• 4.93/5.00 ★ | free shipping from €175 DE&AT | personal customer service

Privacy

Privacy policy

§ 1 Information on the collection of personal data

(1) In the following, we provide information about the collection of personal data when using our website and our other presences and appearances and in the context of our services and performances. Personal data is all data that can be related to you personally, e.g. name, address, e-mail addresses, user behavior. This privacy policy applies to the websites and services through which it is provided. Different data protection information may apply to our other presences and services.

(2) The controller pursuant to Art. 4 (7) of the EU General Data Protection Regulation (GDPR) is the

Company: SABRO GmbH

Address: Kirchenstr. 16, 21224 Rosengarten-Nenndorf

Telephone: 04108 590440

Fax: 04108 590444

E-mail: sabro@sabro.de

 

You can find further contact options for us in our provider identification ("Imprint").

(3) When you contact us by e-mail or via a contact form, the data you provide (your e-mail address, possibly your name and telephone number) will be stored by us in order to answer your questions. We delete the data collected in this context after storage is no longer necessary, or restrict processing if there are statutory retention obligations. The legal basis for the processing of your data in the context of communication with you is Art. 6 para. 1 lit. a GDPR if you have given your consent. If the communication serves the fulfillment of a contract with you or the implementation of pre-contractual measures, the legal basis for the processing of your data is Art. 6 para. 1 lit. b GDPR, in all other cases our legitimate interest in an efficient, customer-friendly and targeted processing of your request in conjunction with Art. 6 para. 1 lit. f) GDPR and, in addition, any legal obligation incumbent on us, which requires the storage and processing of your data, in conjunction with Art. 6 para. 1 lit. c) GDPR.

§ 2 Your rights

(1) You have the following rights vis-à-vis us with regard to the personal data concerning you, in each case to the statutory extent and under the statutory conditions

- Right to information,

- Right to rectification or erasure,

- Right to restriction of processing,

- Right to object to processing,

- right to data portability.

(2) You also have the right to complain to a data protection supervisory authority about the processing of your personal data by us.

§ 3 Collection of personal data when visiting our website

(1) When using the website for information purposes only, i.e. if you do not register or otherwise provide us with information, we only collect the personal data that your browser transmits to our server. If you wish to view our website, we collect the following data, which is technically necessary for us to display our website to you and to ensure stability and security (legal basis is Art. 6 para. 1 sentence 1 lit. f GDPR):

- IP address

- Date and time of the request

- Time zone difference to Greenwich Mean Time (GMT)

- Content of the request (specific page)

- Access status/HTTP status code

- amount of data transferred in each case

- Website from which the request originates

- browser

- Operating system and its interface

- Language and version of the browser software.

(2) In addition to the aforementioned data, cookies are stored on your computer when you use our website. Cookies are small text files that are stored on your hard disk and assigned to the browser you are using and through which certain information flows to the body that sets the cookie (in this case us). Cookies cannot execute programs or transfer viruses to your computer. They are used to make the website more user-friendly and effective overall.

(3) Use of cookies:

Our websites use cookies and similar technologies. Cookies are small text files that are stored by the Internet browser on the user's end device. A cookie usually contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again. 

Cookies are used to make the website more user-friendly, to optimize the functions and services of the website and to provide you with content tailored to your needs. 

The purpose of using technically necessary cookies is to enable and simplify the use of the website and the functions provided with it. Some functions of this website cannot be offered without the use of cookies. 

The user data collected by technically necessary cookies is not used to create user profiles.

In addition, with your separate consent, cookies can be used to provide external media such as films and maps as well as to analyze the use of the website and other functions. 

You can deactivate or restrict the use of cookies by changing the settings in your Internet browser. Cookies that have already been saved can be deleted at any time. This can also be done automatically. If cookies are deactivated for the website, it may no longer be possible to use all functions of the website to their full extent.

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 para. 1 lit. f GDPR, whereby the legitimate interest of the controller is the secure, stable and efficient provision of the functions of the website and the information that can be accessed via it. If the controller fulfills a contractual obligation towards you with the respective function, the legal basis is Art. 6 para. 1 lit. b GDPR.

The legal basis for the processing of personal data using cookies for analysis purposes and for other non-technically necessary processing purposes is Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TTDSG if the user has given their consent.

§ 4 Orders / other functions

(1)   Enquiries/orders/transactions

In addition to the purely informational use of our offers, you can send us questions, orders and - if offered - provide us with ratings. To do so, you must generally provide further personal data, which we process to process your request, to answer your inquiries, to fulfill contracts concluded with you, to assert and realize our claims and, if necessary, to respond to your evaluation and to which the aforementioned data processing principles apply. In addition, we use personal data to the extent necessary to fulfill our legal obligations, for example to comply with our documentation and retention obligations under tax or commercial law.

Data will only be passed on to third parties if and to the extent that this is necessary to fulfill our contractual obligations towards you (Art. 6 para. 1 sentence 1 lit. b GDPR), for example the transmission of your address as a delivery address to a logistics partner or to a shipping company so that they can send or deliver the goods you have ordered to you. In addition, we pass on personal data if this is necessary to process payments. If necessary, personal data may also be exchanged to the extent necessary with the operator of this internet platform, insofar as this is necessary for the fulfillment of our contractual obligations towards the person concerned or insofar as this is necessary, for example, to clarify technical or legal questions or questions in the context of customer service.

The legal basis for the processing of your data is Art. 6 para. 1 lit. a GDPR if consent has been given. If the processing serves to fulfill a contract to which the data subject is a party or to carry out pre-contractual measures, the legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR. If we process personal data in order to process non-contractual requests or inquiries or to respond appropriately to reviews, we do so for the purpose of optimal and efficient communication with you as well as for the appropriate evaluation and commenting of reviews and to improve our customer service, as well as to clarify and resolve technical problems. The aforementioned purposes constitute our legitimate interests within the meaning of the legal basis of Art. 6 para. 1 lit. f GDPR.

In addition, we reserve the right to process personal data in individual cases if this is necessary, for example, for the purpose of prosecuting abusive or fraudulent activities, for tracking and rectifying functional or security problems. The above purposes then constitute our legitimate interest within the meaning of the legal basis of Art. 6 para. 1 f) GDPR.

