Privacy policy

1) Introduction and contact details of the responsible person

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data with which you can be personally identified.

1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is ILH International GmbH, Lützner Str. 91, 04177 Leipzig, Germany, Phone: +493412252070, e-mail: info@ilovehandbags.com. The controller is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The responsible party has appointed a data protection officer, who can be reached as follows: “Steve Riedel, c/o ILH International GmbH, Lützner Str. 91, 04177 Leipzig, Germany, info@ilovehandbags.com, 0341-2252070”.

1.4 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible), this website uses an SSL or SSL protocol. TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.

2) Data collection when visiting our website

During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect such data that your browser transmits to the page server (so-called “server log files”). When you visit our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser used
Operating system used
IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Hosting & Content Delivery Network

Google Cloud CDN

We use a content delivery network of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

This service allows us to deliver large media files such as graphics, page content, or scripts faster through a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with. Art. 6 par. 1 lit. f GDPR.

Data may also be transferred to: Google LLC, USA

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

4) Cookies

To make your visit to our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your terminal device. In some cases, these cookies are automatically deleted after the browser is closed (so-called “session cookies”), in other cases, these cookies remain on your terminal device for longer and allow page settings to be saved (so-called “persistent cookies”). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser.

If personal data are also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the execution of the contract, according to Art. 6 para. 1 lit. a DSGVO in the case of granted consent or pursuant to Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

You can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting

5.1 Own function for online appointment scheduling
We process your personal data within the framework of the online appointment arrangement provided. You can see which data we collect for online appointment scheduling from the respective input form or the appointment request for appointment scheduling. If certain data is required in order to make an online appointment, we will indicate this accordingly in the input form or when requesting an appointment. If we provide you with a free text field in the input form, you can describe your request in more detail there. You can then also control which additional data you want to enter. The data you provide will be stored and used exclusively for the purpose of making an appointment. When processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the performance of pre-contractual measures), Art. 6 para. 1 lit. b DSGVO as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 para. 1 lit. a GDPR. Consent given can be revoked at any time by sending a message to the responsible person named at the beginning of this statement.

5.2 When contacting us (e.g. via contact form or e-mail), personal data will be processed – exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose.

The legal basis for the processing of this data is our legitimate interest in responding to your request pursuant to Art. 6 para. 1 lit. f GDPR. If your contact is aimed at a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted when it is clear from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5.3 WhatsApp business

We offer visitors to our website the opportunity to contact us via the messaging service WhatsApp provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “business version” of WhatsApp.

If you contact us via WhatsApp on the occasion of a specific transaction (for example, an order placed), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name in accordance with Art. 6 para. 1 lit. b. DSGVO to process and respond to your request. On the basis of the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address or e-mail address) in order to be able to assign your request to a specific transaction.

If you use our WhatsApp contact for general inquiries (such as about the range of services, availability or our website), we store and use the mobile phone number you use on WhatsApp and – if provided – your first name and surname in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the efficient and timely provision of the requested information.

Your data will only ever be used to respond to your request via WhatsApp. A transfer to third parties does not take place.

Please note that WhatsApp Business obtains access to the address book of the mobile device we use for this purpose and automatically transfers phone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp business account, we use a mobile device whose address book only stores the WhatsApp contact data of those users who have also contacted us via WhatsApp.

This ensures that each person whose WhatsApp contact data is stored in our address book already consents to the transmission of his WhatsApp telephone number from the address books of his chat contacts when using the app on his device for the first time by accepting the WhatsApp terms of use pursuant to Art. 6 para. 1 lit. a DSGVO has consented. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.

For the purpose and scope of the data collection and the further processing and use of the data by WhatsApp, as well as your rights in this regard and setting options for protecting your privacy, please refer to WhatsApp’s privacy policy: https://www.whatsapp.com/legal/?eea=1#privacy-policy

5.4 – Function for price proposals

On our website, for selected items, we offer customers the opportunity to submit a price suggestion to us via an electronic form at which they would purchase the item.

According to Art. 6 para. 1 lit. b DSGVO, we collect and store certain personal data of the inquirer (such as name and email address) in the course of the electronic transmission of the form for the processing of the price proposal and use them to subsequently inform the inquirer about a rejection or acceptance of the proposal or to submit a counter-proposal. The data provided via the form will be used strictly for the purpose of collecting and assigning the price proposal and for a decision on its acceptance for the possible preparation of a contract conclusion. After final processing of a price proposal request, the personal data will be deleted, provided that there are no legal retention periods to the contrary.
– Make an offer

On this website, you have the opportunity to submit price suggestions for items for sale through the “Make an Offer” service of Buraleo Limited, Suite 2, Ground Floor Orchard Brae House, Edinburgh, Eh4 2hs, United Kingdom (“Make an Offer”).

