PRIVACY POLICY

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary to conclude a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other indication is given for the following processing operations.

“Personal data” means all information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any information about yourself.

Every time you access our website, usage data is transmitted to us or our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transmitted, and the requesting provider. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our offer.

Contact

Data Controller

Please contact us if you wish. The contact details of the data controller can be found in our legal notice.

Customer initiating contact via email

If you initiate business contact with us via email, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing is for the purpose of processing and responding to your contact request.

If the contact is for the purpose of carrying out pre-contractual measures (e.g., advice on purchase interest, creation of an offer) or concerns a contract already concluded between you and us, this data processing is based on Art. 6(1)(b) GDPR.

If the contact is for other reasons, this data processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in processing and responding to your request. In this case, you have the right to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR for reasons arising from your particular situation.

We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have agreed to further processing and use.

Collection and processing when using the contact form

When using the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing is for the purpose of contacting you. By submitting your message, you consent to the processing of the transmitted data. Processing is based on Art. 6(1)(a) GDPR with your consent.

You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. We only use your email address to process your request. Your data will then be deleted unless you have agreed to further processing and use.

Customer account orders

Customer account

When opening a customer account, we collect your personal data to the extent stated therein. The data processing is for the purpose of improving your shopping experience and simplifying order processing. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. Your customer account will then be deleted.

Collection, processing and disclosure of personal data for orders

When placing an order, we collect and process your personal data only insofar as this is necessary to fulfill and process your order and to process your requests. The provision of the data is required to conclude the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may therefore be disclosed to the shipping companies and dropshipping providers you select, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of data transmission is limited to the minimum necessary.

Reviews Advertising

Data collection when writing a comment

When commenting on an item or a post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing is for the purpose of enabling commenting and displaying comments. By submitting the comment, you consent to the processing of the transmitted data. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. Your personal data will then be deleted.

When your comment is published, the name you provided and the email address you shared will be published.

In addition, when submitting the comment, your IP address is stored for the purpose of preventing misuse of the comment function and ensuring the security of our information technology systems. By submitting the comment, you consent to the processing of the transmitted data. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. Your IP address will then be deleted.

Use of the email address for sending newsletters

Regardless of contract processing, we use your email address exclusively for our own advertising purposes for sending newsletters, provided you have expressly agreed to this. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Your data is therefore disclosed to an email marketing service provider as part of data processing on behalf of a third party. No disclosure to other third parties takes place.

Use of the email address for sending direct advertising

We use your email address, which we received in connection with the sale of goods or services, for the electronic transmission of advertising for our own goods or services that are similar to those you have already purchased from us, unless you have objected to this use. The provision of the email address is required to conclude the contract. Failure to provide it will result in no contract being concluded. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your email address at any time by notifying us. The contact details for exercising the objection can be found in our legal notice. You can also use the link provided for this purpose in the advertising email. No other costs than the transmission costs according to the basic tariffs will be incurred for this.

Shipping service provider

Disclosure of the email address to shipping companies for information about the shipping status

We disclose your email address to the transport company as part of contract processing, provided you have expressly agreed to this during the ordering process. The disclosure is for the purpose of informing you about the shipping status via email. Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us or the transport company, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation.

Payment service provider credit check

Use of PayPal

All PayPal transactions are subject to the PayPal Privacy Notice. You can find it at https://www.paypal.com/de/webapps/mpp/ua/privacy-full (https://www.paypal.com/de/webapps/mpp/ua/privacy-full)

Use of PayPal Express

We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing is for the purpose of being able to offer you payment via the PayPal Express payment service. To integrate this payment service, PayPal must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.

The use of cookies or comparable technologies is based on § 15(3) sentence 1 TMG. The processing of your personal data is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object at any time to this processing of personal data concerning you for reasons arising from your particular situation.

By selecting and using PayPal Express, the data required for payment processing is transmitted to PayPal so that the contract with you can be fulfilled using the selected payment method. This processing is based on Art. 6(1)(b) GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated privacy notice at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS (http://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS).

Use of Amazon Payments

We use the Amazon Payments payment service provided by Amazon Payments Europe s.c.a. (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”) on our website.

The data processing is for the purpose of being able to offer you payment via the Amazon Payments payment service.