(2) Registration

On our website, we offer users the opportunity to register by providing personal data. The data is entered into an input mask and transmitted to us and stored. The data will only be passed on to third parties if and to the extent that this is necessary to fulfill our contractual obligations to you (Art. 6 para. 1 sentence 1 lit. b GDPR), for example the transmission of your address as a delivery address to providers so that they can send the goods you have ordered. As part of the registration process, the information resulting from the registration form is requested and stored by us. The legal basis for the processing of the data is Art. 6 para. 1 lit. a GDPR if the user has given consent. If the registration serves the fulfillment of a contract to which the data subject is a party or the implementation of pre-contractual measures. If the registration serves the fulfillment of a contract to which the user is a party or the implementation of pre-contractual measures, the additional legal basis for the processing of the data is Art. 6 para. 1 lit. b GDPR.

When concluding a contractual relationship on our website, we ask you to provide the following personal data

● Data that identifies you personally, such as your name and email address

● other personal data that we are legally obliged or authorized to collect and process and that we need for your authentication, identification or to verify the data we have collected.

The aforementioned data is processed to handle the contractual relationship. The data is processed on the basis of Art. 6 para. 1 lit. b GDPR. The storage period is limited to the purpose of the contract and, if applicable, statutory and contractual retention obligations.

(3) Payment processing 

Paypal

We use the PayPal Check-Out payment service of PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of data processing is to be able to offer you payment via the payment service. By selecting and using payment via PayPal, credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, the data required for payment processing will be transmitted to PayPal in order to fulfill the contract with you with the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

Credit card via PayPal, direct debit via PayPal & "Pay later" via PayPal 

For individual payment methods such as credit card via PayPal, direct debit via PayPal or "Pay later" via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies. For this purpose, PayPal transmits the personal data required for a credit check to a credit agency and uses the information received on the statistical probability of a payment default for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against payment default if PayPal makes advance payments. 

You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you based on Article 6(1)(f) GDPR by notifying PayPal. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Klarna payment options 

We use the payment service  from Klarna Bank AB (publ) (Sveavägen 46, 111 34 Stockholm, Sweden; "Klarna") on our website. By selecting and using payment via Klarna, the data required for payment processing will be transmitted to Klarna in order to fulfill the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR.

"Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (installment purchase)

For individual payment methods such as "Pay Later" (invoice), "Pay Now" (payment by direct debit), "Financing" (installment purchase), Klarna reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies.

For this purpose,  Klarna  transmits the personal data required for a credit check, such as first and last name, address, gender, e-mail address, IP address and data related to the order for the purpose of identity and credit checks to  to a credit agency and uses the information received on the statistical probability of non-payment for a balanced decision on the establishment, execution or termination of the contractual relationship. The credit report may contain probability values (score values) that are calculated on the basis of scientifically recognized mathematical-statistical procedures and whose calculation includes address data, among other things. Your legitimate interests are taken into account in accordance with the statutory provisions. The data processing serves the purpose of credit assessment for the initiation of a contract. The processing is carried out on the basis of Art. 6 para. 1 lit. f GDPR out of our overriding legitimate interest in protection against non-payment if Klarna  makes advance payment. You have the right, for reasons arising from your particular situation, to object at any time to this processing of your personal data based on Art. 6 para. 1 lit. f GDPR by notifying Klarna. The provision of the data is necessary for the conclusion of the contract with the payment method you have requested. Failure to provide the data means that the contract cannot be concluded with the payment method you have selected.

Further information, in particular to which credit agencies Klarna passes on your personal data, can be found for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies

General information about Klarna can be found for Germany at: https://www.klarna.com/de/ and for Austria at https://www.klarna.com/at/. Your personal data will be treated by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarna's data protection regulations for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy and for Austria at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy.

SOFORT

We use the payment service provider SOFORT GmbH, (Theresienhöhe 12, 80339 Munich, Germany; "SOFORT") for payment processing on our website. Sofort GmbH is a company of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). The purpose of data processing is to be able to offer you various payment methods by processing payments via the payment service provider SOFORT. If you have opted for the payment option, the data required for payment processing will be transmitted to SOFORT. This data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the payment service provider SOFORT can be found at https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/.

Mollie

 

We use the payment service provider Mollie B.V. (Keizersgracht 313, 1016 EE Amsterdam, Netherlands; "Mollie") for payment processing on our website. The purpose of data processing is to be able to offer you various payment methods by processing payments via the payment service provider Mollie. If you have opted for one of the payment options offered by the payment service provider Mollie, the data required for payment processing will be transmitted to Mollie. This includes your payment data (e.g. bank account number or credit card number), your IP address, your internet browser and device type and, in some cases, your first and last name, your address data and information about the product or service you have purchased from us. This data processing is carried out on the basis of Art. 6 para. 1 lit. b GDPR. Further information on data processing when using the payment service provider Mollie can be found in the associated privacy policy https://www.mollie.com/de/privacy  

(5) Use of the Facebook single sign-on function

We use the single sign-on function (formerly Facebook Connect) of Meta Platforms Ireland Limited  (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; "Facebook") on our website.

Meta Platforms Ireland and we are jointly responsible for the collection of your data when the service is integrated and the transmission of this data to Facebook. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data, in which the respective responsibilities are defined. The agreement is available at https://www.facebook.com/legal/controller_addendum. Accordingly, we are responsible in particular for fulfilling the information obligations under Art. 13, 14 GDPR, for compliance with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service and for compliance with the obligations under Art. 33, 34 GDPR, insofar as a breach of the protection of personal data affects our obligations under the joint processing agreement. Meta Platforms Ireland is responsible for enabling the rights of data subjects under Art. 15 - 20 GDPR, complying with the security requirements of Art. 32 GDPR with regard to the security of the Service and the obligations under Art. 33, 34 GDPR to the extent that a personal data breach affects Meta Platforms Ireland's obligations under the Joint Processing Agreement.

This feature allows website visitors to log in to the website using their existing Facebook account. The data processing serves the purpose of verification during registration, personalization and interest-based advertising.

In order to offer the function on the website, a connection to the Facebook server is established. Cookies are used for this purpose. The following information may be collected and transmitted to Facebook: IP address, browser information, referrer URL (website from which you accessed our website), location data. This applies regardless of whether you are registered or logged in to the social network. Transmission also takes place for users who are not registered or not logged in. If you are connected to one or more of your social network accounts at the same time, the information collected can also be assigned to your corresponding profiles. You can prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. Your data may be transmitted to the USA. There is an adequacy decision by the EU Commission for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified itself in accordance with the TADPF and is therefore committed to complying with European data protection principles.

When using the single sign-on function, the Facebook profile of the website visitor is linked to a customer account for this website. In doing so, Facebook provides us with the user's personal data as specified in the login process. This may include the following information: Name, address, public profile information (e.g. name, profile picture, age, gender), e-mail address, friends lists, "Like" information.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

You can find more information on the collection and use of data by Facebook, your rights in this regard and options for protecting your privacy in Facebook's privacy policy at https://www.facebook.com/about/privacy/.

