data protection

3.6.

You can determine whether cookies can be set and accessed by adjusting the settings in your browser. For example, you can completely disable the storage of cookies in your browser, restrict es certain websites, or configure your browser to automatically notify you when a cookie is about to be set and ask for your feedback. You can block or delete individual cookies. However, for technical reasons, this may result in some functions of our website being impaired and no longer working properly.  

3.7.
If cookies are only used on our website with your consent, you can find out more at 3.6 in our Cookie Consent Tool by clicking on the Cookiebot icon at the bottom left of the browser window. 

4. Data security 

4.1
All information you transmit to us is stored on servers within the European Union. Unfortunately, the transmission of information via the Internet is not completely secure, which is why we cannot guarantee the security of data transmitted to our website via the Internet. However, we secure our website and other systems against loss, destruction, access, modification, or distribution of your data by unauthorized persons through technical and organizational measures. In particular, your personal data is transmitted to us in encrypted form. We use the SSL (Secure Socket Layer) or TLS (Transport Layer Security) encryption system for this purpose. 

5. Use of Cookiebot 

5.1.
We have integrated the consent management tool "Cookiebot" (www.cookiebot.com) from Usercentrics A/S, Havnegade 39, 1058 Copenhagen, Denmark, into our website in order to request consent for data processing and the use of cookies or similar functions. With the help of "Cookiebot," you have the option of giving or refusing your consent for certain functionalities of our website, e.g., for the purpose of integrating external elements, integrating streaming content, statistical analysis, reach measurement, and personalized advertising. With the help of "Cookiebot," you can give or refuse your consent for all functions or give your consent for individual purposes or individual functions. You can also change the settings you have made at a later date using the icon at the bottom left of the website you are visiting. 

5.2.
es purpose of integrating "Cookiebot" es allow users of our website to decide on the above-mentioned matters and to offer them the option of changing settings they have already made when continuing to use our website. When using "Cookiebot," personal data and information about the end devices used (IP address, language, browser, etc.) are processed and sent to Usercentrics A/S. The information about the settings you have made is also stored on your end device.  

5.3.
The legal basis for processing is Art. 6 (1) (c), Art. 6 (3) (a), Art. 25, Art. 5 (2) GDPR and, alternatively, Art. 6 (1) (f) GDPR. We store the cookie required to store your consent on the basis of Section 25 (2) No. 2 TDDDG. Cookiebot helps us process our users' data in order to fulfill our legal obligations (e.g., obtaining informed consent and the obligation to provide evidence of this). Our legitimate interests in processing beyond the collection and verifiability of the consent obtained lie in the evaluation of consent rates and other functionalities. 

5.4.
"Cookiebot" stores your data for as long as your user settings are active. One year after the user settings have been made, consent will be requested again. The user settings you have made will then be stored again for this period, es you delete the information about your user settings yourself in the designated device capacities. We have concluded a data processing agreement with Cookiebot. 

5.5.
You may object to the processing if it is based on Art. 6 (1) (f) GDPR. Your right to object exists for reasons arising from your particular situation. To object, please contact us by email at privacy@cookiebot.com. 

6. No disclosure of your personal data  

6.1.
We do not disclose your personal data to third parties es you have consented to the disclosure of data or we are entitled or obliged to disclose data due to legal provisions and/or official or court orders. es in particular, the provision of information for the purposes of criminal prosecution, averting danger, or enforcing intellectual property rights. 

7. Data protection and third-party websites 

7.1.
The website may contain hyperlinks to and from third-party websites. If you follow a hyperlink to one of these websites, please note that we cannot accept any responsibility or liability for third-party content or privacy policies. Please check the applicable privacy policies before submitting personal data to these websites. 

8. Use of our website's features 

8.1.
In addition to the purely informational use of our website, we offer various services that you can use if you are interested. To do so, you will usually need to provide additional personal data, which we will use to provide the respective service. If additional voluntary information is possible, this is marked accordingly. 

8.2.
When you contact us by email or via the contact form, we will store your email address and, if you provide it, your name and telephone number in order to respond to your questions. (The legal basis for this is Art. 6 (1) (1) (b) GDPR). 1 sentence 1 litb) of the GDPR). 

9. Use of the rating function 

9.1.
If you have given your consent in accordance with Art. 6 (1) (a) and Art. 49 (1) (a) GDPR, we will use and transfer your email address, order number, and order date to the review platform judge.me, operated by Judge.me Ltd., c/o Buckworths, 1-3 Worship Street, London, EC2A 2AB, UK. They will send you a review reminder by email. 

9.2.
You may revoke your consent at any time with future effect. 

9.3.
If you submit a review, it will be published on our website. 

9.4.
Judge.me's privacy policy can be found at: https://judge.me/privacy 

10. Use of our online store 

10.1.
If you would like to place an order in our online shop, es provide the personal data we require to process your order es conclude the contract. Mandatory information required for the execution of the contract is marked separately; further information is voluntary. We process the data you provide to process your order. To this end, we may pass on your payment details to our house bank. The legal basis for this is Art. 6 (1) (b) GDPR. The legal basis for the mandatory shopping cart cookie or session cookie when registering with our shop is § 25 (2) No. 2 TDDDG. 

