We appreciate your interest in our website. Protecting your privacy is very important to us. Below we will inform you in detail about how your data is handled.

Unless otherwise stated below, the provision of your personal data is neither required by law nor contractually, nor is it necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it has no consequences. This only applies if no other information is provided during subsequent processing operations.

Server log files

You can visit our websites without providing any personal information.

Every time you access our website, usage data is transmitted to us or our web host/IT service provider through your Internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR out of our overriding legitimate interest in ensuring trouble-free operation of our website and in improving our offering.

Your data will be transmitted to Canada, among other places. There is an adequacy decision from the EU Commission for data transfers to Canada.

1. Contact

Responsible person

You can find our contact details for the person responsible for data processing in our legal notice.

Initiative contact from the customer via email

If you initiate business contact with us via email, we will only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves to process and answer your contact request.

If the contact is used to carry out pre-contractual measures (e.g. advice if you are interested in buying, preparing an offer) or concerns a contract that has already been concluded between you and us, this data processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR.

If contact is made for other reasons, this data processing is carried out on the basis of Article 6 (1) (f) GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6 Paragraph 1 Letter f of the GDPR.

We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we only collect your personal data (name, email address, message text) to the extent provided by you. The data processing serves the purpose of establishing contact.

If the contact is used to carry out pre-contractual measures (e.g. advice if you are interested in buying, preparing an offer) or concerns a contract that has already been concluded between you and us, this data processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR.

If contact is made for other reasons, this data processing is carried out on the basis of Article 6 (1) (f) GDPR due to our overriding legitimate interest in processing and answering your request. In this case, you have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Article 6 Paragraph 1 Letter f of the GDPR.

We only use your email address to process your request. Your data will then be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

2. Customer account orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Article 6 Paragraph 1 Letter a GDPR with your consent. You can revoke your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out based on your consent before its revocation. Your customer account will then be deleted.

Collection, processing and transfer of personal data when placing orders

When you place an order, we only collect and process your personal data to the extent that this is necessary to fulfill and process your order and to process your inquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded. The processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR and is necessary for the fulfillment of a contract with you.

Your data will be passed on, for example, to the shipping companies and dropshipping providers you have chosen, payment service providers, service providers for order processing and IT service providers. In all cases we strictly observe the legal requirements. The amount of data transmission is limited to a minimum.

Your data will be transmitted to Canada, among other places. There is an adequacy decision from the EU Commission for data transfers to Canada.

3. Reviews

Data collection when writing a comment

When you comment on an article or post, we only collect your personal data (name, email address, comment text) to the extent provided by you. The processing serves the purpose of enabling commenting and displaying comments. By submitting the comment, you consent to the processing of the transmitted data. Processing is carried out on the basis of Article 6 Paragraph 1 Letter a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on your consent before its revocation. Your personal data will then be deleted.

When your comment is published, only the name you provide will be published.

In addition, when you submit a comment, your IP address will be stored for the purpose of preventing misuse of the comment function and ensuring the security of our information technology systems. By submitting the comment, you consent to the processing of the transmitted data. Processing is carried out on the basis of Article 6 Paragraph 1 Letter a GDPR with your consent. You can revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out based on your consent before its revocation. Your IP address will then be deleted.

Shop information customer rating

For our website we use the evaluation tool “shopauskunft.de” from Gewerbebund Management AG (Torgauer Straße 233 B, 04347 Leipzig; “Shopauskunft”).

After placing your order, we would like to ask you to rate and comment on your purchase from us. For this purpose, we will write to you by email, using the technical system “Legally Secure Valuation Request (RBA)”. We process the data about your order (order number/invoice number, purchase value and shipping costs) as well as your email address.

The processing takes place on the basis of Article 6 Para. 1 lit. a GDPR with your consent, provided that you have expressly agreed to the transfer of your data and to receiving the request for evaluation.

You can revoke your consent at any time using the relevant link in the email or by notifying us, without affecting the lawfulness of the processing carried out based on your consent before its revocation.