(6) Zendesk

You can use our chat function at your request. For this purpose, we use the ticket system Zendesk, a customer service platform of Zendesk Inc, 989 Market Street #300, San Francisco, CA 94102. For this purpose, necessary data, e.g. surname, first name, customer number, postal address, telephone number, e-mail address are collected in order to be able to answer your request for information.

Personal data such as your address, your customer number, an order number or your telephone number are not collected unless you provide this information voluntarily.

Further information on data processing by Zendesk can be found in Zendesk's data protection information. If you have any questions, you can also contact Zendesk's data protection officer directly at privacy@zendesk.com.

If you contact us, we will only use the personal data you provide to process your specific request. The data provided will be treated confidentially. The data provided and the message history with our service will be stored for a maximum period of 12 months for follow-up questions and subsequent contact. The legal basis for this data processing is Art. 6 para. 1 sentence 1 lit. b, f GDPR (pre-contractual measures, contract fulfillment or balancing of interests, based on our interest in answering users' inquiries).

We have concluded a contract with Zendesk for order processing including EU standard contractual clauses.

(7) Trusted Shops/Trustbadge

Integration of the Trusted Shops Trustbadge / other widgets

If you have given your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR, Trusted Shops widgets are integrated on this website to display the Trusted Shops services (e.g.  seal of approval, collected reviews) and to offer Trusted Shops products to buyers after an order.

The Trustbadge and the services advertised with it are an offer from Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne ("Trusted Shops"), with whom we are jointly responsible under data protection law in accordance with Art. 26 GDPR. In the context of this data protection notice, we inform you below about the essential contents of the contract in accordance with Art. 26 para. 2 GDPR.

Within the framework of the joint responsibility existing between us and Trusted Shops, please contact Trusted Shops in case of data protection questions and to assert your rights, preferably using the contact options provided in the data protection information (https://www.trustedshops.de/impressum/#datenschutz). Irrespective of this, you can always contact the controller of your choice. If necessary, your request will then be forwarded to the other responsible party for a response.

The trust badge is provided by a US CDN provider (content delivery network).

An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which is available for the USA here: https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework (DPF). Further information can be found here: https://www.dataprivacyframework.gov/s/  If the service providers used are not certified under the DPF, standard contractual clauses have been concluded as a suitable guarantee.

When the Trustbadge is accessed, the web server automatically saves a so-called server log file, which also contains your IP address, the date and time of access, the amount of data transferred and the requesting provider (access data) and documents the access. The IP address is anonymized immediately after collection so that the stored data cannot be assigned to your person. The anonymized data is used in particular for statistical purposes and for error analysis.

If you have given your consent, the Trustbadge accesses the order information stored in your end device (order total, order number, product purchased if applicable) and e-mail address after the order has been completed and your e-mail address is hashed using a cryptological one-way function. The hash value is then transmitted to Trusted Shops with the order information in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. This serves to check whether you are already registered for Trusted Shops services. If this is the case, further processing will be carried out in accordance with the contractual agreement concluded between you and Trusted Shops (https://www.trustedshops.com/tsdocument/BUYER_AUTO_PROTECTION_TERMS_de.pdf . If you are not yet registered for the services or do not give your consent to automatic recognition via the Trustbadge, you will then be given the opportunity to register manually for the use of the services or to complete the protection as part of your existing user contract.

For this purpose, the Trustbadge accesses the following information, which is stored in the end device you are using, after you have completed your order: Order total, order number and e-mail address. This is necessary so that we can offer you buyer protection. The data will only be transmitted to Trusted Shops if you actively decide to take out buyer protection by clicking on the correspondingly labeled button in the so-called Trustcard. If you decide to use the services, the further processing is based on the contractual agreement with Trusted Shops in accordance with Art. 6 para. 1 lit. b GDPR in order to complete your registration for buyer protection and to secure the order and, if necessary, to be able to send you evaluation invitations by e-mail afterwards.

Trusted Shops uses service providers in the areas of hosting, monitoring and logging. The legal basis is Art. 6  para. 1 lit. f GDPR for the purpose of ensuring trouble-free operation. Processing may take place in third countries (USA and Israel) .

An adequate level of data protection is ensured in each case by an adequacy decision of the EU Commission, which applies to the USA (https://commission.europa.eu/system/files/2023-07/Adequacy%20decision%20EU-US%20Data%20Privacy%20Framework_en.pdf) and Israel (https://eur-lex.europa.eu/legal-content/DE/TXT/HTML/?uri=CELEX:32011D0061) . Service providers used from the USA are generally certified under the EU-U.S. Data Privacy Framework. Further information can be found here: https://www.dataprivacyframework.gov/s/. If the service providers used are not certified under the DPF, standard contractual clauses have been concluded as a suitable guarantee.

§ 5 Objection or revocation against the processing of your data

(1) If you have given your consent to the processing of your data, you can withdraw this consent at any time. Such a revocation affects the permissibility of the processing of your personal data after you have given it to us.

(2) If we base the processing of your personal data on the balancing of interests, you can object to the processing. This is the case if, in particular, the processing is not necessary for the performance of a contract with you, which is described by us in the following description of the functions. When exercising such an objection, we ask you to explain the reasons why we should not process your personal data as we have done. In the event of your justified objection, we will examine the situation and either discontinue or adapt the data processing or point out to you our compelling reasons worthy of protection on the basis of which we will continue the processing.

(3) Of course, you can object to the processing of your personal data for advertising and data analysis purposes at any time. You can inform us of your objection to advertising using the contact details provided above.

§ 6 Web tracking

Google Analytics

(1) This website uses Google Analytics, a web analytics service provided by Google Ireland Ltd ("Google"). Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated about your use of this website is usually transmitted to a Google server in the USA and stored there. However, if IP anonymization is activated on this website, your IP address will be shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on behalf of the operator of this website for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage to the website operator.

(2) The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

(3) You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

(4) This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are further processed in abbreviated form, so that they cannot be linked to a specific person. If the data collected about you is personally identifiable, it is immediately excluded and the personal data is deleted immediately.

(5) We use Google Analytics to analyze and regularly improve the use of our website. We can use the statistics obtained to improve our offer and make it more interesting for you as a user. 

(6) Information from the third-party provider: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001. Terms of use: http://www.google.com/analytics/terms/de.html, overview of data protection: http://www.google.com/intl/de/analytics/learn/privacy.html, as well as the privacy policy: http://www.google.de/intl/de/policies/privacy.

