Privacy Policy

1. An overview of data protection

General information

The fol­low­ing infor­ma­tion will pro­vide you with an easy to nav­i­gate overview of what will hap­pen with your per­son­al data when you vis­it this web­site. The term “per­son­al data” com­pris­es all data that can be used to per­son­al­ly iden­ti­fy you. For detailed infor­ma­tion about the sub­ject mat­ter of data pro­tec­tion, please con­sult our Data Pro­tec­tion Dec­la­ra­tion, which we have includ­ed beneath this copy.

Data recording on this website

Who is the responsible party for the recording of data on this website (i.e., the “controller”)?

The data on this web­site is processed by the oper­a­tor of the web­site, whose con­tact infor­ma­tion is avail­able under sec­tion “Infor­ma­tion about the respon­si­ble par­ty (referred to as the “con­troller” in the GDPR)” in this Pri­va­cy Pol­i­cy.

How do we record your data?

We col­lect your data as a result of your shar­ing of your data with us. This may, for instance be infor­ma­tion you enter into our con­tact form.

Oth­er data shall be record­ed by our IT sys­tems auto­mat­i­cal­ly or after you con­sent to its record­ing dur­ing your web­site vis­it. This data com­pris­es pri­mar­i­ly tech­ni­cal infor­ma­tion (e.g., web brows­er, oper­at­ing sys­tem, or time the site was accessed). This infor­ma­tion is record­ed auto­mat­i­cal­ly when you access this web­site.

What are the purposes we use your data for?

A por­tion of the infor­ma­tion is gen­er­at­ed to guar­an­tee the error free pro­vi­sion of the web­site. Oth­er data may be used to ana­lyze your user pat­terns. If con­tracts can be con­clud­ed or ini­ti­at­ed via the web­site, the trans­mit­ted data will also be processed for con­tract offers, orders or oth­er order enquiries.

What rights do you have as far as your information is concerned?

You have the right to receive infor­ma­tion about the source, recip­i­ents, and pur­pos­es of your archived per­son­al data at any time with­out hav­ing to pay a fee for such dis­clo­sures. You also have the right to demand that your data are rec­ti­fied or erad­i­cat­ed. If you have con­sent­ed to data pro­cess­ing, you have the option to revoke this con­sent at any time, which shall affect all future data pro­cess­ing. More­over, you have the right to demand that the pro­cess­ing of your data be restrict­ed under cer­tain cir­cum­stances. Fur­ther­more, you have the right to log a com­plaint with the com­pe­tent super­vis­ing agency.

Please do not hes­i­tate to con­tact us at any time if you have ques­tions about this or any oth­er data pro­tec­tion relat­ed issues.

Analysis tools and tools provided by third parties

There is a pos­si­bil­i­ty that your brows­ing pat­terns will be sta­tis­ti­cal­ly ana­lyzed when your vis­it this web­site. Such analy­ses are per­formed pri­mar­i­ly with what we refer to as analy­sis pro­grams.

For detailed infor­ma­tion about these analy­sis pro­grams please con­sult our Data Pro­tec­tion Dec­la­ra­tion below.

2. Hosting

We are host­ing the con­tent of our web­site at the fol­low­ing provider:

All-Inkl

The Provider is the ALL-INKL.COM – Neue Medi­en Mün­nich, own­er: René Mün­nich, Haupt­straße 68, 02742 Frieder­s­dorf, Ger­many (here­inafter “All-Inkl”). For details, please vis­it the pri­va­cy pol­i­cy of All-Inkl: https://all-inkl.com/datenschutzinformationen/.

The use of All-Inkl is based on Art. 6(1)(f) GDPR. We have a legit­i­mate inter­est in the most reli­able rep­re­sen­ta­tion of our web­site. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

3. General information and mandatory information

Data protection

The oper­a­tors of this web­site and its pages take the pro­tec­tion of your per­son­al data very seri­ous­ly. Hence, we han­dle your per­son­al data as con­fi­den­tial infor­ma­tion and in com­pli­ance with the statu­to­ry data pro­tec­tion reg­u­la­tions and this Data Pro­tec­tion Dec­la­ra­tion.

When­ev­er you use this web­site, a vari­ety of per­son­al infor­ma­tion will be col­lect­ed. Per­son­al data com­pris­es data that can be used to per­son­al­ly iden­ti­fy you. This Data Pro­tec­tion Dec­la­ra­tion explains which data we col­lect as well as the pur­pos­es we use this data for. It also explains how, and for which pur­pose the infor­ma­tion is col­lect­ed.

We here­with advise you that the trans­mis­sion of data via the Inter­net (i.e., through e‑mail com­mu­ni­ca­tions) may be prone to secu­ri­ty gaps. It is not pos­si­ble to com­plete­ly pro­tect data against third-par­ty access.

Information about the responsible party (referred to as the “controller” in the GDPR)

The data pro­cess­ing con­troller on this web­site is:

index­tor Con­sult­ing GmbH
Gise­las­traße 49a
96049 Bam­berg

Phone: +49 951 / 9939429–0
E‑mail: info@indextor.com

The con­troller is the nat­ur­al per­son or legal enti­ty that sin­gle-hand­ed­ly or joint­ly with oth­ers makes deci­sions as to the pur­pos­es of and resources for the pro­cess­ing of per­son­al data (e.g., names, e‑mail address­es, etc.).

Storage duration

Unless a more spe­cif­ic stor­age peri­od has been spec­i­fied in this pri­va­cy pol­i­cy, your per­son­al data will remain with us until the pur­pose for which it was col­lect­ed no longer applies. If you assert a jus­ti­fied request for dele­tion or revoke your con­sent to data pro­cess­ing, your data will be delet­ed, unless we have oth­er legal­ly per­mis­si­ble rea­sons for stor­ing your per­son­al data (e.g., tax or com­mer­cial law reten­tion peri­ods); in the lat­ter case, the dele­tion will take place after these rea­sons cease to apply.

General information on the legal basis for the data processing on this website

If you have con­sent­ed to data pro­cess­ing, we process your per­son­al data on the basis of Art. 6(1)(a) GDPR or Art. 9 (2)(a) GDPR, if spe­cial cat­e­gories of data are processed accord­ing to Art. 9 (1) DSGVO. In the case of explic­it con­sent to the trans­fer of per­son­al data to third coun­tries, the data pro­cess­ing is also based on Art. 49 (1)(a) GDPR. If you have con­sent­ed to the stor­age of cook­ies or to the access to infor­ma­tion in your end device (e.g., via device fin­ger­print­ing), the data pro­cess­ing is addi­tion­al­ly based on § 25 (1) TDDDG. The con­sent can be revoked at any time. If your data is required for the ful­fill­ment of a con­tract or for the imple­men­ta­tion of pre-con­trac­tu­al mea­sures, we process your data on the basis of Art. 6(1)(b) GDPR. Fur­ther­more, if your data is required for the ful­fill­ment of a legal oblig­a­tion, we process it on the basis of Art. 6(1)© GDPR. Fur­ther­more, the data pro­cess­ing may be car­ried out on the basis of our legit­i­mate inter­est accord­ing to Art. 6(1)(f) GDPR. Infor­ma­tion on the rel­e­vant legal basis in each indi­vid­ual case is pro­vid­ed in the fol­low­ing para­graphs of this pri­va­cy pol­i­cy.

Designation of a data protection officer

We have appoint­ed a data pro­tec­tion offi­cer.

Sascha Müller
index­tor Con­sult­ing GmbH
Gise­las­traße 49a
96049 Bam­berg
Ger­many

Phone: +49 951 / 9939429–0
E‑mail: info@indextor.com

Recipients of personal data

In the scope of our busi­ness activ­i­ties, we coop­er­ate with var­i­ous exter­nal par­ties. In some cas­es, this also requires the trans­fer of per­son­al data to these exter­nal par­ties. We only dis­close per­son­al data to exter­nal par­ties if this is required as part of the ful­fill­ment of a con­tract, if we are legal­ly oblig­at­ed to do so (e.g., dis­clo­sure of data to tax author­i­ties), if we have a legit­i­mate inter­est in the dis­clo­sure pur­suant to Art. 6 (1)(f) GDPR, or if anoth­er legal basis per­mits the dis­clo­sure of this data. When using proces­sors, we only dis­close per­son­al data of our cus­tomers on the basis of a valid con­tract on data pro­cess­ing. In the case of joint pro­cess­ing, a joint pro­cess­ing agree­ment is con­clud­ed.

Revocation of your consent to the processing of data

A wide range of data pro­cess­ing trans­ac­tions are pos­si­ble only sub­ject to your express con­sent. You can also revoke at any time any con­sent you have already giv­en us. This shall be with­out prej­u­dice to the law­ful­ness of any data col­lec­tion that occurred pri­or to your revo­ca­tion.

