Privacy policy

Privacy policy and information on any consents you may have given

As the controller within the meaning of the data protection regulations, we inform you below about the processing of your personal data by us.

I. The concept of personal data and other important terms

In simple terms, personal data is all information that relates to you personally as a data subject. Provisions on what the term "personal data" means and what other terms important for the following data protection information mean can be found in Art. 4 of the GDPR (General Data Protection Regulation).

 
II. Name and contact details of the controller; contact details of the data protection officer

In simple terms, the controller is the person who alone or jointly with others decides on the purposes and means of processing personal data. The name and contact details of the controller can be found in our provider identification / legal notice.

 
III. Purposes of processing your personal data; legal bases for processing

We process your personal data as part of our activities for the purposes listed below in accordance with the legal bases stated in each case.

1. for the implementation of pre-contractual measures, which take place on the basis of an enquiry from you, the processing of your personal data takes place on the basis of the consent given by you in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (b) GDPR.

2. in order to safeguard our legitimate interest in responding to enquiries and taking other measures in response to your enquiry, your personal data will be processed on the basis of your consent in accordance with Article 6(1)(a) GDPR or on the basis of Article 6(1)(f) GDPR.

3. for the fulfilment of a contract to which you are a party, your personal data will be processed on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (b) GDPR.

4. for the implementation of measures for the purpose of advertising, your personal data will be processed either on the basis of the consent you have given in accordance with Article 6 (1) (a) GDPR or on the basis of Article 6 (1) (f) GDPR.

5. in order to safeguard our legitimate interest in maintaining the proper operation of our website, in providing the most user-friendly functions possible and in analysing the use of our website, your personal data is processed on the basis of Article 6 (1) (f) GDPR.

6. in order to safeguard our legitimate interest in the enforcement of our rights and in the defence against claims directed against us, your personal data will be processed on the basis of Article 6 (1) (f) GDPR.

Our systems are secured by state-of-the-art technical and organisational measures to protect your personal data from access, modification or dissemination by unauthorised persons and from loss and destruction.

Information on the processing of your personal data for the individual processing purposes can be found in the corresponding further information in this privacy policy.

 
IV. Transfer of your personal data to third parties; categories of recipients of your personal data

Insofar as this is necessary to achieve the purposes of processing your personal data, we transfer your personal data to third parties within the framework of the legal requirements. Detailed information on the transfer of your personal data to third parties for the individual processing purposes can be found in the corresponding further information in this privacy policy. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

 
V. Scope of the processing of your personal data for the individual processing purposes

In the following, we will inform you in detail about the processing of your personal data for the various processing purposes.

Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we are authorised to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

1. use of our website for information purposes

If you visit our website without providing us with any information, we only process the personal data that your browser transmits to our server. This is the following data, which is technically necessary for us to display our website to you and to ensure stability and security:

  • the page you have called up
  • Date and time of the enquiry
  • Amount of data transferred
  • Source or reference from where you reached the page
  • Browser used by you
  • the operating system you use
  • Your IP address

Your personal data is processed on the basis of Article 6(1)(f) GDPR to protect our legitimate interest in maintaining the proper operation of our website.

Your personal data will be deleted after 6 months, unless they are still required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, the deletion will take place immediately after the conclusion of the corresponding proceedings.

2. processing of enquiries

If you contact us with an enquiry or request, we will process the personal data and information/documents you provide. Irrespective of the way in which you send us your enquiry or request, these may be

  • Date and time of contact
  • Name data
  • Contact details
  • Data on enquiry/request
  • Information/documents provided

Your personal data and the information/documents transmitted are processed - depending on the content of your enquiry or request - on the basis of the consent you have given in accordance with Article 6(1)(a) of the GDPR to respond to your enquiry or on the basis of Article 6(1)(b) of the GDPR to implement pre-contractual measures or on the basis of Article 6(1)(b) of the GDPR for the performance of a contract to which you are a party or on the basis of Article 6(1)(f) of the GDPR to safeguard our legitimate interest in responding to enquiries/requests. 1 (b) GDPR for the fulfilment of a contract to which you are a party or on the basis of Article 6 (1) (f) GDPR to protect our legitimate interest in responding to enquiries/concerns and in carrying out other measures in connection with the processing of enquiries/concerns.

If we provide a contact form and you contact us via this contact form, by sending your message you give your consent with the following content, about which you will be informed separately in the contact form: "I consent to the processing of my e-mail address and the other personal data I have provided for the purpose of responding to my message. I can revoke this consent at any time and without giving reasons with effect for the future. The legality of the processing carried out until the revocation remains unaffected in the event of revocation."

