Privacy Policy
1) Introduction and Contact Information for the Data Controller
1.1We are pleased that you are visiting our website and thank you for your interest. Below, we provide information about how we handle your personal data when you use our website. Personal data refers to any data that can be used to personally identify you.
1.2The data controller for this website, as defined by the General Data Protection Regulation (GDPR), is MainTea GmbH, Schultheiß-Bilger-Str. 9, 61118 Bad Vilbel, Germany, Tel.: 0152 02770215, Email: paul.hylla@teeimglas.de. The controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.
1.3The data controller has appointed a data protection officer, who can be contacted as follows: "Paul Hylla, Bieberer Straße 145a, 63071 Offenbach, 017626733663, paul.hylla@teeimglas.de"
2) Data Collection When You Visit Our Website
2.1When you use our website for informational purposes only—that is, if you do not register or otherwise provide us with information—we collect only the data that your browser transmits to the website server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website we visited
- Date and time of access
- Amount of data sent in bytes
- Source/link from which you arrived at this page
- Browser Used
- Operating System Used
- IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Article 6(1)(f) of the GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to review the server log files at a later date should there be concrete evidence of unlawful use.
2.2For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the “https://” prefix and the padlock icon in your browser’s address bar.
3) Hosting & Content Delivery Network
3.1Amazon Web Services
We use the system provided by the following provider to host our website and display its content: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
All data collected on our website is processed on the provider’s servers.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
3.2Cloudflare
We use the system provided by the following vendor to host our website and display its content: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA
All data collected on our website is processed on the provider’s servers.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
3.3Shopify
We use the system provided by the following provider to host our website and display its content: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (“Shopify”)
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
All data collected on our website is processed on the provider’s servers. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits its unauthorized disclosure to third parties.
When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision issued by the European Commission.
3.4AWS CloudFront
We use a content delivery network provided by the following company: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
This service enables us to deliver large media files—such as graphics, page content, or scripts—more quickly via a network of regionally distributed servers. This processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website, in accordance with Article 6(1)(f) of the GDPR. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
3.5Cloudflare
We use a content delivery network provided by the following company: Cloudflare Inc., 101 Townsend St., San Francisco, CA 94107, USA
This service enables us to deliver large media files—such as graphics, page content, or scripts—more quickly via a network of regionally distributed servers. This processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website, in accordance with Article 6(1)(f) of the GDPR. We have entered into a data processing agreement with the provider that ensures the protection of our website visitors’ data and prohibits unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
4) Cookies
To make your visit to our website more enjoyable and to enable the use of certain features, we use cookies—small text files that are stored on your device. Some of these cookies are automatically deleted when you close your browser (so-called “session cookies”), while others remain on your device for a longer period and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage duration in the overview of your web browser’s cookie settings.
To the extent that personal data is processed by individual cookies we use, such processing is carried out in accordance with Article 6(1)(b) of the GDPR either for the performance of a contract, pursuant to Article 6(1)(a) of the GDPR in the event that consent has been given, or pursuant to Article 6(1)(f) of the GDPR to safeguard our legitimate interests in ensuring the best possible functionality of the website and a user-friendly and effective experience for visitors.
You can configure your browser so that you are notified when cookies are set and can decide on a case-by-case basis whether to accept them, or you can block cookies in specific cases or generally.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Getting in Touch
5.1Reviews.io
We use the services of the following provider for review reminders: REVIEWS.io 2020 GmbH, Skalitzer Str. 104, 10997 Berlin, Germany
We will only share your email address and, if applicable, other customer data with the service provider—based solely on your explicit consent pursuant to Article 6(1)(a) of the GDPR—so that the service provider can contact you via email with a reminder to leave a review.
You may revoke your consent at any time, effective for the future, by notifying us or the provider.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
5.2Zendesk
To process customer inquiries, we use the email ticketing system provided by the following vendor: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland
If you submit contact requests via email through our website, they are stored and organized in the ticket system to enable chronological processing and improve the service experience. You can always check the current status of your request using the unique ticket number assigned to it.
For the purpose of organizing and processing inquiries, personal data is collected—to the extent it is provided, but in any case including last name, first name, and email address—and transmitted to the provider, where it is stored and accessed.
The legal basis for processing this data is our legitimate interest in efficiently organizing our customer service, responding to your inquiry as quickly as possible, and optimizing our service offerings in accordance with Article 6(1)(f) of the GDPR.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
5.3WhatsApp Business
You have the option to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “Business version” of WhatsApp.
If you contact us via WhatsApp in connection with a specific transaction (such as a completed order), we will store and use the mobile phone number you use with WhatsApp, as well as your first and last names—if provided—in accordance with Article 6(1)(b) of the GDPR to process and respond to your inquiry. Based on the same legal basis, we may ask you via WhatsApp to provide additional information (order number, customer number, address, or email address) so that we can associate your inquiry with a specific transaction.
If you use our WhatsApp contact for general inquiries (such as about our range of services, availability, or our website), we will store and use the mobile phone number you use on WhatsApp as well as—if provided — your first and last names in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in providing the requested information efficiently and in a timely manner.
Your data will only ever be used to respond to your inquiry via WhatsApp. It will not be shared with third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server operated by our parent company, Meta Platforms Inc., in the United States. To operate our WhatsApp Business account, we use a mobile device whose address book contains only the WhatsApp contact information of users who have actually contacted us via WhatsApp.
This ensures that every person whose WhatsApp contact information is stored in our address book has, upon first using the app on their device, consented to the transfer of their WhatsApp phone number from the address books of their chat contacts in accordance with Article 6(1)(a) of the GDPR by accepting the WhatsApp Terms of Service. The transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information on the purpose and scope of data collection, as well as the further processing and use of the data by WhatsApp, and your related rights and privacy settings, please refer to WhatsApp’s Privacy Policy:https://www.whatsapp.com/legal/?eea=1#privacy-policy
We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits its disclosure to third parties.
As part of the processing activities described above, data may be transferred to servers operated by Meta Platforms Inc. in the United States.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
5.4When you contact us (e.g., via the contact form or by email), personal data is processed—solely for the purpose of handling and responding to your inquiry and only to the extent necessary for that purpose.
The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Article 6(1)(f) of the GDPR. If your contact is aimed at entering into a contract, the additional legal basis for processing is Article 6(1)(b) of the GDPR. Your data will be deleted when it is clear from the circumstances that the matter in question has been conclusively resolved and provided that no statutory retention requirements preclude this.