To integrate this payment service, Amazon Payments must collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when the website is accessed. Cookies may also be used for this purpose. Cookies enable the recognition of your browser.

By selecting and using “Amazon Payments,” the data required for payment processing is transmitted to Amazon Payments so that the contract with you can be fulfilled using the selected payment method. This processing is based on Art. 6(1)(b) GDPR.

Further information on data processing when using the Amazon Payments payment service can be found in the associated privacy notice at: https://pay.amazon.com/de/help/201212490 (https://pay.amazon.com/de/help/201212490)

Data collection and processing when applying for installment purchase via easyCredit

When paying by installment purchase via easyCredit, the supplementary privacy notices (https://www.easycredit-ratenkauf.de/download/rk_ergaenzende_datenschutzhinweise_zum_ratenkauf_by-easycredit_2.0.pdf) for easyCredit installment purchases apply.

Data collection and processing, credit check for payment by invoice via heidelpay

When paying by invoice via heidelpay, personal data is transmitted to the debt collection service provider heidelpay Heidelberger Payment GmbH (Vangerowstraße 18, 69115 Heidelberg; “heidelpay”) as well as to its partners UNIVERSUM Inkasso GmbH and UNIVERSUM Payment Solution GmbH, and further processed there. The data processing is for the purpose of offering the payment by invoice method as well as the necessary risk and credit assessment. Processing is based on Art. 6(1)(f) GDPR due to our overriding legitimate interest in offering a range of payment methods and protecting against payment default. You have the right to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying us. For the purpose of its own credit check, heidelpay transmits data to credit reporting agencies (Auskunfteien) and receives information from them, as well as, if applicable, credit information based on mathematical-statistical procedures, in the calculation of which address data is included, among other things.

Specifically, this may include the following credit reporting agencies – exemplary, but not exhaustive:

– Schufa Holding AG,

– CRIF Bürgel GmbH,

– Arvato Infoscore GmbH,

– Universum Business GmbH,

– Bisnode D & Austria GmbH. The provision of the data is required to conclude the contract with the payment method you request. Failure to provide it will result in the contract not being concluded with the payment method you select.

Data collection and processing when applying for payment via Klarna

When paying via Klarna, personal data is transmitted to the payment service provider Klarna Bank AB (publ), registered in the Swedish commercial register under company number 556737-0431 and based in Sveavägen 46, 111 34 Stockholm, and further processed there.

For the “Buy on Account” payment method, Klarna checks whether the customer’s request to buy on account can be accepted in view of any payment and claim default risks (acceptance check according to risk guidelines), or whether another payment method should be used in coordination with the online shop operator. To this end, Klarna conducts its own acceptance check after the desired payment method “Buy on Account” is selected. This requires an identity, credit, and creditworthiness check with the credit reporting agencies listed below.

For the “Pay in Installments” payment method, Klarna checks whether the customer’s request to pay in installments can be accepted in view of any payment and claim default risks (acceptance check according to risk guidelines), or whether another payment method should be used in coordination with the online shop operator. To this end, Klarna conducts its own acceptance check after the desired payment method “Pay in Installments” is selected. This requires a credit and identity check with the credit reporting agencies listed below.

The data processing is for the purpose of offering the selected payment method and conducting the necessary credit check.

Processing is based on Art. 6(1)(a) GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on consent up to the time of revocation.

As part of the identity check, you consent that your personal data will be transmitted by Klarna for the purpose of identity verification to SCHUFA Holding AG (Kormoranweg 5, 65201 Wiesbaden; “SCHUFA”) and that SCHUFA will then transmit back to Klarna the degree of match between the personal details stored with it and the personal details you provided in percentage values, as well as, if applicable, a note on a past ID-based verification carried out by SCHUFA or another contractual partner. Klarna can thus determine from the transmitted match rates whether a person is stored in the SCHUFA database under the address you provided. No further data exchange or transmission of differing addresses, nor storage of your data in the SCHUFA database, takes place. For verification purposes, only the fact that the address was checked with SCHUFA is stored.

To carry out the credit check performed as part of the acceptance check, the following personal data is required from you: title, first and last names; place of residence (street, house number, postal code, city); date of birth; telephone number. The use, processing, and disclosure of the personal data mentioned above by the online shop operator and Klarna, as well as the disclosure of this data by Klarna to the credit reporting agencies mentioned for the purpose of the credit check, require your consent.