Right to object to the collection of data in special cases; right to object to direct advertising (Art. 21 GDPR)

IN THE EVENT THAT DATA ARE PROCESSED ON THE BASIS OF ART. 6(1)(E) OR (F) GDPR, YOU HAVE THE RIGHT TO AT ANY TIME OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA BASED ON GROUNDS ARISING FROM YOUR UNIQUE SITUATION. THIS ALSO APPLIES TO ANY PROFILING BASED ON THESE PROVISIONS. TO DETERMINE THE LEGAL BASIS, ON WHICH ANY PROCESSING OF DATA IS BASED, PLEASE CONSULT THIS DATA PROTECTION DECLARATION. IF YOU LOG AN OBJECTION, WE WILL NO LONGER PROCESS YOUR AFFECTED PERSONAL DATA, UNLESS WE ARE IN A POSITION TO PRESENT COMPELLING PROTECTION WORTHY GROUNDS FOR THE PROCESSING OF YOUR DATA, THAT OUTWEIGH YOUR INTERESTS, RIGHTS AND FREEDOMS OR IF THE PURPOSE OF THE PROCESSING IS THE CLAIMING, EXERCISING OR DEFENCE OF LEGAL ENTITLEMENTS (OBJECTION PURSUANT TO ART. 21(1) GDPR).

IF YOUR PERSONAL DATA IS BEING PROCESSED IN ORDER TO ENGAGE IN DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR AFFECTED PERSONAL DATA FOR THE PURPOSES OF SUCH ADVERTISING AT ANY TIME. THIS ALSO APPLIES TO PROFILING TO THE EXTENT THAT IT IS AFFILIATED WITH SUCH DIRECT ADVERTISING. IF YOU OBJECT, YOUR PERSONAL DATA WILL SUBSEQUENTLY NO LONGER BE USED FOR DIRECT ADVERTISING PURPOSES (OBJECTION PURSUANT TO ART. 21(2) GDPR).

Right to log a complaint with the competent supervisory agency

In the event of vio­la­tions of the GDPR, data sub­jects are enti­tled to log a com­plaint with a super­vi­so­ry agency, in par­tic­u­lar in the mem­ber state where they usu­al­ly main­tain their domi­cile, place of work or at the place where the alleged vio­la­tion occurred. The right to log a com­plaint is in effect regard­less of any oth­er admin­is­tra­tive or court pro­ceed­ings avail­able as legal recours­es.

Right to data portability

You have the right to have data that we process auto­mat­i­cal­ly on the basis of your con­sent or in ful­fill­ment of a con­tract hand­ed over to you or to a third par­ty in a com­mon, machine-read­able for­mat. If you should demand the direct trans­fer of the data to anoth­er con­troller, this will be done only if it is tech­ni­cal­ly fea­si­ble.

Information about, rectification and eradication of data

With­in the scope of the applic­a­ble statu­to­ry pro­vi­sions, you have the right to demand infor­ma­tion about your archived per­son­al data, their source and recip­i­ents as well as the pur­pose of the pro­cess­ing of your data at any time. You may also have a right to have your data rec­ti­fied or erad­i­cat­ed. If you have ques­tions about this sub­ject mat­ter or any oth­er ques­tions about per­son­al data, please do not hes­i­tate to con­tact us at any time.

Right to demand processing restrictions

You have the right to demand the impo­si­tion of restric­tions as far as the pro­cess­ing of your per­son­al data is con­cerned. To do so, you may con­tact us at any time. The right to demand restric­tion of pro­cess­ing applies in the fol­low­ing cas­es:

• In the event that you should dis­pute the cor­rect­ness of your data archived by us, we will usu­al­ly need some time to ver­i­fy this claim. Dur­ing the time that this inves­ti­ga­tion is ongo­ing, you have the right to demand that we restrict the pro­cess­ing of your per­son­al data.
• If the pro­cess­ing of your per­son­al data was/is con­duct­ed in an unlaw­ful man­ner, you have the option to demand the restric­tion of the pro­cess­ing of your data instead of demand­ing the erad­i­ca­tion of this data.
• If we do not need your per­son­al data any longer and you need it to exer­cise, defend or claim legal enti­tle­ments, you have the right to demand the restric­tion of the pro­cess­ing of your per­son­al data instead of its erad­i­ca­tion.
• If you have raised an objec­tion pur­suant to Art. 21(1) GDPR, your rights and our rights will have to be weighed against each oth­er. As long as it has not been deter­mined whose inter­ests pre­vail, you have the right to demand a restric­tion of the pro­cess­ing of your per­son­al data.

If you have restrict­ed the pro­cess­ing of your per­son­al data, these data – with the excep­tion of their archiv­ing – may be processed only sub­ject to your con­sent or to claim, exer­cise or defend legal enti­tle­ments or to pro­tect the rights of oth­er nat­ur­al per­sons or legal enti­ties or for impor­tant pub­lic inter­est rea­sons cit­ed by the Euro­pean Union or a mem­ber state of the EU.

SSL and/or TLS encryption

For secu­ri­ty rea­sons and to pro­tect the trans­mis­sion of con­fi­den­tial con­tent, such as pur­chase orders or inquiries you sub­mit to us as the web­site oper­a­tor, this web­site uses either an SSL or a TLS encryp­tion pro­gram. You can rec­og­nize an encrypt­ed con­nec­tion by check­ing whether the address line of the brows­er switch­es from “http://” to “https://” and also by the appear­ance of the lock icon in the brows­er line.

If the SSL or TLS encryp­tion is acti­vat­ed, data you trans­mit to us can­not be read by third par­ties.

Encrypted payment transactions on this website

If you are under an oblig­a­tion to share your pay­ment infor­ma­tion (e.g. account num­ber if you give us the author­i­ty to deb­it your bank account) with us after you have entered into a fee-based con­tract with us, this infor­ma­tion is required to process pay­ments.

Pay­ment trans­ac­tions using com­mon modes of pay­ing (Visa/MasterCard, deb­it to your bank account) are processed exclu­sive­ly via encrypt­ed SSL or TLS con­nec­tions. You can rec­og­nize an encrypt­ed con­nec­tion by check­ing whether the address line of the brows­er switch­es from “http://” to “https://” and also by the appear­ance of the lock icon in the brows­er line.

If the com­mu­ni­ca­tion with us is encrypt­ed, third par­ties will not be able to read the pay­ment infor­ma­tion you share with us.

Rejection of unsolicited e‑mails

We here­with object to the use of con­tact infor­ma­tion pub­lished in con­junc­tion with the manda­to­ry infor­ma­tion to be pro­vid­ed in our Site Notice to send us pro­mo­tion­al and infor­ma­tion mate­r­i­al that we have not express­ly request­ed. The oper­a­tors of this web­site and its pages reserve the express right to take legal action in the event of the unso­licit­ed send­ing of pro­mo­tion­al infor­ma­tion, for instance via SPAM mes­sages.

4. Recording of data on this website

Cookies

Our web­sites and pages use what the indus­try refers to as “cook­ies.” Cook­ies are small data pack­ages that do not cause any dam­age to your device. They are either stored tem­porar­i­ly for the dura­tion of a ses­sion (ses­sion cook­ies) or they are per­ma­nent­ly archived on your device (per­ma­nent cook­ies). Ses­sion cook­ies are auto­mat­i­cal­ly delet­ed once you ter­mi­nate your vis­it. Per­ma­nent cook­ies remain archived on your device until you active­ly delete them, or they are auto­mat­i­cal­ly erad­i­cat­ed by your web brows­er.

Cook­ies can be issued by us (first-par­ty cook­ies) or by third-par­ty com­pa­nies (so-called third-par­ty cook­ies). Third-par­ty cook­ies enable the inte­gra­tion of cer­tain ser­vices of third-par­ty com­pa­nies into web­sites (e.g., cook­ies for han­dling pay­ment ser­vices).

Cook­ies have a vari­ety of func­tions. Many cook­ies are tech­ni­cal­ly essen­tial since cer­tain web­site func­tions would not work in the absence of these cook­ies (e.g., the shop­ping cart func­tion or the dis­play of videos). Oth­er cook­ies may be used to ana­lyze user behav­ior or for pro­mo­tion­al pur­pos­es.