6) Comment feature
When you use the comment feature on this website, in addition to your comment, information regarding the time the comment was posted and the username you selected will be stored and published on this website. Furthermore, your IP address is also logged and stored. This IP address is stored for security reasons and in the event that the data subject infringes the rights of third parties through a comment or posts illegal content. We need your email address to contact you in the event that a third party complains that your published content is illegal.
The legal basis for storing your data is Article 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are reported by third parties as unlawful.
7) Data Processing When Opening a Customer Account
In accordance with Article 6(1)(b) of the GDPR, personal data will continue to be collected and processed to the extent necessary when you provide it to us upon opening a customer account. You can find out which data is required to open an account by referring to the input fields on the corresponding form on our website.
You may delete your customer account at any time by sending a message to the address of the data controller listed above. Once your customer account has been deleted, your data will be deleted, provided that all contracts concluded in connection with it have been fully fulfilled, there are no statutory retention periods that prevent this, and we no longer have a legitimate interest in continuing to store the data.
8) Use of Customer Data for Direct Marketing
8.1Signing Up for Our Email Newsletter
If you subscribe to our email newsletter, we will send you regular updates about our offers. The only required information for receiving the newsletter is your email address. Providing additional information is voluntary and is used to address you personally. We use the so-called double opt-in procedure to send the newsletter, which ensures that you will only receive the newsletter once you have explicitly confirmed your consent to receive it by clicking on a verification link sent to the email address you provided.
By clicking the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. In doing so, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of registration, so that we can trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time by clicking the link provided in the newsletter or by sending a message to the data controller listed at the beginning of this notice. Once you have unsubscribed, your email address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to the continued use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.
8.2Sending the Email Newsletter to Existing Customers
If you provided us with your email address when purchasing goods or services, we reserve the right to periodically send you offers via email for similar goods or services from our product range as those you have already purchased. In accordance with Section 7(3) of the German Unfair Competition Act (UWG), we are not required to obtain separate consent from you for this purpose. Data processing in this regard is based solely on our legitimate interest in personalized direct marketing pursuant to Article 6(1)(f) of the GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.
You have the right to object at any time, with future effect, to the use of your email address for the aforementioned promotional purposes by notifying the data controller named at the beginning of this notice. You will only be charged the standard transmission fees for this. Upon receipt of your objection, the use of your email address for promotional purposes will be discontinued immediately.
8.3Klaviyo
Our email newsletters and other promotional email communications are sent through this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA
Based on our legitimate interest in effective and user-friendly email marketing, we share the data you provided during registration with this provider in accordance with Article 6(1)(f) of the GDPR so that the provider can handle email distribution on our behalf.
Subject to your express consent pursuant to Article 6(1)(a) of the GDPR, the provider also conducts a statistical analysis of the effectiveness of email campaigns using web beacons or tracking pixels in the emails sent, which can measure open rates and specific interactions with the newsletter’s content. In doing so, device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but is not combined with other data sets.
You may revoke your consent to email tracking at any time, effective for the future.
We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits its disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
8.4WhatsApp Newsletter
If you sign up for our WhatsApp newsletter, we will send you regular updates about our offers via WhatsApp. The only information required to receive the newsletter is your cell phone number.
To subscribe to the newsletter, add the mobile phone number we provided to your mobile device’s contacts and send us the message “Start” via WhatsApp. By sending this WhatsApp message, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR for the purpose of sending the newsletter. We will then add you to our newsletter distribution list.
The data we collect when you sign up for the newsletter is processed exclusively for the purpose of sending you promotional communications via the newsletter. You can unsubscribe from the newsletter at any time by sending us the message “Stop” via WhatsApp. Once you have unsubscribed, your cell phone number will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.
Please note that WhatsApp Business will have access to the address book on the mobile device we use for this purpose and will automatically transfer phone numbers stored in the address book to a server operated by our parent company, Meta Platforms Inc., in the United States.
To send our WhatsApp newsletter, we therefore use a mobile device whose address book contains only the WhatsApp contact information of our newsletter recipients. This ensures that every person whose WhatsApp contact information is stored in our address book has already consented to the transfer of their WhatsApp phone number from the address books of their chat contacts, in accordance with Article 6(1)(a) of the GDPR, by accepting the WhatsApp Terms of Service when they first used the app on their device. The transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.
For information on the purpose and scope of data collection, as well as the further processing and use of the data by WhatsApp, and your related rights and privacy settings, please refer to WhatsApp’s Privacy Policy:https://www.whatsapp.com/legal/?eea=1#privacy-policy
We have entered into a data processing agreement with WhatsApp that protects the data of our newsletter subscribers and prohibits the disclosure of that data to third parties.
As part of the processing activities described above, data may be transferred to servers operated by Meta Platforms Inc. in the United States.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
8.5- Our WhatsApp newsletters are sent via this provider: chatarmin.com GmbH, Kaiserstraße 89/2/3, 1070 Vienna, Austria
Based on our legitimate interest in effective and user-friendly newsletter marketing, we share your phone number linked to your WhatsApp account and, if applicable, your first and last name with this provider in accordance with Article 6(1)(f) of the GDPR so that the provider can send out the newsletter on our behalf.
Subject to your express consent pursuant to Art. 6(1)(a) of the GDPR, the provider also conducts a statistical analysis of the effectiveness of newsletter campaigns using web beacons or tracking pixels in the WhatsApp messages sent, which can measure open rates and specific interactions with the newsletter’s content. In doing so, device information (e.g., time of access, IP address, browser type, and operating system) is also collected and analyzed, but is not combined with other data sets.
You may revoke your consent to newsletter tracking at any time, effective for the future.
We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits its disclosure to third parties.
8.6Email Notifications Regarding Product Availability
For items that are temporarily out of stock, you can sign up to receive email notifications when they become available. We will send you a one-time email notification regarding the availability of the item you have selected. The only required information for receiving this notification is your email address. Providing additional information is optional and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you will only receive a notification once you have expressly confirmed your consent by clicking on a verification link sent to the email address you provided.
By clicking the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR. In doing so, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of registration, so that we can investigate any potential misuse of your email address at a later date. The data we collect when you sign up for our email notification service regarding product availability is used strictly for the intended purpose.
You can unsubscribe from availability notifications at any time by sending a message to the contact person listed above. Once you have unsubscribed, your email address will be immediately removed from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this statement.
8.7Shopping Cart Reminders via Email
If you stop shopping with us before completing your order, you have the option to receive a one-time email reminder of the contents of your virtual shopping cart.
The only required information for receiving this reminder is your email address. Providing additional information is optional and may be used to address you personally. We use the so-called double opt-in procedure for sending emails, which ensures that you will not receive a notification until you have explicitly confirmed your consent by clicking on a verification link sent to the email address you provided.