You are therefore asked during the ordering process to consent to the storage, processing, and use of your personal data by the online shop operator or Klarna for the purpose of the credit check, and to the disclosure of this data to credit reporting agencies, including the disclosure of data to third parties.

Klarna reserves the right to transmit personal data to service providers or financial partners commissioned by Klarna for the purposes mentioned above, or to grant them access to it, insofar as this is necessary to fulfill its tasks.

Of course, we respect the customer’s decision not to grant consent. In this case, however, neither the online shop operator nor Klarna can accommodate the customer’s request to buy on account.

For credit checks, Klarna or companies commissioned by Klarna may, within the limits of the law and having regard to your respective legitimate interests in objecting to the transmission or use, transmit your address data to credit reporting agencies when you register for payment by invoice. We obtain information about the customer's previous purchasing and payment behavior and credit information based on mathematical-statistical methods using address data (scoring – to calculate payment probabilities) from the following credit reporting agencies that store data for the purpose of providing credit reports:

Bürgel, Bürgel Wirtschaftsinformationen GmbH & Co. KG, Gasstraße 18, D-22761 Hamburg, Tel.: +49 (0) 40 – 89 80 3 – 0, Fax: -777;

CEG, Creditreform Consumer GmbH, Hellersbergstr. 11, D-41460 Neuss, Tel.:+49(0)2131-109-501, Fax: -557;

Deltavista, Deltavista GmbH, Freisinger Landstr. 74, D-80939 München, Tel.: +49 (0)89 – 7244880, Fax: – 22;

infoscore Consumer Data GmbH, Abteilung Datenschutz, Rheinstraße 99, D-76532 Baden-Baden, Fax: +49 (7221) 5040-3201;

“Real” Inform GmbH, Normannenweg 32, 20537 Hamburg, Fax: +49 40 23 88 14-59.

You can request the data stored about you by the respective credit reporting agencies from the agencies named above. Furthermore, the named agencies may be provided with data about the conclusion of a contract, the application, the start and/or the termination of a contractual relationship. The online shop operator / Klarna may also provide the agencies with data about any non-contractual behavior. The agencies store this data so that they can provide their contractual partners with information to assess the creditworthiness of customers or the customer's address for debt collection purposes, provided they can credibly demonstrate a legitimate interest. Klarna ensures that the named agencies process and/or use your personal data exclusively within the scope of the purpose “credit and creditworthiness check”.

If your request for “payment in installments” has been accepted, you have the option to apply for the “payment in installments” payment method through Klarna's partner bank. To do this, after successfully completing your order in the online shop, you will be redirected to the “payment in installments” offer available in our customer portal. To use the service, you must follow the instructions in the “payment in installments” menu item. The “payment in installments” service is provided by our partner bank, Commerzfinanz GmbH.

When submitting your request for the “payment in installments” payment method, you must provide Commerzfinanz GmbH with your first and last name, street, house number, postal code, city, date of birth, and telephone number for the purpose of concluding the credit agreement and processing the payment for your online purchases in Klarna partner shops. Commerzfinanz GmbH requires this personal data to review and decide on your credit application for the “payment in installments” payment method.

The provision of the data is required to conclude the contract for your desired payment method. Failure to provide the data will result in the contract not being concluded using your chosen payment method.

Data collection and processing for payment methods by credit card, direct debit, and invoice via Stripe

We offer the option of processing the payment through the payment service provider Stripe, ℅ Legal Process, 510,Townsend St., San Francisco, CA 94103 (Stripe). This is in accordance with our legitimate interest in offering an efficient and secure payment method (Art. 6 (1) (f) GDPR). In this context, we pass the following data to Stripe, insofar as it is necessary for the performance of the contract (Art. 6 (1) (b) GDPR).

Cardholder name

Email address

Customer number

Order number

Bank details

Credit card data

Credit card validity period

Credit card security code (CVC)

Date and time of the transaction

Transaction amount

Provider name

Location

The processing of the data specified in this section is neither required by law nor by contract. Without the transmission of your personal data, we cannot process a payment via Stripe. [You have the option to choose another payment method.]

Stripe plays a dual role as a data controller and data processor in data processing activities. As a controller, Stripe uses the data you transmit to fulfill regulatory obligations. This is in accordance with Stripe's legitimate interest (pursuant to Art. 6 (1) (f) GDPR) and serves the performance of the contract (pursuant to Art. 6 (1) (b) GDPR). We have no influence over this process.