Cook­ies, which are required for the per­for­mance of elec­tron­ic com­mu­ni­ca­tion trans­ac­tions, for the pro­vi­sion of cer­tain func­tions you want to use (e.g., for the shop­ping cart func­tion) or those that are nec­es­sary for the opti­miza­tion (required cook­ies) of the web­site (e.g., cook­ies that pro­vide mea­sur­able insights into the web audi­ence), shall be stored on the basis of Art. 6(1)(f) GDPR, unless a dif­fer­ent legal basis is cit­ed. The oper­a­tor of the web­site has a legit­i­mate inter­est in the stor­age of required cook­ies to ensure the tech­ni­cal­ly error-free and opti­mized pro­vi­sion of the operator’s ser­vices. If your con­sent to the stor­age of the cook­ies and sim­i­lar recog­ni­tion tech­nolo­gies has been request­ed, the pro­cess­ing occurs exclu­sive­ly on the basis of the con­sent obtained (Art. 6(1)(a) GDPR and § 25 (1) TDDDG); this con­sent may be revoked at any time.

You have the option to set up your brows­er in such a man­ner that you will be noti­fied any time cook­ies are placed and to per­mit the accep­tance of cook­ies only in spe­cif­ic cas­es. You may also exclude the accep­tance of cook­ies in cer­tain cas­es or in gen­er­al or acti­vate the delete-func­tion for the auto­mat­ic erad­i­ca­tion of cook­ies when the brows­er clos­es. If cook­ies are deac­ti­vat­ed, the func­tions of this web­site may be lim­it­ed.

Which cook­ies and ser­vices are used on this web­site can be found in this pri­va­cy pol­i­cy.

Consent with Usercentrics

This web­site uses the con­sent tech­nol­o­gy of User­centrics to obtain your con­sent to the stor­age of cer­tain cook­ies on your device or for the use of spe­cif­ic tech­nolo­gies, and to doc­u­ment the for­mer in a data pro­tec­tion com­pli­ant man­ner. The par­ty offer­ing this tech­nol­o­gy is User­centrics GmbH, Sendlinger Straße 7, 80331 München, Ger­many, web­site: https://usercentrics.com/ (here­inafter referred to as “User­centrics”).

When­ev­er you vis­it our web­site, the fol­low­ing per­son­al data will be trans­ferred to User­centrics:

• Your declaration(s) of con­sent or your revo­ca­tion of your declaration(s) of con­sent
• Your IP address
• Infor­ma­tion about your brows­er
• Infor­ma­tion about your device
• The date and time you vis­it­ed our web­site
• Geolo­ca­tion

More­over, User­centrics shall store a cook­ie in your brows­er to be able to allo­cate your declaration(s) of con­sent or any revo­ca­tions of the for­mer. The data that are record­ed in this man­ner shall be stored until you ask us to erad­i­cate them, delete the User­centrics cook­ie or until the pur­pose for archiv­ing the data no longer exists. This shall be with­out prej­u­dice to any manda­to­ry legal reten­tion peri­ods.

User­centrics uses cook­ies to obtain the dec­la­ra­tions of con­sent man­dat­ed by law. The legal basis for the use of spe­cif­ic tech­nolo­gies is Art. 6(1)© GDPR.

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

Server log files

The provider of this web­site and its pages auto­mat­i­cal­ly col­lects and stores infor­ma­tion in so-called serv­er log files, which your brows­er com­mu­ni­cates to us auto­mat­i­cal­ly. The infor­ma­tion com­pris­es:

• The type and ver­sion of brows­er used
• The used oper­at­ing sys­tem
• Refer­rer URL
• The host­name of the access­ing com­put­er
• The time of the serv­er inquiry
• The IP address

This data is not merged with oth­er data sources.

This data is record­ed on the basis of Art. 6(1)(f) GDPR. The oper­a­tor of the web­site has a legit­i­mate inter­est in the tech­ni­cal­ly error free depic­tion and the opti­miza­tion of the operator’s web­site. In order to achieve this, serv­er log files must be record­ed.

Contact form

If you sub­mit inquiries to us via our con­tact form, the infor­ma­tion pro­vid­ed in the con­tact form as well as any con­tact infor­ma­tion pro­vid­ed there­in will be stored by us in order to han­dle your inquiry and in the event that we have fur­ther ques­tions. We will not share this infor­ma­tion with­out your con­sent.

The pro­cess­ing of these data is based on Art. 6(1)(b) GDPR, if your request is relat­ed to the exe­cu­tion of a con­tract or if it is nec­es­sary to car­ry out pre-con­trac­tu­al mea­sures. In all oth­er cas­es the pro­cess­ing is based on our legit­i­mate inter­est in the effec­tive pro­cess­ing of the requests addressed to us (Art. 6(1)(f) GDPR) or on your agree­ment (Art. 6(1)(a) GDPR) if this has been request­ed; the con­sent can be revoked at any time.

The infor­ma­tion you have entered into the con­tact form shall remain with us until you ask us to erad­i­cate the data, revoke your con­sent to the archiv­ing of data or if the pur­pose for which the infor­ma­tion is being archived no longer exists (e.g., after we have con­clud­ed our response to your inquiry). This shall be with­out prej­u­dice to any manda­to­ry legal pro­vi­sions, in par­tic­u­lar reten­tion peri­ods.

Request by e‑mail, telephone, or fax

If you con­tact us by e‑mail, tele­phone or fax, your request, includ­ing all result­ing per­son­al data (name, request) will be stored and processed by us for the pur­pose of pro­cess­ing your request. We do not pass these data on with­out your con­sent.

These data are processed on the basis of Art. 6(1)(b) GDPR if your inquiry is relat­ed to the ful­fill­ment of a con­tract or is required for the per­for­mance of pre-con­trac­tu­al mea­sures. In all oth­er cas­es, the data are processed on the basis of our legit­i­mate inter­est in the effec­tive han­dling of inquiries sub­mit­ted to us (Art. 6(1)(f) GDPR) or on the basis of your con­sent (Art. 6(1)(a) GDPR) if it has been obtained; the con­sent can be revoked at any time.

The data sent by you to us via con­tact requests remain with us until you request us to delete, revoke your con­sent to the stor­age or the pur­pose for the data stor­age laps­es (e.g. after com­ple­tion of your request). Manda­to­ry statu­to­ry pro­vi­sions — in par­tic­u­lar statu­to­ry reten­tion peri­ods — remain unaf­fect­ed.

Communication via WhatsApp

For com­mu­ni­ca­tion with our cus­tomers and oth­er third par­ties, one of the ser­vices we use is the instant mes­sag­ing ser­vice What­sApp. The provider is What­sApp Ire­land Lim­it­ed, 4 Grand Canal Square, Grand Canal Har­bour, Dublin 2, Ire­land.

The com­mu­ni­ca­tion is encrypt­ed end-to-end (peer-to-peer), which pre­vents What­sApp or oth­er third par­ties from gain­ing access to the com­mu­ni­ca­tion con­tent. How­ev­er, What­sApp does gain access to meta­da­ta cre­at­ed dur­ing the com­mu­ni­ca­tion process (for exam­ple, sender, recip­i­ent, and time). We would also like to point out that What­sApp has stat­ed that it shares per­son­al data of its users with its U.S.-based par­ent com­pa­ny Meta. Fur­ther details on data pro­cess­ing can be found in the What­sApp pri­va­cy pol­i­cy at: https://www.whatsapp.com/legal/#privacy-policy.

The use of What­sApp is based on our legit­i­mate inter­est in com­mu­ni­cat­ing as quick­ly and effec­tive­ly as pos­si­ble with cus­tomers, inter­est­ed par­ties and oth­er busi­ness and con­trac­tu­al part­ners (Art. 6(1)(f) GDPR). If a cor­re­spond­ing con­sent has been request­ed, data pro­cess­ing is car­ried out exclu­sive­ly on the basis of the con­sent; this con­sent may be revoked at any time with effect for the future.

The com­mu­ni­ca­tion con­tent exchanged between you and us on What­sApp remains with us until you request us to delete it, revoke your con­sent to stor­age or the pur­pose for which the data is stored ceas­es to apply (e.g. after your request has been processed). Manda­to­ry legal pro­vi­sions, in par­tic­u­lar reten­tion peri­ods, remain unaf­fect­ed.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/7735.

We use What­sApp in the “What­sApp Busi­ness” vari­ant.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.whatsapp.com/legal/business-data-transfer-addendum?lang=en.

We have set up our What­sApp accounts in such a way that there is no auto­mat­ic syn­chro­niza­tion of data with the address book on the smart­phones in use.

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) with the above-men­tioned provider.

Registration on this website

You have the option to reg­is­ter on this web­site to be able to use addi­tion­al web­site func­tions. We shall use the data you enter only for the pur­pose of using the respec­tive offer or ser­vice you have reg­is­tered for. The required infor­ma­tion we request at the time of reg­is­tra­tion must be entered in full. Oth­er­wise, we shall reject the reg­is­tra­tion.

