INFORMATION ABOUT THE PROCESSING OF YOUR DATA


In accordance with Article 12 of the General Data Protection Regulation (hereinafter: GDPR), we are obliged to inform you about the processing of your data when using our website. We take the protection of your personal data very seriously and this privacy policy informs you about the details of the processing of your data as well as your legal rights in this regard.
We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or the corresponding jurisdiction.
We recommend that you read the data protection declaration from time to time and keep a printout or copy for your records.

 

DEFINITIONS

 

"Website" or "Internet Presence" hereinafter means all pages of the Controller on https://www.mammaly.eu.


"Personal data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data therefore includes, for example, a person's name, email address and telephone number, but may also include data about preferences, hobbies and memberships.


"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.


"Pseudonymisation" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organizational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.


"Consent" hereinafter means any freely given, specific, informed and unambiguous indication of consent in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.


"Google" hereinafter means Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; reachable in the European Union at: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

 


SCOPE OF APPLICATION


The data protection declaration applies to all pages of https://www.mammaly.eu. It does not extend to any linked websites or Internet presences of other providers.

 


RESPONSIBLE PROVIDER


Responsible for the processing of personal data within the scope of this privacy policy is:


Peturo GmbH
Elisabeth Treskow Platz 1, 50678 Cologne, Germany


QUESTIONS ABOUT DATA PROTECTION

If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:

E-mail: datenschutz@mammaly.eu

Postal address:
Data Protection Officer
c/o Peturo GmbH
Elisabeth Treskow Platz 1, 50678, Cologne, Germany

 

SECURITY

We have taken comprehensive technical and organizational precautions to protect your personal data from unauthorized access, misuse, loss and other external interference. To this end, we regularly review our security measures and adapt them to the state of the art.

 

YOUR RIGHTS

You have the following rights with regard to personal data concerning you, which you can assert against us:

  • Right of access (Art. 15 GDPR),
  • Right to rectification (Art. 16 GDPR) or erasure (Art. 17 GDPR),
  • Right to restriction of processing (Art. 18 GDPR),
  • Right to object to processing (Art. 21 GDPR),
  • Right to withdraw your consent (Art. 7 (3) GDPR),
  • Right to receive the data in a structured, common, machine-readable format ("data portability") as well as the right to have the data transferred to another data controller if the conditions of Art. 20 (1) lit. a, b GDPR apply (Art. 20 GDPR).

You can assert your rights by notifying the contact details listed in the section "Responsible provider" or the data protection officer appointed by us.

You also have the right to complain to a data protection supervisory authority about our processing of your personal data (Art. 77 GDPR).

 

USE OF THE WEBSITE, ACCESS DATA

You can use our website for purely informational purposes without revealing your identity. When you call up the individual pages of the website in this sense, only access data is transmitted to our web space provider so that the website can be displayed to you. This is the following data:

  • Browser type/ browser version,
  • Operating system used,
  • Language and version of the browser software,
  • Host name of the accessing end device,
  • IP address,
  • Website from which the request comes,
  • Content of the request (specific page),
  • Date and time of the server request,
  • Access status/HTTP status code,
  • Referrer URL (the previously visited page),
  • Amount of data transferred,
  • Time zone difference to Greenwich Mean Time (GMT).

 

The temporary processing of the IP address by the system is necessary to technically enable the delivery of the website to your computer. The processing of your IP address for the duration of the session is necessary for this. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) GDPR.

The access data is not used to identify individual users and is not merged with other data sources. The access data are deleted when they are no longer required to achieve the purpose of their processing. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website.


IP addresses are stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems.

An evaluation of the data for marketing purposes does not take place in this context either. The data is generally deleted after seven days at the latest; processing beyond this is possible in individual cases. In this case, the IP address is deleted or alienated in such a way that it is no longer possible to assign the calling client.

The collection of data for the provision of the website and the processing of the data in log files is absolutely necessary for the operation of the website. You can object to the processing. You have the right to object on grounds relating to your particular situation, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or where the processing is necessary for the establishment and exercise of, or defense against, legal claims (Article 21(1) GDPR). In the event of your justified objection, we will review the situation and either discontinue or adapt the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing. You can send us your objection via the contact details listed in the section "Responsible provider".

 

COOKIES

In addition to the aforementioned access data, so-called cookies are stored in the Internet browser of the end device you are using when you use the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the PC system and cannot execute any programs. They are used to make our website user-friendly. The use of cookies may be technically necessary or for other purposes (e.g. analysis/ evaluation of website use).

A) TECHNICALLY NECESSARY COOKIES

Some elements of our website require that the calling browser can be identified even after a page change. The following data is processed in the cookies:

  • Language settings,
  • Articles in the shopping basket,
  • Log-in information.

The user data collected through technically necessary cookies are not processed to create user profiles. We also use so-called "session cookies", which store a session ID with which various requests from your browser can be assigned to the joint session. Session cookies are necessary for the use of the website. In particular, they allow us to recognise the device you are using when you return to the website.

We use this cookie to recognise you on subsequent visits to the website if you have an account with us; otherwise you will have to log in again on each visit. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) GDPR. We use session cookies to make the use of the website more attractive and effective. The session cookies are deleted as soon as you log out or close the browser.

Most browsers are preset to automatically accept cookies. You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

B) TECHNICALLY UNNECESSARY COOKIES

We also use cookies on the website that enable an analysis of the user's surfing behavior. The following data, for example, is stored and processed in the cookies:

  • Search terms entered,
  • Frequency of page views,
  • Use of website functions.