The name, e-mail address, telephone number and delivery address of the user are requested and, if the price proposal is sent, are transmitted first to Make an Offer and then to the responsible person named above, so that the latter can react to the price proposal, i.e. accept it, reject it or contrast it with a counter-bid.

The data processing is based on Art. 6 para. 1 lit. b DSGVO and only to the extent that it is actually necessary for the purpose of initiating and processing the contract. After final processing of a price proposal request, your data will be deleted, provided that there are no legal retention periods to the contrary.

In case of transfer of data to Buraleo Limited in the United Kingdom, the adequate level of data protection is guaranteed by adequacy decision of the European Commission.

6) Data processing when opening a customer account

According to Art. 6 para. 1 lit. b DSGVO, personal data will continue to be collected and processed to the extent necessary in each case if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.

Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the responsible person. After deletion of your customer account, your data will be deleted, provided that all contracts concluded via it have been fully processed, no legal retention periods are opposed and no legitimate interest on our part in the continued storage exists.

7) Use of customer data for direct advertising

7.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. For the newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters if you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the specified e-mail address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to track any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose.

You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for any other purpose that is permitted by law and about which we inform you in this declaration.

7.2 Sending the e-mail newsletter to existing customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to periodically email you offers for goods or services similar to those you have already purchased from our product line. For this we must, in accordance with § 7 para. 3 UWG, we do not need to obtain separate consent from you. In this respect, the data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 para. 1 lit. f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you any e-mail.

You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the responsible person named at the beginning. You will only incur transmission costs in accordance with the prime rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.

7.3 Sendinblue

Our e-mail newsletters are sent via this provider: Sendinblue GmbH, Köpenicker Str. 126, 10179 Berlin, Germany

On the basis of our legitimate interest in effective and user-friendly newsletter marketing, we disclose the data you provided when registering for the newsletter in accordance with Art. Art. 6 par. 1 lit. f DSGVO to this provider so that it can take over the newsletter dispatch on our behalf.

Subject to your express consent pursuant to. Art. 6 par. 1 lit. a DSGVO, the provider also carries out a statistical evaluation of the success of newsletter campaigns by means of web beacons or tracking pixels in the emails sent, which can measure opening rates and specific interactions with the newsletter content. End device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other data.
You can revoke your consent to newsletter tracking at any time with effect for the future.

We have concluded an order processing agreement with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.

7.4 WhatsApp newsletter

If you subscribe to our WhatsApp newsletter, we will send you regular information about our offers via WhatsApp. The only mandatory information for sending the newsletter is your mobile phone number.

To send the newsletter, include our provided mobile number in the address contacts of your mobile device and send us the message “Start” via WhatsApp. By sending this WhatsApp message, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO for the purpose of sending newsletters. We will then add you to our newsletter distribution list.

The data collected by us when you register for the newsletter will be processed exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time by sending us the message “Stop” via WhatsApp. After unsubscribing, your mobile phone number will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use your data in a manner that goes beyond this and is permitted by law and about which we inform you in this declaration.

Please note that WhatsApp obtains access to the address book of the mobile device we use to send the newsletter and automatically transfers phone numbers stored in the address book to a Facebook server in the USA.

For the dispatch of our WhatsApp newsletter, we therefore use a mobile device in whose address book only the WhatsApp contact data of our newsletter recipients are stored. This ensures that each person whose WhatsApp contact data is stored in our address book already consents to the transmission of his WhatsApp telephone number from the address books of his chat contacts when using the app on his device for the first time by accepting the WhatsApp terms of use in accordance with Art. 6 (2). 1 lit. a DSGVO has consented. A transmission of data of such users who do not use WhatsApp and/or have not contacted us via WhatsApp is excluded in this respect.

7.5 Advertising by mail
On the basis of our legitimate interest in personalized direct advertising, we reserve the right to use your first and last name, your postal address and – insofar as we have received this additional information from you in the course of the contractual relationship – your title, academic degree, year of birth and your occupational, industry or business designation in accordance with Art. 6 Para. 1 lit. f DSGVO and to use it for sending interesting offers and information about our products by mail.
You can object to the storage and use of your data for this purpose at any time.

7.6 Goods availability notification by e-mail

For temporarily unavailable items, you can sign up to receive email merchandise availability notifications. In this case, we will send you a one-time message by e-mail about the availability of the item you have selected. Mandatory information for sending this notification is only your e-mail address. The provision of further data is voluntary and may be used to address you personally. For the mail dispatch we use the so-called double opt-in procedure, which ensures that you will only receive a notification if you have expressly confirmed your consent in this regard by activating a verification link sent to the specified mail address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. In doing so, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to track any possible misuse of your e-mail address at a later date. The data we collect when you sign up for our merchandise availability email notification service is used strictly for the purpose for which it was collected.

You can unsubscribe from the availability notifications at any time by sending a message to the responsible person mentioned at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data in a way that goes beyond this, which is permitted by law and about which we inform you in this declaration.

