1) Introduction and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Inna Ropchan, Auerbacher Ring 12, 12619 Berlin, Germany, Tel.: +491777201126, Email: [email protected]. The controller for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
2) Data Collection When Visiting Our Website
2.1 When using our website for informational purposes only, i.e., if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to the server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Used browser
- Used operating system
- Used IP address (if applicable: in anonymized form)
The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no transfer or other use of the data. However, we reserve the right to retrospectively check the server log files if there are concrete indications of illegal use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.
3) Hosting & Content-Delivery-Network
3.1 Amazon Web Services
For hosting our website and displaying the page content, we use the system of the following provider: AWS EMEA SARL, 38 avenue John F. Kennedy, L-1855 Luxembourg
Data may also be transmitted to: Amazon Web Services, Inc., 410 Terry Avenue North, Seattle, WA 98109, USA
All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
3.2 Cloudflare
We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service allows us to deliver large media files such as graphics, page content, or scripts faster through a network of regionally distributed servers. The processing is carried out to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
4) Cookies
To make the visit to our website attractive and to enable the use of certain functions, we use cookies, i.e., small text files that are stored on your device. Some of these cookies are automatically deleted after closing the browser (so-called "session cookies"), while others remain on your device longer and allow the storage of page settings (so-called "persistent cookies"). In the latter case, you can find the storage duration in the overview of the cookie settings of your web browser.
If personal data is also processed by individual cookies we use, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given, or in accordance with Art. 6 para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.
You can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contact
5.1 WhatsApp Business
You have the option to contact us via the WhatsApp messaging service of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this, we use the so-called "Business Version" of WhatsApp.
If you contact us via WhatsApp on the occasion of a specific transaction (for example, a placed order), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 para. 1 lit. b GDPR to process and respond to your request. On the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) to be able to assign your request to a specific process.
If you use our WhatsApp contact for general inquiries (e.g., about the range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp and - if provided - your first and last name in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in the efficient and timely provision of the requested information.
Your data will always be used only to respond to your request via WhatsApp. There is no transfer to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device in whose address book only the WhatsApp contact details of users who have also contacted us via WhatsApp are stored.
This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts by accepting the WhatsApp terms of use when first using the app on their device in accordance with Art. 6 para. 1 lit. a GDPR. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded.
For the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your rights and settings options for protecting your privacy, please refer to WhatsApp's privacy policy: https://www.whatsapp.com
We have concluded a data processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
In the context of the above-mentioned processing, data transfers to servers of Meta Platforms Inc. in the USA may occur.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
5.2 In the context of contacting us (e.g., via contact form or email), personal data is processed solely for the purpose of processing and responding to your request and only to the extent necessary for this purpose.
The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact aims at a contract, the additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Data Processing for Order Handling
As far as necessary for the contract processing for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided during the order to personally inform you within the scope of our statutory information obligations in accordance with Art. 6 para. 1 lit. c GDPR. Your contact data will be used strictly for the purpose of notifications about updates owed by us and will only be processed by us to the extent necessary for the respective information.
To process your order, we also work with the following service provider(s) who support us wholly or partially in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
7) Web Analysis Services
7.1 Google Analytics 4
This website uses Google Analytics 4, a web analysis service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when visiting the website, cookies are set by Google Analytics 4, which are stored as small text modules on your device and collect certain information. This information includes your IP address, which is shortened by Google to exclude direct personal reference.
The information is transmitted to Google's servers and further processed there. Transmissions to Google LLC based in the USA are also possible.
Google uses the collected information on our behalf to evaluate your use of the website, compile reports on website activities for us, and provide other services related to website and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics is not merged with other data from Google. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All processing described above, especially the setting of cookies on the device used, only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR.
Without your consent, the use of Google Analytics 4 will not occur during your visit to the site. You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google
Demographic Features
Google Analytics 4 uses the special function "demographic features" and can thereby create statistics that provide information about the age, gender, and interests of site visitors. This is done through the analysis of advertising and information from third-party providers. This allows target groups for marketing activities to be identified. However, the collected data cannot be assigned to a specific person and is deleted after being stored for a period of two months.
Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have enabled personalized ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics in accordance with Art. 6 para. 1 lit. a GDPR, analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you wish to stop cross-device analysis, you can deactivate the "Personalized Advertising" function in your Google account settings. Follow the instructions on this page: https://support.google.com
Further information on Google Signals can be found at the following link: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the "UserIDs" function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Art. 6 para. 1 lit. a GDPR, have set up an account on this website, and log in with this account on different devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
7.2 Google Tag Manager
This website uses the "Google Tag Manager", a service provided by the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and for calibrating, controlling, and conditioning them via a unified user interface. The Google Tag Manager itself does not store or read any information on user devices. The service also does not perform independent data analyses. However, when a page is accessed, your IP address is transmitted to Google and possibly stored there. Transmission to servers of Google LLC. in the USA is also possible.
This processing is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of Google Tag Manager will not occur during your page visit. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
Further legal information on Google Tag Manager can be found at https://business.safety.google
8) Retargeting/ Remarketing and Conversion Tracking
8.1 Meta Pixel with Advanced Matching
Within our online offering, we use the "Meta Pixel" service in the mode of advanced matching from the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta")
If a user clicks on an advertisement we have placed on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into the user's browser via a cookie set by our linked page after redirection. Furthermore, this cookie captures specific customer data such as the email address, which we collect on our website linked with the Facebook or Instagram ad during transactions like purchases, account logins, or registrations (advanced matching). The cookie is then read and allows the transmission of data, including specific customer data, to Meta.
We use "Meta Pixel" with advanced matching to make our advertisements (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they correspond to the interests of users or have certain characteristics (e.g., interests in specific topics or products determined based on the visited websites) that we transmit to Meta (so-called "Custom Audiences").
Furthermore, we analyze the effectiveness of our advertisements by tracking whether users were redirected to our website after clicking on an advertisement (Conversion). Compared to the standard version of "Meta Pixel", the advanced matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Meta, allowing an assignment to the respective user profile and enabling Meta to use the data for its own advertising purposes in accordance with Meta's data usage policy (https://www.facebook.com
All the processing described above, especially the setting of cookies for reading information on the used device, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
The information generated by Meta is usually transmitted to a server of Meta and stored there; in this context, transmission to servers of Meta Platforms Inc. in the USA may also occur.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
8.2 Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
For this purpose, Google places a cookie in the browser of your device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. Further data processing only takes place if you have agreed with Google that your internet and app browser history will be linked by Google to your Google account and information from your Google account will be used to personalize ads you view on the web. If you are logged into Google during your visit to our website in this case, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to form target groups. In the context of using Google Ads Remarketing, there may also be a transmission of personal data to the servers of Google LLC. in the USA.
All the processing described above, especially the setting of cookies for reading information on the used device, will only be carried out if you have given us your express consent according to Art. 6 para. 1 lit. a GDPR. Without this consent, the use of retargeting technology will be omitted during your site visit.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
Details on the processing initiated by Google and on Google's handling of data from websites can be found here: https://policies.google.com
Further information on Google's privacy policy can be found here: https://business.safety.google
8.3 Microsoft Advertising
This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
This allows us to specifically target visitors to our websites with personalized, interest-based advertising who have already shown interest in our shop and our products. The display of advertising materials is based on a cookie-based analysis of previous and current usage behavior.
In cases of retargeting technology, a cookie is stored on your computer or mobile device to collect pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You will be shown advertising that most likely corresponds to your product and information interests.
All the processing described above, especially the setting of cookies for reading information on the used device, will only be carried out if you have given us your express consent according to Art. 6 para. 1 lit. a GDPR. Without this consent, the use of retargeting technology will be omitted during your site visit.
You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
8.4 Google Ads Conversion-Tracking
This website uses the online advertising program "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use the offer from Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. We pursue the goal of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can personally identify users.
As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing initiated by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com
All the processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link:
https://support.google.com
To address users whose data we have received in the context of business or business-like relationships more interest-based, we use a customer match function within Google Ads. For this purpose, we electronically transmit one or more files with aggregated customer data (mainly email addresses and phone numbers) to Google. Google does not gain access to plain data but encrypts the information in the customer files automatically during the transmission process using a special algorithm. The encrypted information can then only be used by Google to associate it with existing Google accounts that the affected individuals have set up. This allows personalized advertising to be displayed across all Google services linked to the respective Google account.