You can revoke your consent at any time and without giving reasons with effect for the future. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller. The legality of the processing carried out until the revocation remains unaffected in the event of revocation.

Insofar as this is necessary for processing your enquiry/request, we will transfer your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the scope of the data transferred is limited to the minimum necessary.

Your personal data will be deleted once your enquiry/request has been resolved, unless we are permitted to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

3. fulfilment of contracts

If you transmit personal data to us for the purpose of concluding a contract or in connection with the creation of a customer account, we process the data transmitted by you for the fulfilment of the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. details of the products covered by the contract as well as payment and delivery information).

Your personal data is processed on the basis of Article 6(1)(b) GDPR for the fulfilment of a contract to which you are a party.

Insofar as this is necessary for the fulfilment of the contract with you, we transfer your personal data to third parties within the framework of the legal requirements. This transfer takes place to the service providers involved in the fulfilment of the contract. These are the providers of the processing tools we use. These are also the companies commissioned with the transport. In addition, these are the payment service providers commissioned with payment matters.

If you use the payment service provider PayPal to process payment transactions, we expressly point out that the PayPal data protection declaration applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE

In cases where your personal data is transmitted to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted after expiry of the retention periods of 6 or 10 years under tax and commercial law, unless we are authorised to continue processing the data for another purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

4. advertising by letter post

We process the personal data you provide on your first name, surname and address to send you information about our offers by post if necessary.

In this respect, your personal data is processed on the basis of Article 6(1)(f) GDPR to protect our legitimate interest in carrying out advertising measures by letter post.

You can object to the processing of your personal data for the purpose of carrying out advertising measures by post at any time. All you need to do is send a corresponding message to the controller, whose contact details can be found in the information on the controller.

If you object to the processing of your personal data for the purpose of carrying out advertising measures by letter post, the personal data you have provided on your first name, surname and address will be deleted immediately, unless we are permitted to continue processing the data for another purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

5. use of cookies

We use so-called cookies on our website. These are small files that are stored on your device and through which certain information is transmitted to us. Cookies are used to enable you to use certain functions and to make our website more user-friendly overall.

Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device even after the end of the browser session, i.e. after you close your browser, and enable us or our partner companies (third-party cookies) to recognise you on your next visit to our website (persistent cookies).

Some of the cookies we use are technically necessary to enable you to use certain functions. This is the case, for example, with regard to the storage of entries in connection with the use of the shopping basket function. In this respect, your personal data is processed on the basis of Article 6(1)(b) GDPR for the performance of pre-contractual measures taken at your request as the data subject or on the basis of Article 6(1)(b) GDPR for the fulfilment of a contract to which you are a party or on the basis of Article 6(1)(f) GDPR to safeguard our legitimate interest in providing the most user-friendly functions possible. If we or our partner companies use cookies for the purpose of measuring reach or for marketing purposes, you can find detailed information on this in the corresponding further information in this privacy policy. For cookies for marketing and analysis purposes, your consent in accordance with Art. 6 (1) (a) GDPR serves as the legal basis. Any consent given can be revoked at any time with effect for the future.

You can prevent the storage of cookies by selecting the appropriate settings in your browser software. Please refer to the programme help for the browser you are using to find out how to make the appropriate setting. However, we would like to point out that in this case you may not be able to use all the functions of our website to their full extent. By way of example, we refer you to the information on the following common browsers:

6. enforcement of our rights and defence against claims asserted against us

If necessary, we process your personal data to protect our legitimate interest in the enforcement of our rights and in the defence against claims made against us.

In this case, your personal data will be processed on the basis of Article 6(1)(f) GDPR.

If this is necessary to safeguard our legitimate interests, we will transfer your personal data to third parties in accordance with the statutory provisions. This transfer takes place to the providers of debt collection services involved or to our lawyers.

In cases where your personal data is transmitted to third parties, the scope of the transmitted data is limited to the necessary minimum.

Your personal data will be deleted after completion of the procedure, but at the earliest after expiry of the tax and commercial law retention periods of 6 or 10 years, unless we are authorised to continue processing the data for another processing purpose within the framework of the legal requirements and in accordance with the information in this data protection declaration.

7. information on the basis for the provision of your personal data

If you wish to conclude a contract with us or contact us with an enquiry, the provision of your personal data is necessary for the conclusion of a contract or the processing of your enquiry. You are not obliged to provide your personal data. However, failure to provide your personal data would mean that we would not be able to conclude a contract with you or process your enquiry.