To noti­fy you of any impor­tant changes to the scope of our port­fo­lio or in the event of tech­ni­cal mod­i­fi­ca­tions, we shall use the e‑mail address pro­vid­ed dur­ing the reg­is­tra­tion process.

The data entered dur­ing reg­is­tra­tion is processed for the pur­pose of imple­ment­ing the user rela­tion­ship estab­lished by the reg­is­tra­tion and, if nec­es­sary, for the ini­ti­a­tion of fur­ther con­tracts (Art. 6 (1)(b) GDPR).

The data record­ed dur­ing the reg­is­tra­tion process shall be stored by us as long as you are reg­is­tered on this web­site. Sub­se­quent­ly, such data shall be delet­ed. This shall be with­out prej­u­dice to manda­to­ry statu­to­ry reten­tion oblig­a­tions.

Registration with Google

Instead of reg­is­ter­ing direct­ly on this web­site, you can reg­is­ter with Google. The provider of this ser­vice is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

To reg­is­ter with Google, you must only enter your Google name and pass­word. Google will iden­ti­fy you and con­firm your iden­ti­ty to our web­site.

When you sign in with Google, we may be able to use cer­tain infor­ma­tion in your account to com­plete your pro­file with us. You decide whether you want this infor­ma­tion to be used and if so, which infor­ma­tion it is, with­in the frame­work of your Google secu­ri­ty set­tings, which you can find here: https://myaccount.google.com/security and https://myaccount.google.com/permissions.

The data pro­cess­ing asso­ci­at­ed with Google’s reg­is­tra­tion is based on our legit­i­mate inter­est in mak­ing the reg­is­tra­tion process as sim­ple as pos­si­ble for our users (Art. 6(1)(f) GDPR). Since the use of the reg­is­tra­tion func­tion is vol­un­tary and the users them­selves can decide on the respec­tive access options, no con­flict­ing pre­dom­i­nant rights of the data sub­jects are appar­ent.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

The comment function on this website

When you use the com­ment func­tion on this web­site, infor­ma­tion on the time the com­ment was gen­er­at­ed and your e‑mail-address and, if you are not post­ing anony­mous­ly, the user­name you have select­ed will be archived in addi­tion to your com­ments.

Storage of the IP address

Our com­ment func­tion stores the IP address­es of all users who enter com­ments. Giv­en that we do not review the com­ments pri­or to pub­lish­ing them, we need this infor­ma­tion in order to take action against the author in the event of rights vio­la­tions, such as defama­tion or pro­pa­gan­da.

Storage period for comments

Com­ments and any affil­i­at­ed infor­ma­tion shall be stored by us and remain on this web­site until the con­tent the com­ment per­tained to has been delet­ed in its entire­ty or if the com­ments had to be delet­ed for legal rea­sons (e.g., insult­ing com­ments).

Legal basis

Com­ments are stored on the basis of your con­sent (Art. 6(1)(a) GDPR). You have the right to revoke at any time any con­sent you have already giv­en us. To do so, all you are required to do is sent us an infor­mal noti­fi­ca­tion via e‑mail. This shall be with­out prej­u­dice to the law­ful­ness of any data col­lec­tion that occurred pri­or to your revo­ca­tion.

Gravatar

We have inte­grat­ed Gra­vatar on this web­site. The provider is Automat­tic Inc., 60 29th Street #343, San Fran­cis­co, CA 94110, USA (here­inafter Gra­vatar).

Gra­vatar is a tool that lets you pro­vide per­son­al images (avatars) to users of our web­site. The avatars serve as visu­al rep­re­sen­ta­tions of the users and are dis­played wher­ev­er a user inter­acts with the plat­form (e.g., in forums or chats). When a user inter­acts with the plat­form, their avatar is dis­played based on the choic­es asso­ci­at­ed with their email address. This adds a per­son­al touch to the users’ online pres­ence and sim­pli­fies the iden­ti­fi­ca­tion process, as the select­ed image is asso­ci­at­ed with the users when they are active online.

When com­ment­ing or inter­act­ing on our web­site with Gra­vatar enabled, the hash of the email address of the user using Gra­vatar (used as an ID) is processed by Gra­vatar.

The use of Gra­vatar is based on Art. 6 (1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in an appeal­ing pre­sen­ta­tion of its forums. Inso­far as a cor­re­spond­ing con­sent was request­ed, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. This con­sent can be revoked at any time.

For fur­ther details, please refer to the provider’s pri­va­cy pol­i­cy: https://automattic.com/privacy/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/4709.

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

5. Social media

eRecht24 Safe Sharing Tool

Users may share the con­tent of this web­site and its pages in a data pro­tec­tion law com­pli­ant man­ner on social net­works, such as Face­book, X et al. For this pur­pose, this web­site uses the eRecht24 Safe Shar­ing Tool. This tool does not estab­lish a direct con­nec­tion between the net­work and the user until the user has active­ly clicked on one of the but­tons. The click on this but­ton con­sti­tutes con­tent as defined in Art. 6(1)(a) GDPR and § 25 (1) TDDDG. This con­sent may be revoked by the user at any time, which shall affect all future actions.

This tool does not auto­mat­i­cal­ly trans­fer user data to the oper­a­tors of these plat­forms. If the user is reg­is­tered with one of the social net­works, an infor­ma­tion win­dow will pop up as soon as the social media ele­ments of Face­book, X et al is used, which allows the user to con­firm the text pri­or to send­ing it.

Our users have the option to share the con­tent of this web­site and its page in a data pro­tec­tion law com­pli­ant man­ner on social net­works, with­out entire brows­ing his­to­ries are being gen­er­at­ed by the oper­a­tors of these net­works.

This ser­vice is used to obtain the con­sent to the use of cer­tain tech­nolo­gies required by law. The legal basis for this is Art. 6(1)© GDPR.

Facebook

We have inte­grat­ed ele­ments of the social net­work Face­book on this web­site. The provider of this ser­vice is Meta Plat­forms Ire­land Lim­it­ed, Mer­rion Road, Dublin 4, D04 X2K5, Ire­land. Accord­ing to Facebook’s state­ment the col­lect­ed data will be trans­ferred to the USA and oth­er third-par­ty coun­tries too.

An overview of the Face­book social media ele­ments is avail­able under the fol­low­ing link: https://developers.facebook.com/docs/plugins/.

If the social media ele­ment has been acti­vat­ed, a direct con­nec­tion between your device and the Face­book serv­er will be estab­lished. As a result, Face­book will receive infor­ma­tion con­firm­ing your vis­it to this web­site with your IP address. If you click on the Face­book Like but­ton while you are logged into your Face­book account, you can link con­tent of this web­site to your Face­book pro­file. Con­se­quent­ly, Face­book will be able to allo­cate your vis­it to this web­site to your user account. We have to empha­size that we as the provider of the web­site do not receive any infor­ma­tion on the con­tent of the trans­ferred data and its use by Face­book. For more infor­ma­tion, please con­sult the Data Pri­va­cy Pol­i­cy of Face­book at: https://de-de.facebook.com/privacy/explanation.

The use of this ser­vice is based on your con­sent in accor­dance with Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. Con­sent can be revoked at any time.

Inso­far as per­son­al data is col­lect­ed on our web­site with the help of the tool described here and for­ward­ed to Face­book, we and Meta Plat­forms Ire­land Lim­it­ed, 4 Grand Canal Square, Grand Canal Har­bour, Dublin 2, Ire­land are joint­ly respon­si­ble for this data pro­cess­ing (Art. 26 DSGVO). The joint respon­si­bil­i­ty is lim­it­ed exclu­sive­ly to the col­lec­tion of the data and its for­ward­ing to Face­book. The pro­cess­ing by Face­book that takes place after the onward trans­fer is not part of the joint respon­si­bil­i­ty. The oblig­a­tions incum­bent on us joint­ly have been set out in a joint pro­cess­ing agree­ment. The word­ing of the agree­ment can be found under: https://www.facebook.com/legal/controller_addendum. Accord­ing to this agree­ment, we are respon­si­ble for pro­vid­ing the pri­va­cy infor­ma­tion when using the Face­book tool and for the pri­va­cy-secure imple­men­ta­tion of the tool on our web­site. Face­book is respon­si­ble for the data secu­ri­ty of Face­book prod­ucts. You can assert data sub­ject rights (e.g., requests for infor­ma­tion) regard­ing data processed by Face­book direct­ly with Face­book. If you assert the data sub­ject rights with us, we are oblig­ed to for­ward them to Face­book.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://de-de.facebook.com/help/566994660333381 and https://www.facebook.com/policy.php.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/4452.