These cookies are used to make the use of the website more efficient and attractive. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) GDPR. The technically unnecessary cookies are automatically deleted after a specified period of time, which may differ depending on the cookie.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

By changing your browser settings, you have the option of generally or selectively blocking the placing of cookies or removing cookies that have already been stored. You can also have the corresponding information displayed before setting a cookie. You can also prevent the use of cookies by opening the browser you are using in "private mode". If you change the browser settings for the use of cookies or deactivate cookies, the functionality of this website may be limited.

If we integrate third-party cookies into our website, we will inform you of this separately below.

 

CONTACTING OUR COMPANY

When contacting our company, e.g. via the contact form on the website, the personal data you provide will be processed by us in order to answer your enquiry.
For the processing of enquiries via the contact form on the website, it is mandatory to provide a name and a valid e-mail address. The following data is also processed at the time the message is sent to us:

  • IP address,
  • Date/time of registration.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR or Art. 6 para. 1 p. 1 lit. b) GDPR if the purpose of the contact is to conclude a contract. If the provision of your data is necessary for the conclusion of a contract, it may be impossible to conclude or execute the contract or to process the enquiry if the data is not provided.

The processing of the personal data from the input mask is solely for the purpose of processing the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

In this context, the data is not passed on to third parties. The data is processed exclusively for the purpose of processing the conversation. We delete the data accruing in this context after the processing is no longer necessary or restrict the processing to compliance with the existing legally mandatory retention obligations.
You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

 

PROCESSING AND TRANSFER OF PERSONAL DATA FOR CONTRACTUAL PURPOSES

We process your personal data if and to the extent that this is necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The legal basis for this is Article 6 (1) sentence 1 lit. b) GDPR. If the data processing is necessary for the conclusion of a contract, the conclusion, execution and/or termination of a legal transaction with our company may be impossible if the data is not provided.
After the purpose has been achieved (e.g. conclusion of the contract), the personal data will be blocked for further processing or deleted, unless we are entitled to further storage and processing necessary in the respective context due to consent granted by you (e.g. consent to the processing of the e-mail address for sending electronic advertising mail), a contractual agreement, a legal authorisation (e.g. authorisation to send direct advertising) or due to legitimate interests (e.g. storage for the enforcement of claims).


Your personal data will be passed on to the extent that
it is necessary for the establishment, implementation or termination of legal transactions with our company (e.g. in the case of the transfer of data to a payment service provider/shipping company for the processing of a contract with your person), (Art. 6 para. 1 p. 1 lit. b) GDPR), or
a subcontractor or vicarious agent that we use exclusively in the context of providing the offers or services you have requested requires this data (unless you are expressly informed otherwise, such auxiliaries are only authorized to process the data to the extent that this is necessary for the provision of the offer or service), or
there is an enforceable official order (Art. 6 para. 1 p. 1 lit. c) GDPR), or
there is an enforceable court order (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
we are obliged to do so by law (Art. 6 para. 1 sentence 1 lit. c) GDPR), or
the processing is necessary to protect the vital interests of the data subject or another natural person (Art. 6 para. 1 sentence 1 lit. d) GDPR), or
it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 sentence 1 lit. e) GDPR), or
we are authorized or even obliged to disclose data in pursuit of overriding legitimate interests (Art. 6 para. 1 sentence 1 lit. f) GDPR).
Your personal data will not be passed on to other persons, companies or bodies unless you have effectively consented to such a transfer. The legal basis of the processing is then Art. 6 para. 1 sentence 1 lit. a) GDPR.

 

PROCESSING AND TRANSFER OF PERSONAL DATA IN THE ONLINE ORDERING SYSTEM

If you would like to place an order or booking in our online shop, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, address and e-mail address. The mandatory information required for the order and contract processing is marked separately, other information is provided voluntarily. In case you do not provide the required data, the conclusion of the contract is impossible. We process your data for order processing, in particular we will forward payment data to your chosen payment service provider or our house bank. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) GDPR. To prevent unauthorized third parties from accessing your personal data, the ordering process on the website is encrypted using SSL/TLS technology.

You can voluntarily create a customer account in which we store your data for future visits to the website. When you create a customer account, the data you provide will be processed. All further data, including your customer account, can be edited or deleted by you after successful registration.

We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal obligations to retain data. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with the existing legal obligations.

 

REGISTRATION / PASSWORD-PROTECTED AREA OF THE WEBSITE / CUSTOMER ACCOUNT

If you wish to use the password-protected area of our website, you must register using the following information:
E-mail address,
First and last name, as well as address, if the opening of a customer account is connected with an order.

Furthermore, the following data will be processed at the time of registration:
IP address,
Date/time of registration.

The data will be deleted as soon as they are no longer required to achieve the purpose of their processing. This is the case for the data collected during the registration process when the registration on the website is canceled or modified.

The following functions are available to you in the password-protected area:
Edit your profile data,
View orders you have placed,
Manage the reward system ("Friends recruit friends" and loyalty programme).

If you use the password-protected area of the website, e.g. to edit your profile data or to view orders placed, we also process the personal data required to initiate or fulfill the contract, in particular address data and information on the method of payment.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) GDPR. The data will be deleted as soon as it is no longer required to achieve the purpose for which it was processed or if there are no legitimate interests that prevent its deletion. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with existing legal obligations. The data processing is necessary for the conclusion or initiation of the contract. If you do not provide your data, you may not be able to use the password-protected area and it may not be possible to conclude or execute the contract.
If you voluntarily provide further data (e.g. interests, age, gender, preferences), we will process your data that is not necessary for the initiation or fulfillment of a contract as long as you use the password-protected area and if you do not delete it yourself beforehand. The purpose of this is to optimize the use of the website for you as a user. The legal basis is Art. 6 para. 1 p. 1 lit. f) GDPR.