For any possible cases in which personal data is transferred to the USA, Google complies with the data protection regulations for data transfer to third countries in accordance with Art. 44 et seq. GDPR. EU standard contractual clauses have been concluded for this purpose. You can view these here: https://policies.google.com/privacy/frameworks?hl=de 

Hotjar

This privacy policy applies to the use of Hotjar web analysis software (hereinafter referred to as "Hotjar") on our website. The provider is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe (website: https://www.hotjar.com).

Hotjar is a web analytics service that enables us to analyze user behavior on our website. Hotjar uses cookies and similar technologies to collect information about the use of our website and to give us insights into user behavior. This information is usually transferred to a Hotjar server and stored there.

The information Hotjar collects includes:

● IP address of the user (collected in anonymized form)

● Device screen size

● Device type (unique device identifier)

● Browser information

● Geographical location (country only)

● First and last name (if entered)

● Email address (if entered)

● Mouse events (movements, clicks, scrolling)

● Keyboard input

Hotjar uses this information to analyze user behavior on our website and to generate reports for us. Hotjar undertakes not to pass this information on to third parties or to use it for purposes other than the provision of the service.

If you wish to disable the use of Hotjar, you can do so by activating the opt-out function on the Hotjar website: https://www.hotjar.com/opt-out. Enabling this feature will disable the use of Hotjar on all websites that use Hotjar.

We use Hotjar to optimize our offer on our website and to improve the user experience. The use of this service is based on your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG. Consent can be revoked at any time.

Further information on data protection at Hotjar can be found in Hotjar's privacy policy: https://www.hotjar.com/legal/policies/privacy.

Google Tag Manager

This website uses Google's Tag Manager. This service allows us to manage website tags via an interface. This Google tool only sets tags. This means that no cookies are used and no personal data is regularly collected. However, other tags may be triggered, which in turn may collect data. The Google Tag Manager does not access this data. If deactivation has been carried out at domain or cookie level, this remains in place for all tracking tags if they are implemented with Google Tag Manager.

Matomo

This website uses the analysis tool Matomo, an open source web analysis tool (https://matomo.org/). 

We use the open source tool Matomo to analyze our website. The purpose of data processing is to analyze your surfing behavior. By analyzing the data obtained, we are able to compile information about the use of the individual pages of our website. This helps us to improve our website and its user-friendliness.

Basically, consent-free and completely anonymized tracking is established, which is supplemented by extended tracking based on cookies that requires consent. The legal basis for the processing of data, which is carried out by setting cookies and thus accessing the end device, is your consent in accordance with Art. 6 para. 1 lit. a of the GDPR. This procedure takes into account all current data protection requirements. A third tracking method (census measurement) determines the absolute number of page views on the server side independently of the previously integrated and possibly rejected tracking variants.

The Matomo software runs exclusively on the server of our service provider. Your personal data is only stored there. The data is not passed on to third parties. 

The software is set so that the IP addresses are not stored in full, but 2 bytes of the IP address are masked (e.g.: 192.168.xxx.xxx). In this way, it is no longer possible to assign the shortened IP address to the calling computer.

You have the option of revoking your consent to the setting of cookies at any time via the cookie management functions of the website. In addition, you have the option of preventing consent-free tracking by accessing the privacy policy and excluding consent-free tracking with effect for the future under "Prevent tracking". This revocation does not affect the legality of the data processing carried out to date.

Matomo Tag Manager

We use the Tag Manager to integrate the analysis tool Matomo Analytics. The conversion pixels of our Meta and TikTok social media channels are also integrated via the Tag Manager. In addition, the Tag Manager is used to add appropriate tags to the competition entry form so that we can better measure the progress of the form.

Deactivate user analysis by setting the checkbox for opting out of cookie-less tracking. A cookie will then be set to save your data protection preferences. Your visits to this website will then no longer be recorded by the web analysis tool. Please note that the Matomo deactivation cookie on this website will also be deleted if you remove the cookies stored in your browser. In addition, if you use a different computer or web browser, you will have to repeat the deactivation procedure.

Opt-out from cookie-less tracking

Adtribute

We use Adtribute on this website. Adtribute is a German data analysis service provided by Adtribute Software GmbH, Im Hart 32, 82110 Germering, Germany. Adtribute allows us to determine and optimize the effectiveness of our marketing measures by evaluating usage information. This enables us to constantly improve our offers.

Adtribute uses various browser storage options, such as HTTP cookies, IndexedDB, LocalStorage and/or contact data, to identify users. The use of these identification options prevents third parties from accessing the data stored in the browser or that users can be tracked across domains. The user also has the option of preventing the storage of this data at any time by making the appropriate setting in the browser.

This data is encrypted in transit, stored fully encrypted immediately after transmission to Adtribute and then analyzed in aggregated form. The analyses primarily relate to sales, advertising costs, profit and other key figures to determine marketing efficiency. No personal data that we collect through Adtribute is shared with third parties or merged with other personal data stored by us.

All data collected by Adtribute is anonymized, processed and stored exclusively within the EU. At no time is data transferred to third countries.

An AV contract has been concluded with Adtribute. This ensures that our users' data is protected, is not passed on to third parties and is only processed on our behalf and in accordance with our instructions.

The legal basis for processing is your consent in conjunction with Article 6(1)(f) GDPR and Section 25 TTDSG. You can revoke your consent at any time via the cookie settings on this website with effect for the future.

 

Use of the Pinterest tag

We use the Pinterest Tag of Pinterest Europe Limited (Palmerston House, 2nd, Fenian Street, Floor, Dublin 2, Ireland "Pinterest") on our website.

The purpose of the application is to target visitors to the website with interest-based advertising on the Pinterest social network. The Pinterest conversion tag has been implemented on the website for this purpose. This tag is used to establish a direct connection to the Pinterest servers when the website is visited. This tells the Pinterest server which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network. When you visit Pinterest, you will then be shown personalized, interest-based Pinterest ads.

If you access our website via a pin on the Pinterest social network, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and are therefore not used for personal identification. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognize that you have clicked on the pin and have been redirected to this page. The information collected with the help of the conversion cookie is used to create conversion statistics and thus to optimize our website. Among other things, the following information can be processed: Total number of users who clicked on one of our pins and were redirected to our website, subpages visited on our website (e.g. category or product pages), search queries on our website, your shopping cart contents, completed transactions.

Your data may be transferred to the USA. An adequacy decision by the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. Data is transferred on the basis of standard contractual clauses, among others, as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.

The use of cookies or comparable technologies takes place with your consent on the basis of § 25 para. 1 sentence 1 TTDSG i.V.m. Art. 6 para. 1 lit. a GDPR. The processing of your personal data takes place with your consent on the basis of Art. 6 para. 1 lit. a GDPR. You can withdraw your consent at any time without affecting the lawfulness of processing based on consent before its withdrawal.