X (formerly Twitter)

We have inte­grat­ed func­tions of the social media plat­form X (for­mer­ly Twit­ter) into this web­site. These func­tions are pro­vid­ed by the par­ent com­pa­ny X Corp., 1355 Mar­ket Street, Suite 900, San Fran­cis­co, CA 94103, USA. The branch Twit­ter Inter­na­tion­al Unlim­it­ed Com­pa­ny, One Cum­ber­land Place, Fen­ian Street, Dublin 2, D02 AX07, Ire­land, is respon­si­ble for the data pro­cess­ing of indi­vid­u­als liv­ing out­side the Unit­ed States.

If the social media ele­ment has been acti­vat­ed, a direct con­nec­tion between your device and X’s serv­er will be estab­lished. As a result, X (for­mer­ly Twit­ter) will receive infor­ma­tion on your vis­it to this web­site. While you use X (for­mer­ly Twit­ter) and the “Re-Tweet” or “Repost” func­tion, web­sites you vis­it are linked to your X (for­mer­ly Twit­ter) account and dis­closed to oth­er users. We must point out, that we, the providers of the web­site and its pages do not know any­thing about the con­tent of the data trans­ferred and the use of this infor­ma­tion by X (for­mer­ly Twit­ter). For more details, please con­sult the X (for­mer­ly Twit­ter) Data Pri­va­cy Dec­la­ra­tion at: https://x.com/en/privacy.

The use of this ser­vice is based on your con­sent in accor­dance with Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. Con­sent can be revoked at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://gdpr.x.com/en/controller-to-controller-transfers.html.

You have the option to reset your data pro­tec­tion set­tings on X (for­mer­ly Twit­ter) under the account set­tings at https://x.com/settings/account.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/2710.

Instagram

We have inte­grat­ed func­tions of the pub­lic media plat­form Insta­gram into this web­site. These func­tions are being offered by Meta Plat­forms Ire­land Lim­it­ed, Mer­rion Road, Dublin 4, D04 X2K5, Ire­land.

If the social media ele­ment has been acti­vat­ed, a direct con­nec­tion between your device and Instagram’s serv­er will be estab­lished. As a result, Insta­gram will receive infor­ma­tion on your vis­it to this web­site.

If you are logged into your Insta­gram account, you may click the Insta­gram but­ton to link con­tents from this web­site to your Insta­gram pro­file. This enables Insta­gram to allo­cate your vis­it to this web­site to your user account. We have to point out that we as the provider of the web­site and its pages do not have any knowl­edge of the con­tent of the data trans­ferred and its use by Insta­gram.

The use of this ser­vice is based on your con­sent in accor­dance with Art. 6 (1)(a) GDPR and § 25 (1) TDDDG. Con­sent can be revoked at any time.

Inso­far as per­son­al data is col­lect­ed on our web­site with the help of the tool described here and for­ward­ed to Face­book or Insta­gram, we and Meta Plat­forms Ire­land Lim­it­ed, 4 Grand Canal Square, Grand Canal Har­bour, Dublin 2, Ire­land are joint­ly respon­si­ble for this data pro­cess­ing (Art. 26 DSGVO). The joint respon­si­bil­i­ty is lim­it­ed exclu­sive­ly to the col­lec­tion of the data and its for­ward­ing to Face­book or Insta­gram. The pro­cess­ing by Face­book or Insta­gram that takes place after the onward trans­fer is not part of the joint respon­si­bil­i­ty. The oblig­a­tions incum­bent on us joint­ly have been set out in a joint pro­cess­ing agree­ment. The word­ing of the agree­ment can be found under: https://www.facebook.com/legal/controller_addendum. Accord­ing to this agree­ment, we are respon­si­ble for pro­vid­ing the pri­va­cy infor­ma­tion when using the Face­book or Insta­gram tool and for the pri­va­cy-secure imple­men­ta­tion of the tool on our web­site. Face­book is respon­si­ble for the data secu­ri­ty of Face­book or Insta­gram prod­ucts. You can assert data sub­ject rights (e.g., requests for infor­ma­tion) regard­ing data processed by Face­book or Insta­gram direct­ly with Face­book. If you assert the data sub­ject rights with us, we are oblig­ed to for­ward them to Face­book.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.facebook.com/legal/EU_data_transfer_addendum, https://privacycenter.instagram.com/policy/ and https://de-de.facebook.com/help/566994660333381.

For more infor­ma­tion on this sub­ject, please con­sult Instagram’s Data Pri­va­cy Dec­la­ra­tion at: https://privacycenter.instagram.com/policy/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/4452.

6. Analysis tools and advertising

Google Tag Manager

We use the Google Tag Man­ag­er. The provider is Google Ire­land Lim­it­ed, Gor­don House, Bar­row Street, Dublin 4, Ire­land

The Google Tag Man­ag­er is a tool that allows us to inte­grate track­ing or sta­tis­ti­cal tools and oth­er tech­nolo­gies on our web­site. The Google Tag Man­ag­er itself does not cre­ate any user pro­files, does not store cook­ies, and does not car­ry out any inde­pen­dent analy­ses. It only man­ages and runs the tools inte­grat­ed via it. How­ev­er, the Google Tag Man­ag­er does col­lect your IP address, which may also be trans­ferred to Google’s par­ent com­pa­ny in the Unit­ed States.

The Google Tag Man­ag­er is used on the basis of Art. 6(1)(f) GDPR. The web­site oper­a­tor has a legit­i­mate inter­est in the quick and uncom­pli­cat­ed inte­gra­tion and admin­is­tra­tion of var­i­ous tools on his web­site. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Google Analytics

This web­site uses func­tions of the web analy­sis ser­vice Google Ana­lyt­ics. The provider of this ser­vice is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ana­lyt­ics enables the web­site oper­a­tor to ana­lyze the behav­ior pat­terns of web­site vis­i­tors. To that end, the web­site oper­a­tor receives a vari­ety of user data, such as pages accessed, time spent on the page, the uti­lized oper­at­ing sys­tem and the user’s ori­gin. This data is sum­ma­rized in a user-ID and assigned to the respec­tive end device of the web­site vis­i­tor.

Fur­ther­more, Google Ana­lyt­ics allows us to record your mouse and scroll move­ments and clicks, among oth­er things. Google Ana­lyt­ics uses var­i­ous mod­el­ing approach­es to aug­ment the col­lect­ed data sets and uses machine learn­ing tech­nolo­gies in data analy­sis.

Google Ana­lyt­ics uses tech­nolo­gies that make the recog­ni­tion of the user for the pur­pose of ana­lyz­ing the user behav­ior pat­terns (e.g., cook­ies or device fin­ger­print­ing). The web­site use infor­ma­tion record­ed by Google is, as a rule trans­ferred to a Google serv­er in the Unit­ed States, where it is stored.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your con­sent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

IP anonymization

Google Ana­lyt­ics IP anonymiza­tion is active. As a result, your IP address will be abbre­vi­at­ed by Google with­in the mem­ber states of the Euro­pean Union or in oth­er states that have rat­i­fied the Con­ven­tion on the Euro­pean Eco­nom­ic Area pri­or to its trans­mis­sion to the Unit­ed States. The full IP address will be trans­mit­ted to one of Google’s servers in the Unit­ed States and abbre­vi­at­ed there only in excep­tion­al cas­es. On behalf of the oper­a­tor of this web­site, Google shall use this infor­ma­tion to ana­lyze your use of this web­site to gen­er­ate reports on web­site activ­i­ties and to ren­der oth­er ser­vices to the oper­a­tor of this web­site that are relat­ed to the use of the web­site and the Inter­net. The IP address trans­mit­ted in con­junc­tion with Google Ana­lyt­ics from your brows­er shall not be merged with oth­er data in Google’s pos­ses­sion.

Browser plug-in

You can pre­vent the record­ing and pro­cess­ing of your data by Google by down­load­ing and installing the brows­er plu­g­in avail­able under the fol­low­ing link: https://tools.google.com/dlpage/gaoptout?hl=en.

For more infor­ma­tion about the han­dling of user data by Google Ana­lyt­ics, please con­sult Google’s Data Pri­va­cy Dec­la­ra­tion at: https://support.google.com/analytics/answer/6004245?hl=en.

Google Signals

We use Google Sig­nals. When­ev­er you vis­it our web­site, Google Ana­lyt­ics records, among oth­er things, your loca­tion, the pro­gres­sion of your search and YouTube pro­gres­sion as well as demo­graph­ic data (site vis­i­tor data). This data may be used for cus­tomized adver­tis­ing with the assis­tance of Google Sig­nal. If you have a Google account, your site vis­i­tor infor­ma­tion will be linked to your Google account by Google Sig­nal and used to send you cus­tomized pro­mo­tion­al mes­sages. The data is also used to com­pile anonymized sta­tis­tics of our users’ online pat­terns.

