allows visitors to our websites to be specifically targeted with personalized, interest-related advertising that has already shown interest in our shop and our products. The advertisements are displayed based on a cookie-based analysis of past and current user behavior, but no personal data is stored. In the cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You will thus be shown advertisements that are highly likely to match your product and information interests.
All processing described above, especially setting cookies to read out information on the used end device, will only be carried out if you have given us your explicit consent according to Art. 6 para. 1 lit. a GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with European data protection levels.
11.4 Pinterest Retargeting Pixel
This website uses retargeting technology from the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
This technology allows us to specifically address visitors of our website with personalized, interest-based advertising who have previously shown interest in our shop and our products. The display of the advertising material is based on a cookie-based analysis of past and current user behavior, but no personal data is stored. In cases of retargeting technology, a cookie is stored on your computer or mobile device to capture pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You will then see advertising that is very likely to match your product and information interests.
All the processes described above, especially the setting of cookies for reading information on the used device, are only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. Without this consent, the use of retargeting technology will not take place during your site visit.
You can revoke your given consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service in the "Cookie Consent Tool" provided on the website.
11.5 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use the services of Google Ads to draw attention to our attractive offers using advertising tools (so-called Google Adwords) on external websites. Based on the data from advertising campaigns, we can determine how successful individual advertising measures are. We aim to show you ads that are of interest to you, make our website more interesting for you, and achieve a fair calculation of advertising costs.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Thus, cookies cannot be tracked across websites of Google Ads customers. The information collected using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn about the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that allows users to be personally identified. As part of using Google Ads, personal data may also be transferred to servers of Google LLC. in the USA.
Details on the processing initiated by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All the processes described above, especially the setting of cookies for reading information on the used device, are only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plugin from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=dePlease note that certain functions of this website may not be used or may only be used to a limited extent if you have deactivated the use of cookies.
You can view Google's privacy policy here: https://www.google.de/policies/privacy/
For data transmissions to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection based on a decision of adequacy by the European Commission.
11.6 Google Ads Conversion-Tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use the services of Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). Based on the data from advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is of interest to you, make our website more interesting for you, and achieve a fair calculation of advertising costs.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Every Google Ads customer receives a different cookie. Therefore, cookies cannot be tracked across websites by Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Customers are informed about the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can personally identify users.
As part of using Google Ads, there may also be a transfer of personal data to the servers of Google LLC. in the USA.
Details about the processing initiated by Google Ads Conversion Tracking and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites
All the processes described above, especially the setting of cookies for reading information on the device used, are only carried out if you have given us explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
To more effectively address users whose data we have received in the context of business or business-like relationships, we use a customer matching function within Google Ads. To this end, we electronically transmit one or more files with aggregated customer data (mainly email addresses and phone numbers) to Google. Google does not have access to clear data, but encrypts the information in the customer files automatically using a special algorithm during the transfer process. The encrypted information can then only be used by Google to match it to existing Google accounts that the affected individuals have set up. This enables personalized advertising to be played out across all Google services linked to the respective Google account.
The transfer of customer data to Google only takes place if you have given us explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer matching function can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182 Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European level of data protection based on a decision of adequacy by the European Commission.
11.7 Google Ads Conversion-Tracking without Cookies
This website uses the online advertising program "Google Ads" and as part of Google Ads, the Conversion Tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use the services of Google Ads to draw attention to our attractive offers on external websites with the help of advertising tools (so-called Google Adwords). We can determine the success of individual advertising measures in relation to the data of the advertising campaigns. Our goal is to show you advertisements that are of interest to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.
This website uses Google Ads Conversion Tracking exclusively without the use of cookies, meaning that the service never places cookies on your device.
Instead, your browser's local storage is used to store an individual ID assigned by Google, which allows for an analysis of your use of the website. Through this ID, certain user information is processed.
The ID is set when a user clicks on an ad displayed by Google. When the user visits certain pages on this website, Google and we can recognize that the user clicked on the ad and was redirected to that page. Every Google Ads customer receives a different cookie. Thus, cookies cannot be tracked across websites by Google Ads customers. The information collected in this way is used to compile conversion statistics for Google Ads customers who have chosen to use Conversion Tracking. Customers are informed about the total number of users who clicked on their advertisement and were redirected to a page with a Conversion Tracking tag.