For more information on the collection and use of data by Pinterest, your rights in this regard and ways to protect your privacy, please refer to Pinterest's privacy policy at https://policy.pinterest.com/de/privacy-policy.

Use of TikTok Pixel

We use the TikTok Pixel from TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; "TikTok Ireland") and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB,  United Kingdom; "TikTok UK") on our website. Both companies are jointly responsible for data processing (hereinafter "TikTok").

The purpose of data processing is to identify and analyze our customers' website access and to better address customers by placing targeted advertisements and to evaluate the effectiveness of advertisements on TikTok. For this purpose, TikTok uses technologies such as cookies and pixels that enable your browser to be recognized. The following information may be collected and transmitted to TikTok: Date and time of the visit, information about the browser and device type you are using, screen resolution, IP address. TikTok can assign this information to your personal TikTok user account. The data collected in this way can be used to create user profiles using pseudonyms. However, it is not possible to identify users personally.

Your data may be transferred to third countries, such as the USA. The EU Commission has issued an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified in accordance with the TADPF. The transfer of data to the USA and to third countries without an adequacy decision is based, among other things, on standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.  

Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in identifying our customers and targeting them with interest-based advertising. You have the right to object, on grounds relating to your particular situation, at any time to the processing of personal data concerning you. You can prevent the storage of cookies by selecting the appropriate technical settings in your browser software.

You can find more information on data protection at https://www.tiktok.com/legal/new-privacy-policy?lang=de-DE  and https://ads.tiktok.com/i18n/official/policy/controller-to-controller .

Hofe Media

We use the services of HOFE Media GmbH to conduct effective market research/analysis, to collect statistical data for campaign tracking (measuring the success of advertising campaigns) or to optimize the user-friendliness of our website. This is done by means of pseudonymous user profiles in which no personal data is used, but only anonymized or pseudonymized data. Cookies are used to process the usage data. In particular, the following user data is collected:

- URLs of the websites visited

- Time of the visit to these websites

- Views, clicks and interactions on or with the advertising material of advertisers

- Visits to advertisers' websites, including the transfer of product IDs where applicable

- Online legal transactions with advertisers

- abbreviated IP (Internet Protocol) address, based on this:

- General geo-information (country of origin, region/state, city)

- Internet access provider

- Access speed (cable/DSL, dial-up, cellular, corporate)

- Browser or user-client information, including

- Browser type (Google Chrome, Microsoft Edge, Firefox, Safari, etc.)

- Operating system (Windows, Apple OS, Linux, etc.)

- Device (desktop, Android phone, iPhone, Android tablet, iPad, etc.)

- Preferred languages

- Screen resolution

HOFE Media GmbH will use the transmitted data on our behalf, in particular to implement campaign tracking with simptrack (tracking system). All of the above-mentioned data is collected exclusively for this purpose and stored without personal reference.

The legal basis for the processing of personal data is Art. 6 para. 1 lit. a) GDPR in conjunction with § 25 TTDSG.

§ 7 Usage-based and advertising content

Google Ads

We use "Google Ads" (formerly Google AdWords) on our website, a service provided by Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google"). Google Ads enables us to draw attention to our attractive offers with the help of advertising material on external websites. This allows us to determine how successful individual advertising measures are. These advertising materials are delivered by Google via so-called "AdServers". We use so-called AdServer cookies for this purpose, through which certain parameters for measuring success, such as the display of ads or clicks by users, can be measured. If you access our website via a Google ad, Google Ads will store a cookie on your PC. These cookies generally lose their validity after 30 days. They are not intended to identify you personally. The following information is usually stored as analysis values for this cookie: unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions), opt-out information (marking that the user no longer wishes to be addressed). These cookies enable Google to recognize your web browser. If a user visits certain pages of an Ads customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognize that the user clicked on the ad and was redirected to this page. A different cookie is assigned to each Ads customer. Cookies can therefore not be tracked via the websites of Ads customers. We ourselves do not collect and process any personal data in the aforementioned advertising measures. We only receive statistical evaluations from Google. Based on these evaluations, we can recognize which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information. Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further use of the data collected by Google through the use of Google Ads. To the best of our knowledge, Google receives the information that you have accessed the relevant part of our website or clicked on one of our ads. If you have a user account with Google and are registered, Google can assign the visit to your user account. Even if you are not registered with Google or have not logged in, it is possible for Google to find out your IP address and store it.

We use Google Ads for marketing and optimization purposes, in particular to display ads that are relevant and interesting to you, to improve campaign performance reports and to achieve a fair calculation of advertising costs. This also constitutes our legitimate interest in the processing of the aforementioned data by the third-party provider. The legal basis is Art. 6 para. 1 sentence 1 lit. f) GDPR and, insofar as we obtain your consent, Art. 6 para. 1 lit. a GDPR.

You can prevent the installation of cookies by deleting existing cookies and deactivating the storage of cookies in the settings of your web browser. We would like to point out that in this case you may not be able to use all the functions of our website to their full extent. It is also possible to prevent the storage of cookies by setting your web browser to block cookies from the domain "www.googleadservices.com" (https://www.google.de/settings/ads). We would like to point out that this setting will be deleted if you delete your cookies. You can also deactivate interest-based ads via the link https://optout.aboutads.info. Please note that this setting will also be deleted if you delete your cookies.

Information from the third-party provider: Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland

Further information on the use of data by Google, on setting and objection options and on data protection can be found on the following Google websites:

Privacy policy: https://policies.google.com/privacy?hl=de&gl=de 

Google website statistics: https://services.google.com/sitestats/de.html 

Google Dynamic Remarketing

On our website, we use the dynamic remarketing function of Google Ads, a service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The technology enables us to place automatically generated, target group-oriented advertisements after your visit to our website. The ads are based on the products and services that you clicked on or viewed during your last visit to our website. Google uses cookies to create interest-based ads. If you do not wish to receive user-based advertising from Google, you can deactivate the display of advertisements using Google's ad settings.

We process your data with the help of Google Ads for the purpose of optimizing our website and for marketing purposes on the basis of your consent in accordance with Art. 6 para. 1 lit. a. GDPR.