Contract data processing

We have exe­cut­ed a con­tract data pro­cess­ing agree­ment with Google and are imple­ment­ing the strin­gent pro­vi­sions of the Ger­man data pro­tec­tion agen­cies to the fullest when using Google Ana­lyt­ics.

Google Analytics E‑Commerce-Tracking

This web­site uses the “E‑Commerce Track­ing” func­tion of Google Ana­lyt­ics. With the assis­tance of E‑Commerce Track­ing, the web­site oper­a­tor is in a posi­tion to ana­lyze the pur­chas­ing pat­terns of web­site vis­i­tors with the aim of improv­ing the operator’s online mar­ket­ing cam­paigns. In this con­text, infor­ma­tion, such as the orders placed, the aver­age order val­ues, ship­ping costs and the time from view­ing the prod­uct to mak­ing the pur­chas­ing deci­sion are tracked. These data may be con­sol­i­dat­ed by Google under a trans­ac­tion ID, which is allo­cat­ed to the respec­tive user or the user’s device.

WP Statistics

This web­site uses the WP Sta­tis­tics analy­sis tool to eval­u­ate vis­i­tor access­es sta­tis­ti­cal­ly. The provider is Veronal­abs, Tatari 64, 10134, Tallinn, Esto­nia (https://veronalabs.com).

WP Sta­tis­tics can be used to ana­lyze the use of our web­site. In doing so, WP Sta­tis­tics records, among oth­er things, log files (IP address, refer­rer, brows­er used, ori­gin of the user, search engine used) and actions that the web­site vis­i­tors have tak­en on the site (e.g. clicks and views).

The data col­lect­ed with WP Sta­tis­tics is stored exclu­sive­ly on our own serv­er.

The use of this analy­sis tool is based on Art. 6(1)(f) GDPR. We have a legit­i­mate inter­est in the anonymized analy­sis of user behav­ior in order to opti­mize both our web­sites and our adver­tis­ing. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

IP anonymization

We use WP Sta­tis­tics with anonymized IP. Your IP address is short­ened so that it can no longer be direct­ly assigned to you.

Google Ads

The web­site oper­a­tor uses Google Ads. Google Ads is an online pro­mo­tion­al pro­gram of Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

Google Ads enables us to dis­play ads in the Google search engine or on third-par­ty web­sites, if the user enters cer­tain search terms into Google (key­word tar­get­ing). It is also pos­si­ble to place tar­get­ed ads based on the user data Google has in its pos­ses­sion (e.g., loca­tion data and inter­ests; tar­get group tar­get­ing). As the web­site oper­a­tor, we can ana­lyze these data quan­ti­ta­tive­ly, for instance by ana­lyz­ing which search terms result­ed in the dis­play of our ads and how many ads led to respec­tive clicks.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your con­sent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://policies.google.com/privacy/frameworks and https://business.safety.google/controllerterms/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Google AdSense (not personalized)

This web­site uses Google AdSense, an ad embed­ding ser­vice pro­vid­ed by Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

We use Google AdSense in the “non-per­son­al­ized” mode. Con­trary to the per­son­al­ized mode, the ads are not based on your pre­vi­ous user pat­terns and the ser­vice does not gen­er­ate a user pro­file for you. Instead, the ser­vice uses so-called “con­text infor­ma­tion” to choose the ads that are post­ed for you to view. The select­ed ads are thus based e.g., on your loca­tion, the con­tent of the web­site you are vis­it­ing at the time, or the search terms you are using. To learn more about the dis­tinct dif­fer­ences between per­son­al­ized tar­get­ing and tar­get­ing that has not been per­son­al­ized by Google AdSense, please click on the fol­low­ing link: https://support.google.com/adsense/answer/9007336.

Please keep in mind that if Google Adsense is used in the non-per­son­al­ized mode, it is pos­si­ble that cook­ies are stored or com­pa­ra­ble recog­ni­tion tech­nolo­gies (e.g., device fin­ger­print­ing) are used.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your con­sent at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://business.safety.google/adscontrollerterms/sccs/.

You have the option to autonomous­ly adjust the adver­tis­ing set­tings in your user account. To do so, please click on the link pro­vid­ed below and log in: https://adssettings.google.com/authenticated.

For more infor­ma­tion about Google’s adver­tis­ing tech­nolo­gies, please click here: https://policies.google.com/technologies/ads and https://www.google.de/intl/de/policies/privacy/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Google Ads Remarketing

This web­site uses the func­tions of Google Ads Remar­ket­ing. The provider of these solu­tions is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

With Google Ads Remar­ket­ing, we can assign peo­ple who inter­act with our online offer­ing to spe­cif­ic tar­get groups in order to sub­se­quent­ly dis­play inter­est-based adver­tis­ing to them in the Google adver­tis­ing net­work (remar­ket­ing or retar­get­ing).

More­over, it is pos­si­ble to link the adver­tis­ing tar­get groups gen­er­at­ed with Google Ads Remar­ket­ing to device encom­pass­ing func­tions of Google. This makes it pos­si­ble to dis­play inter­est-based cus­tomized adver­tis­ing mes­sages, depend­ing on your pri­or usage and brows­ing pat­terns on a device (e.g., cell phone) in a man­ner tai­lored to you as well as on any of your devices (e.g., tablet or PC).

If you have a Google account, you have the option to object to per­son­al­ized adver­tis­ing under the fol­low­ing link: https://adssettings.google.com/anonymous?hl=de.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your con­sent at any time.

For fur­ther infor­ma­tion and the per­ti­nent data pro­tec­tion reg­u­la­tions, please con­sult the Data Pri­va­cy Poli­cies of Google at: https://policies.google.com/technologies/ads?hl=en.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Formation of Target Groups with Customer Reconciliation

For the for­ma­tion of tar­get groups, we use, among oth­er things, the Google Ads Remar­ket­ing cus­tomer rec­on­cil­i­a­tion fea­ture. To achieve this, we trans­fer cer­tain cus­tomer data (e.g., email address­es) from our cus­tomer lists to Google. If the respec­tive cus­tomers are Google users and are logged into their Google accounts, match­ing adver­tis­ing mes­sages with­in the Google net­work (e.g., YouTube, Gmail or in a search engine) are dis­played for them to view.

Google Conversion-Tracking

This web­site uses Google Con­ver­sion Track­ing. The provider of this ser­vice is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

With the assis­tance of Google Con­ver­sion Track­ing, we are in a posi­tion to rec­og­nize whether the user has com­plet­ed cer­tain actions. For instance, we can ana­lyze the how fre­quent­ly which but­tons on our web­site have been clicked and which prod­ucts are reviewed or pur­chased with par­tic­u­lar fre­quen­cy. The pur­pose of this infor­ma­tion is to com­pile con­ver­sion sta­tis­tics. We learn how many users have clicked on our ads and which actions they have com­plet­ed. We do not receive any infor­ma­tion that would allow us to per­son­al­ly iden­ti­fy the users. Google as such uses cook­ies or com­pa­ra­ble recog­ni­tion tech­nolo­gies for iden­ti­fi­ca­tion pur­pos­es.

The use of these ser­vices occurs on the basis of your con­sent pur­suant to Art. 6(1)(a) GDPR and § 25(1) TDDDG. You may revoke your con­sent at any time.

For more infor­ma­tion about Google Con­ver­sion Track­ing, please review Google’s data pro­tec­tion pol­i­cy at: https://policies.google.com/privacy?hl=en

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

7. Newsletter

Newsletter data

If you would like to receive the newslet­ter offered on the web­site, we require an e‑mail address from you as well as infor­ma­tion that allows us to ver­i­fy that you are the own­er of the e‑mail address pro­vid­ed and that you agree to receive the newslet­ter. Fur­ther data is not col­lect­ed or only on a vol­un­tary basis. For the han­dling of the newslet­ter, we use newslet­ter ser­vice providers, which are described below.

Mailchimp with deactivated success measurement

This web­site uses the ser­vices of Mailchimp to send out its newslet­ters. The provider is the Rock­et Sci­ence Group LLC, 675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA.

Among oth­er things, Mailchimp is a ser­vice that can be deployed to orga­nize the send­ing of newslet­ters. When­ev­er you enter data for the pur­pose of sub­scrib­ing to a newslet­ter (e.g. your e‑mail address), the infor­ma­tion is stored on Mailchimp servers in the Unit­ed States. We have deac­ti­vat­ed the suc­cess mea­sure­ment of Mailchimp, so Mailchimp will not eval­u­ate your behav­ior when open­ing our newslet­ter.