However, they do not receive any information that can be used to personally identify users. When using Google Ads, personal data may also be transmitted to the servers of Google LLC in the USA. You can find details about the processes initiated by Google Ads Conversion Tracking and how Google handles website data here: https://policies.google.com/technologies/partner-sites
If the collected information is personal in nature, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the statistical evaluation of the success of our advertising campaigns. Google's privacy policy can be found here: https://www.google.de/policies/privacy/
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
11.8 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform by the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to display ads that are relevant to users, improve campaign performance reports, or prevent a user from seeing the same ads multiple times. Through a cookie ID, Google tracks which ads are displayed in which browser and can thus prevent them from being displayed multiple times. Additionally, with the help of cookie IDs, GMP can capture so-called conversions related to ad requests. This happens, for example, when a user sees a GMP ad and later, using the same browser, visits the advertiser's website and makes a purchase there. According to Google, GMP cookies do not contain any personal information. Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server.
We have no influence over the extent and further use of data collected by Google through the use of this tool and therefore inform you according to our knowledge as follows: By integrating GMP, Google receives the information that you have accessed the corresponding part of our online presence or clicked on one of our advertisements. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, the provider may obtain and store your IP address. The use of GMP may also result in the transfer of personal data to the servers of Google LLC in the USA.
All the above-described processing, especially the setting of cookies for reading information on the used device, is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
The privacy policy of GMP by Google can be found here: https://www.google.de/policies/privacy/
12) Page Functionalities
12.1 Youtube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
When you access a page of our online presence containing such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. In the process, certain information, including your IP address, is transmitted to the provider.
If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behavior, generate playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider during your site visit, your data will be directly associated with your account when you click on a video. If you do not want the association with your account, you must log out before activating the playback button.
All of the aforementioned processes, especially the setting of cookies for reading information on the used device, only take place if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke the granted consent at any time with effect for the future by deactivating this service using the "Cookie-Consent-Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
12.2 Google Maps
This website uses an online mapping service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Maps is a web service for displaying interactive (land) maps to visually represent geographical information. Using this service, our location is shown to you, and it makes any approach easier.
Even when accessing those sub-pages into which the map from Google Maps is integrated, information about your use of our website (such as your IP address) is transferred to Google's servers and stored there. This can also result in data being transmitted to the servers of Google LLC. in the USA. This happens regardless of whether Google provides a user account that you are logged into or whether a user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not want the association with your Google profile, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them.
The collection, storage, and evaluation take place according to Art. 6 Para. 1 lit. f GDPR based on Google's legitimate interest in displaying personalized advertising, market research, and/or demand-oriented design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google as part of using Google Maps, there is also the option to completely deactivate the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus the map display on this website cannot then be used.
Where legally required, we have obtained your consent for the processing of your data described above according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned option to object.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
12.3 Google Maps API
To enable real-time verification of certain inputs in the address form of the ordering process of our webshop for input errors, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC., USA
The provider validates the entered address, verifies the spelling, and, if necessary, supplements missing data. For ambiguous addresses, correct alternative suggestions are displayed. For this purpose, the address data you entered is transmitted to the provider, stored there, and evaluated.
This processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the proper recording of the correct address data of the customer to diligently fulfill our contractual delivery obligations and to prevent contract execution problems.
The provider processes the affected data separately and does not merge it with other data sets, and deletes them as soon as their status or correctness has been confirmed, but no later than 30 days.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
12.4 FontAwesome
This site uses so-called Web Fonts from the following provider for the uniform representation of fonts: Fonticons, Inc., 710 Blackhorn Dr, Carl Junction, 64834, MO, USA
When calling up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.
The processing of personal data in the course of establishing a connection with the font provider is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
12.5 Google Web Fonts
This site uses so-called Web Fonts from the following provider for the uniform representation of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When calling up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In doing so, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transmitted to: Google LLC, USA
The processing of personal data in the course of establishing a connection with the font provider is only carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
12.6 Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. For the visual design of the Captcha window, the provider uses "Google Fonts", which are font styles loaded from Google from the internet. No further processing of information other than the above-mentioned already transferred to Google via the functionality of ReCaptcha takes place.
The service checks whether an entry is made by a real person or maliciously by automated processes and blocks spam, DDoS attacks, and similar automated malicious attacks. To ensure that an action is taken by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the device used, detection data of the browser and operating system type used, as well as the date and duration of the visit and sends this data for evaluation to the provider's server.
The legal basis is our legitimate interest in determining individual accountability on the internet and preventing abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.
We have entered into a data processing agreement with the provider to protect the data of our site visitors and prohibit unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
12.7 Google Customer Reviews (formerly Google Certified Dealer Program)
We cooperate with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in a Google email survey.
If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will send your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. The review you submit will then be combined with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Additionally, your review will be used for Google Seller Ratings. When using Google Customer Reviews, personal data may also be transferred to the servers of Google LLC. in the USA.