Further information on data protection when using Shopauskunft can be found at: https://www.shopauskunft.de/datenschutz.

Shop information widget

The shop information widget is integrated into our website. This serves the purpose of displaying the number and results of the reviews we have received so far via shop information and thus advertising.

In order to display the widget, it is technically necessary to transmit usage data through your Internet browser to the Shop Information server and store it in log data (so-called server log files) for 7 days. This stored data includes the name and URL of the file accessed, the date and time of access, the IP address of the requesting computer, the website from which access is made (referrer URL), the browser used and, if applicable, your operating system computer and the name of your access provider. The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in promoting our offers by displaying the customer reviews we have already received. This data is not stored together with other personal data.

4. Merchandise management

Use of an external merchandise management system

We use an inventory management system to process the contract as part of order processing. For this purpose, your personal data collected as part of the order will be sent to

Billbee GmbH, Paulinenstrasse 54, 32756 Detmold, Germany

pakaneo GmbH, Gerberschanze 1a, 88131 Lindau, Germany

transmitted.

5. Payment service providers

Using Paypal

All PayPal transactions are subject to the PayPal Privacy Policy. You can find these at https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Using Paypal Express

We use the PayPal Express payment service from PayPal (Europe) S.à.rl et Cie, SCA (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The data processing serves the purpose of being able to offer you payment via the PayPal Express payment service. In order to integrate this payment service, it is necessary for PayPal to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies can also be used for this purpose. The cookies enable your browser to be recognized.

The use of cookies or comparable technologies is based on Section 15 Paragraph 3 Sentence 1 TMG. Your personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons relating to your particular situation.

By selecting and using PayPal Express, the data required for payment processing will be transmitted to PayPal in order to be able to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR. Further information on data processing when using the PayPal Express payment service can be found in the associated data protection declaration at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS .

Use of Amazon Payments

We use the Amazon Payments payment service from Amazon Payments Europe sca (38 avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”) on our website.

The data processing serves the purpose of being able to offer you payment via the Amazon Payments payment service.

In order to integrate this payment service, it is necessary for Amazon Payments to collect, store and analyze data (e.g. IP address, device type, operating system, browser type, location of your device) when you access the website. Cookies can also be used for this purpose. The cookies enable your browser to be recognized.

The use of cookies or comparable technologies is based on Section 15 Paragraph 3 Sentence 1 TMG. Your personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in a customer-oriented offer of various payment methods. You have the right to object to this processing of personal data concerning you at any time for reasons relating to your particular situation.

By selecting and using “Amazon Payments”, the data required for payment processing will be transmitted to Amazon Payments in order to be able to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Article 6 Paragraph 1 Letter b GDPR.

Further information on data processing when using the Amazon Payments payment service can be found in the associated data protection declaration at: https://pay.amazon.com/de/help/201212490

Use of personal data when selecting Klarna payment options

In order to be able to offer you Klarna's payment options, we will transmit personal data, such as contact details and order details, to Klarna. In this way, Klarna can assess whether you can use the payment options offered through Klarna and adapt the payment options to your needs. General information about Klarna can be found at: https://www.klarna.com/de/ . Your personal information will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy .

6. Advertising

Use of the email address to send newsletters

Regardless of the contract processing, we use your email address exclusively for our own advertising purposes to send newsletters, provided you have expressly agreed to this by subscribing to our newsletter. Processing is carried out on the basis of Article 6 Paragraph 1 Letter a GDPR with your consent. By agreeing to the newsletter, you also consent to the newsletter success measurement (see below under Newsletter - Success Measurement). You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the distribution list.