The specific storage period of the processed data cannot be influenced by us, but is determined by Google Ireland Limited. Further information can be found in the privacy policy for Google Ads: https://policies.google.com/privacy. The recipient of the data is Google Ireland Limited, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, as part of order processing. Google Ireland Limited uses Google LLC in the USA (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA) as a service provider. The basis for data processing in the USA is your consent given via the cookie consent banner (Art. 49 para. 1 lit. a) GDPR). In the USA, there is no level of data protection comparable to the requirements of the GDPR. It is possible that government agencies may access personal data without us or you being aware of this. Enforcement of your rights is probably not possible in the USA. You can revoke your consent at any time with effect for the future by clicking on the button.

Microsoft Advertising

We use the Microsoft Advertising service of the provider Microsoft Ireland Operations Limited (Ireland/EU) (formerly Bing Ads) on our website. Microsoft Advertising is an online marketing service that uses the Universal Event Tracking (UET) tool to help us display targeted advertisements via the Microsoft Bing search engines. Microsoft Advertising uses cookies for this purpose. This involves processing personal data in the form of online identifiers (including cookie identifiers), IP addresses, device identifiers and information about device and browser settings.

ATTENTION: In the context of this service, data is transferred to the USA or such a transfer cannot be ruled out. We would like to point out that, in the opinion of the European Court of Justice, there is currently no adequate level of data protection for data transfer to the USA and that there are therefore various risks (such as possible access by US intelligence services). Microsoft has certified itself for an adequate level of data protection in accordance with the Trans Atleantic Data Privacy Framework (https://ec.europa.eu/commission/presscorner/api/files/attachment/872132/Trans-Atlantic%20Data%20Privacy%20Framework.pdf.pdf).

Microsoft Advertising collects data via UET, which we can use to track target groups thanks to remarketing lists. For this purpose, a cookie is stored on the end device used when you visit our website. This enables Microsoft Advertising to recognize that our website has been visited and to display an advertisement when Microsoft Bing or Yahoo is used later. The information is also used to create conversion statistics, i.e. to record how many users have reached our website after clicking on an ad. This tells us the total number of users who clicked on our ad and were redirected to our website. However, we do not receive any information with which users can be personally identified.

Further information on these processing activities, the technologies used, stored data and the storage period can be found in the settings of our Consent Management Tool. Processing only takes place with your consent in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR and can be revoked at any time with effect for the future.

You can also deactivate personalized advertising at Microsoft at:  https://about.ads.microsoft.com/de-de/ressourcen/richtlinien/personalisierte-anzeigen.

Further information on data protection at Microsoft can be found in Microsoft's privacy policy at  https://privacy.microsoft.com/de-de/privacystatement.

Facebook Pixel

This website uses Facebook's visitor action pixel to measure conversions. The provider of this service is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland. However, according to Facebook, the data collected is also transferred to the USA and other third countries.

This allows the behavior of site visitors to be tracked after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The data collected is anonymous to us as the operator of this website; we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Usage Policy. This allows Facebook to place advertisements on Facebook pages and outside of Facebook. This use of the data cannot be influenced by us as the website operator.

The use of Facebook pixels is based on Art. 6 para. 1 lit. f GDPR. The website operator has a legitimate interest in effective advertising measures including social media. If a corresponding consent has been requested (e.g. consent to the storage of cookies), the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR; the consent can be revoked at any time.

Data transfer to the USA is based on the standard contractual clauses of the EU Commission. You can find details here:

https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can find further information on protecting your privacy in Facebook's privacy policy: https://de-de.facebook.com/about/privacy/.

You can also deactivate the remarketing function "Custom Audiences" in the settings for advertisements at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged in to Facebook.

If you do not have a Facebook account, you can deactivate usage-based advertising from Facebook on the website of the European Interactive Digital Advertising Alliance: http://www.youronlinechoices.com/de/praferenzmanagement/.

Facebook Custom Audience

We use the Custom Audiences service of Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, 2 Dublin, Ireland, email: impressum-support@support.facebook.com, website: facebook.com on our website. The processing also takes place in a third country for which there is no adequacy decision by the Commission. Therefore, the usual level of protection for the GDPR cannot be guaranteed for the transfer, as it cannot be ruled out that authorities in the third country, for example, may access the data collected. Data transfer to the USA is based on the standard contractual clauses of the EU Commission. Details can be found here: https://www.facebook.com/legal/terms/customaudience and https://www.facebook.com/legal/terms/dataprocessing.

The legal basis for the transfer of personal data is your consent in accordance with Art. 6 para. 1 lit. a GDPR, which you can revoke at any time via the cookie settings on this website.

Facebook Custom Audience is an advertising tool from Facebook that can be used to target advertising campaigns to site visitors.

You can withdraw your consent at any time. You can find more information on revoking your consent either in the consent itself or at the end of this privacy policy.

Further information on the handling of the transferred data can be found in the provider's privacy policy at www.facebook.com/about/privacy.

The provider also offers an opt-out option at www.facebook.com/about/privacy.

DoubleClick

This website uses the web analysis service DoubleClick as part of the application of Google Analytics, which enables the user's browser to be recognized when visiting other websites. The data collected is only evaluated for statistical purposes and in anonymized form. The information generated by the cookie about your visit to our website is transmitted to a Google server in the USA and stored there. The IP address is shortened before transmission within the member states of the European Union or in other contracting states of the Agreement on the European Economic Area by activating IP anonymization.

Only in exceptional cases will the IP address be transmitted in full to a Google server in the USA before it is truncated there. The anonymized IP address transmitted by the user's browser as part of Google Analytics is not merged with other Google data. DoubleClick cookies do not contain any personal data.

The information generated is used to compile reports on the activities on this website and to provide other services related to the use of this website. If required by law, Google may transfer this information to third parties or to the extent that third parties process this data on behalf of Google.

The legal basis for the processing of personal data is the consent of the user in accordance with Art. 6 para. 1 lit. a GDPR in conjunction with § 25 TTDSG. The user has the option at any time to object to the tracking web analysis for the future or to deactivate the DoubleClick cookie. The browser extension required for this can be downloaded and installed on the corresponding Google website. If several end devices or browsers are used by the user, the opt-out must be carried out for each end device or browser. To do this, the user can click on the following link: http://google.com/ads/preferences/html/opt-out.html

NEORY Marketing Cloud

We have integrated components of NEORY Marketing Cloud on our website. NEORY Marketing Cloud is a service of NEORY GmbH and provides marketing automation and marketing analytics software for marketing services and products, including content creation, lead management, email marketing and web analytics.

NEORY Marketing Cloud uses cookies and other browser technologies to evaluate user behaviour and recognize users.

This information is used, among other things, to compile reports on website activity.

In this case, your data will be passed on to the operator of NEORY Marketing Cloud, NEORY GmbH, Brandschachtstraße 2, 44149 Dortmund, Germany.