You can voluntarily create a customer account, which allows us to store your data for future purchases. When you create an account under "My Account," the data you provide will be stored revocably. You can delete all other data, including your user account, at any time in the customer area. 

We may also process the data you provide to inform you about other interesting products from our portfolio or to send you emails with technical information. 

10.2.
We are required by commercial and tax law to store your address, payment, and order data for a period of ten years. However, after two years, we restrict processing, i.e., your data will only be used to comply with legal obligations. 

10.3.
To prevent unauthorized access to your personal data, especially financial data, by third parties, the ordering process is encrypted using TLS technology. 

10.4.
To operate our online store, we use the Shopify store system, which is provided by the service provider Shopify International Ltd, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. We have concluded a data processing agreement with Shopify. For more information about data processing by Shopify, please visit https://www.shopify.com/legal/privacy  

10.5.
Depending on the payment method you have selected, we use various payment service providers for payment processing, to whom we pass on the information you provided during the ordering process together with the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency, and transaction number) in accordance with Art. 6 (1) (b) GDPR. Your data will only be passed on to the respective payment service provider for the purpose of payment processing and only to the extent necessary for this purpose. 

10.6.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, we will pass on your payment details to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer is carried out in accordance with Art. 6 (1) lit. b GDPR and only to the extent necessary for payment processing. 

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding whether to provide the respective payment method. The credit check may contain probability values (so-called score values). Insofar as score values are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values. For further information on data protection, including the credit agencies used, please refer to PayPal's privacy policy:de 

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing. 

10.7.
If payment is processed via Shopify Payments, payment processing is carried out by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will pass on the information you provided during the ordering process together with the information about your order (name, address, account number, bank code, credit card number if applicable, invoice amount, currency, and transaction number) in accordance with Art. 6 (1) (b) GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. For more information on Stripe's data protection policy, please visitde. 

11. Newsletter 

11.1.
With your consent, you can subscribe to our newsletter, which we use to inform you about our current interesting offers. The advertised goods and services are specified in the declaration of consent. 

11.2.
We use the double opt-in procedure for registration for our newsletter. This means that after you register, we will send an email to the email address you provided, asking you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours , your information will be blocked and automatically deleted after one month. In addition, we store your IP addresses and the times of registration and confirmation. The purpose of this procedure is to verify your registration and, if necessary, to be able to investigate any possible misuse of your personal data. 

11.3.
The only mandatory information required to send you the newsletter is your email address. Providing additional, separately marked data is voluntary and will be used to address you personally. After your confirmation, we will store your email address for the purpose of sending you the newsletter. The legal basis for this is Art. 6 (1) (a) GDPR. 

11.4.
You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can revoke your consent by clicking on the link provided in every newsletter email or by sending a message to the contact details provided in the legal notice. 

11.5.
Please note that we evaluate your user behavior when sending the newsletter. In particular, we collect data on delivery rates, how many subscribers have unsubscribed, how many have clicked on links in the email, information about spam, bounces, etc. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files stored on our website. For the evaluations, we link the data mentioned in section 3 and the web beacons to your email address and an individual ID. The information about your user behavior is collected exclusively in pseudonymized form, i.e., the IDs are not linked to your other personal data, and direct personal reference is excluded. You can object to this tracking at any time by clicking on the separate link provided in each email or by informing us via another contact method, as described above. The information is stored for as long as you are subscribed to the newsletter. After you unsubscribe, we store the data purely for statistical and anonymous purposes.  

11.6.
We use rapidmail, among other things, to send newsletters. The provider is rapidmail GmbH, Wentzingerstraße 21, 79106 Freiburg, Germany. Rapidmail is used, among other things, to organize and analyze the sending of newsletters. The data you enter for the purpose of receiving the newsletter is stored on rapidmail's servers in Germany. If you do not want rapidmail to analyze your data, you must unsubscribe from the newsletter. We provide a link for this purpose in every newsletter message. For analysis purposes, emails sent with rapidmail contain a so-called tracking pixel, which connects to rapidmail's servers when the email is opened. This allows us to determine whether a newsletter message has been opened. Furthermore, with the help of rapidmail, we can determine whether and which links in the newsletter message are clicked. Optionally, links in the email can be set as tracking links, which allow your clicks to be counted. 

11.7.

When you sign up for our newsletter via our website, the necessary data (email address and, if applicable, name) is transmitted via Shopify to our newsletter service provider Mailchimp.
Mailchimp is a service provided by Intuit Inc., 2700 Coast Ave, Mountain View, CA 94043, USA.

We use Mailchimp for:

• Sending our newsletter

• Management of recipient lists

• Evaluation of open and click rates

• Provision and processing of embedded registration forms

• Automated marketing processes (e.g., welcome emails)

Processing is carried out exclusively on the basis of your consent in accordance with Art. 6 (1) (a) GDPR.
You can revoke this consent at any time via the unsubscribe link in each newsletter or by sending us a message.

11.8.

We use Mailchimp registration forms embedded on our website, e.g. for newsletter registration or product information.

These forms are loaded directly from Mailchimp and may transmit data to Mailchimp, such as:

• Your IP address

• browser information

• Date of registration

• Form fields entered

Mailchimp may use cookies or similar technologies for this purpose to prevent misuse (e.g., anti-spam functions) and to ensure the technical provision of the form.

