Data Protection

Privacy policy

Provided that no other information is stated below, it is not necessary to provide personal data to us by law or contract, nor is such provision required for the conclusion of a contract. You are not obliged to provide data. A non-provision will have no consequences. This applies only to the extent that during subsequent processing procedures no representation to the contrary are made. “Personal data” refers to any information relating to an identified or identifiable natural person.

 

Server logfiles

You may visit our websites without giving any personal information. Whenever you access our website, data relating to the usage of our website is transferred to us or our web hoster / IT service provider by your Internet browser and stored in log data (so-called server log files). This data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of transferred data and the requesting provider. The processing is performed on the basis of Art. 6 (1) lit. f GDPR on the grounds of our overriding legitimate interest in ensuring trouble-free operation of our website and in improving our services.

 

Orders

Collection, processing and forwarding of personal data when placing orders

When placing an order, all personal data is collected and processed only as far as this is necessary for the performance and processing of your order as well as for the processing of customer enquiries. The provision of the data is necessary for the conclusion of the contract. Non-provision has the consequence that no contract can be concluded. The data is processed on the basis of Art. 6 (1) lit. b GDPR and is necessary for the performance of a contract with you. The data is forwarded, for example, to the shipping company, payment service provider and IT service provider you have chosen. We strictly observe the legal requirements in all instances. The scope of the data transfer is limited to a minimum.

 

Contact: Newsletter

Collection and processing when the contact form is used

When the contact form is used, the personal data we collect (name, e-mail address, message text) is only collected insofar as you provide it. The data processing is for the purpose of contacting you. By clicking on the “Send” button, you agree to the processing of the transmitted data. The processing is based on Art. 6 (1) lit. a GDPR with your consent. It is possible to withdraw your consent at any time by informing us, without affecting the lawfulness of the processing carried out on the basis of the consent up to such withdrawal. We only use your e-mail address to process your request. We will then delete your data unless you have agreed to further processing and use.

Use of the e-mail address for sending direct advertising

Unless you have objected to this use, we will use your e-mail address, which we obtained as part of the sale of a good or service, to send you electronic advertising for our own goods or services similar to those you have already purchased from us. The provision of the e-mail address is necessary for the conclusion of the contract. Non-provision has the consequence that no contract can be concluded. The processing is performed on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest regarding direct advertising. It is possible to object to this use of your e-mail address at any time by informing us. The contact details for making use of the objection are provided in the legal notice. Alternatively, click on the link provided in the promotional e-mail. This does not incur any charges other than the transmission costs in accordance with the basic rate.

 

Shipping service provider

Forwarding of the e-mail address to shipping companies for information about the shipping status

When processing the contract, your e-mail address will be forwarded to the transport company, provided that you have expressly agreed to this during the ordering process. The transfer serves to inform you by e-mail about the shipping status. The processing is based on Art. 6 (1) lit. a GDPR with your consent. It is possible to withdraw the consent at any time by informing us or the transport company, without affecting the lawfulness of the processing carried out on the basis of the consent up to such withdrawal.

 

Cookies

Our website uses cookies. Cookies are small text files stored on the computer system of a user in or by the Internet browser. If a user accesses a website, a cookie may be saved on the user's operating system. This cookie will contain a distinctive string of characters allowing the browser to be uniquely identified when the website is revisited.

Cookies are stored on your computer. You therefore have full control over the use of cookies. If you have selected the necessary technical settings in your Internet browser, you will be notified before cookies are set and can decide individually whether or not to accept them, as well as prevent the cookies from being stored and the data they contain from being transmitted. Already stored cookies can be deleted at any time. We would like to point out, however, that you might not be able to use all the functions of this website to their full extent.

The following links inform you how to manage (including deactivate) cookies for the most important browsers:

Chrome Browser: https://support.google.com/accounts/answer/61416?hl=en

Internet Explorer: https://support.microsoft.com/en-us/topic/delete-and-manage-cookies-168dab11-0753-043d-7c16-ede5947fc64d

Mozilla Firefox: https://support.mozilla.org/en-US/kb/cookies-information-websites-store-on-your-computer

Safari: https://support.apple.com/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

To the extent that no other information is provided in the privacy policy below, we will only use these technically necessary cookies for making our offer more user-friendly, more effective and more secure. In addition, cookies allow our servers to identify your browser even after you have changed pages and to provide you with services. Some features of our website cannot be offered without the use of cookies. This requires that the browser is recognised even after a page change.