As a data processor, Stripe acts to enable the completion of transactions within the payment networks. Within the scope of the data processing agreement, Stripe acts exclusively on our instructions and has been contractually obliged pursuant to Art. 28 GDPR to comply with data protection provisions.

Stripe has implemented compliance measures for international data transfers. These apply to all worldwide activities in which Stripe processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs).

Further information on your rights to object and seek rectification against Stripe can be found at: https://stripe.com/privacy-center/legal

We store your data until the completion of payment processing. This also includes the period required to process refunds, manage claims, and prevent fraud. [Pursuant to [§ 147 AO / § 257 HGB], we are subject to a statutory retention period of [X] years for the following documents: [ ]]

Legal notices

Address

Stripe Payments Europe Limited 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland Attention: Stripe Legal

Email marketing

We use Mailchimp by The Rocket Science Group, LLC, 675 Ponce de Leon Ave NE Suite 5000, Atlanta, GA 30308 USA (Mailchimp) to send our newsletter. This allows us to communicate directly with subscribers. In addition, we analyze your usage behavior to optimize our offer.

For this purpose, we pass the following personal data to Mailchimp:

Email address

Mailchimp is the recipient of your personal data and acts as our data processor in connection with the delivery of our newsletter. The processing of the data specified in this section is neither required by law nor by contract. Without your consent and the transmission of your personal data, we cannot send you a newsletter.

In addition, Mailchimp collects the following personal data using cookies and other tracking methods: information about your end device (IP address, device information, operating system, browser ID, information about the application you use to read your emails, and further information about hardware and internet connection. Furthermore, usage data is collected, such as the date and time you opened the email / campaign and browser activities (e.g., which emails / websites were opened). Mailchimp requires this data to ensure the security and reliability of the systems, compliance with the terms of use, and prevention of misuse. This is in accordance with Mailchimp's legitimate interest (pursuant to Art. 6 (1) (f) GDPR) and serves the performance of the contract (pursuant to Art. 6 (1) (b) GDPR). Mailchimp also evaluates performance data, such as email delivery statistics and other communication data. This information is used to create usage and performance statistics for the services.

Mailchimp also collects information about you from other sources. Personal data is collected via social media and other third-party providers within an unspecified period and scope. We have no influence over this process.

Further information on your rights to object and seek rectification against Mailchimp can be found at: https://mailchimp.com/legal/privacy/#3._Privacy_for_Contacts

The legal basis for these processing activities is your consent pursuant to Art. 6 (1) (a) GDPR. You can revoke your consent to the processing of your personal data at any time. Every communication includes a corresponding link. Revocation can also be made using the provided contact options. A declaration of revocation does not affect the lawfulness of the processing carried out up to that point.

Your data will be processed as long as a corresponding consent exists. Apart from that, it will be deleted upon termination of the contract between us and Mailchimp, unless statutory requirements necessitate further storage.

Mailchimp has implemented compliance measures for international data transfers. These apply to all worldwide activities in which Stripe processes personal data of natural persons in the EU. These measures are based on the EU Standard Contractual Clauses (SCCs). Further information can be found at: https://mailchimp.com/legal/data-processing-addendum/

Our website uses cookies. Cookies are small text files that are stored in the user's internet browser or by the internet browser on the user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that enables unique identification of the browser when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually on acceptance, as well as prevent the storage of cookies and the transmission of the data contained therein. Already stored cookies can be deleted at any time. However, we point out that you may not be able to use all the functions of this website fully.

Under the links below, you can find out how you can manage cookies in the most important browsers (including disabling them):

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de (https://support.google.com/accounts/answer/61416?hl=de)

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies (https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies)

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen (https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen)

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac (https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac)

Technically Necessary Cookies

Unless otherwise stated in the privacy policy below, we only use these technically necessary cookies for the purpose of making our offer more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after changing pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these, it is required that the browser is recognized again after changing pages.

The use of cookies or comparable technologies is based on § 15 (3) sentence 1 TMG. The processing of your personal data is based on Art. 6 (1) (f) GDPR from our overriding legitimate interest in ensuring the optimal functionality of the website as well as a user-friendly and effective design of our offer.