This processing is based on Art. 6 para. 1 lit. f GDPR (legitimate interest in secure and functional newsletter registration).

11.9.

Our newsletters contain a tracking pixel provided by Mailchimp. This pixel collects:

• whether a newsletter was opened

• at what times openings took place

• which links were clicked

• technical information (browser type, IP address, device data)

We use this data exclusively to optimize our newsletters and provide relevant content.

Processing is based on your consent in accordance with Art. 6 (1) (a) GDPR.

11.10.

Mailchimp stores and processes data on servers in the USA.
The transfer is based on the EU Standard Contractual Clauses (SCC) implemented by Mailchimp, which are designed to ensure an adequate level of data protection.

Further details can be found here:
Mailchimp Privacy Policy: https://mailchimp.com/legal/privacy/
Mailchimp EU DPA / SCC: https://mailchimp.com/legal/data-processing-addendum/

11.11.
In addition, we also use our service provider Shopify International Ltd. Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland to send newsletters. We have concluded a data processing agreement with Shopify. For more information about data processing by Shopify, please visit https://www.shopify.com/legal/privacy 

12. Social media profiles 

12.1.
We have various presences on social media platforms. We operate these presences with the following providers 

12.1.1.
Instagram, operated by Meta Platforms Ireland Limited, 4 Grand Cala Square, Dublin 2, Ireland, privacy policy at https://privacycenter.instagram.com/policy 

12.1.2.
TikTok, operated by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland, privacy policy at DE  

12.1.3.
LinkedIn, operated by LinkedIn Ireland Unlimited Company, Wiltom Plaza, Wilton Place, Dublin 2, Ireland, privacy policy available atde  

12.1.4.
Facebook, operated by Meta Platforms Ireland Limited, 4 Grand Cala Square, Dublin 2, Ireland, privacy policy at https://www.facebook.com/privacy/center  

12.2.
We use the technical platform and services of the providers for these information services. We would like to point out that you use our social media platforms and their functions at your own risk. This applies in particular to the use of interactive functions (e.g. commenting, sharing, rating). When you visit our pages, the providers of the social media platforms collect, among other things, your IP address and other information stored on your device in the form of cookies. This information is used to provide us, as the account operators, with statistical information about your interaction with us. The legal basis in each case is your consent: for the setting of cookies, this is § 25 (1) TDDDG, for the subsequent data processing, Art. 6 (1) lit. a GDPR. 

12.3.
The data collected about you in this context is processed by the platforms and may be transferred to countries outside the European Union, in particular the USA. According to their own statements, all of the aforementioned providers maintain an adequate level of data protection that corresponds to that of the former EU-US Privacy Shield, and we have concluded standard data protection clauses with the companies. We do not know how social media platforms use the data from your visit to our account and interaction with our posts for their own purposes, how long this data is stored, or whether data is passed on to third parties. Data processing may differ depending on whether you are registered and logged in to the social network or visit the site as an unregistered and/or unlogged-in user. When you access a post or the account, the IP address assigned to your device is transmitted to the social media platform provider. If you are currently logged in as a user, a cookie on your device can be used to track how you have navigated the network. Buttons embedded in websites es platforms to record your visits to these websites and assign them to your respective profile. This data can be used to tailor content or advertising to you. If you want to avoid this, you should log out or deactivate the "stay logged in" function, delete the cookies on your device, and restart your browser. 

12.4.
As the provider of the information service, we also only process the data from your use of our service that you provide to us and that requires interaction. For example, if you ask a question that we can only answer by email, we will store your information in accordance with the general principles of our data processing, which we describe in this privacy policy. The legal basis for the processing of your data on the social media platform is Art. 6 (1) (f) GDPR. 

12.5.
To exercise your rights as a data subject, you can contact either us or the provider of the social media platform. If one party is not responsible for responding or needs to obtain the information from the other party, we or the provider will forward your request to the respective partner. If you have any questions about profile creation or the processing of your data when using the website, please contact the operator of the social media platform directly. If you have any questions about the processing of your interaction with us on our site, please write to us using the contact details provided above. 

12.6.
The information that the social media platform receives and how it is used is described by the providers in their privacy policies (see link in the table above). There you will also find information about contact options and settings for advertisements. Further information about social networks and how you can protect your data can also be found atde. 

13. Third-party tools 

13.1
Use of Google Tag Manager 

13.1.1.
This website uses Google Tag Manager, a cookie-free domain that does not collect any personal data. 

13.1.2.
This tool triggers other tags, which may in turn collect data. Google Tag Manager does not access this data. If you have disabled tracking at the domain or cookie level, this setting will remain in effect for all tracking tags implemented with Google Tag Manager. 

13.1.3.
We use Google Tag Manager to make it easier to manage and develop our website. Google Tag Manager helps us efficiently control content on different pages, reduces the potential for errors, prevents outdated processes, and thus ensures a secure user experience. The legal basis for its use is Art. 6 (1) (a) GDPR. 