7.7 In the event that you cancel your purchase with us before completing the order, you have the option to receive a one-time reminder by e-mail about the contents of your virtual shopping cart.
Mandatory information for sending this reminder is only your e-mail address. The provision of further data is voluntary and may be used to address you personally. For the mail dispatch we use the so-called double opt-in procedure, which ensures that you will only receive a notification if you have expressly confirmed your consent in this regard by activating a verification link sent to the specified mail address.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR for the sending of a shopping cart reminder. In doing so, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to track any possible misuse of your e-mail address at a later date. The data we collect when you sign up for our email notification service is used strictly for the purpose for which it was collected.

You can unsubscribe from the shopping cart reminders at any time by sending a message to the responsible person mentioned at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use your data in a way that goes beyond this, which is permitted by law and about which we inform you in this declaration.

8) Data processing for order processing

8.1 Transmission of image files for order processing via upload function

On our website, we offer customers the opportunity to order the personalization of products by submitting image files via an upload function. The submitted image motif is used as a template for the personalization of the selected product.

Using the upload form on the website, the customer can transmit one or more image files from the memory of the end device used directly to us via automated, encrypted data transmission. We then collect, store and use the transmitted files exclusively for the production of the personalized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the preparation and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further disclosure will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b GDPR.

After final processing of the order, the transmitted image files are automatically and completely deleted.

8.2 Transmission of image files for order processing by e-mail

On our website, we offer customers the opportunity to request the personalization of products by sending image files via e-mail. The submitted image motif is used as a template for the personalization of the selected product.

The customer can send one or more image files from the memory of the end device used to us via the mail address provided on the website. We then collect, store and use the files transmitted in this way exclusively for the production of the personalized product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the preparation and processing of the order, you will be explicitly informed about this in the following paragraphs. Any further disclosure will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 Para. 1 lit. b GDPR.

After final processing of the order, the transmitted image files are automatically and completely deleted.

8.3 As far as necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be processed in accordance with Art. 6 para. 1 lit. b DSGVO to the contracted transport company and the contracted credit institution.

Insofar as we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you within the scope of our statutory information obligations pursuant to Art. 6 Para. 1 lit. c DSGVO by appropriate means of communication (e.g. by mail or e-mail) about upcoming updates in person within the period provided for by law. Your contact data will be used strictly for the purpose of notifying you of updates we owe you and will be processed by us for this purpose only to the extent necessary for the information in question.

In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

8.4 Transfer of personal data to shipping service providers

8.5 German Post

We use the following provider as transport service provider: Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany

We disclose your e-mail address and/or telephone number in accordance with Art. 6 para. 1 lit. a DSGVO before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification to the provider, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery, we will disclose in accordance with Art. 6 para. 1 lit. b DSGVO only the name of the recipient and the delivery address to the provider. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the supplier or the delivery notice is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

8.6 DHL

We use the following provider as transport service provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

8.7 DHL Express

We use the following provider as transport service provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

8.8 FedEx

We use the following provider as transport service provider: FedEx Express Germany GmbH, Langer Kornweg 34 k,65451 Kelsterbach, Germany

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

8.9 Hermes

We use the following provider as transport service provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany

We disclose your e-mail address and/or telephone number in accordance with Art. 6 para. 1 lit. a DSGVO before the delivery of the goods for the purpose of coordinating a delivery date or for delivery notification to the provider, provided that you have given your express consent for this in the ordering process. Otherwise, for the purpose of delivery, we will disclose pursuant to Art. 6 para. 1 lit. b DSGVO only the name of the recipient and the delivery address to the provider. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with the supplier or the delivery notice is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

8.10 UPS

We use the following provider as our transport service provider: United Parcel Service Germany Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany

The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the provider.

8.11 Use of payment service providers (payment services)

8.12 Apple Pay
If you choose the payment method “Apple Pay” of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the “Apple Pay” function of your terminal device running iOS, watchOS or macOS by charging a payment card deposited with “Apple Pay”. Here, Apple Pay uses security features built into your device’s hardware and software to protect your transactions. In order to approve a payment, you must enter a code that you have previously specified and verify it using the “Face ID” or “Touch ID” function of your terminal device.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, will be passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to make the payment. Encryption ensures that only the website through which the purchase was made can access the payment data. After the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the success of the payment.
Insofar as personal data are processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Apple retains anonymized transaction data, including the approximate amount of the purchase, the approximate date and time, and whether the transaction was completed successfully. Anonymization completely excludes any reference to persons. Apple uses the anonymized data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on the iPhone or Apple Watch to complete a purchase made through Safari on the Mac, the Mac and the authorization device communicate over an encrypted channel on Apple’s servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to “Wallet & Apple Pay”, and uncheck “Allow payments on Mac”.
Further information on data protection with Apple Pay can be found at the following Internet address: https://support.apple.com/de-de/HT203027