You can revoke your consent at any time by sending a message to the person responsible for data processing or to Google.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
12.8 Zapier
This website uses the services of the following provider for the integration and synchronization of databases and web applications: Zapier Inc., 548 Market St #62411, San Francisco, California 94104, USA
With this, our processing operations are automated and different workflows are established to efficiently manage and execute internal processes in our processing system. If personal data is also processed, it is done in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in optimizing our internal organization.
We have entered into a data processing agreement with the provider to protect the data of our site visitors and prohibit unauthorized disclosure to third parties.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with European data protection standards.
12.9 Google Meet
For the execution of online meetings, video conferences, and/or webinars, we use this provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
In doing so, data can also be transmitted to the servers of Google LLC. in the USA.
The provider processes various data, the scope of which depends on the data you provide before or during participation in an online meeting, video conference, or webinar. Your data as a communication participant is processed and stored on the provider's servers. This can especially be your login data (name, email address, phone number (optional), and password) and session data (topic, participant IP address, device information, description (optional)).
In addition, image and sound contributions from participants and voice inputs in chats can be processed. For the processing of personal data required to fulfill a contract with you (this also applies to processing operations required for pre-contractual measures), Art. 6 Para. 1 lit. b GDPR serves as the legal basis. If you have given us consent to process your data, processing is based on Art. 6 Para. 1 lit. a GDPR. You can revoke consent at any time with effect for the future.
Otherwise, the legal basis for data processing during online meetings, video conferences, or webinars is our legitimate interest according to Art. 6 Para. 1 lit. f GDPR in the effective execution of the online meeting, webinar, or video conference.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
12.10 Google Forms
For conducting surveys or online forms, we use the services of the following provider: Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland
In addition to transferring data to the aforementioned provider location, data can also be transferred to: Google LLC, USA
The provider allows us to design and evaluate surveys and online forms. In addition to the specific personal data you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL, and your IP address are also collected, transmitted to the provider, and stored on the provider's servers.
The data you enter into the forms is stored password-protected to ensure that third-party access is excluded and that only we can evaluate the data for the purpose stated in the form.
When processing personal data necessary to fulfill a contract with you (this also applies to processing operations required for pre-contractual measures), Art. 6 Para. 1 lit. b GDPR serves as the legal basis. If you have given us consent to process your data, processing is based on Art. 6 Para. 1 lit. a GDPR. Consent can be revoked at any time with effect for the future.
We have concluded a data processing agreement with the provider, which ensures the protection of our visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with European data protection standards based on a decision of adequacy by the European Commission.
12.11 Typeform
For the execution of surveys or online forms, we use the services of the following provider: TYPEFORM SL Carrer Bac de Roda, 163, local, 08018 Barcelona, Spain
The provider allows us to design and evaluate surveys and online forms. In addition to the respective personal data that you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL, and your IP address are also collected, transmitted to the provider, and stored on the provider's servers.
The data you enter into the forms is stored password-protected to ensure that third-party access is excluded and only we can evaluate the data for the purpose specified in the form.
When processing personal data required for the performance of a contract with you (this also applies to processing operations that are necessary for the implementation of pre-contractual measures), Art. 6 Para. 1 lit. b GDPR serves as the legal basis. If you have given us consent to process your data, the processing is based on Art. 6 Para. 1 lit. a GDPR. A given consent can be revoked at any time with effect for the future.
We have concluded a data processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
12.12 Online Applications via a Form
On our website, we advertise current vacancies in a separate section, to which interested parties can apply via a corresponding form.
Applicants must provide all personal data necessary for a well-founded assessment, including general information such as name, address, and contact options, as well as performance-related evidence and, if necessary, health-related information. Details of the application can be found in the job advertisement.
When sending the form, the applicant's data is transmitted to us encrypted according to the state of the art, stored by us, and evaluated exclusively for the purpose of processing the application. The processing is based on Art. 6 Para. 1 lit. b GDPR (or § 26 Para. 1 BDSG), in the sense of which the application process is considered as a prelude to an employment contract.
If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (e.g., health data such as information on severe disability) are requested from applicants, the processing is carried out in accordance with Art. 9 Para. 2 lit. b GDPR, so that we can exercise the rights arising from labor law and the law of social security and social protection and fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of special categories of data can also be based on Art. 9 Para. 1 lit. h GDPR if it is carried out for purposes of preventive health care or occupational medicine, for the assessment of the working capacity of the applicant, for medical diagnostics, care or treatment in the health or social sector, or for the administration of systems and services in the health or social sector.