You can object to the processing. Your right to object exists for reasons that arise from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21 (1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

You can manage, change or delete your voluntary data yourself at any time in the password-protected area. You are free to take measures according to the section "Your rights", whereby we ask you to contact our company as a first step in the event of complaints.

 

APPLICATION PROCEDURE

We are pleased that you are interested in us and that you are applying or have applied for a position in our company. We would like to provide you with the following information on the processing of your personal data in connection with the application. We process the data necessary for the online application process (e.g. name, e-mail address and location) as well as data that you have sent us in connection with your application in order to check your suitability for the position (or other open positions in our company) and to carry out the application process.

The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG in the version applicable from 25 May 2018. According to this, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after the conclusion of the application process, if applicable, data processing may be carried out on the basis of the requirements of Art. 6 of the GDPR, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f) of the GDPR. Our interest then consists of asserting or defending claims.

Data of applicants will be deleted after 6 months in case of rejection. In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years. If you are accepted for a position during the application process, your data will be transferred from the applicant data system to our personnel information system.

We use a specialized software provider for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and servicing of the systems. We have concluded a so-called order processing agreement with this provider, which ensures that the data processing is carried out in a permissible manner.

After receiving your application, your applicant data will be viewed by the personnel department. Suitable applications are then forwarded internally to the person responsible for the respective open position. Then the further procedure is coordinated. Within the company, only those people who need to access your data for the proper conduct of our application process will have access to it.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

 

EMAIL MARKETING FOR EXISTING CUSTOMERS

We reserve the right to use the e-mail address provided by you in the context of the order in accordance with the statutory provisions in order to send you the following content by e-mail during or after the order, unless you have already objected to this processing of your e-mail address:

  • More interesting offers from our portfolio,
  • Information about our company's events,
  • Questions about special requests for product development,
  • Feedback requests.

If the sending of electronic information is not necessary for the execution of a contract (e.g. e-mail in informational form) and the legal basis of Art. 6 para. 1 sentence 1 lit. b) GDPR is relevant, the processing is based on the legal basis according to Art. 6 para. 1 sentence 1 lit. f) GDPR. Our legitimate interests in the aforementioned processing lie in increasing and optimizing our services, sending direct advertising and ensuring customer satisfaction. We delete your data when you terminate your user contract, but no later than three years after termination of the contract.


We would like to point out that you can object to the receipt of direct advertising and the processing of data for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) GDPR). After you have exercised your right of objection, we will delete your data in connection with existing customer advertising. To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsible provider".


PINTEREST ADS

We place so-called "Pinterest Ads" on the social network "Pinterest" (Pinterest Europe Ltd.,Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; hereinafter "Pinterest") based on your usage behaviour on the platform and your search terms and hashtags entered on "Pinterest" so that we can show you advertisements that match your interests and thereby improve your user experience. We also use the analysis functions of "Pinterest Ads" on our website. For the use of "Pinterest Ads", we use so-called "Pinterest Pixels" and "Pinterest Tags" to analyse the usage behaviour of visitors to our website as well as our advertisements on internet presences of "Pinterest", e.g. the online pinboard of "Pinterest". With the help of the "pixels" (1×1 pixel graphics), which are integrated in the advertising material on Pinterest and on our website, we can measure the reach of our advertisements, i.e. which interactions you have completed after viewing an advertising material on our website. For this purpose, your browser automatically establishes a direct connection with the "Pinterest" server. If you access our website via an ad from "Pinterest Ads", "Pinterest" will store a cookie on your end device. With the help of the cookies, "Pinterest" processes the information generated by your terminal device about interactions with our advertising media (call-up of a specific website, click on an advertising medium) as well as partly the data mentioned in the section "Use of our website" for the purpose of analysing the reach measurement of our advertisements. In addition, by analysing the click-through rates of our advertisements, we can measure the rate of users who have performed a certain action on our website, e.g. ordering goods. "Pinterest" also processes the data in part in the USA, has subjected itself to the EU-US Privacy Shield (https://www.privacyshield.gov/EU-US-Framework) and thereby offers a guarantee of compliance with European data protection law. You can view the certification of "Pinterest Inc." at https://www.privacyshield.gov/participant?id=a2zt00000008VVzAAM&status=Active.

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) GDPR. Our legitimate interests in the processing lie in the statistical analysis of website usage, reach measurement and the optimisation of our advertisements as well as in the traceability and improvement of the expenditure of our advertising costs. The storage period with "Pinterest" is a maximum of 30 days. You can find more information on data protection and the storage period for "Pinterest" at: https://policy.pinterest.com/de/privacy-policy and https://policy.pinterest.com/de/cookies.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. You can object to the processing by deactivating interest-based ads by clicking on the link on the website of "Pinterest" ("Personalised ads on Pinterest") at https://optout.aboutads.info/?c=2&lang=EN, whereby this setting will be deleted when you delete your cookies. You can also prevent the use of cookies by deactivating cookies in the settings of your browser software or by opening the browser you are using in "private mode".


COMMENT FUNCTION / GUESTBOOK ON THE WEBSITE

By means of the link to our shop system sent via Mailjet, you can rate the product you have purchased on our website, provided you are the holder of a customer account.
When you make an entry, we process the following personal data:

  • E-mail address,
  • First and last name,
  • Username,
  • Place of residence.