By clicking the confirmation link, you give us your consent to use your personal data in accordance with Article 6(1)(a) of the GDPR to send you a shopping cart reminder. In doing so, we store your IP address as provided by your Internet Service Provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you sign up for our email notification service is used strictly for the intended purpose.
You can unsubscribe from shopping cart reminders at any time by sending a message to the contact person listed at the beginning of this notice. Once you have unsubscribed, your email address will be immediately deleted from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes that are permitted by law and about which we inform you in this notice.
8.8Advertising by Mail via CMC
We use the services of the following provider to send promotional materials by mail: Collaborative Marketing Club - CMC GmbH, Kopernikusstraße 3, 10243 Berlin
Based on our legitimate interest in personalized direct marketing pursuant to Article 6(1)(f) of the GDPR, we share certain customer information received from you in the course of our contractual relationship (name, address information, and, if applicable, date of birth) with the service provider and commission the service provider to print and mail interest-based promotional materials about our offerings as part of individual campaigns.
You may object at any time to our storage and use of your data for the purposes of direct mail advertising.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
8.9Advertising by Mail
Based on our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name, your mailing address, and—to the extent we have received this additional information from you in the course of our contractual relationship — your title, academic degree, year of birth, and your professional, industry, or business designation in accordance with Art. 6(1)(f) of the GDPR—and to use them to send you interesting offers and information about our products via regular mail.
You may object to the storage and use of your data for this purpose at any time.
9) Data Processing for Order Fulfillment
9.1To the extent necessary for the performance of the contract for delivery and payment purposes, the personal data we collect will be disclosed to the contracted shipping company and the contracted financial institution in accordance with Article 6(1)(b) of the GDPR.
If, based on a relevant contract, we are obligated to provide you with updates for goods containing digital elements or for digital products, we will process the contact information you provided when placing your order in order to personally notify you in accordance with our legal obligations to provide information under Article 6(1)(c) of the GDPR. Your contact information will be used strictly for the specific purpose of notifying you about updates we are obligated to provide, and we will process it for this purpose only to the extent necessary to provide the relevant information.
To process your order, we also work with the service provider(s) listed below, who assist us, in whole or in part, in fulfilling the contracts we have entered into. Certain personal data is transferred to these service providers in accordance with the following information.
9.2Amazon Fulfillment (FBA)
We use the following provider to process orders: Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg
Your name, address, and, if applicable, other personal data will be disclosed to the provider in accordance with Article 6(1)(b) of the GDPR solely for the purpose of processing your online order. Your data will only be disclosed to the extent that it is actually necessary for the processing of the order.
9.3Use of Payment Service Providers (Payment Services)
- Amazon Pay
This website offers one or more online payment methods from the following provider: Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg
If you select a payment method offered by the provider that requires you to pay in advance (such as credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be shared with the provider in accordance with Article 6(1)(b) of the GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- Apple Pay
If you choose the “Apple Pay” payment method offered by Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment will be processed via the “Apple Pay” feature on your iOS, watchOS, or macOS device by charging a payment card stored in “Apple Pay.” Apple Pay uses security features built into your device’s hardware and software to protect your transactions. To authorize a payment, you must therefore enter a passcode you have previously set and verify the transaction using your device’s “Face ID” or “Touch ID” feature.
For the purpose of processing your payment, the information you provided during the ordering process, along with the details of your order, is transmitted to Apple in encrypted form. Apple then re-encrypts this data using a developer-specific key before transmitting it to the payment service provider associated with the payment card stored in Apple Pay to complete the transaction. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm that the payment was successful.
If personal data is processed in connection with the transfers described above, such processing is carried out exclusively for the purpose of payment processing in accordance with Article 6(1)(b) of the GDPR.
Apple stores anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. Anonymization completely prevents the data from being linked to any specific individual. Apple uses the anonymized data to improve “Apple Pay” and other Apple products and services.
When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, your Mac and the authorization device communicate via an encrypted channel through Apple’s servers. Apple does not process or store any of this information in a format that could be used to identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone’s Settings. Go to “Wallet & Apple Pay” and turn off “Allow Payments on Mac.”
For more information about Apple Pay's privacy policy, please visit the following website:https://support.apple.com/de-de/HT203027
- iDeal
This website offers one or more online payment methods from the following provider: Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands
If you select a payment method offered by the provider that requires you to pay in advance (such as credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be shared with the provider in accordance with Article 6(1)(b) of the GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- Klarna
This website offers one or more online payment methods from the following provider: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden
If you select a payment method offered by the provider that requires you to pay in advance (such as credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be shared with the provider in accordance with Article 6(1)(b) of the GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
If you select a payment method that requires the seller to pay in advance (such as purchase by invoice, installment plan, or direct debit), you will also be asked during the ordering process to provide certain personal information (first and last name, street, house number, ZIP code, city, date of birth, email address, phone number, and, if applicable, information about an alternative payment method).
To safeguard our legitimate interest in determining our customers’ creditworthiness, we forward this data to the provider in accordance with Article 6(1)(f) of the GDPR for the purpose of a credit check. Based on the personal data you have provided, as well as additional data (such as your shopping cart, invoice amount, order history, and payment history), the provider assesses whether the payment method you have selected can be granted in light of the risks of non-payment and/or bad debt.
In addition to the provider’s internal criteria pursuant to Article 6(1)(f) of the GDPR, identity and creditworthiness information from the following credit bureaus may also be taken into account when making a decision as part of the application review:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called "score" values). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values takes into account, among other things, but not exclusively, address data.
You may object to this processing of your data at any time by sending us a message or contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for payment processing in accordance with the contract.
- PayPal
This website offers one or more online payment methods from the following provider: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method offered by the provider that requires you to pay in advance, your payment details provided during the ordering process (including your name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be shared with the provider in accordance with Article 6(1)(b) of the GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
If you select a payment method that requires us to pay in advance, you will also be asked during the ordering process to provide certain personal information (first and last name, street, house number, ZIP code, city, date of birth, email address, phone number, and, if applicable, information about an alternative payment method).
In order to safeguard our legitimate interest in determining your creditworthiness in such cases, we will forward this data to the provider in accordance with Article 6(1)(f) of the GDPR for the purpose of a credit check. Based on the personal data you have provided, as well as additional data (such as your shopping cart, invoice amount, order history, and payment history), the provider will assess whether the payment method you have selected can be granted in light of the risks of non-payment and/or bad debt.
The credit report may contain probability values (so-called "score" values). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values takes into account, among other things, but not exclusively, address data.
You may object to this processing of your data at any time by sending us a message or contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for payment processing in accordance with the contract.
- PayPal Checkout
This website uses PayPal Checkout, an online payment system from PayPal that combines PayPal's own payment methods with local payment methods from third-party providers.