8.13 Google Pay
If you choose the payment method “Google Pay” of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), the payment processing is carried out via the “Google Pay” application of your mobile device running at least Android 4.4 (“KitKat”) and equipped with an NFC function by charging a payment card deposited with Google Pay or a payment system verified there (e.g. PayPal). For the release of a payment via Google Pay in the amount of more than €25, the prior unlocking of your mobile device by the respective verification measure set up (such as facial recognition, password, fingerprint or pattern) is required.
For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay to the source website in the form of a uniquely assigned transaction number, which is used to verify that a payment has been made. This transaction number does not contain any information about the real payment data of your payment means deposited with Google Pay, but is created and transmitted as a one-time valid numeric token. For all transactions via Google Pay, Google only acts as an intermediary to process the payment transaction. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the means of payment deposited with Google Pay.
Insofar as personal data are processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store and analyze certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description provided by the merchant of the goods or services purchased, photos you included with the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description for the reason for the transaction, and the offer associated with the transaction, if applicable.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para.1 lit. f DSGVO on the basis of the legitimate interest in proper billing, verification of transaction data and optimization and functional maintenance of the Google Pay service.
Google also reserves the right to merge the processed transaction data with further information that is collected and stored by Google when using other Google services.
The terms of use of Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en
You can find further information on data protection with Google Pay at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en

8.14 Klarna

One or more online payment methods from the following provider are available on this website: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden

If you choose a payment method of the provider where you make an advance payment (such as credit card payment), your payment data provided during the ordering process (including name, address, bank and payment card information, currency and transaction number), as well as information about the content of your order in accordance with Art. 6 para. 1 lit. b DSGVO passed on. In this case, your data will be passed on exclusively for the purpose of processing payment with the provider and only to the extent necessary for this purpose.

If you select a payment method for which the provider makes an advance payment (such as purchase on account or installment purchase or direct debit), you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, and, if applicable, data on an alternative means of payment) during the ordering process.

In order to protect our legitimate interest in determining the solvency of our customers, this data is used by us in accordance with Art. 6 para. 1 lit. f DSGVO to the provider for the purpose of a credit check. On the basis of the personal data provided by you and other data (such as shopping cart, invoice amount, order history, payment experience), the provider checks whether the payment option selected by you can be granted with regard to payment and/or bad debt risks.

For the decision in the context of the application review, in addition to provider-internal criteria pursuant to Art. 6 para. 1 lit. f DSGVO, identity and creditworthiness information from the following credit agencies is also included:

https://cdn.klarna.com/1.0/shared/content/legal/terms/0/en_en/credit_rating_agencies

The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.

You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

8.15 Mollie

One or more online payment methods from the following provider are available on this website: Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands

8.16 Paypal

One or more online payment methods of the following provider are available on this website: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

8.17 Stripe

One or more online payment methods are available on this website from the following provider: Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland.

9) Online marketing

9.1 Facebook Pixel for the creation of Custom Audiences

Within our online offer, we use the service “Facebook Pixel” of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Facebook”).

If a user clicks on an ad placed by us on Facebook, a parameter is added to the URL of our linked page with the help of “Facebook Pixel”. This URL parameter is then entered into the user’s browser after the redirection by a cookie that our linked page sets itself.

On the one hand, this enables Facebook to determine the visitors to our online offer as a target group for the display of advertisements (so-called “Facebook ads”). Accordingly, we use the service to display Facebook ads placed by us only to Facebook users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called “Custom Audiences”).

On the other hand, “Facebook Pixel” can be used to track whether users were redirected to our website after clicking on a Facebook ad and what execution actions they take there (so-called “conversion tracking”).

The data collected is anonymous for us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes.

All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

The information generated by Facebook is usually transmitted to a Facebook server and stored there; in this context, it may also be transmitted to servers of Meta Platforms Inc. come in the USA.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

9.2 Google AdSense
This website uses Google AdSense, a web advertising service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google AdSense uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. In addition, Google AdSense also uses so-called “web beacons” (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and analyzed. The information generated by the cookie and / or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also result in a transmission to the servers of Google LLC. come in the USA.
Google uses the information thus obtained to perform an evaluation of your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not merged with other data from Google. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.
All processing described above, in particular the reading of information on the end device used via cookies and/or web beacons, will only be carried out if you have given us permission in accordance with Art. 6 Para. 1 lit. a DSGVO have given your express consent to this. Without this consent, Google AdSense will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
Google’s privacy policy can be viewed here: https://www.google.de/policies/privacy/

9.3 Sendinblue Tracker

This website uses the software-based marketing service of the following provider for the provision and synchronization of various customer management services: Sendinblue GmbH, Köpenicker Straße 126, 10179 Berlin, Germany.