The product-related newsletters are sent using the shipping service provider “Klaviyo”, a newsletter delivery platform from the US provider Klaviyo, Inc., 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), USA. You can view the data protection regulations of the shipping service provider here: https://www.klaviyo.com/privacy/policy . The shipping service provider is used on the basis of an order processing contract in accordance with Article 28 Paragraph 3 Sentence 1 GDPR. Your personal data will be transferred to the USA (see also transfers to countries outside the EEA, section 7). The USA (and other non-EEA countries) do not offer a level of data protection comparable to that of the European Union and, in particular, access by government authorities cannot be ruled out in individual cases. However, Klaviyo, Inc. is contractually obliged to process data in accordance with the EU standard contractual clauses. By registering for the newsletter, you also consent to possible data transfers to Klaviyo, Inc. in the USA. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us.

The shipping service provider can use the recipient's data in a pseudonymous form, ie without assigning it to a user, to optimize or improve its own services, for example to technically optimize shipping and the presentation of the newsletter or for statistical purposes. However, the shipping service provider does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.

It will not be passed on to other third parties.

Newsletter – measuring success

The newsletters contain a so-called “web beacon”, ie a pixel-sized file that is retrieved from our server, or if we use a shipping service provider, from their server when the newsletter is opened. As part of this retrieval, technical information is initially collected, such as information about the browser and your system, as well as your IP address and the time of retrieval.

This information is used to technically improve the services based on the technical data or the target groups and their reading behavior based on their access locations (which can be determined using the IP address) or access times. The statistical surveys also include determining whether the newsletters are opened, when they are opened and which links are clicked. For technical reasons, this information can be assigned to individual newsletter recipients. However, it is neither our intention nor, if used, that of the shipping service provider to monitor individual users. The evaluations serve us much more to recognize the reading habits of our users and to adapt our content to them or to send different content according to the interests of our users.

Unfortunately, it is not possible to revoke the success measurement separately; in this case, consent to the newsletter must be revoked as a whole.

Use of your personal data to send you postal advertising

We use your personal data (name, address), which we received in the context of selling a good or service, to send you postal advertising, unless you have objected to this use. The provision of this data is necessary for the conclusion of the contract. Failure to provide it will result in no contract being concluded.

The processing is carried out on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in direct advertising. You can object to this use of your address data at any time by notifying us. The contact details for exercising your objection can be found in the legal notice.

7. Cookies

Our website uses cookies. Cookies are small text files that are stored in the Internet browser or by the Internet browser on a user's computer system. When a user accesses a website, a cookie can be stored on the user's operating system. This cookie contains a characteristic string that allows the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. Therefore, you have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are set and decide individually whether to accept them and prevent the storage of the cookies and the transmission of the data they contain. Cookies that have already been saved can be deleted at any time. However, we would like to point out that you may then not be able to use all functions of this website to their full extent.

Technically necessary cookies

Unless otherwise stated in the data protection declaration below, we only use these technically necessary cookies for the purpose of making our offering more user-friendly, effective and secure. Cookies also make it possible

our systems to recognize your browser even after a page change and to offer you services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a page change.

The use of cookies or comparable technologies is based on Section 15 Paragraph 3 Sentence 1 TMG. Your personal data is processed on the basis of Article 6 Paragraph 1 Letter f of the GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our offering.

You have the right to object to this processing of personal data concerning you at any time for reasons relating to your particular situation.

8. Consent to cookies and web analysis

When you access our website, a so-called “cookiebot button” appears with which we ask you for your consent to set cookies to optimize our websites and for web analysis (see immediately under analysis and advertising tracking). If you agree, we will proceed as described in more detail in the following sections. There you will also find information on how you can revoke your consent at any time and prevent the setting of cookies or web analysis using the technology of individual providers.

As part of the cookies used, data is also transferred to unsafe third countries, in particular the USA (see section 11 for transfers to countries outside the EEA).

You can configure the setting of cookies and tracking using the following button:

Change your consent

You can find out how you can manage cookies in the most important browsers (including deactivating them) using the links below:

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=de

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablassen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

9. Analytics and advertising tracking

Use of Google Analytics

We use the web analysis service Google Analytics from Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and compliance with applicable data protection laws.