13.2.
Use of Google Maps 

13.2.1.
We use Google Maps on this website. We use Google Maps in conjunction with the service provider snazzymaps to embed customized Google Maps into our website. The provider is Atmist, 10940 – 166A St Unit 201, T5P 3V5 Edmonton, Canada. This allows us to display interactive maps directly on the website and enables you to conveniently use the map function. The legal basis for the use of the maps is Art. 6 (1) (a) GDPR, i.e., the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with effect for the future. You can revoke your consent at any time with effect for the future by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.2.2.
When you visit the website, Google receives information that you have accessed the corresponding subpage of our website. In addition, the basic data mentioned above, such as your IP address and time stamp, is transmitted. This occurs regardless of whether Google provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data as usage profiles and uses it for advertising, market research, and/or the needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. 

13.2.3.
The information collected is stored on Google servers, including in the US. In such cases, the provider has, according to its own statements, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has undertaken to comply with applicable data protection laws when transferring data internationally. We have also agreed on standard data protection clauses with Google, the purpose of which is to ensure an adequate level of data protection in third countries. 

13.2.4.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the provider's privacy policy. There you will also find further information on your rights in this regard and settings options for protecting your privacy: de. 

13.2.5.
For information about Snazzy Maps, please visit: https://snazzymaps.com 

13.3.
Use of Google Analytics 

13.3.1.
This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). es purpose es our use of this tool es enable the analysis of your user interactions on websites and in apps and to improve our offering and make it more interesting for you as a user based on the statistics and reports obtained. 

13.3.2.
We primarily collect information about your interactions with our website using cookies, device/browser data, IP addresses, and website or app activity. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as website operators, with information about the country, region, or location from which the respective user originates (so-called "IP location determination"). For your protection, we naturally use the anonymization function ("IP masking"), which means that Google truncates the IP addresses within the EU/EEA by the last octet. 

13.3.3.
Google acts as a processor and we have entered into a corresponding contract with Google. The information generated by the cookie and the (usually truncated) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. In such cases, Google has stated that it has imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has undertaken to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to ensure an adequate level of data protection in third countries. 

13.3.4.
The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 (1) (a) GDPR). Any necessary cookies are also only set with your consent in accordance with § 25 (1) TDDDG. You can withdraw your consent at any time without affecting the lawfulness of the processing until withdrawal. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to revoke your consent is to use our Consent Manager or install the Google browser add-on, which is available at the following link: tools.google.com/dlpage/gaoptout?de/. 

13.3.5.
For more information about the scope of Google Analytics services, please visit marketingplatform.google.de/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?de/. General information on data processing, which according to Google also applies to Google Analytics, can be found in Google's privacy policy atde. 

13.4.
Use of Google Analytics 

13.4.1.
This website uses Google Analytics, a web tracking service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). es purpose es our use of this tool es enable the analysis of your user interactions on websites and in apps and to improve our offering and make it more interesting for you as a user based on the statistics and reports obtained. 

13.4.2.
We primarily collect information about your interactions with our website using cookies, device/browser data, IP addresses, and website or app activity. Google Analytics also collects your IP addresses to ensure the security of the service and to provide us, as website operators, with information about the country, region, or location of the respective user (known as "IP location determination"). For your protection, we naturally use the anonymization function ("IP masking"), which means that Google truncates the last octet of IP addresses within the EU/EEA. 

13.4.3.
Google acts as a processor and we have entered into a corresponding contract with Google. The information generated by the cookie and the (usually abbreviated) IP addresses about your use of this website are usually transferred to a Google server in the USA and processed there. In such cases, Google has, according to its own statements, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has undertaken to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard contractual clauses with Google, the purpose of which is to ensure an adequate level of data protection in third countries. 

13.4.4.
The legal basis for the collection and further processing of the information (which takes place for a maximum of 14 months) is your consent (Art. 6 (1) (a) GDPR). Any necessary cookies are also only set with your consent in accordance with § 25 (1) TDDDG. You can revoke your consent at any time without affecting the lawfulness of the processing until revocation. In apps, you can reset the advertising ID in the Android or iOS settings. The easiest way to revoke your consent is to use our Consent Manager or install the Google browser add-on, which is available at the following link: tools.google.com/dlpage/gaoptout?de/. 

13.4.5.
For more information about the scope of Google Analytics services, please visit marketingplatform.google.de/. Google provides information on data processing when using Google Analytics at the following link: support.google.com/analytics/answer/6004245?de/. General information on data processing, which according to Google also applies to Google Analytics, can be found in Google's privacy policy atde. 

13.5.
Google Conversion Tracking 

13.5.1.
We use Google Ads with the additional application "Google Conversion Tracking." es a process that allows us to check the success of our advertising campaigns. To do this, the advertisements are provided with a technical measure, e.g., an ID, which allows us to determine how a user interacts after clicking on the advertisements and whether one of our services is actually used. This provides us with statistical information about the total number of readers of our advertisements, which advertisements are particularly popular, and, if applicable, further information about the consequences of the advertisement. 

13.5.2.
The legal basis for the processing of your data is also Art. 6 (1) (a) GDPR, i.e., integration only takes place with your consent. You can prevent or stop using the conversion tracking function in the same way as es for Google Ads. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with future effect by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings.

Google Remarketing 

13.6.1.
We use Google Ads with the additional application "Google Remarketing." This process allows us to create advertisements based on existing information about you and to target you again as you continue to use the Internet. This is done by means of cookies set when you visit our offers (usually through cookies), which Google uses to record and pseudonymize your usage behavior when you visit various websites. According to Google, the data collected as part of remarketing is not merged with your personal data that may be stored by Google. 