 
VI Duration for which your personal data will be stored or criteria for determining this duration

Your personal data will be deleted when it is no longer required for the respective processing purpose, unless we are authorised to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy. Information on the duration for which your personal data is stored or the criteria for determining this duration can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.

 
VII. Your rights

1. overview

In order to ensure fair and transparent processing of personal data, you as the data subject are entitled to the following rights in accordance with data protection legislation:

  • the right to information in accordance with Article 15 GDPR,
  • the right to rectification in accordance with Article 16 GDPR,
  • the right to erasure in accordance with Article 17 GDPR,
  • the right to restriction of processing in accordance with Article 18 GDPR,
  • the right to data portability in accordance with Article 20 GDPR
  • the right to withdraw consent at any time in accordance with Art. 7 (3) GDPR,
  • the right to object to processing in accordance with Article 21 GDPR, about which we will inform you separately below
  • and the right to lodge a complaint with the supervisory authority in accordance with Art. 77 GDPR, about which we will inform you separately below.

2. your right to object to the processing

THE PROCESSING OF PERSONAL DATA IS AUTHORISED IF THE PROCESSING IS NECESSARY FOR THE PURPOSES OF THE LEGITIMATE INTERESTS PURSUED BY THE CONTROLLER OR BY A THIRD PARTY, EXCEPT WHERE SUCH INTERESTS ARE OVERRIDDEN BY THE INTERESTS OR FUNDAMENTAL RIGHTS AND FREEDOMS OF THE DATA SUBJECT WHICH REQUIRE PROTECTION OF PERSONAL DATA, IN PARTICULAR WHERE THE DATA SUBJECT IS A CHILD, ART. 6 ABS. 1 LETTER F) GDPR.

AS A DATA SUBJECT, YOU HAVE THE RIGHT TO OBJECT, ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION, AT ANY TIME TO PROCESSING OF PERSONAL DATA CONCERNING YOU WHICH IS BASED ON ART. 6 ABS. 1 LETTER F) GDPR; THIS ALSO APPLIES TO PROFILING BASED ON THESE PROVISIONS.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL NO LONGER PROCESS YOUR PERSONAL DATA UNLESS WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, RIGHTS AND FREEDOMS AS A DATA SUBJECT OR FOR THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU AS THE DATA SUBJECT HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING, WHICH INCLUDES PROFILING TO THE EXTENT THAT IT IS RELATED TO SUCH DIRECT MARKETING. IF YOU, AS THE DATA SUBJECT, OBJECT TO PROCESSING FOR DIRECT MARKETING PURPOSES, YOUR PERSONAL DATA WILL NO LONGER BE PROCESSED FOR THESE PURPOSES.

3. your right to lodge a complaint with the supervisory authority

As a data subject, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the provisions of the GDPR, without prejudice to any other administrative or judicial remedy.

 
VIII. Information on service providers used

We use external services to operate this website in order to make our website more user-friendly, effective and secure. This is our legitimate interest pursuant to Art. 6 para. 1 sentence 1 f) GDPR.

1st Hetzner

We use the services of Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany, to host our website. Hosting takes place exclusively on German servers.

Please read here how Hetzner complies with data protection regulations: https://www.hetzner.com/legal/privacy-policy/

We use Hetzner on the basis of Art. 6 para. 1 sentence 1 f) GDPR. Our legitimate interest lies in the secure and efficient provision and optimisation of our online offering.

2. usercentrics

To control cookies and obtain the necessary consent, we use the Cookie Consent Manager Usercentrics from the provider Usercentrics GmbH, Rosental 4, 80331 Munich, Germany, on our website. You can use this tool to allow or deny cookies and external services.

We use the Consent Management Tool on the basis of Art. 6 para. 1 sentence 1 c) GDPR. The processing of this data is necessary in order to be able to prove that consent has been given.

Please read here how Usercentrics complies with the data protection regulations also with regard to the transfer to the USA https://usercentrics.com/de/datenschutzerklaerung/

3. DoubleClick

We use "DoubleClick" on our website, an online marketing tool from Google Ireland Limited, Google Building Gordon House, Barrow St, Dublin 4, Ireland (hereinafter referred to as "Google").

Google uses cookies to record which adverts are displayed in which web browser. According to Google, the cookies set do not contain any personal data.