The data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator. The following information can be collected, among other things: IP address, date and time of page access, click path, information about the browser you use and the device you use, pages visited, referrer URL (website through which you access our website), location data, purchasing activities. The IP address transmitted by your browser as part of Google Analytics is not combined with other Google data.

Google Analytics uses technologies such as cookies, web storage in the browser and web beacons that enable analysis of your use of the website. The information generated in this way about your use of this website is usually transmitted to a Google server in the USA and stored there. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks . Both Google and US state authorities have access to your data. Your data may be linked by Google with other data, such as your search history, your personal accounts, your usage data from other devices and any other data that Google has about you.

IP anonymization is activated on this website. As a result, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there.

The use of cookies or comparable technologies takes place with your consent on the basis of Section 15 Paragraph 3 Sentence 1 TMG in conjunction with Article 6 Paragraph 1 Letter a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation.

Further information on terms of use and data protection can be found at https://www.google.com/analytics/terms/de.html or at https://www.google.de/intl/de/policies/ and at https:/ /policies.google.com/technologies/cookies?hl=de .

You can revoke your consent to web analysis and the related use of cookies as well as data transfer to the USA as follows: On the one hand, you can prevent the storage of cookies by setting your browser software accordingly. On the other hand, you can prevent the collection and transmission of data relating to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available under the following link. Alternatively, you can prevent Google Analytics from collecting data by changing your cookie settings using the following link: Change your consent .

Use of the Facebook Pixel

We use the “Custom Audiences” remarketing function from Meta Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland “Facebook”) on our website.

Meta Ireland and we are jointly responsible for the collection of your data when you integrate the service and the transmission of this data to Facebook. The basis for this is an agreement between us and Facebook Ireland on the joint processing of personal data, in which the respective responsibilities are determined. The agreement can be accessed at https://www.facebook.com/legal/controller_addendum . Thereafter, we are in particular responsible for fulfilling the information obligations in accordance with Articles 13 and 14 of the GDPR, for compliance with the security requirements of Article 32 of the GDPR with regard to the correct technical implementation and configuration of the service, and for compliance with the obligations under Article 33 , 34 GDPR, to the extent that a personal data breach affects our obligations under the joint processing agreement. Meta Ireland is responsible for enabling the rights of those affected in accordance with Articles 15 - 20 of the GDPR, of complying with the security requirements of Article 32 of the GDPR with regard to the security of the service and of fulfilling the obligations under Articles 33 and 34 of the GDPR to the extent that there is a violation of the protection of personal data concerns Facebook Ireland's obligations under the Joint Processing Agreement.

The purpose of the application is to target visitors to the website with interest-based advertising on the social network Facebook. For this purpose, Facebook's remarketing tag was implemented on the website. This tag is used to establish a direct connection to the Facebook servers when you visit the website. This sends information to the Facebook server about which of our pages you have visited. Facebook assigns this information to your personal Facebook user account. When you visit the social network Facebook, you will be shown personalized, interest-based Facebook ads.

Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://www.facebook.com/legal/EU_data_transfer_addendum .

The use of cookies or comparable technologies is based on Section 15 Paragraph 3 Sentence 1 TMG. Your personal data is processed on the basis of Article 6 Paragraph 1 Letter f of the GDPR due to our overriding legitimate interest in targeting site visitors with interest-based advertising. You have the right to object to this processing of personal data concerning you at any time for reasons relating to your particular situation. You can deactivate the “Custom Audiences” remarketing function here.

Further information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy can be found in Facebook's data protection information at https://www.facebook.com/about/privacy/ .

Use of Google ads conversion tracking

We use the online advertising program “Google Ads” on our website and, in this context, conversion tracking (visit action evaluation). Google Conversion Tracking is an analysis service provided by Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and compliance with applicable data protection laws.

If you click on an ad placed by Google, a cookie for conversion tracking will be stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. There is therefore no possibility that cookies can be tracked via the websites of Ads customers.

The information collected using the conversion cookie is used to create conversion statistics. Here we find out the total number of users who clicked on one of our ads and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users.

Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks .

The use of cookies or comparable technologies takes place with your consent on the basis of Section 15 Paragraph 3 Sentence 1 TMG in conjunction with Article 6 Paragraph 1 Letter a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation.

Further information and Google's privacy policy can be found at: https://www.google.de/policies/privacy/

Use of the remarketing or “similar target groups” function of Google Inc.

We use the remarketing or “similar target groups” function of Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) on our website. If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and compliance with applicable data protection laws.

The application serves the purpose of analyzing visitor behavior and visitor interests. Google uses cookies to carry out the analysis of website usage, which forms the basis for creating interest-based advertisements. The cookies record visits to the website as well as anonymized data about the use of the website. There is no storage of personal data of visitors to the website. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that most likely take into account previously accessed product and information areas.

Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks .

The use of cookies or comparable technologies takes place with your consent on the basis of Section 15 Paragraph 3 Sentence 1 TMG in conjunction with Article 6 Paragraph 1 Letter a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without affecting the lawfulness of the processing carried out based on your consent before its revocation.

Further information about Google Remarketing and the associated data protection declaration can be found at: https://www.google.com/privacy/ads/

10. Plug-Ins and Miscellaneous

Using Google Tag Manager

We use Google Tag Manager from Google LLC on our website. (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”). If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and compliance with applicable data protection laws.

This application manages JavaScript tags and HTML tags, which are used to implement tracking and analysis tools in particular. The data processing serves the purpose of tailoring and optimizing our website.

The Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables the triggering of additional tags that can collect and process personal data.

Further information on terms of use and data protection can be found here .

Use of Google Recaptcha

We use the reCAPTCHA service from Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) on our website.

If you have your habitual residence in the European Economic Area or Switzerland, Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland) is the controller responsible for your data. Google Ireland Limited is therefore the company affiliated with Google that is responsible for processing your data and compliance with applicable data protection laws. The query serves the purpose of distinguishing between input by a human or by automated, machine processing. For this purpose, your input will be transmitted to Google and used there. In addition, the IP address and any other data required by Google for the reCAPTCHA service are transmitted to Google. This data is processed by Google within the European Union and may also be transmitted to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks . Processing is carried out on the basis of Article 6 Paragraph 1 Letter f of the GDPR in the legitimate interest of protecting our website from automated spying, misuse and SPAM. For reasons arising from your particular situation, you have the right to object at any time to this processing of your personal data based on Article 6 Paragraph 1 Letter f of the GDPR.

Further information about Google reCAPTCHA and the associated data protection declaration can be found at: https://www.google.com/recaptcha/intro/android.html and https://www.google.com/privacy .

Use of YouTube

We use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "YouTube") on our website. YouTube is a partnership with Google LLC (1600 Amphitheater Parkway, Mountain View, CA 94043, USA; “Google”) affiliated company.

The function displays videos stored on YouTube in an iFrame on the website. The “Extended data protection mode” option is activated. This means that YouTube does not store any information about website visitors. Only when you watch a video is information about it transmitted to YouTube and stored there. Your data may be transferred to the USA. There is no adequacy decision from the EU Commission for the USA. The data transfer is based, among other things, on standard contractual clauses as appropriate guarantees for the protection of personal data, which can be viewed at: https://policies.google.com/privacy/frameworks .

The use of cookies or comparable technologies is based on Section 15 Paragraph 3 Sentence 1 TMG. Your personal data is processed on the basis of Art. 6 Para. 1 lit. f GDPR due to our overriding legitimate interest in the needs-based and targeted design of the website. You have the right to object to this processing of personal data concerning you at any time for reasons relating to your particular situation.

Further information on the collection and use of data by YouTube and Google, your rights in this regard and options for protecting your privacy can be found in YouTube's data protection information at https://www.youtube.com/t/privacy .

Use of GDPR/CCPA + Cookie Management

We use the consent management tool GDPR/CCPA + Cookie Management from iSenseLabs on our website. The tool enables you to grant consent to data processing via the website, in particular the setting of cookies, and to make use of your right to revoke consent that has already been given.