When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“Pay Later” via PayPal, we will share your payment information with PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) for the purpose of processing your payment. This transfer is carried out in accordance with Article 6(1)(b) of the GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the following payment methods: credit card via PayPal, direct debit via PayPal, or—if offered—“Pay Later” via PayPal. For this purpose, your payment data may be shared with credit bureaus in accordance with Article 6(1)(f) of the GDPR, based on PayPal’s legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check—which reflects the statistical probability of payment default—to determine whether to make the respective payment method available. The credit report may contain probability values (so-called “score values”). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of these score values includes, among other things but not exclusively, address data. You may object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.
If the PayPal payment method “Buy Now, Pay Later” is available and selected, your payment information will first be transmitted to PayPal to process the payment, after which PayPal will forward this information to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin (“Ratepay”) to complete the transaction. The legal basis in each case is Article 6(1)(b) of the GDPR. In this case, Ratepay conducts an identity and credit check in its own name to determine your ability to pay in accordance with the principle mentioned above and, based on its legitimate interest in determining your ability to pay pursuant to Article 6(1)(f) of the GDPR, shares your payment data with credit reporting agencies. A list of the credit bureaus that Ratepay may use can be found here:https://www.ratepay.com/legal-payment-creditagencies/
If you use a local third-party payment method, your payment information will first be shared with PayPal in accordance with Article 6(1)(b) of the GDPR to process the payment. Depending on which available local payment method you select, PayPal will then transmit your payment information to the relevant provider in accordance with Article 6(1)(b) of the GDPR to complete the payment:
- Apple Pay (Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
- Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)
- iDeal (Currence Holding BV, Beethovenstraat 300, Amsterdam, Netherlands)
- Bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)
- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland)
- eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2
1200 Vienna, Austria)
- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)
- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)
For more information regarding data protection, please refer to PayPal's Privacy Policy:https://www.paypal.com/de/legalhub/paypal/privacy-full
- Shopify Payments
This website offers one or more online payment methods from the following provider: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
If you select a payment method offered by the provider that requires you to pay in advance (such as credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be shared with the provider in accordance with Article 6(1)(b) of the GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- Sofortüberweisung
This website offers one or more online payment methods from the following provider: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden
If you select a payment method offered by the provider that requires you to pay in advance (such as credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be shared with the provider in accordance with Article 6(1)(b) of the GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
- Stripe
This website offers one or more online payment methods from the following provider: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland
If you select a payment method offered by the provider that requires you to pay in advance (such as credit card payment), your payment details provided during the ordering process (including name, address, bank and payment card information, currency, and transaction number), as well as information about the contents of your order, will be shared with the provider in accordance with Article 6(1)(b) of the GDPR. In this case, your data is transferred exclusively for the purpose of processing the payment with the provider and only to the extent necessary for this purpose.
If you select a payment method that requires the seller to pay in advance (such as purchase by invoice, installment plan, or direct debit), you will also be asked during the ordering process to provide certain personal information (first and last name, street, house number, ZIP code, city, date of birth, email address, phone number, and, if applicable, information about an alternative payment method).
To safeguard our legitimate interest in determining our customers’ creditworthiness, we forward this data to the provider in accordance with Article 6(1)(f) of the GDPR for the purpose of a credit check. Based on the personal data you have provided, as well as additional data (such as your shopping cart, invoice amount, order history, and payment history), the provider assesses whether the payment method you have selected can be granted in light of the risks of non-payment and/or bad debt.
The credit report may contain probability values (so-called "score" values). To the extent that score values are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. The calculation of the score values takes into account, among other things, but not exclusively, address data.
You may object to this processing of your data at any time by sending us a message or by contacting the provider. However, the provider may still be entitled to process your personal data if this is necessary for payment processing in accordance with the contract.
10) Online Marketing
10.1Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called cookies, which are text files stored on your computer that enable an analysis of your use of the website. In addition, Google AdSense also uses so-called “web beacons” (small, invisible graphics) to collect information; these allow simple actions, such as visitor traffic on the website, to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon (including your IP address) regarding your use of this website is generally transmitted to a Google server and stored there. This may also involve transmission to the servers of Google LLC in the United States.
Google uses the information obtained in this way to analyze your usage behavior with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not combined with other data held by Google. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on Google’s behalf.
All processing described above—in particular, the collection of information from the device you are using via cookies and/or web beacons—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, Google AdSense will not be used during your visit to the site.
You may revoke your consent at any time, effective for the future, by disabling this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
Further information about Google's privacy policy is available here:https://business.safety.google/intl/de/privacy/andhttps://www.google.de/policies/privacy/
10.2AWIN Performance Advertising Network Affiliate
We participate in the affiliate program of the following provider: AWIN AG, Eichhornstraße 3, 10785 Berlin, Germany
In this context, we have included links on our website that lead to offers on the provider’s website or on third-party websites (“partner sites”).
To measure the success of an affiliate link, analyze orders generated through such a link, and process the corresponding commission payments, the provider uses cookies and/or similar technologies, which are generally placed on the partner sites and for which we are not responsible under data protection law. In doing so, the provider also regularly processes the IP address and, where applicable, other device information.
All processing described above—in particular, the reading or storage of information on the device you are using—will only take place if you have given your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by using the cookie consent management options on the partner sites.
10.3Sovendus Sales
For our coupon offers, we use the services of the following provider: Sovendus GmbH, Hermann-Veit-Str. 6, 76135 Karlsruhe, Germany
The provider operates a coupon network through which participating partner stores can post coupons and distribute them to their customers. To this end, we forward your data—which is necessary for issuing your coupon—to the provider in encrypted form. The data is only forwarded to the provider once you have completed your purchase and clicked on the coupon banner. The transfer of this data is used exclusively to pre-fill the fields required for issuing the coupon.
The processing of data described above is carried out in accordance with Article 6(1)(f) of the GDPR, based on our legitimate interest in allowing third-party advertisers to direct promotional communications to you, from whose offers you can benefit by redeeming the coupons.
11) Web analytics services
11.1Google Analytics 4
This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables us to analyze your use of our website.
By default, when you visit the website, Google Analytics 4 sets cookies, which are small text files stored on your device that collect certain information. This information includes your IP address; however, Google truncates the last few digits of your IP address to prevent direct identification of individuals.
The information is transmitted to Google's servers and processed there. This may also involve transfers to Google LLC, which is headquartered in the United States.