Processing is performed on the basis of Art. 6 (1) lit. f GDPR on the basis of our overriding legitimate interest in guaranteeing the best possible functionality of the website as well as a user-friendly and effective configuration of our offer. You are entitled to object at any time to the processing of your personal data based on Art. 6 (1) f GDPR for reasons relating to your particular situation.

 

Analysis: Communication

Use of Google Analytics

We use the web analytics service Google Analytics provided by Google LLC on our website. (1600 Amphitheatre Parkway, Mountain View, CA 94043, US; hereinafter referred to as “Google”). If you are ordinarily resident in the European Economic Area or Switzerland, the data controller for your data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Consequently, Google Ireland Limited is the Google affiliate responsible for processing your data and ensuring compliance with applicable data protection laws.

The processing of data is intended for the purpose of analysing this website and its visitors, as well as for marketing and advertising purposes. Google uses this information by order of the operator of this website to analyse your use of the website, compile reports on website activity and provide other services related to the use of the website and the Internet with respect to the operator of the website. The following information, among other things, can be collected: IP address, date and time of page access, click path, information about the browser and device used, pages visited, referrer URL (website from which you accessed our website), location data, purchase activity. The IP addresses transmitted by your browser as part of Google Analytics will not be consolidated with any other data held by Google. Google Analytics employs technologies such as cookies, web storage in the browser and tracking pixels, which permit an analysis of your use of the website. The resulting information regarding your use of this website is normally transferred to a Google server in the US and stored there. This website has IP anonymisation enabled. This allows your IP address to be truncated in advance by Google within member states of the European Union or in other states party to the Agreement on the European Economic Area. The full IP address is only transferred to a Google server in the US and truncated there in exceptional cases. Google has been certified for compliance with the US-EU data protection agreement “Privacy Shield” and is thus committed to complying with the European data protection directives.

The data processing, in particular the use of cookies, is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. It is possible to withdraw consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to such withdrawal. For more information on terms of use and data protection, see https://marketingplatform.google.com/about/analytics/terms/us/ or https://policies.google.com/ as well as https://policies.google.com/technologies/cookies.

Use of Mouseflow

We use the analytics tool of Mouseflow ApS (Flaesketorvet 68, 1711 Copenhagen, Denmark; “Mouseflow”) on our website.

The processing of the data is for the purpose of personalising and analysing this website and its visitors. Mouseflow uses technologies such as cookies, tracking pixels and scripts. The cookies enable the recognition of the Internet browser The following information, among other things, can be collected: IP address, click path, information about the browser and operating system being used, pages accessed, time spent on our website, content viewed, location data. This data can be used to create usage profiles with a pseudonym. The web tracking tool Mouseflow randomly records individual website traffic (only with anonymised IP address). This creates a log of mouse movements and clicks with the purpose of randomly auditing individual website visits and extracting from this information potential website improvements. The data obtained using Mouseflow technologies will not be used to identify visitors to this website personally and will not be consolidated with personal data about the holder of the pseudonym without the express consent of the person concerned.

The data processing, in particular the use of cookies, is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. It is possible to withdraw consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to such withdrawal.

Use of the “Userlike” live chat system

We use the live chat system of Userlike UG (haftungsbeschränkt), Deisterweg 7, 51109 Cologne, (www.userlike.com) on our website. The system is used for the communication between you and us as the provider. This data can be used to create usage profiles with a pseudonym. This is done by using cookies. The cookies enable the recognition of the Internet browser

The data processing occurs on the basis of Art. 6 (1) lit. a GDPR with your consent. It is possible to withdraw consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to such withdrawal.

Applications for job vacancies by e-mail

It is possible to apply for vacancies published on our website by sending an e-mail to the contact address provided.

In order to be able to participate in the application process, it is necessary to provide us with the personal data required for an assessment. The data required is specified in the job description. This includes, among other things, data regarding name, address, contact details and proof of the qualifications required for a position.

The data processing is based on Art. 6 (1) lit. b and s. 26 (1) German Federal Data Protection Act (BDSG). The provision of personal data is required for the conclusion of an employment contract with us.