Furthermore, the following data is also processed at the time the entry is made:

  • IP address,
  • Date/time of the entry.

When your entry is published, the e-mail address you have provided will not be published, only the name you have entered in your customer account. You are not obliged to use your real name; you are free to use the function in a pseudonymous way. Within your customer account you can change the name of the advertisement at any time. Your entry will be checked by us before publication. We reserve the right to remove entries at any time if they are found to be illegal.
We process your e-mail address and your name/pseudonym in order to be able to determine whether the entry is a genuine testimonial. Furthermore, we would like to be able to contact you if your entry on the website is objected to by us as being illegal, and to be able to defend ourselves against complaints or claims that may be brought against us on the basis of your entry.
For this purpose, we also process your IP address. We delete the IP address after 1 week. We process your e-mail address in any case as long as the entry on the website continues to exist or we are dealing with the entry in the context of a legal dispute.

If you or we delete your entry, we will process the email address, the name provided and other voluntary information until the expiry of the statutory limitation periods for the aforementioned reasons of prevention and defence, but will restrict the processing of this data after 6 months.

We do not disclose the data to third parties unless we are obliged to do so by law or on the basis of official or judicial orders or the disclosure is necessary for the enforcement of our legitimate interests. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21 (1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

You can have your entry deleted by us at any time. To do so, contact us using the contact details listed in the "Responsible party" section. You are free to take measures according to the section "Your rights", whereby we ask you to contact our company as a first step in the event of complaints.

 

NEWSLETTER
You have the possibility to subscribe to our email newsletter on the website, with which we will inform you regularly about the following contents:

  • Offers from our portfolio,
  • Events of our company,
  • Offers (including events) from third parties, provided you have given your consent to this,
  • New articles/ collections,
  • Special offers/ time-limited offers.

To receive the newsletter, you must provide a valid e-mail address.

Registration for our email newsletter is done using the double opt-in procedure. After you have entered the data marked as mandatory, we will send you an email to the e-mail address you have provided in which we ask you to explicitly confirm your subscription to the newsletter (by clicking on a confirm link). In this way, we ensure that you actually wish to receive our email newsletter. If the confirmation is not received within 24 hours, we will block the information transmitted to us and automatically delete it after one month at the latest.

Furthermore, the following data is also processed at the time of subscription:

  • IP address,
  • Date/time of subscription to the newsletter,
  • Time of your confirmation of the confirm link.

We process your IP address, the time of subscription to the newsletter and the time of your confirmation in order to document your newsletter subscription and to prevent the misuse of your personal data. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. We process this data until two years after termination of the contract. Insofar as the newsletter registration takes place outside of the conclusion of a contract, we process this data until the expiry of two years after the termination of the usage process. We delete this data when the newsletter subscription ends.

After your confirmation, we process the e-mail address of the recipient concerned for the purpose of sending our e-mail newsletter.

The legal basis of the processing is Art. 6 para. 1 p. 1 lit. a) GDPR. We delete this data when you terminate the newsletter subscription.

You can revoke your consent to the processing of your email address for the receipt of the newsletter at any time, either by sending a message to us (see the contact details in the section "Responsible provider") or by directly clicking on the unsubscribe link contained in the newsletter. In this case, the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by the revocation (Art. 13 para. 2 lit. c) GDPR).
We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are embedded on our website. For the analyses, we link the data mentioned in the section "Access data" and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID.

With the data obtained, we create a user profile in order to tailor the newsletter to your individual interests. We record when you read our newsletter, which links you click on in it and deduce your personal interests from this. We link this data to actions you have taken on our website. The information is processed as long as you have subscribed to the newsletter. After unsubscribing, we process the data purely statistically and anonymously.

The purpose of this is to evaluate the use and optimisation of the e-mail advertising that we send to you. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR.

We would like to point out that you can object to the receipt of direct advertising and the processing of data for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) GDPR). After you have exercised your right to object, we will delete your data in connection with direct advertising. To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsible provider".
You can also prevent tracking by deactivating the display of images by default in your e-mail programme. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place.

 

E-MAIL-MARKETING-DIENST „MAILCHIMP“

We use the e-mail marketing service "MailChimp" of the provider Rocket Science Group, LLC (675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, Web: https://mailchimp.com/; hereinafter: "MailChimp").

If you have registered for the newsletter, the data provided during registration will be stored and processed on MailChimp's servers in the USA. Mailchimp has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of the Rocket Science Group at https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG. MailChimp processes this information to send and evaluate the newsletters on our behalf. The newsletters contain so-called "web beacons", which are pixel-sized files that are retrieved from the MailChimp server when the newsletter is opened. Technical information, such as the browser used, time of page retrieval and IP address, is collected during the retrieval process. This information is processed for evaluation and technical improvement of our service. Furthermore, it is evaluated whether and when newsletters are opened and which links are clicked on by the reader. This information can theoretically be assigned to individual newsletter recipients. However, neither we nor MailChimp intend to monitor individual recipients; rather, the evaluation of the aforementioned information serves to identify the reading habits of recipients in order to better adapt, optimise and control our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. We have no knowledge of the storage period at MailChimp and no possibility to influence it.

We would like to point out that you can object to the receipt of direct advertising and the processing of data for the purpose of direct advertising at any time without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) GDPR). After you have exercised your right to object, we will delete your data in connection with direct advertising. To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsible provider".
This also ends the processing for the receipt of the newsletter and for the statistical analyses. A separate objection to the sending via MailChimp or the statistical analysis is not possible.