If you do not want Mailchimp to receive your data, you must unsub­scribe from the newslet­ter. We pro­vide a link for you to do this in every newslet­ter mes­sage.

The data is processed based on your con­sent (Art. 6(1)(a) GDPR). You may revoke any con­sent you have giv­en at any time by unsub­scrib­ing from the newslet­ter. This shall be with­out prej­u­dice to the law­ful­ness of any data pro­cess­ing trans­ac­tions that have tak­en place pri­or to your revo­ca­tion.

The data deposit­ed with us for the pur­pose of sub­scrib­ing to the newslet­ter will be stored by us until you unsub­scribe from the newslet­ter or the newslet­ter ser­vice provider and delet­ed from the newslet­ter dis­tri­b­u­tion list after you unsub­scribe from the newslet­ter. Data stored for oth­er pur­pos­es with us remain unaf­fect­ed.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://mailchimp.com/eu-us-data-transfer-statement/ and https://mailchimp.com/legal/data-processing-addendum/#Annex_C_-_Standard_Contractual_Clauses.

After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, your e‑mail address may be stored by us or the newslet­ter ser­vice provider in a black­list, if such action is nec­es­sary to pre­vent future mail­ings. The data from the black­list is used only for this pur­pose and not merged with oth­er data. This serves both your inter­est and our inter­est in com­ply­ing with the legal require­ments when send­ing newslet­ters (legit­i­mate inter­est with­in the mean­ing of Art. 6(1)(f) GDPR). The stor­age in the black­list is indef­i­nite. You may object to the stor­age if your inter­ests out­weigh our legit­i­mate inter­est.

For more details, please con­sult the Data Pri­va­cy Poli­cies of Mailchimp at: https://mailchimp.com/legal/terms/.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/7693.

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

Newsletter mailing to existing customers

If you order goods or ser­vices from us and enter your e‑mail address, this e‑mail address may sub­se­quent­ly be used by us to send you newslet­ters, pro­vid­ed we inform you of this in advance. In such a case, only direct adver­tis­ing for our own sim­i­lar goods or ser­vices will be sent via the newslet­ter. You can unsub­scribe from this newslet­ter at any time. There is a cor­re­spond­ing link in every newslet­ter for this pur­pose. In this case, the legal basis for send­ing the newslet­ter is Art. 6 (1)(f) GDPR in con­junc­tion with Sec­tion 7 (3) UWG.

After you unsub­scribe from the newslet­ter dis­tri­b­u­tion list, we may store your email address in a black­list to pre­vent future mail­ings to you. The data from the black­list will only be used for this pur­pose and will not be merged with oth­er data. This serves both your inter­est and our inter­est in com­ply­ing with the legal require­ments when send­ing newslet­ters (legit­i­mate inter­est with­in the mean­ing of Art. 6 (1)(f) GDPR). Stor­age in the black­list is not lim­it­ed in time. You can object to the stor­age if your inter­ests out­weigh our legit­i­mate inter­est.

8. Plug-ins and Tools

YouTube with expanded data protection integration

This web­site inte­grates videos from the YouTube web­site. The oper­a­tor of the web­site is Google Ire­land Lim­it­ed (“Google”), Gor­don House, Bar­row Street, Dublin 4, Ire­land.

When you vis­it one of these web­sites on which YouTube is inte­grat­ed, a con­nec­tion to the YouTube servers is estab­lished. This tells the YouTube serv­er which of our pages you have vis­it­ed. If you are logged into your YouTube account, you enable YouTube to assign your surf­ing behav­ior direct­ly to your per­son­al pro­file. You can pre­vent this by log­ging out of your YouTube account.

We use YouTube in extend­ed data pro­tec­tion mode. Accord­ing to YouTube, videos that are played in extend­ed data pro­tec­tion mode are not used to per­son­al­ize brows­ing on YouTube. Ads that are played in extend­ed data pro­tec­tion mode are also not per­son­al­ized. No cook­ies are set in extend­ed data pro­tec­tion mode. Instead, so-called local stor­age ele­ments are stored in the user’s brows­er, which con­tain per­son­al data sim­i­lar to cook­ies and can be used for recog­ni­tion. Details on the extend­ed data pro­tec­tion mode can be found here: https://support.google.com/youtube/answer/171780.

After acti­vat­ing a YouTube video, fur­ther data pro­cess­ing oper­a­tions may be trig­gered over which we have no influ­ence.

The use of YouTube is based on our inter­est in pre­sent­ing our online con­tent in an appeal­ing man­ner. Pur­suant to Art. 6(1)(f) GDPR, this is a legit­i­mate inter­est. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

For more infor­ma­tion on how YouTube han­dles user data, please con­sult the YouTube Data Pri­va­cy Pol­i­cy under: https://policies.google.com/privacy?hl=en.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5780.

Vimeo Without Tracking (Do-Not-Track)

This web­site uses plu­g­ins of the Vimeo video por­tal. The provider is Vimeo Inc., 555 West 18th Street, New York, New York 10011, USA.

When­ev­er you vis­it one of our pages fea­tur­ing Vimeo videos, a con­nec­tion with the servers of Vimeo is estab­lished. In con­junc­tion with this, the Vimeo serv­er receives infor­ma­tion about which of our sites you have vis­it­ed. Vimeo also receives your IP address. How­ev­er, we have set up Vimeo in such a way that Vimeo can­not track your user activ­i­ties and does not place any cook­ies.

We use Vimeo to make our online pre­sen­ta­tion attrac­tive for you. This is a legit­i­mate inter­est on our part pur­suant to Art. 6(1)(f) GDPR. If a respec­tive dec­la­ra­tion of con­sent was request­ed (e.g. con­cern­ing the stor­age of cook­ies), pro­cess­ing shall occur exclu­sive­ly on the basis of Art. 6(1)(a) GDPR; the giv­en con­sent may be revoked at any time.

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion and, accord­ing to Vimeo, on “legit­i­mate busi­ness inter­ests”. Details can be found here: https://vimeo.com/privacy.

For more infor­ma­tion on the han­dling of user data, please con­sult Vimeo’s data pri­va­cy pol­i­cy at: https://vimeo.com/privacy

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5711.

Google Fonts (local embedding)

This web­site uses so-called Google Fonts pro­vid­ed by Google to ensure the uni­form use of fonts on this site. These Google fonts are local­ly installed so that a con­nec­tion to Google’s servers will not be estab­lished in con­junc­tion with this appli­ca­tion.

For more infor­ma­tion on Google Fonts, please fol­low this link: https://developers.google.com/fonts/faq and con­sult Google’s Data Pri­va­cy Dec­la­ra­tion under: https://policies.google.com/privacy?hl=en.

Mapbox

We have inte­grat­ed Map­box on this web­site. The provider is Map­box, Inc. 740 15th Street NW, 5th Floor, Wash­ing­ton, Dis­trict of Colum­bia 20005, USA (here­inafter referred to as “Map­box”). With the means of this ser­vice, we can inte­grate map mate­r­i­al on our web­site.

To use the func­tions of Map­box, it is nec­es­sary to store your IP address, your user agent, and oth­er data. This infor­ma­tion is usu­al­ly trans­ferred to a Microsoft serv­er in the USA and stored there. The provider of this site has no influ­ence on this data trans­fer.

This con­sti­tutes a legit­i­mate inter­est on the part of the provider with regards to Art. 6 (1)(f) GDPR. If a cor­re­spond­ing con­sent has been request­ed, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6 (1)(a) GDPR and § 25 (1) TDDDG, inso­far as the con­sent includes the stor­age of cook­ies or access to infor­ma­tion in the user’s ter­mi­nal device (e.g. device fin­ger­print­ing) with­in the mean­ing of the TDDDG. Con­sent can be revoked at any time.

Fur­ther details can be found in the provider’s pri­va­cy pol­i­cy at https://www.mapbox.com/legal/privacy.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/5640.

Zapier

We use Zapi­er. The provider is Zapi­er Inc, Mar­ket St. #62411, San Fran­cis­co, CA 94104–5401, USA (here­inafter “Zapi­er”).

Zapi­er allows us to link and syn­chro­nize var­i­ous func­tion­al­i­ties, data­bas­es, and tools. In this way, it is pos­si­ble, for exam­ple, to auto­mat­i­cal­ly play out con­tent that we pub­lish on our web­site on our social media chan­nels or to export con­tent from mar­ket­ing and analy­sis tools. Depend­ing on the func­tion­al­i­ty, Zapi­er may also col­lect var­i­ous per­son­al data in the process.