13.6.2.
The legal basis for the processing of your data is also Art. 6 (1) (a) GDPR, i.e., integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with § 25 (1) TDDDG. You can revoke your consent at any time with future effect by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

DoubleClick by Google 

13.7.1.
This website also uses the online marketing tool DoubleClick by Google. DoubleClick uses cookies to display ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads multiple times. Google uses a cookie ID to track which ads are displayed in which browser and can thus prevent them from being displayed multiple times. In addition, DoubleClick can use cookie IDs to track conversions related to ad requests. This is the case, for example, when a user sees a DoubleClick ad and later visits the advertiser's website with the same browser and makes a purchase there. According to Google, DoubleClick cookies do not contain any personal information. 

13.7.2.
Due to the marketing tools used, your browser automatically establishes a direct connection to Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of DoubleClick, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may find out and store your IP address. 

13.7.3.
You can prevent participation in this tracking process in various ways: a) by adjusting your browser software settings accordingly; in particular, suppressing third-party cookies will prevent you from receiving third-party ads; b) by deactivating cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com,"de, although this setting will be deleted if you delete your cookies; c) by deactivating interest-based ads from providers who are part of the "About Ads" self-regulation campaign via the link http://www.aboutads.info/choices, although this setting will be deleted if you delete your cookies; d) by permanently deactivating them in your Firefox, Internet Explorer, or Google Chrome browsers at the link http://www.google.com/settings/ads/plugin. Please note that in this case, you may not be able to use all the functions of this offer to their full extent. 

13.7.4.
The legal basis for the processing of your data is Art. 6 (1) (a) GDPR. If a cookie is necessary for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with future effect. You can revoke your consent at any time with future effect by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.7.5.
For more information about DoubleClick by Google, please visitde and http://support.google.com/adsense/answer/2839090, as well as Google's general privacy policy: https://www.google.de. Alternatively, you can visit the Network Advertising Initiative (NAI) website at http://www.networkadvertising.org. We would like to point out that there is currently no adequate level of data protection in the USA and es is no adequacy decision by the EU Commission. We also point out that, due to the CLOUD Act and other regulations (e.g., intelligence gathering powers under Section 702 FISA and Executive Order 12 333), US authorities may access this data and you do not have the same rights as data subjects within the EU. 

Facebook (Meta) Custom Audiences 

13.8.1.
The website also uses the remarketing function "Website Custom Audiences" from Meta Platforms Ireland Limited, 4 Grand Cala Square, Dublin 2, Ireland ("Facebook"). This allows users of the website to be shown interest-based advertisements ("Facebook Ads") when visiting the social network Facebook or other websites that also use this process. Our interest in doing so is to show you advertisements that are of interest to you in order to make our website more interesting for you. 

13.8.2.
Due to the marketing tools used, your browser automatically establishes a direct connection to Meta's server. We have no influence on the scope and further use of the data collected by Meta through the use of this tool and therefore inform you according to our state of knowledge: By integrating Meta Website Custom Audiences, Meta receives the information that you have accessed the corresponding page of our website or clicked on one of our ads. If you are registered with a Meta service, Meta can assign the visit to your account. Even if you are not registered with Meta or have not logged in, it is possible that the provider may obtain and store your IP address and other identifying features. 

13.8.3.
Logged-in users can deactivate the "Facebook Custom Audiences" function at https://www.facebook.com/settings/?tab=ads#_möglich. 

13.8.4.
The legal basis for the processing of your data is Art. 6 (1) (a) GDPR. If a cookie is required for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with future effect by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.8.5.
For more information about data processing by Meta, please visit https://www.facebook.com/about/privacy. We would like to point out that there is currently no adequate level of data protection in the USA and es is no adequacy decision by the EU Commission. We also point out that, due to the CLOUD Act and other regulations (e.g., intelligence gathering powers under Section 702 FISA and Executive Order 12 333), US authorities may access this data and you do not have the same rights as data subjects within the EU.

A/B testing 

13.9.1.
This website also analyzes user behavior using A/B testing. This allows us to show you our websites with slightly varied content, depending on the profile assignment. This enables us to analyze our offering, improve it regularly, and make it more interesting for you as a user. The legal basis for A/B testing is Art. 6 (1) (a) GDPR, i.e., it is only integrated with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with § 25 (1) TDDDG. You can revoke your consent at any time with future effect by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.9.2.
For this evaluation, the basic data mentioned above, such as IP address and time stamp, is stored on your device. Before the analyses are carried out, the IP addresses are shortened for further processing, thus ruling out any direct personal reference. The IP address transmitted by your browser is not merged with other data collected by us. 

13.9.3.
You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal. The easiest way to withdraw your consent is via our Consent Manager or using the following functions: You can prevent the evaluation by deleting existing cookies and preventing the storage of cookies. If you prevent cookies from being stored, we would like to point out that you may not be able to use our website to its full extent. You can prevent cookies from being stored by adjusting the settings in your browser. 

10/13/
Use of Hotjar 

13.10.1.
This website uses features of the web analytics service Hotjar. The provider is Hotjar Ltd, Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta. 