Google uses the information collected on our behalf to analyze your use of the website, compile reports on website activity for us, and provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated is not combined with other data held by Google. The data collected through the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, in particular the setting of cookies on the device you are using, takes place only if you have given us your explicit consent in accordance with Art. 6(1)(a) of the GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You may revoke your consent at any time with future effect. To exercise your right of revocation, please disable this service using the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with Google that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
For more legal information about Google Analytics 4, visithttps://business.safety.google/intl/de/privacy/, https://policies.google.com/privacy?hl=de&gl=de, andathttps://policies.google.com/technologies/partner-sites
Demographic Features
Google Analytics 4 uses the special “demographic features” function and can use it to generate statistics that provide insights into the age, gender, and interests of website visitors. This is done by analyzing advertisements and information from third-party providers. This allows target groups to be identified for marketing activities. However, the collected data cannot be attributed to any specific individual and is deleted after being stored for a period of two months.
Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to generate cross-device reports. If you have enabled personalized ads and linked your devices to your Google Account, Google may—subject to your consent to the use of Google Analytics pursuant to Art. 6(1)(a) of the GDPR—analyze your usage behavior across devices and create database models, including those related to cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can disable the “Personalized Ads” feature in your Google Account settings. To do so, follow the instructions on this page:https://support.google.com/My-Ad-Center-Help/answer/12155764?hl=de
For more information about Google Signals, please visit the following link:https://support.google.com/analytics/answer/7532985?hl=de
UserIDs
As an extension of Google Analytics 4, the "UserIDs" feature can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6(1)(a) of the GDPR, have set up an account on this website, and sign in to that account on various devices, your activities—including conversions—can be analyzed across devices.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
11.2attriXus
This website uses the web analytics service provided by the following company: attriXus GmbH, Siechenstraße 14, 96052 Bamberg
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used—such as the IP address and browser information—in order to evaluate it for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the analysis of navigation patterns (so-called heat maps), which show the duration of page visits as well as interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally precludes direct personal identification. There is no merging of this data with personally identifiable information collected by other means.
All processing described above—in particular, the retrieval or storage of information on the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
11.3Google Optimize
This website uses "Google Optimize," a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Based on “Google Analytics,” this service enables us to statistically analyze how users interact with new features and content on the website by testing different versions with specific user groups. This allows us to determine which versions users prefer, with the goal of making our website more appealing.
Google Optimize uses cookies for this purpose—small text files that are stored on your device and enable the analysis of your use of a website. The information collected by cookies about your use of the website is generally transmitted to a Google server, where it is stored and processed. This may also involve the transmission of information to the servers of Google LLC, a company based in the United States, where the information may be further processed.
All processing described above—in particular, the setting of cookies to store and retrieve information on the device you use to access the website—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without your consent, Google Optimize will not be used while you are using the website. You may revoke your consent at any time with future effect. To exercise your right to revoke consent, please disable this service using the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
For more information about Google's privacy policy, please visit:https://business.safety.google/intl/de/privacy/andhttps://policies.google.com/privacy?hl=de&gl=de
11.4Google Tag Manager
This website uses “Google Tag Manager,” a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).
Google Tag Manager provides a technical foundation for bundling various web applications—including tracking and analytics services—and for configuring, controlling, and conditioning them through a unified user interface. Google Tag Manager itself does not store any information on users’ devices or read such information. Nor does the service perform any independent data analysis. However, when you visit a page, Google Tag Manager transmits your IP address to Google, where it may be stored. Transmission to servers operated by Google LLC in the United States is also possible.
This processing will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, Google Tag Manager will not be used during your visit to the site. You may revoke your consent at any time with future effect. To revoke your consent, please disable this service using the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
For additional legal information about Google Tag Manager, visithttps://business.safety.google/intl/de/privacy/andhttps://policies.google.com/privacy?hl=de&gl=de
11.5Heat Map
This website uses the web analytics service provided by the following company: Heatmap Inc., 6724 Monroe Ave, Eldersburg, Maryland, 21784, USA
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used—such as the IP address and browser information—in order to evaluate it for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the analysis of navigation patterns (so-called heat maps), which show the duration of page visits as well as interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally precludes direct personal identification. There is no merging of this data with personally identifiable information collected by other means.
All processing described above—in particular, the retrieval or storage of information on the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
For the transfer of data to the United States, the provider relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with European data protection standards.
11.6Hotjar
This website uses the web analytics service provided by the following company: Hotjar Ltd, Level 2, St. Julians Business Center, 3 Elia Zammit Street, St. Julians STJ 1000, Malta
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used—such as the IP address and browser information—in order to evaluate it for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the analysis of navigation patterns (so-called heat maps), which show the duration of page visits as well as interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally precludes direct personal identification. There is no merging of this data with personally identifiable information collected by other means.
All processing described above—in particular, the retrieval or storage of information on the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
11.7Sure!
This website uses the web analytics service provided by the following company: Klar Insights GmbH, Marktstr. 18, 80802 Munich, Germany
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used—such as the IP address and browser information—in order to evaluate it for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the analysis of navigation patterns (so-called heat maps), which show the duration of page visits as well as interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally precludes direct personal identification. There is no merging of this data with personally identifiable information collected by other means.
All processing described above—in particular, the retrieval or storage of information on the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
11.8Microsoft Clarity
This website uses the web analytics service provided by the following company: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used—such as the IP address and browser information—in order to evaluate it for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the analysis of navigation patterns (so-called heat maps), which show the duration of page visits as well as interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally precludes direct personal identification. There is no merging of this data with personally identifiable information collected by other means.
All processing described above—in particular, the retrieval or storage of information on the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
11.9Shopify Analytics
This website uses the web analytics service provided by the following company: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland
Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada
Using cookies and/or similar technologies (tracking pixels, web beacons, algorithms for reading device and browser information), the service collects and stores pseudonymized visitor data, including information about the device used—such as the IP address and browser information—in order to evaluate it for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the analysis of navigation patterns (so-called heat maps), which show the duration of page visits as well as interactions with page content (e.g., text entries, scrolling, clicks, and mouse-overs). Pseudonymization fundamentally precludes direct personal identification. There is no merging of this data with personally identifiable information collected by other means.
All processing described above—in particular, the retrieval or storage of information on the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits its disclosure to third parties.
When data is transferred to Canada, an adequate level of data protection is ensured by an adequacy decision issued by the European Commission.
11.10Tracify
This website uses the web analytics service “Tracify” provided by Tracify GmbH, Agnes-Pockels-Bogen 1, 80992 Munich. Tracify collects certain usage data from website visitors (date and time of access, browser user agent) in anonymized form, analyzes it, and compiles it into automated reports. These reports enable us, on the one hand, to continuously optimize our online offerings and, on the other hand, to identify and resolve technical issues such as error messages when viewing pages or search engine problems. Tracify operates using a simple script code without the use of cookies, which means that Tracify does not set any cookies on your device at any time.