You have the right to object to these processing activities concerning your personal data at any time for reasons arising from your particular situation.

Analysis Advertising Tracking Communication

Use of Google Analytics

We use the web analysis service Google Analytics by Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). As long as your usual residence is in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the Google-affiliated company responsible for the processing of your data and compliance with applicable data protection laws.

Data processing serves the purpose of analyzing this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities, and to provide further services related to website and internet usage to the website operator. During this process, the following information may be collected, among others: IP address, date and time of the page access, click path, information about the browser and device you use, visited pages, referrer URL (the website through which you accessed our website), location data, purchasing activities. The IP address transmitted by your browser within the scope of Google Analytics will not be combined with other data from Google.

Google Analytics uses technologies such as cookies, browser storage, and counting pixels that enable an analysis of your use of the website. The information generated thereby about your use of this website is generally transferred to a Google server in the USA and stored there. IP anonymization is activated on this website. This means that your IP address is shortened by Google within the member states of the European Union or in other states party to the Agreement on the European Economic Area before being transferred. Only in exceptional cases is the full IP address transferred to a Google server in the USA and shortened there.

The use of cookies or comparable technologies is based on § 15 (3) sentence 1 TMG. The processing of your personal data is based on Art. 6 (1) (f) GDPR from our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to these processing activities concerning your personal data at any time for reasons arising from your particular situation.

You can prevent the collection of data generated by Google Analytics and related to your use of the website (incl. your IP address) by Google, as well as the processing of this data by Google, by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de (https://tools.google.com/dlpage/gaoptout?hl=de)

To prevent cross-device data collection and storage by Google Analytics, you can set an opt-out cookie. Opt-out cookies prevent the future collection of your data when visiting this website. You must perform the opt-out on all systems and devices you use for it to be comprehensive. If you delete the opt-out cookie, requests will be sent to Google again. If you click here, the opt-out cookie will be set: Disable Google Analytics (javascript:gaOptout()).

Further information on terms of use and privacy can be found at https://www.google.com/analytics/terms/de.html (https://www.google.com/analytics/terms/de.html) or at https://www.google.de/intl/de/policies/ (https://www.google.de/intl/de/policies/) as well as at https://policies.google.com/technologies/cookies?hl=de (https://policies.google.com/technologies/cookies?hl=de).

Use of the Facebook Pixel

We use the remarketing function “Custom Audiences” by Facebook Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland “Facebook”) on our website.

Facebook Ireland and we are jointly responsible for the collection of your data when the service is embedded and the transmission of this data to Facebook. The basis for this is an agreement between us and Facebook Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum (https://www.facebook.com/legal/controller_addendum). Accordingly, we are particularly responsible for fulfilling the information obligations pursuant to Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, as well as for compliance with the obligations pursuant to Art. 33, 34 GDPR, insofar as a personal data breach affects our obligations under the joint processing agreement. Facebook Ireland is responsible for enabling data subject rights pursuant to Art. 15–20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for compliance with the obligations pursuant to Art. 33, 34 GDPR, insofar as a personal data breach affects the obligations of Facebook Ireland under the joint processing agreement.

The application serves the purpose of addressing website visitors in a targeted manner with interest-based advertising on the social network Facebook. To this end, the Facebook remarketing tag has been implemented on the website. Through this tag, a direct connection to the Facebook servers is established when visiting the website. This transmits to the Facebook server which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, personalized, interest-based Facebook ads will then be displayed to you.

Your data may be transmitted to the USA.

The use of cookies or similar technologies is based on Section 15(3) sentence 1 of the TMG. The processing of your personal data is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in addressing website visitors with targeted, interest-based advertising. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation. You can deactivate the “Custom Audiences” remarketing function here.

Further information on the collection and use of data by Facebook, your rights in this regard, and options to protect your privacy can be found in Facebook’s privacy notices at https://www.facebook.com/about/privacy/ (https://www.facebook.com/about/privacy/).

Use of Google Ads Conversion Tracking

We use the “Google Ads” online advertising program on our website and conversion tracking (visit action evaluation) within this framework. Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”). If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data. Google Ireland Limited is therefore the Google-affiliated company responsible for processing your data and complying with applicable data protection laws.