13.10.2.
We use Hotjar to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offering and make it more interesting for you as a user. On behalf of the operator of this website, Hotjar will use this information to evaluate the use of the website, compile reports on website activity, and provide other services related to website activity and internet usage. The information generated by the cookie about your use of this website is usually transferred to a Hotjar server and stored there. 

13.10.3.
We use Hotjar's anonymization feature on this website. This shortens your IP address and ensures that the analysis data is not personally identifiable. We do not combine the data with other personal data. 

13.10.4.
We only use this tool if you give your consent, which you can do via the consent manager. The legal basis for this is Art. 6 (1) (a) GDPR. You can also opt out of the analysis function by simply activating the standard "Do Not Track" function in your browser. In this case, we will not process your personal data in the manner described here. An explanation of how to activate the "Do Not Track" function can be found at this link: www.hotjar.com/legal/compliance/opt-out/ 

13.10.5.
If a cookie is necessary for this downstream data processing, it will be set in accordance with Section 25 (1) TDDDG. You can revoke your consent at any time with future effect by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.11.
Use of Elfsight Instagram Wall 

13.11.1.
We use the Elfsight Instagram Wall plugin from the provider SP Iusupov A.A. (operator of elfsights.com). The legal basis for the use of the plugin is Art. 6 (1) (a) GDPR, i.e. the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with § 25 (1) TDDDG. You can revoke your consent at any time with future effect by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.11.2.
We use this plug-in to improve the display of our Instagram feed on our website. 

13.11.3.
The information collected is stored on the providers' servers, including outside Europe in the case of international providers. In such cases, the provider has, according to its own statements, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has undertaken to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard data protection clauses with the providers, the purpose of which is to ensure an adequate level of data protection in third countries. 

13.11.4.
You may revoke your consent at any time without affecting the lawfulness of the processing prior to revocation. The easiest way to revoke your consent is via our Consent Manager. 

13.11.5.
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found at https://elfsight.com/privacy-policy/  

13.11.6.
We would like to point out that there is currently no adequate level of data protection in the USA and es is no adequacy decision by the EU Commission. We also point out that, due to the CLOUD Act and other regulations (e.g., intelligence gathering powers under Section 702 FISA and Executive Order 12 333), US authorities can access this data and you do not have the same rights as data subjects in the EU. 

13.12.
Integration of the Trusted Shops Trustbadge 

13.12.1.
If you have given your consent in accordance with Art. 6 (1) (a) GDPR, Trusted Shops widgets are integrated into this website to display Trusted Shops services (e.g., seals of approval, collected reviews) and to offer Trusted Shops products to buyers after they have placed an order. 

13.12.2.
The Trustbadge and the services advertised with it are offered by Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are jointly responsible for data protection in accordance with Art. 26 GDPR. In this privacy policy, we will inform you about the essential contents of the contract in accordance with Art. 26 (2) GDPR. 

13.12.3.
As part of the joint responsibility between us and Trusted Shops, if you have any questions about data protection or wish to assert your rights, please contact Trusted Shops using the contact details provided in the data protection information . Regardless of this, you can always contact the controller of your choice. If necessary, your request will then be forwarded to the other controller for a response. 

13.12.4.
The Trustbadge is provided by a US CDN (content delivery network) provider. An adequate level of data protection is ensured by standard data protection clauses and other contractual measures.  

13.12.5.
When the Trustbadge is accessed, the web server automatically stores a so-called server log file, which also contains your IP address, date and time of access, amount of data transferred, and the requesting provider (access data) and documents the access. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to your person. The anonymized data is used in particular for statistical purposes and for error analysis. 

13.12.6.
If you have given your consent, the Trustbadge will access the order information stored on your end device (order total, order number, product purchased, if applicable) and your email address after the order has been completed, and your email address will be hashed using a cryptographic one-way function. The hash value is then transmitted to Trusted Shops together with the order information in accordance with Art. 6 (1) (a) GDPR. This is used to check whether you are already registered for Trusted Shops services. If this is the case, further processing will be carried out in accordance with the contractual agreement between you and Trusted Shops. contractual agreement. If you are not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will then be given the opportunity to register manually for the use of the services or to complete the security measures within the framework of your existing user agreement, if applicable. 

13.12.7.
For this purpose, after you have completed your order, the Trustbadge accesses the following information stored on the terminal device you are using: order total, order number, and email address. This is necessary so that we can offer you buyer protection. The data will only be transferred to Trusted Shops if you actively decide to take out buyer protection by clicking on the corresponding button in the Trustcard. If you decide to use the services, further processing is based on the contractual agreement with Trusted Shops in accordance with Art. 6 (1) (b) GDPR in order to complete your registration for buyer protection and secure your order, as well as to be able to send you review invitations by email afterwards, if applicable. 

13.12.8.
Trusted Shops uses service providers in the areas of hosting, monitoring, and logging. The legal basis for this is Art. 6 (1) lit. f GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel). An adequate level of data protection is ensured in the case of the USA by standard data protection clauses and other contractual measures, and in the case of Israel by an adequacy decision. Further information is available here. 