The use of Zapi­er is based on Art. 6(1)(f) GDPR. We have a legit­i­mate inter­est on the most effec­tive inte­gra­tion of the tools used. If appro­pri­ate con­sent has been obtained, the pro­cess­ing is car­ried out exclu­sive­ly on the basis of Art. 6(1)(a) GDPR and § 25 (1) TDDDG, inso­far the con­sent includes the stor­age of cook­ies or the access to infor­ma­tion in the user’s end device (e.g., device fin­ger­print­ing) with­in the mean­ing of the TDDDG. This con­sent can be revoked at any time.

Data trans­fer to the USA is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion. You can find details here: https://zapier.com/tos.

The com­pa­ny is cer­ti­fied in accor­dance with the “EU-US Data Pri­va­cy Frame­work” (DPF). The DPF is an agree­ment between the Euro­pean Union and the US, which is intend­ed to ensure com­pli­ance with Euro­pean data pro­tec­tion stan­dards for data pro­cess­ing in the US. Every com­pa­ny cer­ti­fied under the DPF is oblig­ed to com­ply with these data pro­tec­tion stan­dards. For more infor­ma­tion, please con­tact the provider under the fol­low­ing link: https://www.dataprivacyframework.gov/participant/4425.

Data processing

We have con­clud­ed a data pro­cess­ing agree­ment (DPA) for the use of the above-men­tioned ser­vice. This is a con­tract man­dat­ed by data pri­va­cy laws that guar­an­tees that they process per­son­al data of our web­site vis­i­tors only based on our instruc­tions and in com­pli­ance with the GDPR.

9. eCommerce and payment service providers

Processing of Customer and Contract Data

We col­lect, process, and use per­son­al cus­tomer and con­tract data for the estab­lish­ment, con­tent arrange­ment and mod­i­fi­ca­tion of our con­trac­tu­al rela­tion­ships. Data with per­son­al ref­er­ences to the use of this web­site (usage data) will be col­lect­ed, processed, and used only if this is nec­es­sary to enable the user to use our ser­vices or required for billing pur­pos­es. The legal basis for these process­es is Art. 6(1)(b) GDPR.

The col­lect­ed cus­tomer data shall be delet­ed upon com­ple­tion of the order or ter­mi­na­tion of the busi­ness rela­tion­ship and upon expi­ra­tion of any exist­ing statu­to­ry archiv­ing peri­ods. This shall be with­out prej­u­dice to any statu­to­ry archiv­ing peri­ods.

Data transfer upon closing of contracts for online stores, retailers, and the shipment of merchandise

When­ev­er you order mer­chan­dise from us, we will share your per­son­al data with the trans­porta­tion com­pa­ny entrust­ed with the deliv­ery as well as the pay­ment ser­vice com­mis­sioned to han­dle the pay­ment trans­ac­tions. Only the data these respec­tive ser­vice providers require to meet their oblig­a­tions will be shared. The legal basis for this shar­ing is Art. 6 (1)(b) GDPR, which per­mits the pro­cess­ing of data for the ful­fill­ment of con­trac­tu­al or pre-con­trac­tu­al oblig­a­tions. If you give us your respec­tive con­sent pur­suant to Art. 6 (1)(a) GDPR, we will share your email address with the trans­porta­tion com­pa­ny entrust­ed with the deliv­ery so that this com­pa­ny can noti­fy you on the ship­ping sta­tus for your order via email. You have the option to revoke your con­sent at any time.

Data transfer upon closing of contracts for services and digital content

We share per­son­al data with third par­ties only if this is nec­es­sary in con­junc­tion with the han­dling of the con­tract; for instance, with the finan­cial insti­tu­tion tasked with the pro­cess­ing of pay­ments.

Any fur­ther trans­fer of data shall not occur or shall only occur if you have express­ly con­sent­ed to the trans­fer. Any shar­ing of your data with third par­ties in the absence of your express con­sent, for instance for adver­tis­ing pur­pos­es, shall not occur.

The basis for the pro­cess­ing of data is Art. 6(1)(b) GDPR, which per­mits the pro­cess­ing of data for the ful­fil­ment of a con­tract or for pre-con­trac­tu­al actions.

Credit checks

We may con­duct a cred­it check in the event that pur­chas­es are made on account or based on oth­er pay­ment terms that require us to extend cred­it (scor­ing). For this pur­pose, we trans­mit the data you have entered (e.g., name, address, age, or bank­ing infor­ma­tion) to a cred­it infor­ma­tion agency. Based on this data, the prob­a­bil­i­ty of non-pay­ment is deter­mined. If the like­li­hood of non-pay­ment is exces­sive, we may reject the respec­tive pay­ment term.

The cred­it check is per­formed on the basis of con­trac­tu­al ful­fill­ment (Art. 6(1)(b) GDPR) and to avert non-pay­ment (jus­ti­fied inter­est pur­suant to Art. 6(1)(f) GDPR). If con­sent has been obtained, the cred­it check shall be per­formed on the basis of this con­sent (Art. 6(1)(a) GDPR); the con­sent may be revoked at any time.

Payment services

We inte­grate pay­ment ser­vices of third-par­ty com­pa­nies on our web­site. When you make a pur­chase from us, your pay­ment data (e.g. name, pay­ment amount, bank account details, cred­it card num­ber) are processed by the pay­ment ser­vice provider for the pur­pose of pay­ment pro­cess­ing. For these trans­ac­tions, the respec­tive con­trac­tu­al and data pro­tec­tion pro­vi­sions of the respec­tive providers apply. The use of the pay­ment ser­vice providers is based on Art. 6(1)(b) GDPR (con­tract pro­cess­ing) and in the inter­est of a smooth, con­ve­nient, and secure pay­ment trans­ac­tion (Art. 6(1)(f) GDPR). Inso­far as your con­sent is request­ed for cer­tain actions, Art. 6(1)(a) GDPR is the legal basis for data pro­cess­ing; con­sent may be revoked at any time for the future.

We use the fol­low­ing pay­ment ser­vices / pay­ment ser­vice providers with­in the scope of this web­site:

PayPal

The provider of this pay­ment ser­vice is Pay­Pal (Europe) S.à.r.l. et Cie, S.C.A., 22–24 Boule­vard Roy­al, L‑2449 Lux­em­bourg (here­inafter “Pay­Pal”).

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://www.paypal.com/de/webapps/mpp/ua/pocpsa-full.

Details can be found in PayPal’s pri­va­cy pol­i­cy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Stripe

The provider for cus­tomers with­in the EU is Stripe Pay­ments Europe, Ltd,1 Grand Canal Street Low­er, Grand Canal Dock, Dublin, Ire­land (here­inafter “Stripe”).

Data trans­mis­sion to the US is based on the Stan­dard Con­trac­tu­al Claus­es (SCC) of the Euro­pean Com­mis­sion. Details can be found here: https://stripe.com/de/privacy and https://stripe.com/de/guides/general-data-protection-regulation.

Details can be found in Stripe’s Pri­va­cy Pol­i­cy at the fol­low­ing link: https://stripe.com/de/privacy.

Mastercard

The provider of this pay­ment ser­vice is the Mas­ter­card Europe SA, Chaussée de Ter­vuren 198A, B‑1410 Water­loo, Bel­gium (here­inafter “Mas­ter­card”).

Mas­ter­card may trans­fer data to its par­ent com­pa­ny in the US. The data trans­fer to the US is based on Mas­ter­card’s Bind­ing Cor­po­rate Rules. Details can be found here: https://www.mastercard.de/de-de/datenschutz.html and https://www.mastercard.us/content/dam/mccom/global/documents/mastercard-bcrs.pdf.

VISA

The provider of this pay­ment ser­vice is the Visa Europe Ser­vices Inc, Lon­don Branch, 1 Shel­don Square, Lon­don W2 6TT, Unit­ed King­dom (here­inafter “VISA”).

Great Britain is con­sid­ered a secure non-EU coun­try as far as data pro­tec­tion leg­is­la­tion is con­cerned. This means that the data pro­tec­tion lev­el in Great Britain is equiv­a­lent to the data pro­tec­tion lev­el of the Euro­pean Union.

VISA may trans­fer data to its par­ent com­pa­ny in the US. The data trans­fer to the US is based on the stan­dard con­trac­tu­al claus­es of the EU Com­mis­sion. Details can be found here: https://www.visa.de/nutzungsbedingungen/visa-globale-datenschutzmitteilung/mitteilung-zu-zustandigkeitsfragen-fur-den-ewr.html.

For more infor­ma­tion, please refer to VISA’s pri­va­cy pol­i­cy: https://www.visa.de/nutzungsbedingungen/visa-privacy-center.html.

Ver­sion 01/2026