The information processed via Tracify is never personally identifiable and therefore does not allow any conclusions to be drawn about you as an individual.
All processing described above, in particular the collection of information from the device you are using, will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR.You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
12) Retargeting/Remarketing and Conversion Tracking
12.1Meta Pixel
As part of our online services, we use the "Meta Pixel" service provided by the following company: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")
When a user clicks on an ad we've placed on Facebook and/or Instagram, "Meta Pixel" adds a parameter to the URL of our linked page. After the user is redirected, this URL parameter is then stored in the user's browser via a cookie set by our linked page itself.
This enables Meta, on the one hand, to identify visitors to our online platform as a target audience for displaying advertisements (so-called “ads”). Accordingly, we use this service to display the Facebook and/or Instagram ads we place only to users who have shown an interest in our online offering or who exhibit certain characteristics (e.g., interests in specific topics or products, determined based on the websites they have visited), which we transmit to Meta (so-called “Custom Audiences”).
On the other hand, the “Meta Pixel” can be used to track whether users were redirected to our website after clicking on an ad and what actions they take there (so-called “conversion tracking”).
The data we collect is anonymous to us, meaning it does not allow us to identify individual users. However, Meta stores and processes this data, which means it can be linked to the respective user profile, and Meta can use the data for its own advertising purposes.
All processing described above—in particular, the setting of cookies to read information from the device you are using—will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have entered into a data processing agreement with the provider that ensures the protection of our website visitors' data and prohibits its unauthorized disclosure to third parties.
The information generated by Meta is generally transmitted to and stored on a Meta server; in this context, it may also be transmitted to servers operated by Meta Platforms Inc. in the United States.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
12.2Adform
This website uses retargeting technology provided by the following vendor: Adform Germany GmbH, Großer Burstah 50-52, 20457 Hamburg, Germany
This allows us to target visitors to our website with personalized, interest-based advertising who have already shown an interest in our store and our products. The display of these advertisements is based on a cookie-based analysis of past and current usage behavior; however, no personal data is stored. When retargeting technology is used, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor the advertisements to the stored information. These cookies are small text files that are stored on your computer or mobile device. This ensures that you are shown advertisements that are highly likely to match your product and information interests.
All processing described above—in particular, the use of cookies to read information from the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You may revoke your consent at any time, effective for the future. To revoke your consent, please disable this service using the “Cookie Consent Tool” provided on the website.
12.3Google Ads Remarketing
This website uses retargeting technology provided by the following vendor: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
To this end, Google places a cookie in your device’s browser that automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Any further data processing takes place only if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize the ads you see on the web. In this case, if you are signed in to Google while visiting our website, Google uses your data in conjunction with Google Analytics data to create and define audience lists for cross-device remarketing. To do this, Google temporarily links your personal data with Google Analytics data to form audiences. As part of the use of Google Ads Remarketing, personal data may also be transferred to the servers of Google LLC in the United States.
All processing described above—in particular, the use of cookies to read information from the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You may revoke your consent at any time, effective for the future. To revoke your consent, please disable this service using the “Cookie Consent Tool” provided on the website.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
For details on the data processing initiated by Google and how Google handles data from websites, see here:https://policies.google.com/technologies/partner-sites
For more information about Google's privacy policy, see here:https://business.safety.google/intl/de/privacy/andhttps://www.google.de/policies/privacy/
12.4LinkedIn Insight
This website uses retargeting technology from the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
This allows us to target visitors to our website with personalized, interest-based advertising who have already shown an interest in our store and our products. The display of these advertisements is based on a cookie-based analysis of past and current usage behavior; however, no personal data is stored. When retargeting technology is used, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor the advertisements to the stored information. These cookies are small text files that are stored on your computer or mobile device. This ensures that you are shown advertisements that are highly likely to match your product and information interests.
All processing described above—in particular, the use of cookies to read information from the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You may revoke your consent at any time, effective for the future. To revoke your consent, please disable this service using the “Cookie Consent Tool” provided on the website.
12.5Microsoft Advertising
This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
This allows us to target visitors to our website with personalized, interest-based advertising who have already shown an interest in our store and our products. The display of these advertisements is based on a cookie-based analysis of past and current usage behavior; however, no personal data is stored. When retargeting technology is used, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor the advertisements to the stored information. These cookies are small text files that are stored on your computer or mobile device. This ensures that you are shown advertisements that are highly likely to match your product and information interests.
All processing described above—in particular, the use of cookies to read information from the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You may revoke your consent at any time, effective for the future. To revoke your consent, please disable this service using the “Cookie Consent Tool” provided on the website.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
12.6Pinterest Retargeting Pixel
This website uses retargeting technology provided by the following company: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
This allows us to target visitors to our website with personalized, interest-based advertising who have already shown an interest in our store and our products. The display of these advertisements is based on a cookie-based analysis of past and current usage behavior; however, no personal data is stored. When retargeting technology is used, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus tailor the advertisements to the stored information. These cookies are small text files that are stored on your computer or mobile device. This ensures that you are shown advertisements that are highly likely to match your product and information interests.
All processing described above—in particular, the use of cookies to read information from the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You may revoke your consent at any time, effective for the future. To revoke your consent, please disable this service using the “Cookie Consent Tool” provided on the website.
12.7Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use Google Ads to draw attention to our attractive offers on external websites through advertisements (known as Google AdWords). Based on the data from these advertising campaigns, we can determine how successful individual advertising measures are. Our goal is to show you ads that are of interest to you, make our website more appealing to you, and ensure a fair calculation of the associated advertising costs.
The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used to identify you personally. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users.
When using Google Ads, personal data may also be transferred to Google LLC's servers in the United States.
For details on the data processing triggered by Google Ads conversion tracking and on how Google handles data from websites, see here:https://policies.google.com/technologies/partner-sites
All processing described above—in particular, the setting of cookies to read information from the device you are using—will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
You can also permanently opt out of Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de
In order to deliver advertising that is even more tailored to the interests of users whose data we have received in the context of business or business-like relationships, we use a customer matching feature within Google Ads. To this end, we electronically transmit one or more files containing aggregated customer data (primarily email addresses and phone numbers) to Google. Google does not have access to plaintext data; instead, it automatically encrypts the information in the customer files during the transmission process using a special algorithm. Google can then use the encrypted information solely to associate it with existing Google accounts that the data subjects have set up. This enables the delivery of personalized advertising across all Google services linked to the respective Google account.