13.13.
Integration of YouTube videos 

13.13.1.
We have integrated YouTube videos into our online offering, which are stored on YouTube.com and can be played directly from our website. [These are all integrated in "extended data protection mode," meaning that no data about you as a user is transferred to YouTube if you do not play the videos. Only when you play the videos will the data mentioned in paragraph 2 be transferred. We have no influence on this data transfer. The legal basis for displaying the videos is Art. 6 para. 1 sentence 1 lit. a GDPR, i.e. the integration only takes place with your consent. We set the cookie required for playing the videos in accordance with § 25 para. 2 no. 2 TDDDG, as this is technically necessary. 

13.13.2.
When you visit the website, YouTube receives information that you have accessed the corresponding subpage of our website. In addition, the basic data mentioned above, such as your IP address and time stamp, is transmitted. This occurs regardless of whether YouTube provides a user account that you are logged in to or whether no user account exists. If you are logged in to Google, your data will be directly associated with your account. If you do not want your data to be assigned to your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and uses them for advertising, market research, and/or the needs-based design of its website. Such evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. 

13.13.3.
The information collected is stored on Google servers, including in the US. In such cases, the provider has, according to its own statements, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has undertaken to comply with applicable data protection laws when transferring data internationally. We have also agreed so-called standard data protection clauses with Google, the purpose of which is to ensure an adequate level of data protection in third countries. 

13.13.4.
Further information on the purpose and scope of data collection and its processing by YouTube can be found in the privacy policy. There you will also find further information on your rights and settings options for protecting your privacy:de. 

13.14.
Use of Vimeo 

13.14.1.
We integrate the "Vimeo" service provided by Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA, into our website. 

13.14.2.
We use plugins from the provider Vimeo on some of our pages. When you visit pages on our website that contain such a plugin, a connection to the Vimeo servers is established and the plugin is displayed. This transmits to the Vimeo server which of our pages you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When you use the plugin, e.g. by clicking the start button of a video, this information is also assigned to your user account. You can prevent this assignment by logging out of your Vimeo user account before using our website and deleting the corresponding cookies from Vimeo. 

13.14.3.
The privacy policy of Vimeo Inc. can be viewed here: vimeo.com/privacy 

13.14.4.
The data is processed on the basis of our legitimate interest, i.e. the optimization of our offer and our website in accordance with Art. 6 (1) lit. f. GDPR. The transmission of technically necessary data to Vimeo is also carried out on the same legal basis. The technically necessary cookie for playing the videos is set on the basis of Section 25 (2) No. 2 TDDDG. 

13.14.5.
In order to ensure an adequate level of data protection when transferring data to the USA, we have concluded the EU standard contractual clauses with the provider of Vimeo in the so-called "controller to controller" variant. As a further protective measure, we always embed videos from Vimeo in the "Do Not Track" variant, so that only a minimum amount of personal data is transferred to Vimeo. In addition, the provider of Vimeo has committed to us to continue to comply with the self-imposed obligations from the former so-called Privacy Shield Agreement. 

13:15
LinkedIn Insight Day 

13.15.1.
The website also uses the LinkedIn Insight Tag (or LinkedIn Pixel) from LinkedIn Ireland Unlimited Company ("LinkedIn"). By integrating this JavaScript tag, we can display interest-based and relevant advertisements ("ads") to you as a user of our website when you visit the LinkedIn social network or other websites that also use this process, and we receive statistics about website visitors and demographics. Furthermore, we can evaluate your use of our LinkedIn advertising and your interest in our offers using a conversion tracking function and also show you LinkedIn ads on other websites via retargeting. Our aim in doing so is to improve the effectiveness of LinkedIn ads and make our website more interesting for you. 

13.15.2.
By integrating the LinkedIn Insight tag, your browser automatically establishes a direct connection to the LinkedIn server when you visit the LinkedIn website or websites that have integrated the LinkedIn Insight tag. LinkedIn and we are jointly responsible for collecting your usage data when you visit our website and transmitting it to the provider, but LinkedIn is solely responsible for the relevant processing to achieve the described purposes after the data has been transmitted. We have no influence on the scope and nature of LinkedIn's use of the data, so we inform you according to our knowledge: By integrating the LinkedIn Insight tag, LinkedIn receives information that you have accessed the corresponding page of our website or clicked on one of our ads. If you are registered with a LinkedIn service, LinkedIn can assign the visit to your account. Even if you are not registered with LinkedIn or have not logged in, it is possible that the provider may obtain your IP address, time window, and other identifying features and link them to the actions assigned to you. 

13.15.3.
You can deactivate the LinkedIn Insight tag and opt out of other advertising in the ad settings aten additionally at www.linkedin.com/psettings/guest-controls/retargeting-opt-out. Further settings options and information can be found in the LinkedIn Privacy Center: privacy.linkedin.de?lr=1/. 

13.15.4.
The legal basis for the processing of your data is Art. 6 (1) (a) GDPR, i.e., integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with § 25 (1) TDDDG. You can revoke your consent at any time with future effect by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

LinkedIn also processes your personal data in the US and has imposed a standard on itself that corresponds to the former EU-US Privacy Shield. We have also agreed on standard data protection clauses with LinkedIn, the purpose of which is to ensure an adequate level of data protection in third countries. 

13.15.6.
For more information about data processing by LinkedIn, please contact the provider, LinkedIn Ireland Unlimited Company, Attn: Legal Dept. (Privacy Policy and User Agreement), Wilton Plaza, Wilton Place, Dublin 2, Ireland; Information about LinkedIn Insight Tag: business.linkedin.de?lr=1/; Privacy information: www.linkedin.com/legal/privacy-policy?trk=homepage-basic_footer-privacy-policy/. 