The service enables the automated processing of feed activities, the control of advertising in deployed marketing channels and the success analysis of marketing measures, as well as central e-mail marketing and contact management.

To fulfill the various functions, cookies are used, i.e. small text files that are stored locally in the cache of your web browser on your terminal device and enable an analysis of your use of the website by us. Here, the cookies collect certain information, such as the IP address, the location, the time of the page view.

Other legal bases for data processing that apply in the context of specific service functions (such as the need for explicit consent in accordance with Art.6 Para. 1 lit. a DSGVO when sending newsletters), remain unaffected by this.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

10) Web analytics services

10.1 Google Analytics 4

This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.

By default, Google Analytics sets 4 cookies when you visit the website, which are stored as small text modules on your terminal device and collect certain information. The scope of this information also includes your IP address, which is, however, shortened by Google by the last digits in order to exclude a direct personal reference.

The information is transferred to Google servers and processed there. In the process, transfers to Google LLC based in the USA are also possible.

Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services relating to website activity and internet usage. The IP address transmitted and shortened by your browser as part of Google Analytics is not merged with other data from Google. The data collected in the context of the use of Google Analytics 4 is stored for a period of two months and then deleted.

All of the processing described above, in particular the setting of cookies on the end device used, will only take place if you have given us your express consent to do so in accordance with the German Data Protection Act. Art. 6 par. 1 lit. a DSGVO have given.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent with effect for the future at any time. To exercise your right of withdrawal, please deactivate this service via the “cookie consent tool” provided on the website.

We have concluded an order processing agreement with Google, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
For the transfer of data to the U.S., Google invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at. https://policies.google.com/privacy?hl=de&gl=de and under https://policies.google.com/technologies/partner-sites

Demographic characteristics
Google Analytics 4 uses the special “demographic characteristics” function and can use it to create statistics that make statements about the age, gender and interests of site visitors. This is done through the analysis of advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be assigned to a specific person and is deleted after being stored for a period of two months.

Google Signals
As an extension to Google Analytics 4, Google Signals can be used on this website to have cross-device reports generated. If you have activated personalized ads and linked your devices to your Google account, Google may, subject to your consent to the use of Google Analytics pursuant to. Art. 6 par. 1 lit. a GDPR to analyze your usage behavior across devices and create database models, including cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analytics, you can disable the Personalized Advertising feature in your Google Account settings. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de You can find more information about Google Signals at the following link: https://support.google.com/analytics/answer/7532985?hl=de

UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you consent to the use of Google Analytics 4 acc. Art. 6 par. 1 lit. a GDPR, have created an account on this website and log in with this account on different devices, your activities, including conversions, may be analyzed across devices.

10.2 Jetpack

This website uses the web analytics service of the following provider: Automattic Inc, 60 29th Street #343, San Francisco, CA 94110-4929, USA.

With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading terminal device and browser information), the service collects and stores pseudonymized visitor data, including information of the terminal device used such as the IP address and browser information, in order to evaluate it for statistical analyses of usage behavior on our website and to create pseudonymized usage profiles. Among other things, this enables the evaluation of movement patterns (so-called heat maps), which show the duration of page visits as well as interactions with page content (e.g. text entries, scrolling, clicks and mouse-overs). Pseudonymization fundamentally excludes the possibility of direct personal reference. Your personal data will not be merged with data collected in any other way.

All processing described above, in particular the reading or saving of information on the end device used, will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

10.3 Microsoft Clarity

This website uses the web analytics service of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399 USA

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

10.4 Google Optimize

This website uses “Google Optimize”, a service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

Based on “Google Analytics”, the service enables a statistical evaluation of the use of new functions and contents of the website by playing out test variants to certain user groups. In the interest of improving the attractiveness of our website, this allows us to track which variants are preferred by users.
Google Optimize uses cookies, i.e. small text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of the company Google LLC, which is based in the USA, and further processing of the information there.

All processing described above, in particular the setting of cookies for the storage and reading of information on the terminal device used by you for the use of the website, will only take place if you have given us permission to do so in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent. Without your consent, Google Optimize will not be used during your use of the website. You can revoke your consent once given at any time with effect for the future. To exercise your revocation, please deactivate this service via the “cookie consent tool” provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

10.5 Google Tag Manager

This website uses the “Google Tag Manager”, a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: “Google”).

Google Tag Manager provides a technical foundation for bundling diverse web applications, including tracking and analytics services, and calibrating, controlling, and conditioning them through a unified user interface. Google Tag Manager itself does not store or read any information on user devices. Also, the service does not perform any independent data analysis. However, your IP address is transmitted to Google by the Google Tag Manager when you access the page and may be stored there. Also a transmission to servers of Google LLC. In the USA is possible.