Customer data is transmitted to Google only if you have given us your explicit consent to do so in accordance with Article 6(1)(a) of the GDPR. You may revoke this consent at any time, effective for the future. Further information on Google’s data protection measures regarding the customer matching feature can be found here:https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google’s privacy policies can be viewed here:https://business.safety.google/intl/de/privacy/andhttps://www.google.de/policies/privacy/
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
12.8Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers on external websites through advertisements (known as Google AdWords). Based on the data from the advertising campaigns, we can determine how successful individual advertising measures are. Our goal is to show you advertisements that are of interest to you, to make our website more appealing to you, and to ensure a fair calculation of the associated advertising costs.
The conversion tracking cookie is set when a user clicks on a Google Ads ad. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and are not used to identify you personally. If the user visits certain pages on this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to that page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Customers are informed of the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. When using Google Ads, personal data may also be transmitted to the servers of Google LLC in the United States.
For details on the data processing triggered by Google Ads conversion tracking and on how Google handles data from websites, see here:https://policies.google.com/technologies/partner-sites
All processing described above—in particular, the setting of cookies to read information from the device you are using—will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
You can also permanently opt out of Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/My-Ad-Center-Help/answer/12155656?hl=de
Please note that certain features of this website may not be available or may be limited if you have disabled cookies.
Google's privacy policies can be viewed here:https://business.safety.google/intl/de/privacy/andhttps://www.google.de/policies/privacy/
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
12.9Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform, provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").
GMP uses cookies to display ads relevant to users, improve campaign performance reports, or prevent users from seeing the same ads multiple times. Using a cookie ID, Google tracks which ads are displayed in which browser and can thus prevent them from being shown multiple times. In addition, GMP uses cookie IDs to track so-called conversions related to ad requests. This is the case, for example, when a user sees a GMP ad and later, while using the same browser, visits the advertiser’s website and makes a purchase through that website. According to Google, GMP cookies do not contain any personally identifiable information.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google’s server.
We have no control over the scope and further use of the data collected by Google through the use of this tool and therefore provide you with the following information to the best of our knowledge: By integrating GMP, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can associate your visit with your account. Even if you are not registered with Google or are not logged in, it is possible that the provider may obtain and store your IP address. When using GMP, personal data may also be transmitted to the servers of Google LLC in the United States.
All processing described above—in particular, the setting of cookies to read information from the device you are using—will only be carried out if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service in the “Cookie Consent Tool” provided on the website.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
You can find the GMP by Google privacy policy here:https://business.safety.google/intl/de/privacy/andhttps://www.google.de/policies/privacy/
12.10Microsoft Advertising Universal Event Tracking
This website uses conversion tracking technology provided by the following vendor: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
To enable Universal Event Tracking, a tag is embedded on every page of our website that interacts with the conversion cookie set by Microsoft. This interaction tracks user behavior on our website and sends the information collected in this way to Microsoft. The purpose of this is to statistically track and analyze certain predefined goals—such as purchases or leads—so that we can tailor the focus and content of our offerings to better match users’ interests. The tags are never used to personally identify users.
All processing described above—in particular, the use of cookies to read information from the device you are using—will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You may revoke your consent at any time, effective for the future. To revoke your consent, please disable this service using the “Cookie Consent Tool” provided on the website.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
13) Page Features
13.1YouTube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transferred to: Google LLC, USA
When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to the provider’s servers—at the latest when the video begins playing—in order to load the content. In the process, certain information, including your IP address, is transmitted to the provider.
If playback of embedded videos is initiated via the plugin, the provider also uses cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior.
If you are logged into a user account with the provider while visiting the site, your data will be directly associated with your account when you click on a video. If you do not want your data to be associated with your account, you must log out before clicking the play button.
All of the aforementioned processing activities—in particular, the setting of cookies to read information from the device you are using—take place only if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by deactivating this service using the “Cookie Consent Tool” provided on the website.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
13.2Google Web Fonts
This site uses so-called web fonts from the following provider to ensure consistent font display: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you visit a page, your browser loads the necessary web fonts into its cache to display text and fonts correctly, and establishes a direct connection to the provider’s servers. In the process, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transferred to: Google LLC, USA
The processing of personal data in connection with establishing a connection to the font provider will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by disabling this service using the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font from your computer will be used.
For data transfers to the United States, the provider has joined the EU-U.S. Data Privacy Framework, which ensures compliance with European data protection standards based on an adequacy decision by the European Commission.
For more information about Google's privacy policy, click here:https://business.safety.google/intl/de/privacy/
13.3Monotype Web Fonts
This site uses so-called web fonts from the following provider to ensure consistent font display: Monotype Imaging Holdings Inc., 600 Unicorn Park Drive, Woburn, Massachusetts 01801, USA
When you visit a page, your browser loads the necessary web fonts into its cache to display text and fonts correctly, and establishes a direct connection to the provider’s servers. In the process, certain browser information, including your IP address, is transmitted to the provider.
The processing of personal data in connection with establishing a connection to the font provider will only take place if you have given us your explicit consent in accordance with Article 6(1)(a) of the GDPR. You may revoke your consent at any time with future effect by disabling this service using the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font from your computer will be used.
For the transfer of data to the United States, the provider relies on the European Commission's standard contractual clauses, which are intended to ensure compliance with European data protection standards.
13.4Applications for Job Postings via Email
On our website, we post current job openings in a separate section; interested candidates can apply by sending an email to the contact address provided.
Applicants must provide all personal information necessary for a thorough evaluation, including general information such as name, address, and contact information, as well as evidence of performance and, if applicable, health-related information. Details regarding the application can be found in the job posting.
Once we receive your application via email, your data will be stored and reviewed solely for the purpose of processing your application. If we have any questions, we will contact the applicant using either their email address or phone number. This processing is based on Article 6(1)(b) of the GDPR (or Section 26(1) of the BDSG), under which the application process is considered a preliminary step toward entering into an employment contract.
To the extent that special categories of personal data within the meaning of Article 9(1) of the GDPR (e.g., health data such as information regarding severe disability status), the processing is carried out in accordance with Article 9(2)(b) of the GDPR so that we may exercise the rights arising from labor law and the law on social security and social protection and fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9(1)(h) of the GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of an applicant’s ability to work, for medical diagnosis, care, or treatment in the health or social sectors, or for the administration of systems and services in the health or social sectors.
If an applicant is not selected or withdraws their application early, the data they submitted, as well as all electronic correspondence—including the application email—will be deleted no later than 6 months after the applicant is notified. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, in fulfilling our obligations to provide evidence under the regulations governing the equal treatment of applicants.
If your application is successful, the data you provide will be processed on the basis of Article 6(1)(b) of the GDPR (in conjunction with Section 26(1) of the BDSG for processing in Germany) for the purpose of carrying out the employment relationship.