NEORY Marketing Cloud is used on the basis of your consent in accordance with Art. 6 para. 1 lit. a GDPR and § 25 para. 1 TTDSG.

The specific storage period of the processed data cannot be influenced by us, but is determined by NEORY GmbH. Further information can be found in the privacy policy for NEORY Marketing Cloud: https://www.neory.com/privacy.html.

Adcell affiliate program 

Adcell is a German affiliate network that offers affiliate marketing. Affiliate marketing is an internet-based form of distribution. It enables commercial operators of websites (so-called merchants or advertisers) to place advertisements on third-party websites (so-called affiliates or publishers). This advertising is usually remunerated via click or sale commissions. The merchant provides an advertising medium (e.g. an advertising banner or other suitable means of Internet advertising) via the affiliate network. These advertising media are then integrated by an affiliate on their own websites or advertised via other channels (e.g. keyword advertising or e-mail marketing). 

The operating company of Adcell is Firstlead GmbH, Rosenfelder Str. 15-16, 10315 Berlin, Germany. 

Adcell places a cookie on your computer. What cookies are has already been explained above. The tracking cookie from Adcell does not store any personal data. Only the identification number of the affiliate, i.e. the partner referring the potential customer, as well as the order number of the visitor to a website and the advertising material clicked on are stored. The purpose of storing this data is to process commission payments between a merchant and the affiliate, which are processed via the affiliate network, i.e. Adcell. 

The legal basis for this processing is your consent in accordance with Art. 6 para. 1 lit. a GDPR, § 25 TTDSG. 

You can prevent the setting of cookies by our website, as already described above, at any time by means of a corresponding setting of the Internet browser used and thus permanently object to the setting of cookies. 

Such a setting of the Internet browser used would also prevent Adcell from setting a cookie on your computer. In addition, cookies already set by Adcell can be deleted at any time via your Internet browser or other software programs. 

The applicable data protection provisions of Adcell may be retrieved under https://www.adcell.de/news/meldungen/dsgvo/datenschutz-grundverordnung-bei-adcell.

 

§ 8 Social networks 

Facebook

This section applies to our processing of personal data via our Facebook presence: Meta Platforms Ireland Limited Facebook Ireland Limited ("Facebook") is generally responsible for the collection and further processing of personal user data on Facebook websites. Please note that Facebook collects and processes certain information about your visit to our Facebook page even if you do not have a Facebook user account or are not logged in to Facebook. For information on the processing of personal data by Facebook, please refer to Facebook's privacy policy: https://www.facebook.com/about/privacy/. 

As the operator of this Facebook page, we can only view your public profile on Facebook. What information is visible here depends on your settings in your profile. In addition, we process your personal data (such as your name and the content of your messages, inquiries or other contributions to us) if you contact us via our Facebook page or if you publish content via our Facebook presence, e.g. in the form of a comment. We then process this data for the purpose of processing your posts accordingly and responding to them if necessary. These purposes also constitute our legitimate interests within the meaning of the legal basis of Art. 6 para. 1 f) of the European General Data Protection Regulation (GDPR).

We store your personal data on our systems, i.e. outside of Facebook, if and for as long as it is required for the purposes for which it was collected or if there are statutory retention obligations.  Our contractual relationship with Facebook is governed by the provisions of the Page Insights Addendum, which provides for and regulates joint responsibility for data processing via Facebook: https://www.facebook.com/legal/terms/page_controller_addendum

Instagram

This privacy policy applies to our Instagram presence:

Instagram is part of the Facebook group of companies and shares infrastructure, systems and technology with Facebook and other Facebook companies https://www.facebook.com/help/111814505650678?ref=dp).

We expressly point out that Facebook stores the data of the users of its services (e.g. personal information, IP address, etc.) and may also use this data for business purposes. You can find more information about Facebook's data processing at Instagram in Instagram's privacy policy at https://help.instagram.com/519522125107875?helpref=page_content.

We have no influence on data collection and further processing by Facebook/Instagram. Furthermore, it is not clear to us to what extent, where and for how long the data is stored, to what extent Facebook/Instagram complies with existing deletion obligations, which evaluations and links are made with the data and to whom the data is passed on. Insofar as personal data is processed in connection with our Instagram page and Facebook alone decides on the purposes and means of processing, the following applies

Meta Platforms Ireland Limited Facebook Ireland Limited (also: "Facebook/Instagram"), 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, is the sole controller of the processing.

You can contact the company data protection officer for Instagram at the following address: https://www.facebook.com/help/contact/540977946302970  using the contact form provided. The Instagram Privacy Policy (http://instagram.com/legal/privacy/) specifies the categories of personal data that are processed when using Facebook products (https://www.facebook.com/help/1561485474074139?ref=dp), describes in general terms the purposes for which this data is used and specifies the categories of recipients to whom this data may be disclosed. In the Data Policy, you will also find information about the legal basis for the processing of this data and information about how you can withdraw your consent to the processing of personal data. Further information on the respective legal basis can be found at https://www.facebook.com/about/privacy/legal_bases.

In the Data Policy, you will also find information on how you can exercise your rights of access, rectification, portability and erasure vis-à-vis Facebook. Under this point you will also find information about your right to object to certain processing of personal data. You can find more information about your control options here: https://www.facebook.com/help/2069235856423257. In the Data Policy you will also find information about the duration for which personal data is stored and information about the criteria for determining this duration and the possibility of blocking or deleting Instagram accounts. The data policy refers to the intention of Facebook/Instagram to transfer data to third countries if necessary. Please note that if personal data is processed in the United States of America, the level of protection for your data may be lower than if it is processed within the EU.

If you visit our Instagram page and your browser allows cookies to be stored, Facebook/Instagram stores information in the form of small text files in your browser's memory (hereinafter referred to as "cookies") and can access this information when you visit the Instagram platform or a website that integrates Instagram technologies. You can find more information on the purpose of the cookies used, the integration of these cookies by other websites and your control options in this regard here: https://help.instagram.com/1896641480634370?ref=ig.

Cookies enable Instagram/Facebook to track your user behavior (for registered users across devices) on other websites beyond the Instagram platform and also to create profiles of your behavior. This applies both to persons registered with the Instagram platform and to persons not registered there. If you want to prevent your behavior from being tracked in this way, you should log out of Facebook or Instagram or deactivate the "stay logged in" function, delete the cookies on your device and close and restart your browser.

In addition to the content you submit, information about your profile, your likes and your posts will be visible to us depending on your privacy settings. You can find out how to change your privacy settings here: https://de-de.facebook.com/help/instagram/116024195217477.