This processing will only be carried out if you have notified us in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. Without this consent, Google Tag Manager will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

11) Retargeting/ Remarketing and Conversion Tracking

Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, with this we advertise for this website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. Additional data processing will only take place if you have consented to Google linking your web and app browsing history to your Google Account and using information from your Google Account to personalize ads you view on the web. In this case, if you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups. In the context of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. come in the USA.
Details on the processing triggered by Google Ads Remarketing and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:
https://support.google.com/ads/answer/7395996 ?
Further information and the privacy policy regarding advertising and Google can be viewed here:
https://www.google.com/policies/technologies/ads/
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

11.1 – Google Ads conversion tracking
This website uses the online advertising program “Google Ads” and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google Ads. Cookies are small text files that are stored on your terminal device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked through the websites of Google Ads customers. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified.
In the context of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. come in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
In order to address users whose data we have received in the context of business or business-like relationships in a more interest-oriented advertising manner, we use a customer matching function in the context of Google Ads. For this purpose, we transmit one or more files with aggregated customer data (primarily mail addresses and telephone numbers) electronically to Google. Google does not gain access to clear data here, but automatically encrypts the information in the customer files during the transmission process using a special algorithm. The encrypted information can then only be used by Google to associate it with existing Google accounts that the data subjects have set up. This enables personalized advertising to be played across all Google services linked to the respective Google account.
The transmission of customer data to Google will only take place if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO have given. You can revoke this consent at any time with effect for the future. More information about Google’s privacy practices related to customer matching can be found here: https://support.google.com/google-ads/answer/6334160?hl=de&ref_topic=10550182
Google’s privacy policy can be viewed here: https://www.google.de/policies/privacy/
– TikTok Pixel

This website uses the conversion tracking technology of the following provider: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.

If you have reached our website from an advertisement on the provider’s domain, the success of the advertisement can be tracked with the help of cookies and/or comparable technologies (tracking pixels, web beacons, pings or HTTP requests).

For this purpose, certain end device and browser information, including your IP address if applicable, is read via tracking technology in order to record and evaluate user actions predefined by us (e.g. completed transactions, leads, search queries on the website, calls to product pages). This allows us to create statistics about the usage behavior on our website after forwarding from an advertisement, which serve us to optimize our offer.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.
– Microsoft Advertising Universal Event Tracking

This website uses conversion tracking technology of the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA

For the use of Universal Event Tracking, each page of our website contains a tag that interacts with the conversion cookie set by Microsoft. This interaction tracks user behavior on our website and sends the information thus collected to Microsoft. The purpose of this is that certain predefined goals, such as purchases or leads, can be statistically recorded and evaluated in order to make the orientation and content of our offers more interest-oriented. The tags are not used to personally identify users at any time.

All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. Without this consent, retargeting technology will not be used during your visit to the site.

You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the “cookie consent tool” provided on the website.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
– Google Ads conversion tracking without cookies
This website uses the online advertising program “Google Ads” and, within the scope of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). We use Google Ads to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of the advertising costs incurred.
This website uses Google Ads Conversion Tracking exclusively without the use of cookies, which means that the service does not set cookies on your terminal device at any time.
Instead, the local memory of your browser is used to store there an individual ID assigned by Google, which enables an analysis of your use of the website. For this purpose, certain user information is processed via the ID.
The ID is set when a user clicks on an ad placed by Google. If the user visits certain pages of this website, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked through the websites of Google Ads customers. The information collected in this way is used to create conversion statistics for Google Ads customers who have opted in to conversion tracking. Clients learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. In the context of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. come in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
If the information collected has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the statistical evaluation of the success of our advertising campaigns.
Google’s privacy policy can be viewed here: https://www.google.de/policies/privacy/
– Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“GMP”).
GMP uses cookies to serve ads that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to record which ads are displayed in which browser and can thus prevent them from being displayed more than once. In addition, GMP can use cookie IDs to record so-called conversions that are related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, calls up the advertiser’s website and makes a purchase via this website. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our knowledge as follows: Through the integration of GMP, Google receives the information that you have called up the corresponding part of our website or clicked on an advertisement from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will find out and store your IP address. In the course of using GMP, personal data may also be transmitted to the servers of Google LLC. come in the USA.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
The privacy policy of GMP by Google can be found here: https://www.google.de/policies/privacy/

12) Page functionalities

12.1 Facebook plugins

Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland

These plugins allow direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our website containing such plugins is called up, no connection is yet established with the provider’s servers.

Only when you activate the plugins and thus in accordance with Art. 6 para. 1 lit. a DSGVO, your browser establishes a direct connection to the provider’s servers. Here, independent of a login into an existing user profile, information about your used end device (including your IP address), your browser and your page history is transmitted to the provider to a certain extent and processed there if necessary.

If you are logged into an existing user profile on the provider’s social network, information about interactions carried out via the plugins will also be published there and displayed to your contacts.
You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transferred to the provider.

Data may also be transferred to: Meta Platforms Inc, USA

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.2 Instagram plugins

Plugins of the social network of the following provider are used on our website: Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland

These plugins allow direct interactions with content on the social network.