If you click on an ad served by Google, a cookie for conversion tracking will be placed on your computer. These cookies have a limited validity, contain no personal data, and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to this page. Each Google Ads customer receives a different cookie. Therefore, there is no possibility that cookies can be tracked across the websites of Ads customers.

The information collected with the help of the conversion cookie is used to create conversion statistics. This allows us to learn the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag. However, we do not receive any information that would allow users to be personally identified.

Your data may be transferred to the USA.

You can disable personalized advertising by you in the Google ad settings. You can find instructions on how to do this at https://support.google.com/ads/answer/2662922?hl=de (https://support.google.com/ads/answer/2662922?hl=de)

Alternatively, you can prevent the use of cookies by third parties by visiting the Network Advertising Initiative opt-out page at https://www.networkadvertising.org/choices/ (https://www.networkadvertising.org/choices/) and following the further opt-out information provided there. You will then not be included in the conversion tracking statistics.

Further information and Google’s privacy policy can be found at: https://www.google.de/policies/privacy/ (https://www.google.de/policies/privacy/)

Use of Google Inc.’s remarketing or “Similar Audiences” feature

We use the Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) remarketing or “Similar Audiences” feature on our website. If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data. Google Ireland Limited is therefore the Google-affiliated company responsible for processing your data and complying with applicable data protection laws.

The application is used to analyze visitor behavior and visitor interests. Google uses cookies to conduct the analysis of website usage, which forms the basis for creating interest-based advertisements. The cookies collect website visits as well as anonymized data on website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown ads that are highly likely to take into account previously viewed product and information areas.

Your data may be transferred to the USA.

You can permanently disable the use of cookies by Google by following the link below and downloading and installing the provided plug-in: https://support.google.com/ads/answer/7395996?hl=de (https://support.google.com/ads/answer/7395996?hl=de)

Further information on Google remarketing and the associated privacy policy can be found at: https://www.google.com/privacy/ads/ (https://www.google.com/privacy/ads/)

Use of the tawk.to live chat system

We use the tawk.to inc. (187 East Warm Springs Rd, SB298, Las Vegas, NV 89119, USA, “tawk.to”) live chat system on our website.

The data processing is used for communication between you and us as the provider. Anonymized data is processed for the operation of the system as well as for web analysis purposes. User profiles can be created from this data under a pseudonym, whereby cookies may be used. The cookies enable the recognition of the internet browser.

The collected data will not be used to personally identify the visitor to this website without the data subject’s separate consent.

Your data may be transferred to the USA.

The use of cookies or similar technologies is based on Section 15(3) sentence 1 of the TMG. The processing of your personal data is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in direct customer communication. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.

You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software; however, we point out that you may not be able to fully use all the functions of this website in this case.

Plug-ins and other items

Use of Google Tag Manager

We use the Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) Google Tag Manager on our website. If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data. Google Ireland Limited is therefore the Google-affiliated company responsible for processing your data and complying with applicable data protection laws.

This application manages JavaScript tags and HTML tags, which are used to implement tracking and analysis tools in particular. The data processing is used to tailor and optimize our website to meet requirements.

Google Tag Manager itself does not store cookies nor does it process personal data. However, it enables the triggering of further tags, which can collect and process personal data.

Further information on terms of use and privacy can be found here (https://www.google.com/intl/de/tagmanager/use-policy.html).

Use of All In One WP Security & Firewall

We use the “All In One WP Security & Firewall” security plug-in by Tips and Tricks HQ on our website.

The data processing is used to increase the security and protection of our website and to detect security vulnerabilities. Cookies may be used for this purpose, through which user data such as your IP address can be collected. The data is only stored on our servers. No data is shared with third parties.

The use of cookies or similar technologies is based on Section 15(3) sentence 1 of the TMG. The processing of your personal data is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in protecting our website from automated probing, misuse, and SPAM. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation.

Further information on data processing when using the plug-in can be found at https://de.wordpress.org/plugins/all-in-one-wp-security-and-firewa (https://de.wordpress.org/plugins/all-in-one-wp-security-and-firewall/)ll/ (https://de.wordpress.org/plugins/all-in-one-wp-security-and-firewall/) as well as at https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-plu (https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-plugin)gin (https://www.tipsandtricks-hq.com/wordpress-security-and-firewall-plugin).

Use of Google reCAPTCHA

We use the Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) reCAPTCHA service on our website.