The transmission of customer data to Google only takes place if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke this consent at any time with effect for the future. Further information on Google's data protection measures in relation to the customer match function can be found here: https://support.google.com
Google's privacy policy can be viewed here: https://business.safety.google
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
8.5 Google Ads Conversion Tracking without Cookies
This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
We use the offer of Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. We pursue the goal of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of the advertising costs incurred.
This website uses Google Ads Conversion Tracking exclusively without the use of cookies, which means that the service does not set cookies on your device at any time.
Instead, the local storage of your browser is used to store an individual ID assigned by Google, which allows an analysis of your use of the website. For this purpose, certain user information is processed via the ID.
The ID is set when a user clicks on an ad placed by Google. If the user visits certain pages of this website, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained in this way is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag.
However, they do not receive any information that can personally identify users. In the context of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA. Details on the processing initiated by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com
If the collected information has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical evaluation of the success of our advertising campaigns.
Google's privacy policy can be viewed here: https://business.safety.google
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision of the European Commission.
8.6 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers on external websites with the help of advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. We pursue the goal of showing you advertising that is of interest to you, making our website more interesting for you, and achieving a fair calculation of the advertising costs incurred.
The cookie for conversion tracking is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your device. These cookies generally expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies cannot therefore be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. The customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can personally identify users. In the context of using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
Details on the processing initiated by Google Ads Conversion Tracking and on Google's handling of data from websites can be found here: https://policies.google.com
All the processing described above, especially the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie-Consent-Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in available at the following link:
https://support.google.com
Please note that certain functions of this website may not be available or may be limited if you have disabled the use of cookies.
Google's privacy policy can be viewed here: https://business.safety.google
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
8.7 Microsoft Advertising Universal Event Tracking
This website uses conversion tracking technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
For the use of Universal Event Tracking, a tag is placed on each page of our website that interacts with the conversion cookie set by Microsoft. This interaction makes user behavior on our website traceable and sends the information collected in this way to Microsoft. The purpose of this is to statistically record and evaluate certain predefined goals such as purchases or leads in order to make the orientation and content of our offers more interest-based. The tags are never used for personal identification of users.
All the processing described above, especially the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. Without this consent, the use of retargeting technology during your visit to the site will not take place.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie-Consent-Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
9) Page functionalities
9.1 Facebook Plugins
Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.
This integration ensures that no connection to the provider's servers is established when you call up a page of our website that contains such plugins.
Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this process, information about your device (including your IP address), your browser, and your page history is transmitted to the provider and possibly further processed there, regardless of a login to an existing user profile.
If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transferred to the provider.
Data may also be transferred to: Meta Platforms Inc., USA
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
9.2 Instagram Plugins
Our website uses plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.
This integration ensures that when a page of our website containing such plugins is called up, no connection is yet made to the provider's servers.
Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this process, information about your used device (including your IP address), your browser, and your page history is transmitted to the provider and possibly further processed there, regardless of a login to an existing user profile.
If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins is also published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data already transmitted to the provider.
Data may also be transferred to: Meta Platforms Inc., USA
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
9.3 LinkedIn Plugins
Our website uses plugins from the social network of the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.
This integration ensures that when a page of our website containing such plugins is called up, no connection is yet made to the provider's servers.
Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this process, information about your used device (including your IP address), your browser, and your page history is transmitted to the provider and possibly further processed there, regardless of a login to an existing user profile.
If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins is also published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data already transmitted to the provider.
Data may also be transferred to: LinkedIn Inc., USA
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
9.4 Pinterest Plugins
Our website uses plugins from the social network of the following provider: Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland
These plugins enable direct interactions with content on the social network.
To increase the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called "2-click" or "Shariff" solution.
This integration ensures that when a page of our website containing such plugins is called up, no connection is yet made to the provider's servers.
Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6 para. 1 lit. a GDPR, does your browser establish a direct connection to the provider's servers. In this process, information about your device (including your IP address), your browser, and your browsing history is transmitted to the provider and possibly further processed there, regardless of whether you are logged into an existing user profile.
If you are logged into an existing user profile on the provider's social network, information about interactions carried out via the plugins is also published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data already transmitted to the provider.
Data may also be transmitted to: Pinterest Inc., USA
We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
For the transmission of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European data protection level.