Alternatively, you can object at https://www.aboutads.info/choices/ and https://www.youronlinechoices.com/ (for the European Union). You can also prevent the use of cookies by opening the browser in "private mode".

Furthermore, according to its own information, MailChimp may use the transmitted data to optimise and improve its own services, e.g. to technically optimise the dispatch and display of the newsletter. MailChimp states that it does not process the data in order to send you its own advertising, nor does it pass the data on to third parties.
It may happen that you, as a recipient of the newsletter, are redirected to the MailChimp website, for example, if you follow the link contained in the newsletter to retrieve the newsletter online in the event of display problems in your email programme. In this context, we would like to point out that further analysis services and cookies may be used on the MailChimp website, which may process your personal data on behalf of MailChimp. We have no influence on this processing.


PAYMENT SERVICE PROVIDER (PSP)
PAYPAL

On our website we offer payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal").

If you select payment via PayPal, the payment data you enter will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 p. 1 lit. b) GDPR (processing for the performance of a contract). If the data is not provided, it may be impossible to conclude or execute the contract. We have no knowledge of the storage period at PayPal and no possibility to influence it.

 

SOFORT BY KLARNA
If you select the payment method "SOFORT" in the context of your order, we will forward the data provided by you to Sofort GmbH (Theresienhöhe 12, 80339 Munich, Germany; Web: https://www.sofort.de/; hereinafter "SOFORT") in the context of payment processing.

"SOFORT" is a direct transfer procedure, in which a transfer can already be filled in during the order process and executed in real time. For this purpose, you will be redirected to the website of the payment service provider SOFORT.

The legal basis of the processing is Art. 6 para. 1 p. 1 lit. b) GDPR. The data processing is necessary in particular for the conclusion of the contract. If the data is not provided, it may be impossible to conclude or execute the contract. We have no knowledge of the storage period at SOFORT and no possibility to influence it. For further information on the collection and processing of your data by "SOFORT", please visit https://www.sofort.de/datenschutz.html.

 

KLARNA

If you choose the payment option "Klarna Invoice" or "Klarna Instalment Purchase" of Klarna GmbH (Theresienhöhe 12, 80339 Munich, Germany; Web: https://www.klarna.com/de/; hereinafter referred to as "Klarna"), Klarna will carry out an identity and credit check on the basis of the data provided by you. You can find the details in the information displayed to you in our booking/ordering process. The legal basis of the processing for payment processing is Art. 6 para. 1 p. 1 lit. b) GDPR. The data processing is necessary in particular for the conclusion of the contract. If the data is not provided, it may be impossible to conclude or execute the contract.
In this context, Klarna and we have a legitimate interest in the transmission of the personal data of the user concerned. Klarna and we require this in order to obtain information from credit agencies for the purpose of checking identity and creditworthiness. The legal basis is Art. 6 para. 1 p. 1 lit. f) GDPR. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations. This may be the credit agencies mentioned at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

The data processing is also necessary in this respect for the conclusion of the contract. If the data is not provided, it may be impossible to conclude or execute the contract.

In order to carry out the credit check, Klarna retrieves information on the user concerned from the payment service providers who carry out the payment processing and processes this data for the purpose of calculating a probability value based on a scientifically recognised mathematical-statistical method for forecasting the credit risk (formation of "score values"). The evaluation of the score values enables Klarna to make a decision on the establishment, implementation or termination of the contractual relationship. In addition to the address data, information on previous payment behaviour and probability values for expected future payment behaviour are also included. We have no knowledge of the storage period at Klarna and no possibility to influence it.

For further information on the processing of your data by Klarna, please visit https://www.klarna.com/de/datenschutz/ and https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.
You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 (1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

However, Klarna remains entitled to process and transmit customer data if this is necessary for the contractual processing of payments or if it is required by law or by official or judicial authorities. Klarna can be contacted at datenschutz@klarna.de.

 

AMAZON PAYMENTS

On our website we offer you the payment via Amazon Payments. If you choose this payment method, the payment will be processed by the payment service provider Amazon Payments Europe s.c.a., 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: "Amazon Payments"), to whom we will pass on your personal data provided during the ordering process, together with information about your order. The transfer of your data to Amazon Payments takes place on the basis of Art. 6 para. 1 p. 1 lit. b) GDPR (processing for the performance of a contract). If the data is not provided, it may not be possible to conclude or execute the contract.

Amazon Payments creates a transaction confirmation (receipt) based on the transmitted data and, if necessary, carries out an identity and creditworthiness check. In doing so, Amazon Payments has a legitimate interest in the transmission of the purchaser's personal data and processes this, for example, in order to obtain information from credit agencies for the purpose of checking identity and creditworthiness. The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f) GDPR.

In the credit assessment, mathematical-statistical procedures are used to calculate a rating with regard to the probability of a payment default (so-called calculation of a scoring value). Amazon Payments bases its decision on the provision of the respective payment methods on the calculated scoring value. The calculation of a scoring value is carried out according to recognised scientific procedures.

In addition to address data, information on previous payment behaviour and probability values for expected future payment behaviour are also included. We have no knowledge of the storage period at Amazon Payments and cannot influence it.
Amazon Payments can be contacted at eu-privacy@amazon.lu . For further information on the processing of your data by Amazon Payments, please visit https://pay.amazon.com/de/help/201751600.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

However, Amazon Payments remains entitled to process and pass on customer data if this is necessary for the contractual processing of payments (Art. 6 (1) sentence 1 lit. b) GDPR) or is required by law, by public authorities or by a court of law (Art. 6 (1) sentence 1 lit. c) GDPR).