The data processing serves the purpose of obtaining and documenting the necessary consent for data processing and thus complying with legal obligations. Cookies can be used. The following information, among others, can be collected and transmitted to Cookiebot: anonymized IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data will not be passed on to other third parties.

Data processing is carried out to fulfill a legal obligation based on Article 6 Paragraph 1 Letter c GDPR.

Further information about terms of use and data protection at iSenseLabs can be found at: https://gdpr.apps.isenselabs.com/pages/privacy_policy .

11. Transfer to third parties and to countries outside the European Union

Your personal data will only be transferred to third parties if there is legal permission or you have given your prior consent. We only pass on your data to government authorities within the framework of legal obligations or based on an official order or court decision.

With the exception of the processing described in sections 2, 5 and 6, we do not pass on your data to recipients based outside the European Union or the European Economic Area. The processing mentioned in points 2, 5 and 6 results in data being transferred to the servers of the providers commissioned by us. These servers are located in the USA. The data transfer takes place on the basis of so-called standard contractual clauses of the EU Commission.

We would like to point out that the USA is not a safe third country within the meaning of EU data protection law. In certain cases, US companies are obliged to hand over personal data to security authorities without you as the data subject being able to take legal action against this. It cannot therefore be ruled out that US authorities (e.g. secret services) process, evaluate and permanently store your data on US servers for surveillance purposes. We have no influence on these processing activities.

12. Duration of storage

After the contract has been fully processed, the data will initially be stored for the duration of the warranty period, then taking into account statutory retention periods, in particular tax and commercial law, and then deleted after the deadline has expired, unless you have agreed to further processing and use.

The data collected using Google Analytics will be deleted no later than 14 months after the last new entry in the respective usage profile. Furthermore, we delete your personal data as soon as they are no longer required for the purposes for which they were collected and processed and provided that there are no legal retention obligations to the contrary. If you have given your consent, we will delete your data after revoking your consent, unless there are legal retention obligations or storage is not justified by another legal basis.

13. Data Security

We have taken technical and organizational measures to protect the personal data you provide against loss, destruction, manipulation and unauthorized access. Our employees and all persons involved in data processing are obliged to comply with data protection laws and to handle personal data confidentially. To protect our users' personal data, we use a secure online transmission process, the so-called "Secure Socket Layer" (SSL) transmission. You can recognize this by the fact that an "s" is appended to the address component http:// ("https://") or a green, closed lock symbol is displayed. By clicking on the symbol you will receive information about the SSL certificate used. The display of the symbol depends on the browser version you are using. SSL encryption ensures the encrypted and complete transmission of your data.

14. Rights of the data subject

If the legal requirements are met, you are entitled to the following rights in accordance with Articles 15 to 20 of the GDPR: right to information, to correction, to deletion, to restriction of processing, to data portability.

In addition, according to Art. 21 Para. 1 GDPR, you have the right to object to processing based on Art. 6 Para. 1 f GDPR, as well as to processing for the purpose of direct advertising.

If the personal data processing listed here is based on our legitimate interest in accordance with Article 6 Paragraph 1 Letter f of the GDPR, you have the right to object to this processing at any time with future effect for reasons arising from your particular situation.

Once you have objected, the processing of the data concerned will be terminated unless we can demonstrate compelling legitimate reasons for the processing that outweigh your interests, rights and freedoms, or if the processing serves to assert, exercise or defend legal claims.

If personal data is processed for direct advertising purposes, you can object to this processing at any time by notifying us. After an objection has been made, we will stop processing the data concerned for the purpose of direct advertising.

According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that your personal data is not being processed lawfully.

15. Changes to our privacy policy

We reserve the right to adapt this data protection declaration so that it always complies with current legal requirements or to implement changes to our services in the data protection declaration, for example when introducing new services. The new data protection declaration will then apply to your next visit.

last updated: April 14, 2021