To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of so-called “2-click” or “Shariff” solution integrated into the page.

This integration ensures that when a page of our website containing such plugins is called up, no connection is yet established with the provider’s servers.

Data may also be transferred: Meta Platforms Inc., USA

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.3 Online applications via a form

On our website, we advertise current vacancies in a separate section, for which interested parties can apply using the appropriate form.

Applicants must provide all personal information necessary to make an informed assessment, including general information such as name, address, and contact information, as well as performance-related evidence and health-related information, if applicable. Please refer to the job announcement for application details.

In the course of submitting the form, the applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated exclusively for the purpose of processing the application. The processing is based on Art. 6 para. 1 lit. b DSGVO (or Section 26 (1) BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

Insofar as special categories of personal data within the meaning of Art. 9 para. 1 DSGVO (e.g. health data such as information about the severely disabled status) are requested from applicants, the processing is carried out in accordance with Art. 9 para. 2 lit. b. DSGVO so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our obligations in this regard.

Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 para. 1 lit. h GDPR if it is for the purposes of preventive health care or occupational medicine, for the assessment of the applicant’s fitness for work, for medical diagnosis, health or social care or treatment, or for the management of health or social care systems and services.

If the applicant is not selected or if an applicant withdraws his or her application prematurely, the data submitted on the form and all electronic correspondence, including the application e-mail, will be deleted at the latest after 6 months following notification. This period is determined by our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to meet our obligations to provide evidence under the regulations on equal treatment of applicants.

In the event of a successful application, the data provided will be processed on the basis of Art. 6 para. 1 lit. b DSGVO (for processing in Germany in conjunction with Section 26 (1) BDSG) for the purpose of implementing the employment relationship.

12.4 Applications to job advertisements by e-mail

On our website, we advertise current vacancies in a separate section, for which interested parties can apply by e-mail to the contact address provided.

After receipt of the application by e-mail, the data will be stored and evaluated exclusively for the purpose of processing the application. In case of queries, we use either the e-mail address or telephone number of the applicant. The processing is based on Art. 6 para. 1 lit. b DSGVO (or Section 26 (1) BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.

If the applicant is not selected or if an applicant withdraws his or her application prematurely, his or her transmitted data and all electronic correspondence, including the application e-mail, will be deleted at the latest after 6 months following notification. This period is determined by our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to meet our obligations to provide evidence under the regulations on equal treatment of applicants.

12.5 Google Maps API

To enable us to check certain entries in the address form of the order process of our webshop for input errors in real time, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC., USA

The provider validates the entered address, verifies the spelling and completes any missing data. Correct alternative suggestions are displayed for addresses that are not unique. For this purpose, the address data you enter is transmitted to the provider, stored there and evaluated.

This processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the proper collection of the correct address data of the customer for the conscientious fulfillment of our contractual delivery obligations and for the prevention of contract performance problems.

The Provider processes the data concerned separately and does not merge them with other data files, and deletes them as soon as their status or correctness has been confirmed, but no later than after 30 days.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.6 Google Forms

To conduct surveys or for online forms, we use the services of the following provider: Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland.

In addition to a transmission of data to the above-mentioned provider location, data may also be transmitted to: Google LLC, USA

The provider enables us to design and evaluate surveys and online forms. In addition to the respective personal data that you enter in the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address are also collected, transmitted to the provider and stored on servers of the provider.

The information you enter in the forms is stored under password protection to ensure that third party access is excluded and that only we can evaluate the data for the purpose specified in the form.

When processing personal data that is necessary for the performance of a contract with you (this also applies to processing operations that are necessary for the performance of pre-contractual measures), Art. 6 para. 1 lit. b DSGVO as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 para. 1 lit. a GDPR. Consent given can be revoked at any time with effect for the future.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.7 – Google Web Fonts

This site uses so-called web fonts of the following provider for the uniform display of fonts: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly and establishes a direct connection to the provider’s servers. In this process, certain browser information, including your IP address, is transmitted to the provider.

Data may also be transmitted to: Google LLC, USA

The processing of personal data in the course of establishing a connection with the provider of the fonts will only be carried out if you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO have given your express consent to this. You can revoke your consent at any time with effect for the future by deactivating this service via the “Cookie Consent Tool” provided on the website. If your browser does not support web fonts, a default font from your computer will be used.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.8 Google reCAPTCHA

On this website we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland

Data may also be transmitted to: Google LLC, USA. For the visual design of the captcha window, the provider uses “Google Fonts”, i.e. fonts loaded from the Internet by Google. This does not involve the processing of any information other than that mentioned above, which is already transmitted to Google via the ReCaptcha functionality.