If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data. Google Ireland Limited is therefore the Google-affiliated company responsible for processing your data and complying with applicable data protection laws. The query is used to distinguish input by a human or by automated, machine processing. Your input is therefore transmitted to Google and further used there. In addition, the IP address and any further data required by Google for the reCAPTCHA service are transferred to Google. This data is processed by Google within the European Union and may also be transferred to the USA.

The processing is based on Art. 6(1)(f) GDPR on the basis of our legitimate interest in protecting our website from automated probing, misuse, and SPAM. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation based on Art. 6(1)(f) GDPR.

Further information on Google reCAPTCHA and the associated privacy policy can be found at: https://www.google.com/recaptcha/intro/android.html (https://www.google.com/recaptcha/intro/android.html) as well as https://www.google.com/privacy (https://www.google.com/privacy).

Use of Google invisible reCAPTCHA

We use the Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”) invisible reCAPTCHA service on our website. If you are habitually resident in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the data controller responsible for your data. Google Ireland Limited is therefore the Google-affiliated company responsible for processing your data and complying with applicable data protection laws.

This is used to distinguish input by a human or by automated, machine processing. In the background, Google collects and analyzes usage data, which is used by Invisible reCaptcha to distinguish regular users from bots. Your input is therefore transmitted to Google and further used there. In addition, the IP address and any further data required by Google for the Invisible reCAPTCHA service are transferred to Google.

This data is processed by Google within the European Union and may also be processed in the USA.

The processing is based on Art. 6(1)(f) GDPR on the basis of our overriding legitimate interest in protecting our website from automated probing, misuse, and SPAM. You have the right to object to this processing of personal data affecting you at any time for reasons arising from your particular situation based on Art. 6(1)(f) GDPR.

Use of Consentmanager

We use the Jaohawi AB (Håltegelvägen 1b, 72348 Västerås, Sweden; “Consentmanager”) Consentmanager consent management tool on our website.

The tool allows you to grant consent to data processing via the website, in particular the setting of cookies, as well as to make use of your right of withdrawal for consent already granted.

The data processing is used to obtain and document necessary consents to data processing and thus comply with legal obligations.

Cookies may be used for this purpose. The following information may be collected and transmitted to Consentmanager, among other things: date and time of the page visit, information about the browser you are using and the device you are using, anonymized IP address, opt-in and opt-out data. No data is shared with other third parties.

The data processing is carried out to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR.

Further information on privacy at Consentmanager can be found at: https://www.consentmanager.net/privacy.php (https://www.consentmanager.net/privacy.php)

Use of Cookiebot

We use the Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark; “Cookiebot”) Cookiebot consent management tool on our website.

The tool allows you to grant consent to data processing via the website, in particular the setting of cookies, as well as to make use of your right of withdrawal for consent already granted. The data processing is used to obtain and document necessary consents to data processing and thus comply with legal obligations.

Cookies may be used for this purpose. The following information may be collected and transmitted to Cookiebot, among other things: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. No data is shared with other third parties.

The data processing is carried out to fulfill a legal obligation on the basis of Art. 6(1)(c) GDPR.

Further information on privacy at Cookiebot can be found at: https://www.cookiebot.com/de/privacy-policy/ (https://www.cookiebot.com/de/privacy-policy/)

Data subject rights and retention period

Retention period

After full contract settlement, the data will initially be stored for the duration of the warranty period, then taking into account statutory, in particular tax and commercial law retention periods, and then deleted after the expiry of the period, unless you have agreed to further processing and use.

Rights of the data subject

If the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: right of access, right to rectification, right to erasure, right to restriction of processing, right to data portability.

In addition, under Art. 21(1) GDPR, you have a right to object to processing based on Art. 6(1)(f) GDPR, as well as to processing for direct marketing purposes.

Right of complaint to the supervisory authority

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not lawful.

Right of objection

If the personal data processing listed here is based on our legitimate interest under Art. 6(1)(f) GDPR, you have the right to object to this processing with effect for the future at any time for reasons arising from your particular situation.

After an objection is made, the processing of the affected data will be terminated, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or if the processing is necessary for the establishment, exercise, or defense of legal claims.

If personal data processing is carried out for direct marketing purposes, you can object to this processing at any time by notifying us. After an objection is made, we will terminate the processing of the affected data for direct marketing purposes.

last update: 02.12.2022