 

TRANSFER OF PERSONAL DATA FOR THE PURPOSE OF LEGAL ENFORCEMENT / ADDRESS DETERMINATION / DEBT COLLECTION
In the event of non-payment, we reserve the right to pass on the data provided when placing the order to a lawyer and/or external companies (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss) for the purposes of address determination and/or legal enforcement if there is a legitimate interest in accordance with Art. 6 Para. 1 S. 1 lit. f) GDPR.
In addition, we may pass on your data if this is necessary to protect our rights and the rights of our affiliated companies, our cooperation partners, our employees and/or the users of our website. Under no circumstances will we sell or rent your data to third parties. The transfer of this data is based on Art. 6 para. 1 p. 1 lit. f) GDPR.

We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal obligations to retain data.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

 

HOSTING

We use external hosting services to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security as well as technical maintenance services. All data required for the operation and use of our website is processed.
We use external hosting services for the operation of this website. By using external hosting services, we aim to provide our website efficiently and securely. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR.

The collection of data for the provision and use of the website and the processing of data via external web hosts is absolutely necessary for the operation of the website. You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 (1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

 

INTEGRATION OF THIRD-PARTY CONTENT

Third-party content such as videos, maps, RSS feeds or graphics from other websites are integrated on the website. This integration always requires that the providers of this content ("third-party providers") are aware of the IP addresses of the users. Without the IP address, they cannot send the content to the browser of the respective user. The IP address is thus necessary for the display of this content.

We endeavour to only use content from third-party providers who only process the IP address to deliver the content. However, we have no influence if the third-party providers process the IP addresses, e.g. for statistical purposes. Insofar as we are aware of this, we will inform you of this below.
Some of the third-party providers may process data outside the European Union.

You can object by installing a JavaScript blocker such as the browser plugin 'NoScript' (www.noscript.net) or by deactivating JavaScript in your browser. You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".


GOOGLE RECAPTCHA

We use "Google reCAPTCHA" (hereinafter: "reCAPTCHA") on our website. The provider of this service is Google.
The purpose of reCAPTCHA is to check whether data input on the website (e.g. in a contact form) is made by a human or by an automated programme. For this purpose, reCAPTCHA analyses the behaviour of the visitor to the website on the basis of various characteristics. This analysis begins automatically as soon as the user accesses the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. Google also processes your personal data in the USA and has subjected itself to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The reCAPTCHA analyses run completely in the background. You will not be informed that an analysis is taking place.
The processing is based on Art. 6 para. 1 p. 1 lit. f) GDPR. We have a legitimate interest in protecting our web offers from abusive automated spying and from unsolicited e-mail advertising (SPAM). We have no knowledge of the storage period for reCAPTCHA and no possibility of influencing it.
For more information on Google reCAPTCHA and Google's privacy policy, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.
You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

 

GOOGLE AJAX SEARCH API

We use Google AJAX Search API as a central search service. The integrated search service enables a full-text search for contents of the present Internet offer.
For the user's information, the text "Search with Google™ ..." is displayed in the search box. If the user selects the input field of the search box and fills it with a search term, an additional link appears below the search box referring to this information on data protection.
Data will only be transferred to Google as soon as you activate the search box, start a full-text search and thereby call up the search results page. By using the search function within the search results page, your data will also be transferred to Google. This includes, for example, the search terms you enter and the IP address of the computer you are using. If you visit our official website without activating the Google AJAX Search API, no data will be transmitted to Google. We would like to point out that Google is responsible for processing any personal data that may be transferred and that we have no influence on the type and scope of the data transferred or on its further processing. If you are logged in to Google at the same time, the Google service is able to assign the information directly to your user profile. You should log out to avoid the collection of profile information about you.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of the storage period at Google and no possibility to influence it.
You can obtain further information from Google about the handling of user data (data protection declaration) at: https://www.google.com/intl/de/policies/privacy.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening the browser you are using in "private mode". If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

 

GOOGLE WEB FONTS

We use so-called web fonts provided by Google for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This gives Google knowledge that our website has been accessed via your IP address. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f) GDPR. We have no knowledge of the storage period at Google and no possibility of influencing it.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

 

Hotjar

We also use the analytics service Hotjar to make our website better and more user-friendly. The provider of the analysis service is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe,+1 (855) 464-6788, david@hotjar.com)

This tool captures movements on the monitored websites in so-called heatmaps. All data is collected without us being able to attribute it to specific users. We can only track how the mouse was moved, where it was clicked and how far it was scrolled. This enables us to design our website in a better and more customer-friendly way. Furthermore, the screen size of the device, the type of device, information on the browser, the country from which access was made and the preferred language are recorded. If personal data is displayed on a website, it is automatically hidden by Hotjar. They are therefore not traceable for us.

In order to analyse your usage behaviour, we use so-called "cookies" (see the section "Cookies" above), which are stored on your computer and which enable an analysis of your use of the website. The information generated by the "tracking code" and "cookie" about your visit to our website is transmitted to the Hotjar server and stored there. The tracking code collects the following information about your terminal device, such as IP address, device type and browser information, geographical location (country only), preferred language to display our website, pages visited, date and time when the website was accessed. Hotjar truncates your IP address before processing it further. To the extent that the data collected about you is personally identifiable, it will be immediately excluded and the personal data will be deleted immediately.