If the applicant is not selected or if an applicant withdraws his application prematurely, his data transmitted via the form and all electronic correspondence, including the application email, will be deleted after appropriate notification at the latest after 6 months. This period is based on our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to meet our obligations to provide evidence from the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be processed based on Art. 6 Para. 1 lit. b GDPR (in processing in Germany in conjunction with § 26 Para. 1 BDSG) for the purpose of executing the employment relationship.
12.13 Applications for Job Advertisements by Email
On our website, we advertise current vacancies in a separate section, to which interested parties can apply via email to the provided contact address.
Applicants must provide all personal data necessary for a well-founded assessment, including general information such as name, address, and contact options, as well as performance-related evidence and, if necessary, health-related information. Details of the application can be found in the job advertisement.
Upon receipt of the application by email, the data is stored exclusively for the purpose of processing the application and is evaluated. For inquiries, we either use the email address or the telephone number of the applicant. The processing is based on Art. 6 Para. 1 lit. b GDPR (or § 26 Para. 1 BDSG), in the sense of which the application process is considered as a prelude to an employment contract.
If special categories of personal data within the meaning of Art. 9 Para. 1 GDPR (e.g., health data such as information on severe disability) are requested from applicants, the processing is carried out in accordance with Art. 9 Para. 2 lit. b GDPR, so that we can exercise the rights arising from labor law and the law of social security and social protection and fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of special categories of data can also be based on Art. 9 Para. 1 lit. h GDPR if it is carried out for purposes of preventive health care or occupational medicine, for the assessment of the working capacity of the applicant, for medical diagnostics, care or treatment in the health or social sector, or for the administration of systems and services in the health or social sector.
If the applicant is not selected or if an applicant withdraws his application prematurely, his transmitted data and all electronic correspondence, including the application email, will be deleted after appropriate notification at the latest after 6 months. This period is based on our legitimate interest in being able to answer any follow-up questions about the application and, if necessary, to meet our obligations to provide evidence from the regulations on equal treatment of applicants.
In the event of a successful application, the data provided will be processed based on Art. 6 Para. 1 lit. b GDPR (in processing in Germany in conjunction with § 26 Para. 1 BDSG) for the purpose of executing the employment relationship.
13) Tools and Miscellaneous
13.1 DATEV
For handling our accounting, we use the service of the cloud-based accounting software from the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany
The provider processes incoming and outgoing invoices and, if applicable, also the bank transactions of our company to automatically record invoices, match them with transactions, and thus create financial accounting through a partially automated process.
If personal data is also processed in this context, the processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in an efficient organization and documentation of our business processes.
13.2 Cookie Consent Tool
This website uses a so-called "cookie consent tool" to obtain effective user consent for cookies that require consent and cookie-based applications. The "cookie consent tool" is displayed to users when they access the page in the form of an interactive user interface where they can give consent for certain cookies and/or cookie-based applications by ticking a box. By using this tool, all cookies/services that require consent are only loaded if the respective user gives the necessary consent by ticking the box. This ensures that such cookies are only set on the user's device if consent has been given.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in compliant, user-specific, and user-friendly consent management for cookies, thus ensuring a compliant design of our online presence.
Another legal basis for processing is Art. 6 Para. 1 lit. c GDPR. As the responsible party, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user's consent.
If necessary, we have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
Further information about the operator and the settings options of the cookie consent tool can be found directly in the relevant user interface on our website.
14) Rights of the Data Subject
14.1 The applicable data protection law grants you the following rights regarding the processing of your personal data by the controller (rights to information and intervention):
For handling our accounting, we use the service of the cloud-based accounting software from the following provider: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany
- Right to access in accordance with Art. 15 GDPR;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to erasure in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to be informed in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to revoke granted consents according to Art. 7 Para. 3 GDPR;
- Right to complain in accordance with Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR THE PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH ADVERTISING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
15) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and – if relevant – additionally by the respective legal retention period (e.g., commercial and tax retention periods).
If personal data are processed on the basis of an express consent according to Art. 6 Para. 1 lit. a GDPR, they are stored until you revoke your consent.
If there are legal retention periods for data that are processed within the framework of contractual or contract-like obligations based on Art. 6 Para. 1 lit. b GDPR, these data are routinely deleted after the retention periods expire, unless they are still needed for contract fulfillment or contract initiation and/or we have a legitimate interest in further storage.
When processing personal data on the basis of Art. 6 Para. 1 lit. f GDPR, these data are stored until you exercise your right to object in accordance with Art. 21 Para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims.
If personal data are processed for the purpose of direct advertising based on Art. 6 Para. 1 lit. f GDPR, these data are stored until you exercise your right to object in accordance with Art. 21 Para. 2 GDPR.
Unless otherwise stated in the information provided in this declaration regarding specific processing situations, stored personal data will be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.