The processing of your personal data when contacting or interacting with us via our Instagram presence is carried out by us on the basis of Art. 6 para. 1 sentence 1 lit. f GDPR. Our legitimate interest within the meaning of the legal basis is to respond to your request and to communicate with you appropriately and for the intended purpose. If your contact is aimed at the conclusion of a contract (for example in the context of participation in competitions), the additional legal basis for the processing is Art. 6 para. 1 sentence 1 lit. b GDPR.

Target group-oriented advertising

We also occasionally use the social media platforms described to display targeted advertising.

For this purpose, we use target group definitions provided to us by the social media provider. We only use anonymous target group definitions - i.e. we define characteristics based on general demographic information, behavior, interests and connections, for example. The operator of the social media platform uses these to display advertisements to its users accordingly. The legal basis for this is the consent that the operator of the social media platform has obtained from its users. If you wish to revoke this consent, please use the revocation options provided by the provider of the social media platform, as the social media platform operator is responsible for this processing. Occasionally, we or the provider of the social media platform also use publicly available data to define target groups. If you have given your consent, the legal basis for this processing is Art. 6 para. 1 lit. a GDPR or, if permissible and relevant, Art. 6 para. 1 lit. f GDPR in conjunction with our legitimate interest in advertising that matches the target group as closely as possible. 

We do not use target group definition based on location data. We do not pass on any personal data to the operator of the social media platform as part of the target group definition. 

Occasionally, we also use information about visits to or interactions with other sites (remarketing) to define target groups. We also use cookies for this purpose. In these cases, however, we obtain the user's consent in advance via a consent banner on the respective other pages and provide information about the data processing at this point. You can revoke this consent at any time by calling up the consent banner on the relevant website again.

§ 9 Newsletter and email messages

(1) With your consent, you can subscribe to our newsletter (if offered), with which we inform you about our current interesting offers. The advertised services and benefits are named in the declaration of consent.

(2) We use the so-called double opt-in procedure to subscribe to our newsletter. This means that after you have registered, we will send you an e-mail to the specified e-mail address in which we ask you to confirm that you wish to receive the newsletter. If you do not confirm your registration within 24 hours, your information will be blocked and automatically deleted after one month. In addition, we store the IP addresses you use and the times of registration and confirmation. The purpose of this procedure is to be able to prove your registration and, if necessary, to clarify any possible misuse of your personal data.

(3) The only mandatory information for sending the newsletter is your e-mail address. The provision of further, separately marked data is voluntary and is used to address you personally. After your confirmation, we will store your e-mail address for the purpose of sending you the newsletter. The legal basis is Art. 6 para. 1 sentence 1 lit. a GDPR.

(4) You can revoke your consent to receive the newsletter at any time and unsubscribe from the newsletter. You can declare your revocation by clicking on the link provided in every newsletter e-mail or by sending a message to the contact details given in the imprint.

(5) We use your e-mail address, which we have received in the context of the sale of our services, for the electronic transmission of advertising for our own goods or services that are similar to those that you have already purchased from us, provided that you have not objected to this use. The provision of the e-mail address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. The processing is carried out on the basis of Art. 6 (1) lit. f GDPR from the legitimate interest in direct advertising. The legal basis for the use of your email address for advertising our own similar products is Section 7 (3) UWG. You can object to the use of your email address at any time by sending a message to our contact details above or by using the unsubscribe function provided by us in every advertising email. This will not incur any costs other than the transmission costs according to the basic rates of the respective means of communication used by you.

 

(6) Use of Klaviyo

We use the service of Klaviyo Inc (125 Summer St Floor 7, Boston, MA 02111, USA; "Klaviyo") to send newsletters as part of order processing.

We pass on the information you provide during the newsletter registration process (e-mail address, first and last name if applicable) to Klaviyo. The data processing serves the purpose of sending the newsletter and its statistical evaluation.

In order to evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This allows us to determine whether you have opened the newsletter and whether you have clicked on any integrated links. In this context, we collect your personal data such as IP address, browser type and device as well as the time. This data can be used to create user profiles under a pseudonym. The data collected will not be used to identify you personally. The data collected is only used for statistical analysis to improve newsletter campaigns.

Your data is generally transmitted to Klaviyo servers in the USA and stored there. An adequacy decision of the EU Commission is in place for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo is not certified under the TADPF. The data transfer takes place, among other things, on the basis of standard contractual clauses as suitable guarantees for the protection of personal data, which can be viewed at: https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.

Your personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR due to our overriding legitimate interest in a targeted, effective advertising and user-friendly newsletter system. You have the right to object to this processing of your personal data at any time for reasons arising from your particular situation. If we obtain your consent, the processing is based on Art. 6 para. 1 lit. f GDPR in conjunction with § 25 TTDSG.

You can find more information on data protection at Klaviyo at https://www.klaviyo.com/legal/privacy-notice and at https://www.klaviyo.com/legal/data-processing-agreement  (https://www.klaviyo.com/legal/data-processing-agreement).

§ 10 Linked content / sharing functions

Our website contains links to third-party websites. The respective data protection declarations and data protection notices of the respective operators of the linked websites apply. We would like to point out that we are not responsible for data processing practices on third-party platforms outside our own sphere of influence.

  § 11 Data protection for applications and in the application process

The controller collects and processes the personal data of applicants for the purpose of handling the application process. Personal data is generally processed electronically as part of the application process. 

If the controller concludes an employment contract with an applicant, the transmitted data will be stored for the purpose of processing the employment relationship in compliance with the statutory provisions. If the controller does not conclude an employment contract with the applicant, the application documents will be automatically deleted four months after notification of the rejection decision, unless deletion conflicts with any other legitimate interests of the controller. Other legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG). The legal basis for the processing of personal data of applicants is § 26 of the Federal Data Protection Act (BDSG) in conjunction with Art. 6 para. 1 lit. b, 88 GDPR, furthermore, insofar as the processing is carried out to fulfill legal requirements, Art 6. para. 1 lit. c GDPR and, insofar as the consent of the person concerned is the basis of the processing, Art. 6 para. 1 lit. a GDPR in conjunction with § 26 BDSG.

§ 12 Service providers

In some cases, we use external service providers (processors) to process your data. These have been carefully selected and commissioned by us, are bound by our instructions and are regularly monitored.

If our service providers or partners are based in a country outside the European Economic Area (EEA), we will inform you of the consequences of this circumstance in the description of the offer.

§ 13 Deletion

Unless otherwise stated in the respective individual information, the controller processes personal data in accordance with the statutory provisions for the purposes described here and only for as long as personal identification of the data subject is required for the respective purpose. The data will then be erased or neutralized/anonymized in accordance with data protection regulations.