Hotjar will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage. Hotjar also uses third-party services, such as Google Analytics and Optimizely, to provide these services. These third parties may store information that your browser sends as part of your website visit, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please refer to their respective privacy statements.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. The cookies that Hotjar uses have different storage periods. Some remain valid for up to 365 days, some remain valid only during the current visit. You can find an overview of the storage period at: https://www.hotjar.com/legal/policies/cookie-information. More information about Hotjar Ltd. and the Hotjar tool can be found at: https://www.hotjar.com/legal/policies/privacy.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 (1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

You can object to the processing in different ways:

  • By enabling the Do-Not-Track feature in your browser software, which is supported by Hotjar. Instructions on how to activate the Do-Not-Track function can be found at: https://www.hotjar.com/legal/compliance/opt-out
    By adjusting the settings of your browser software accordingly; in particular, the suppression of third-party cookies will prevent you from receiving ads from third-party providers; or
    By deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies,
    By opening the browser you are using in "private mode" to prevent tracking of your usage patterns.

GOOGLE TAG MANAGER

We use Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

 

YOUTUBE-VIDEOS

We use plug-ins of the video platform YouTube.de or YouTube.com on the website, a service which - represented by Google - is operated by YouTube LLC (Headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube"). By means of the plug-ins, we can also integrate visual content ("videos") that we have published on Youtube.de or Youtube.com on this website.

The videos are all integrated in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos will the data mentioned below be transferred. We have no influence on this data transfer.

By visiting the website, YouTube receives the information that you have accessed the corresponding sub-page of our website. In addition, the data mentioned in the section "Access data" is transmitted. This occurs regardless of whether YouTube provides a user account via which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes them for the purposes of advertising, market research and/or the design of its website in line with requirements. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of the storage period at YouTube and no possibility to influence it.
For more information on the purpose and scope of processing by YouTube, please see the privacy policy at https://www.google.de/intl/de/policies/privacy.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening the browser you are using in "private mode". If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

 

Inspectlet

This website uses the services of Inspectlet. Inspectlet is used to analyse user data for statistical purposes. For this purpose, the following personal data of visitors to our website are evaluated, among others: URL, country, time zone, browser type, last visit of the user to the website. All data is encrypted during transmission and the collected data is stored with AES encryption. If the user has activated the anonymisation of the IP address, the last two octets of the IP address are removed and are not available to the user or Inspectlet. Any data collected from website marked as sensitive is ignored by Inspectlet. Therefore, data entered by the user is not transmitted to our servers. All data is only stored in AWS data centres that meet ISO 27001 requirements. Data is stored for a maximum of 24 months and then permanently deleted. If you wish to opt-out of Inspectlet's use of your data, you can do so at the following link: https://www.inspectlet.com/optout.

 

VIMEO

We use the plugins from Vimeo for the integration of videos on our website. Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. By means of the plug-ins, we can also integrate visual content ("videos") that we have published on www.vimeo.com on this website.

If you call up one of our websites with the Vimeo plug-in, a connection to the Vimeo servers is established. This transmits to the Vimeo server which website you have visited. If you are logged in as a Vimeo member, Vimeo assigns this information to your personal user account. When using the plugin, such as playing a video by activating the play button, this information is also assigned to your user account. Vimeo stores your data as usage profiles and processes them for the purposes of advertising, market research and/or the needs-based design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) to provide needs-based advertising and to inform other users of the social network about your activities on our website.

To inform about your activities on our website.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of the storage period at Vimeo and no possibility to influence it.

We have concluded so-called "standard contractual clauses" with Vimeo in order to oblige Vimeo to maintain an appropriate level of data protection. We will provide you with a copy of the agreement upon request.
Further information on data processing and information on data protection by Vimeo can be found at https://vimeo.com/privacy.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

You can deactivate or restrict the transmission of cookies by changing the settings in your internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening the browser you are using in "private mode". If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website to their full extent.

 

STATISTICAL, ANALYTICAL AND MARKETING SERVICES

We use third party services for statistical, analytical and marketing purposes. This enables us to provide you with a user-friendly, optimised use of the website. The third-party providers use cookies to control their services (see the "Cookies" section above). Personal data is not processed, unless otherwise explained below.
Some of the third-party providers offer the possibility to directly object to the use of the respective service, e.g. by setting an opt-out cookie.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details mentioned in the section "Responsible provider".

If you activate a corresponding opt-out cookie, the external provider will no longer process any data about your usage behaviour in the future. A merely selective objection to an individually made choice of external services is also possible. If you change the browser or the end device used or delete all cookies, you must set the opt-out cookie again.

Furthermore, you can also opt out of the use of cookies via the opt-out platform of the The German Association for the Digital Economy e.V. (BVDW) at https://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or via the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/.
Further information on usage-based advertising and opt-out options can also be found at the following link: https://www.youronlinechoices.com/de/.

You can also prevent the use of cookies by opening the browser you are using in "private mode".
In the following, we will inform you about the services of external providers currently used on our website, as well as about the purpose and scope of the respective processing in each individual case and about your existing objection options.

 

GOOGLE ANALYTICS

In order to tailor our website to your interests, we use Google Analytics, a web analytics service provided by Google. Google Analytics uses so-called "cookies" (see section "Cookies" above), which are stored on your computer and which enable an analysis of your use of the website. The information generated about your use of this website is transferred to a Google server in the USA and processed there.

If IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.
This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, making it impossible to link them to a specific person. If the data collected about you is related to a person, this is immediately excluded and the personal data is deleted immediately.
We use Google Analytics to analyse and regularly improve the use of our website. The statistics enable us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.
The legal basis for the processing of Google Analytics is Art. 6 para. 1 p. 1 lit. f) GDPR. The Analytics cookies are deleted after fourteen months at the latest.