13.5Online Applications via a Form
On our website, we post current job openings in a separate section, and interested candidates can apply using the appropriate form.
Applicants must provide all personal information necessary for a thorough evaluation, including general information such as name, address, and contact information, as well as evidence of performance and, if applicable, health-related information. Details regarding the application can be found in the job posting.
When the form is submitted, the applicant’s data is transmitted to us in encrypted form using state-of-the-art technology, stored by us, and processed solely for the purpose of handling the application. The processing is based on Article 6(1)(b) of the GDPR (or Section 26(1) of the BDSG), under which the application process is considered a preliminary step toward an employment contract.
To the extent that special categories of personal data within the meaning of Article 9(1) of the GDPR (e.g., health data such as information regarding severe disability status), the processing is carried out in accordance with Article 9(2)(b) of the GDPR so that we may exercise the rights arising from labor law and the law on social security and social protection and fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of special categories of data may also be based on Article 9(1)(h) of the GDPR if it is carried out for the purposes of preventive healthcare or occupational medicine, for the assessment of an applicant’s ability to work, for medical diagnosis, care, or treatment in the health or social sectors, or for the administration of systems and services in the health or social sectors.
If an applicant is not selected or withdraws their application early, the data submitted via the form, as well as all electronic correspondence—including the application email—will be deleted no later than 6 months after the applicant is notified. This period is based on our legitimate interest in answering any follow-up questions regarding the application and, if necessary, fulfilling our obligations to provide evidence under the regulations governing the equal treatment of applicants.
If your application is successful, the data you provide will be processed on the basis of Article 6(1)(b) of the GDPR (in conjunction with Section 26(1) of the BDSG for processing in Germany) for the purpose of carrying out the employment relationship.
13.6Personio
We use software from the following provider to manage, organize, and process online applications: Personio SE & Co. KG, Seidlstraße 3, 80335 Munich
Based on our legitimate interest in effective and user-friendly applicant management, the data you submit as part of your online application will be transmitted in encrypted form to the service provider in accordance with Article 6(1)(f) of the GDPR, stored there, and made available to us for the purpose of reviewing your application.
We have entered into a data processing agreement with the provider that protects the data of our website visitors and prohibits its disclosure to third parties.
14) Tools and Miscellaneous
14.1- DATEV
We use the cloud-based accounting software service provided by the following vendor to handle our accounting: DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg, Germany
The provider processes our company's incoming and outgoing invoices, as well as bank transactions where applicable, in order to automatically capture invoices, match them to transactions, and use this data to generate financial accounting records through a semi-automated process.
To the extent that personal data is also processed in this context, such processing is based on our legitimate interest in the efficient organization and documentation of our business processes, in accordance with Article 6(1)(f) of the GDPR.
- Lexware Office
We use the cloud-based accounting software service provided by the following company to handle our accounting: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany
The provider processes our company's incoming and outgoing invoices, as well as bank transactions where applicable, in order to automatically capture invoices, match them to transactions, and use this data to generate financial accounting records through a semi-automated process.
If personal data is also processed in this context, such processing is based on our legitimate interest in the efficient organization and documentation of our business processes, in accordance with Article 6(1)(f) of the GDPR.
- Xentral ERP
We use the cloud-based accounting software service provided by the following company to handle our accounting: Xentral ERP Software GmbH, Fuggerstraße 11, 86150 Augsburg, Germany
The provider processes our company's incoming and outgoing invoices, as well as bank transactions where applicable, in order to automatically capture invoices, match them to transactions, and use this data to generate financial accounting records through a semi-automated process.
To the extent that personal data is also processed in this context, such processing is based on our legitimate interest in the efficient organization and documentation of our business processes, in accordance with Article 6(1)(f) of the GDPR.
14.2Cookie Consent Tool
This website uses a so-called “cookie consent tool” to obtain valid user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when they visit the site in the form of an interactive user interface, where they can grant consent for specific cookies and/or cookie-based applications by checking the appropriate boxes. When the tool is used, all cookies and services requiring consent are loaded only if the respective user grants the appropriate consent by checking the corresponding boxes. This ensures that such cookies are set on the user’s device only if consent has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this process.
If, in individual cases, the storage, assigning, or logging cookie settings, this processing is carried out in accordance with Article 6(1)(f) of the GDPR on the basis of our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and, consequently, in the legally compliant design of our website.
Another legal basis for the processing is Article 6(1)(c) of the GDPR. As the data controller, we are legally obligated to make the use of non-technically necessary cookies contingent upon the user’s consent.
Where necessary, we have entered into a data processing agreement with the provider to ensure the protection of our website visitors' data and to prohibit its unauthorized disclosure to third parties.
For more information about the operator and the settings options for the cookie consent tool, please refer directly to the corresponding user interface on our website.
15) Rights of the Data Subject
15.1Applicable data protection law grants you the following rights as a data subject (rights of access and intervention) vis-à-vis the controller with respect to the processing of your personal data; please refer to the cited legal basis for the respective conditions for exercising these rights:
- Right of access pursuant to Article 15 of the GDPR;
- Right to rectification under Article 16 of the GDPR;
- Right to erasure under Article 17 of the GDPR;
- Right to restriction of processing under Article 18 of the GDPR;
- Right to be informed under Article 19 of the GDPR;
- Right to data portability under Article 20 of the GDPR;
- Right to withdraw consent that has been given, pursuant to Article 7(3) of the GDPR;
- Right to lodge a complaint under Article 77 of the GDPR.
15.2RIGHT TO OBJECT
IF, AS PART OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO SUCH PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR SPECIFIC SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA IN QUESTION. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS NECESSARY FOR THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THIS RIGHT AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE RELEVANT DATA FOR DIRECT MARKETING PURPOSES.
16) Retention Period for Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing, and—where applicable—the respective statutory retention period (e.g., retention periods under commercial and tax law).
When processing personal data based on explicit consent pursuant to Article 6(1)(a) of the GDPR, the data in question will be stored until you withdraw your consent.
If there are statutory retention periods for data processed in connection with contractual or quasi-contractual obligations pursuant to Article 6(1)(b) of the GDPR, such data is routinely deleted upon expiration of the retention periods, provided that it is no longer necessary for the performance or initiation of a contract and/or we no longer have a legitimate interest in continuing to store it.
When processing personal data on the basis of Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(1) of the GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing is necessary for the establishment, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing pursuant to Article 6(1)(f) of the GDPR, this data will be stored until you exercise your right to object under Article 21(2) of the GDPR.
Unless otherwise specified in the other information contained in this statement regarding specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.