13.16.
Advertising with Meta (pixel and conversion tracking) – formerly Facebook 

13.16.1.
Furthermore, the website uses advertising measures from Meta Platforms Ireland Limited, 4 Grand Cala Square, Dublin 2, Ireland. ("Meta"). By integrating the so-called "Meta Pixel" on our website, we can display our advertising measures ("Facebook Ads") to users of our website and the social network Facebook and measure and evaluate their success ("conversion tracking"). This connection between Meta and our website is technically established via the "Meta Pixel." The legal basis for the processing of your data is Art. 6 (1) (a) GDPR, i.e., the integration only takes place with your consent. If a cookie is required for this downstream data processing, it will be set in accordance with § 25 (1) TDDDG. You can revoke your consent at any time with future effect by clicking on the Cookiebot icon at the bottom left of the browser window and making the appropriate settings. 

13.16.2.
Due to the marketing tools used, your browser automatically establishes a direct connection to Meta's server when you visit our website. We have no influence on the scope and further use of the data collected by Meta through the use of this tool and therefore present the processes known to us to you: By integrating the Meta Pixel, Meta receives information that you have accessed the corresponding page of our website or clicked on one of our ads. If you are registered with a Meta service, Meta can assign the visit to your account. Even if you are not registered with Meta or have not logged in, it is possible that the provider may obtain your IP address and other identifying features and use them to create a profile. 

13.16.3.
The information collected is stored on Meta's servers, including in the US. In such cases, the provider has, according to its own statements, imposed a standard on itself that corresponds to the former EU-US Privacy Shield and has undertaken to comply with applicable data protection laws when transferring data internationally. We have also agreed on standard data protection clauses with Meta, the purpose of which is to ensure an adequate level of data protection in third countries. 

13.16.4.
You may revoke your consent at any time without affecting the lawfulness of the processing prior to revocation. The easiest way to revoke your consent is via our Consent Manager. In addition, logged-in users can object via the provider's function at the following link: www.facebook.com/settings/?tab=ads#_. 

13.16.5.
For more information about data processing by Facebook, please contact Meta Platforms Ireland Limited, 4 Grand Cala Square, Dublin 2, Ireland; privacy policy: www.facebook.com/about/privacy. 

13.16.6.
We also use the "Custom Audiences" remarketing feature, which also uses the Facebook Pixel and displays interest-based advertisements when you visit our website or other websites that also have the Facebook Pixel integrated. This allows us to show you advertisements that are of interest to you in order to make our website more interesting for you and to market our offerings. 

13.17.
Use of Personio in the application process

We use the applicant tracking system to manage our application process. Personio from Personio SE & Co. KG, Rundfunkplatz 4, 80335 Munich.

If you apply via our career page (at de), your personal data will be processed via the Personio platform. The data collected will be processed exclusively for the purpose of processing your application.

The Personio privacy policy, which you can find here, also Es : de

 

14. Recipients or categories of recipients  

14.1.
If we pass on your personal data to third parties, this will be explicitly pointed out in the description of the respective data processing (e.g., when using our contact form). Of course, we also use external service providers for technical and organizational processing, with whom we have concluded corresponding order processing agreements within the meaning of Art. 28 GDPR. These are, for example, service providers for web hosting, sending emails, maintenance and servicing of our IT, etc.

15. Storage period 

15.1.
Your data will be stored for as long as it is absolutely necessary to achieve the respective purpose, but no longer than required by any legal regulations (e.g., under commercial law, we are obliged to retain business letters, which may also include emails, for 10 years). 

15.2.
As soon as the purpose for storage no longer applies or a storage period prescribed by the aforementioned regulations expires, the personal data will be routinely blocked or deleted. 

16. Your rights 

16.1.
You have extensive rights regarding the processing of your personal data. First of all, you have a comprehensive right to information and can, if necessary, request the correction and/or deletion and/or blocking of your personal data. You can also request a restriction of processing and have a right to object and a right to data portability. If you wish to exercise any of your rights and/or receive more detailed information about them, please contact us atde 

16.2.
In addition, you have the right to lodge a complaint with a supervisory authority. If you have any questions, comments, or inquiries regarding the collection, processing, and use of your personal data by us, please also contact us using the contact details provided. 

17. Right to object 

Right to object on a case-by-case basis 

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is based on Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions.  

We will no longer process your personal data es we can demonstrate compelling legitimate grounds for the processing that override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. 

Right to object to the processing of data for direct marketing purposes 

If your personal data is processed for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling insofar as es is related es such direct marketing. 

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes. 

You have the option, in connection with the use of information society services, to exercise your right to object by means of automated procedures using technical specifications, notwithstanding Directive 2002/58/EC. 

18. No obligation to provide personal data 

18.1.
We do not make the conclusion of contracts with us dependent on you providing us with personal data in advance. As a customer, you are generally not legally or contractually obliged to provide us with your personal data; however, es only be able to provide certain offers to a limited extent or not at all if you do not provide the necessary data. If this should exceptionally be the case in the context of the products and services we offer, as presented above, you will be notified separately.