You can find more information from the third-party provider Google at:
https://www.google.com/analytics/terms/de.html,
https://www.google.com/intl/de/analytics/learn/privacy.html,
https://www.google.de/intl/de/policies/privacy.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".
You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) by Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can also prevent the use of cookies by opening the browser you are using in "private mode".

 

 

USAGE-BASED ONLINE ADVERTISING

Facebook Custom Audiences

Furthermore, the website uses the "Website Custom Audiences" function of Facebook (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com, data protection information at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook"). So-called web beacons such as the "Facebook Pixel" are used to collect statistical information about you, which is processed by Facebook. This enables users of the website to be shown interest-based advertisements ("Facebook ads") when they visit the Facebook social network or other websites that also use this method.
With the help of the "Facebook Pixel", your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of the "Facebook Pixel", Facebook receives the information that you have called up the corresponding website of our Internet presence or clicked on an ad of ours. In doing so, Facebook receives the information that you have accessed certain parts of our website. For this purpose, Facebook uses tracking technologies such as web beacons (tracking pixels) to place a cookie on your computer. Among other things, the data mentioned in the section "Access data" is transmitted. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.
The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) GDPR. We pursue the interest of showing you advertising that is of interest to you and of making our website more interesting for you. In this case, we do not store any of your personal data. We have no knowledge of the storage period at Facebook and no possibility to influence it.
You can find more information about processing by Facebook at https://www.facebook.com/about/privacy.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

Deactivation of the "Facebook Custom Audiences" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_.
You can prevent the "Facebook Custom Audiences" function in various ways: by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any third-party ads;
by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies,
by opening the browser you are using in "private mode" to prevent the use of cookies.

 

FACEBOOK ANALYTICS

We continue to use the "Facebook Analytics" tool from Facebook (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: impressum-support@support.facebook.com, data protection information at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook"). For the use of Facebook Analytics, we use the so-called "Facebook Pixel" to measure the reach of our advertisements. For this purpose, Facebook uses tracking technologies such as web beacons (tracking pixels) to place a cookie on your computer. Among other things, the data mentioned in the section "Access data" is transmitted.

The information obtained with the help of the "Facebook cookie" is used solely for statistical purposes, is transmitted to us anonymously by Facebook and does not provide any information about the person of the user. It is processed by Facebook in accordance with its privacy policy with your Facebook account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider may obtain and store your IP address and other identifying features.
The processing of your data is based on Art. 6 para. 1 p. 1 lit. f) DS-GVO. By using Facebook Analytics, we pursue the interest of being able to better evaluate our website and our advertisements and to improve our service offering. In this case, we do not store any of your personal data. We have no knowledge of the storage period at Facebook and no possibility to influence it.

For more information on Facebook's privacy policy, please refer to the associated privacy policy at https://de-de.facebook.com/about/privacy/.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

Deactivating the "Facebook Analytics" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_.

You can prevent the "Facebook Analytics" function in various ways:
by adjusting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive ads from third-party providers;
by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies.
by opening the browser you are using in "private mode" to prevent tracking of your usage patterns.

 

GOOGLE ADWORDS CONVERSION

We use the Google Adwords service from Google to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google AdWords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns.

These advertisements are delivered by Google via so-called "Ad Servers". For this purpose, we use ad server cookies, which can be used to measure certain parameters for measuring success, such as the display of the ads or clicks by users. If you access our website via a Google ad, Google AdWords will store a cookie on your end device. These cookies usually expire after 30 days and are not intended to identify you. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an AdWords customer's website and the cookie stored on their computer has not yet expired, Google and the customer will be able to recognise that the user clicked on the ad and was redirected to that page. A different cookie is assigned to each AdWords customer. We only receive statistical evaluations from Google to measure the success of our advertising tools.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further processing of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address.

Google processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active.

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) GDPR. We pursue the interest of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of advertising costs. The storage period at Google is a maximum of eighteen months. Further information on data protection at Google can be found here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.

You can object to the processing. You have the right to object on grounds relating to your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing is for the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

You can prevent the processing in various ways:
by adjusting your browser software accordingly; in particular, the suppression of third-party cookies will result in you not receiving ads from third-party providers;
by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, which setting will be deleted when you delete your cookies;
by permanently deactivating cookies in your Firefox, Internet Explorer or Google Chrome browser at the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all the functions of this website to their full extent;
by opening the browser you are using in "private mode" to prevent the use of cookies;
by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies.

 

GOOGLE REMARKETING

In addition to Adwords Conversion, we use the Google Remarketing application from Google. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you during your further internet use after visiting our website. This is done by means of cookies stored in your browser, which Google uses to record and evaluate your usage behaviour when you visit various websites. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data that may be processed by Google. In particular, according to Google, pseudonymisation is used in remarketing.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) GDPR. We have no knowledge of the storage period at Google and no possibility to influence it.

You can object to the processing. Your right of objection exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Article 21(1) GDPR). You can send us your objection via the contact details listed in the section "Responsible provider".

You can prevent participation in this tracking procedure in various ways:
by setting your browser software accordingly; in particular, the suppression of third-party cookies means that you will not receive any third-party ads;
by disabling conversion tracking cookies by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, which setting will be deleted when you delete your cookies;
by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link https://www.aboutads.info/choices, this setting will be deleted when you delete your cookies;
by opening the browser you are using in "private mode" to prevent the use of cookies;
by permanently deactivating them in your Firefox, Internet Explorer or Google Chrome browsers at the link https://www.google.com/settings/ads/plugin.