9.5 Google Maps
This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Maps is a web service for displaying interactive (land) maps to visually present geographical information. By using this service, our location is displayed to you and any potential route is facilitated.
As soon as you access the subpages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google's servers and stored there, which may also involve transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data is directly associated with your account. If you do not wish the association with your profile at Google, you must log out before activating the button. Google stores your data (even for users not logged in) as usage profiles and evaluates them.
The collection, storage, and evaluation are carried out in accordance with Art. 6 para. 1 lit. f GDPR based on Google's legitimate interest in displaying personalized advertising, market research, and/or the demand-oriented design of Google websites. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google in the context of using Google Maps, there is also the option to completely deactivate the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.
Where legally required, we have obtained your consent for the aforementioned processing of your data in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please follow the aforementioned option for making an objection.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
Further information on Google's privacy policy can be found here: https://business.safety.google
9.6 Google Web Fonts
This site uses so-called web fonts from the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
When you call up a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly and establishes a direct connection to the provider's servers. In this process, certain browser information, including your IP address, is transmitted to the provider.
Data may also be transmitted to: Google LLC, USA
The processing of personal data in the course of connecting to the font provider is only carried out if you have given us your express consent in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service via the "Cookie-Consent-Tool" provided on the website. If your browser does not support web fonts, a standard font from your computer will be used.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European data protection level based on an adequacy decision by the European Commission.
Further information on Google's data protection regulations can be found here: https://business.safety.google
10) Tools and Miscellaneous
10.1 Papierkram
For accounting purposes, we use the service of the cloud-based accounting software from the following provider: odacer Finanzsoftware GmbH, Konrad-Adenauer-Ring 13, 65187 Wiesbaden, Germany
The provider processes incoming and outgoing invoices as well as, if applicable, the bank transactions of our company to automatically capture invoices, match them to transactions, and create financial accounting from this in a semi-automated process.
If personal data is processed in this context, the processing is based on our legitimate interest in efficient organization and documentation of our business transactions in accordance with Art. 6 para. 1 lit. f GDPR.
10.2 Cookie-Consent-Tool
This website uses a so-called "Cookie-Consent-Tool" to obtain effective user consents for cookies and cookie-based applications that require consent. The "Cookie-Consent-Tool" is displayed to users in the form of an interactive user interface when the page is accessed, where consents for certain cookies and/or cookie-based applications can be granted by ticking boxes. In this process, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consents by ticking the boxes. This ensures that such cookies are only set on the respective user's end device in the event of consent being granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in a legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Another legal basis for processing is Art. 6 para. 1 lit. c GDPR. As the responsible party, we are legally obliged to make the use of technically unnecessary cookies dependent on the respective user consent.
If necessary, we have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
Further information about the operator and the setting options of the Cookie-Consent-Tool can be found directly in the corresponding user interface on our website.
11) Rights of the Data Subject
11.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) against the controller regarding the processing of your personal data, with reference to the legal basis mentioned for the respective exercise conditions:
- Right of access according to Art. 15 GDPR;
- Right to rectification according to Art. 16 GDPR;
- Right to erasure according to Art. 17 GDPR;
- Right to restriction of processing according to Art. 18 GDPR;
- Right to notification according to Art. 19 GDPR;
- Right to data portability according to Art. 20 GDPR;
- Right to withdraw consent given according to Art. 7 para. 3 GDPR;
- Right to lodge a complaint according to Art. 77 GDPR.
11.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST IN THE CONTEXT OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING IS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ASSERTION, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING PURPOSES. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
12) Duration of Storage of Personal Data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing personal data based on explicit consent in accordance with Art. 6 para. 1 lit. a GDPR, the affected data will be stored until you revoke your consent.
If there are statutory retention periods for data processed in the context of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, these data will be routinely deleted after the retention periods have expired, provided they are no longer required for contract fulfillment or initiation and/or there is no legitimate interest on our part in further storage.
When processing personal data based on Art. 6 para. 1 lit. f GDPR, these data will be stored until you exercise your right to object under Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights, and freedoms, or the processing serves the assertion, exercise, or defense of legal claims.
When processing personal data for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, these data will be stored until you exercise your right to object under Art. 21 para. 2 GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will be deleted if they are no longer necessary for the purposes for which they were collected or otherwise processed.