For the application process we do not generally require any specific categories of personal data within the meaning of Art. 9 GDPR (e.g. health data, information about the status of severe disability) If special categories of personal data are of relevance in the application procedure, the processing is carried out for the exercise of rights or the fulfilment of legal obligations arising from labour law, social security law and social protection law. The legal basis for data processing is in this case Art. 9 (2) lit. b GDPR, s. 26 (3) BDSG.

Use of GoogleMaps

On our website, we use the function for embedding GoogleMaps maps from Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; hereinafter referred to as “Google”). If you are ordinarily resident in the European Economic Area or Switzerland, the data controller for your data is Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Consequently, Google Ireland Limited is the Google affiliate responsible for processing your data and ensuring compliance with applicable data protection laws. This function allows the visual display of geographical information and interactive maps. Google also collects, processes and uses data from visitors to the websites when they access the pages in which Google Maps are included.

Your data may also be transmitted to the US. Google has been certified for compliance with the US-EU data protection agreement “Privacy Shield” and is thus committed to complying with the European data protection directives.

The data processing, in particular the use of cookies, is carried out with your consent on the basis of Art. 6 (1) lit. a GDPR. It is possible to withdraw consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to such withdrawal.

For more information on the collection and use of data by Google, see Google's privacy policy at https://www.google.com/privacypolicy.html. You can also adjust your settings there in the privacy policy centre in order to manage and protect your data processed by Google.

Use of YouTube

On our website, we use the function for embedding YouTube videos from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; hereinafter referred to as “YouTube”). YouTube is a company affiliated with Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

The function enables videos stored on YouTube to be viewed in an iFrame on the website. The option “Extended data protection mode” is activated. This means that YouTube does not store any information about visitors to the website. Only if you watch a video, information about it is sent to YouTube and stored there. Your data may be transmitted to the US. Google has been certified for compliance with the US-EU data protection agreement “Privacy Shield” and is thus committed to complying with the European data protection directives.

The data processing occurs on the basis of Art. 6 (1) lit. a GDPR with your consent. It is possible to withdraw consent at any time, without affecting the lawfulness of the processing carried out on the basis of the consent up to such withdrawal. For more information on the collection and use of data by YouTube and Google, your rights in this regard and ways to protect your privacy, see YouTube's data protection information at https://policies.google.com/privacy.

Use of a consent manager tool

On our website, we use the consent management tool Cookiebot. The tool enables users to give their consent to data processing through the website, in particular the setting of cookies, as well as exercising their right to withdraw consent already given.

The purpose of data processing serves to obtain and document the necessary consent for data processing and thus to comply with legal obligations.

Cookies can be used for this specific purpose. The following information, among other things, may be collected and transmitted to the provider: Date and time of page access, information about the browser and device used, anonymised IP address, opt-in and opt-out data. This data will not be forwarded to any other third parties.

The data processing occurs for the performance of a legal obligation on the basis of Art. 6 (1) lit. c GDPR.

For more information about Cookiebot's privacy policy, see: https://www.cookiebot.com/en/privacy-policy/

 

Data subject rights and storage period

Storage period

We only store data for as long as required for the processing purposes in question. If the data is no longer necessary for the fulfilment of the processing purposes specified in this data protection information, it will be deleted unless its retention is still necessary for the fulfilment of retention obligations under commercial or tax law.

Data subject rights

The following rights are available to you in accordance with Art. 15 to 20 GDPR: Right to information, to rectification, to deletion, to restriction of processing, to data portability. In addition, in accordance with Art. 21 (1) GDPR, you are entitled to object to the processing based on Art. 6 (1) f GDPR and to the processing for the purpose of direct advertising.

Contact us, if you would like to do so. You can find the contact details in our legal notice.

Right of complaint to the supervisory authority

You have the right to file a complaint with the supervisory authority in accordance with Art. 77 GDPR, if you believe that the processing of your personal data is not lawful. Right of objection If the processing of personal data listed here is based on our legitimate interest in accordance with Art. 6 (1) lit. f GDPR, you are entitled to object to this processing with effect for the future at any time for given reasons relating to your particular situation.

After an objection has been raised, the processing of the data in question will be stopped, unless we can prove overriding legitimate interests, rights and freedoms for the processing or if the processing serves the purpose of asserting, exercising or defending legal claims.

If personal data is processed for direct marketing purposes, an objection to this processing can be raised at any time by notifying us. Once the objection has been raised, we will cease processing of the data concerned for the purpose of direct marketing.