Please read here how Google complies with data protection regulations, including with regard to transmission to the USA: https://policies.google.com/privacy?hl=de

We use Google DoubleClick on the basis of Art. 6 para. 1 sentence 1 f) GDPR. Our legitimate interest lies in improving our campaign performance and preventing our adverts from being shown to you more than once.

If a corresponding consent has been requested, the processing is carried out exclusively on the basis of Art. 6 para. 1 lit. a GDPR. This consent can be revoked at any time.

As soon as this service is called up on our site, a connection to Google is established, through which your IP address is transmitted to Google.

4. google tag manager

The Google Tag Manager service is used on our website to control the display of services. This service is provided by the company Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google Tag Manager on the basis of Art. 6 para. 1 sentence 1 f) GDPR. Our legitimate interest lies in being able to effectively display services on our website.

If you have given your consent to use the service in accordance with Art. 6 para. 1 sentence 1 a) GDPR, this is the sole legal basis. Any consent given can be revoked at any time with effect for the future.

As soon as this service is called up on our site, Google receives your IP address. The service itself does not store any other data or cookies, but only controls the display of services listed in this privacy policy.

Please read here how Google complies with data protection regulations, including with regard to transmission to the USA: https://policies.google.com/privacy?hl=de

5 Google ReCaptcha

The Google ReCaptcha service is used on our website to check whether entries have been made by a human being. This service is provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.

We use Google ReCaptcha on the basis of our legitimate interest in accordance with Art. 6 para. 1 sentence 1 f) GDPR. Our legitimate interest lies in making our website more secure and preventing potentially harmful access by automated systems such as bots.

As soon as this service is called up on our site, a connection to Google is established, through which your IP address is transmitted to Google.
Google has submitted to the Data Privacy Framework concluded between the European Union and the USA and has been certified. Google thereby undertakes to comply with the standards and regulations of European data protection law. Further information can be found in the following linked entry:
https://www.dataprivacyframework.gov/s/

Please read here how Google complies with data protection regulations, including with regard to transfers to the USA: https://policies.google.com/privacy?hl=de

 
IX. Tracking

1. use of Google Analytics

We use Google Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter referred to as "Google". Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyse how users use the site. The information generated by the cookie about the use of this website by site visitors can be transmitted to a Google server in the USA and stored there.

We use Google Analytics on the basis of Art. 6 para. 1 sentence 1 f) GDPR. Our legitimate interest lies in the economic operation of our website.

Google generally bases transfers of EU data to the USA from 12 August 2020 on standard data protection clauses of the EU Commission.

https://privacy.google.com/businesses/compliance/#!#gdpr

We have activated IP anonymisation on this website (anonymizeIp). However, this means that your IP address will be truncated by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and truncated there. Google will use this information on our behalf to analyse your use of the website, to compile reports on website activity and to provide us with other services relating to website activity and internet usage.

The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

You can also prevent the transmission of the data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: http://tools.google.com/dlpage/gaoptout?hl=de.

As an alternative to the browser plugin or within browsers on mobile devices, you can click on the following link to set an opt-out cookie that will prevent Google Analytics from collecting data within this website in the future (this opt-out cookie only works in this browser and only for this domain. If you delete the cookies in your browser, you must click this link again): [Deactivate Google Analytics]

2. privacy policy for Microsoft Clarity

Personal data is processed when you visit this website. Categories of data processed: Data for the creation of usage statistics. Purpose of processing: Anonymisation and creation of statistics and analysis of user behaviour. The legal basis for processing: Your consent in accordance with Art. 6 (1) a GDPR. A transfer of data takes place: to the independent controller Microsoft Ireland Operations Ltd, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland. The legal basis for the transfer of data to Microsoft Ireland Operations Ltd. is your consent in accordance with Art. 6 (1) a GDPR. This may also involve the transfer of personal data to a country outside the European Union. The transfer of data to the USA is based on Art. 45 GDPR in conjunction with the European Commission's adequacy decision C(2023) 4745, as the data recipient has undertaken to comply with the data processing principles of the Data Pricacy Framework (DPF). For an email contact the Data Protection Officer of Microsoft Ireland Operations Ltd. https://www.microsoft.com/de-at/concern/privacy. The privacy policy of Microsoft Ireland Operations Ltd: https://privacy.microsoft.com/de-de/privacystatement.

 
X. Changes to this privacy policy

If new services or providers are used to operate this website, we reserve the right to adapt this privacy policy in order to comply with the legal requirements. This amended privacy policy will then apply when you visit this website again.