The service checks whether an input is made by a natural person or abusively by machine and automated processing, and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is taken by a human and not by an automated bot, Cloudflare Turnstile collects the IP address of the end device used, recognition data of the browser and operating system type used, as well as the date and duration of the visit, and transmits these to servers of the provider for evaluation.

The legal basis is our legitimate interest in establishing individual ownership on the Internet and preventing abuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.

For the transfer of data to the USA, the provider invokes standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12.9 Google Translate

This site uses the translation service “Google Translate” of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) via an API integration. In order for the translation to be displayed automatically after your choice of a national language, the browser you use connects to Google’s servers. Google uses “cookies”, which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States and other countries. come in the USA.

Further information on Google Translate as well as Google’s privacy policy can be found at: https://www.google.com/policies/privacy/

You can revoke your consent at any time with effect for the future. To exercise your revocation, disable this service in the “Cookie Consent Tool” provided on the Website.

12.10 Google Customer Reviews (formerly Google Certified Merchant Program)

We work with Google as part of the “Google Customer Reviews” program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program gives us the opportunity to obtain customer reviews from users of our website. Here, after making a purchase on our website, you will be asked if you would like to participate in an email survey from Google.

If you give your consent in accordance with Art. 6 para. 1 lit. a DSGVO, we transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the buying experience on our website. The review you submit is then aggregated with our other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Also, your review will be used for Google seller reviews. Within the scope of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. come in the USA.

You may withdraw your consent at any time by sending a message to the data controller or to Google.

13) Tools and other

13.1 AccountingButler

For the completion of accounting we use the service of cloud-based accounting software of the following provider: BuchhaltungsButler GmbH, Ausbau 1, 15910 Unterspreewald, Germany.

The provider processes incoming and outgoing invoices, as well as our company’s bank transactions where applicable, in order to automatically record invoices, match them to transactions and create financial accounting from this in a semi-automated process.

If personal data are also processed in this context, the processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in the efficient organization and documentation of our business processes.

13.2 Cookie Consent Tool

This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “Cookie Consent Tool” is displayed to users on page access in the form of an interactive user interface on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box. By using the tool, all cookies/services that require consent are only loaded if the respective user gives the corresponding consent by ticking the corresponding box. This ensures that such cookies are only set on the respective end device of the user if consent has been granted.

The tool sets technically necessary cookies to store your cookie preferences. Personal user data is generally not processed in this context.

If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.

Further legal basis for the processing is furthermore Art. 6 para. 1 lit. c GDPR. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.

We have concluded an order processing agreement with the provider, which ensures the protection of our site visitors’ data and prohibits unauthorized disclosure to third parties.

You can find more information about the operator and the setting options of the cookie consent tool directly in the corresponding user interface on our website.

13.3 Wordfence
For security purposes, this website uses the “Wordfence” plugin, a service provided by Defiant Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA (hereinafter “Wordfence”). The plugin protects the website and related IT infrastructure from unauthorized third-party access, cyber attacks, and viruses and malware. Wordfence collects the IP addresses of users and, if necessary, other data about your behavior on our website (in particular, URLs accessed and header information) in order to detect and prevent illegitimate page accesses and threats. In the process, the captured IP address is compared with a list of known attackers. If the captured IP address is identified as a security risk, Wordfence can automatically block it for page access. The information collected in this way is transferred to a server of Defiant Inc. in the USA and stored there.
The described data processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interests in protecting the website from harmful cyber attacks and in maintaining structural and data integrity and security.
Defiant Inc. relies on the standard data protection clauses according to Art. 46 sentence 2 lit. c DSGVO as the legal basis for the transfer of data to the USA.
If visitors to the website have login rights, Wordfence also sets cookies (= small text files) on the respective end device used by the visitor. With the help of the cookies, certain location and device information can be read, which allows an assessment of whether the login-authorized access originates from a legitimate person. At the same time, access rights can be evaluated via the cookies and released via a site-internal firewall according to the authorization level. Finally, the cookies are used to register irregular accesses by site administrators from new devices or new locations and to notify other administrators about this.
These cookies are only set if a user has login rights. Wordfence does not set cookies for site visitors without login authority.
If personal data is processed via the cookies, the processing is carried out in accordance with Art. 6 para.1 lit f. DSGVO on the basis of our legitimate interest in preventing illegitimate access to the site administration and defense against unauthorized administrator access.
We have worked with Defiant Inc. We have concluded a data processing agreement with the company, which obliges us to protect the data of site visitors and not to pass it on to third parties.
For more information about the data use of Defiant Inc. for Wordfence, please refer to Wordfence’s privacy policy at https://www.wordfence.com/privacy-policy/.

14) Rights of the data subject

14.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise prerequisites:

Right to information according to Art. 15 DSGVO;
Right to rectification pursuant to Art. 16 DSGVO;
Right to erasure pursuant to Art. 17 DSGVO;
Right to restriction of processing pursuant to Art. 18 DSGVO;
Right to information pursuant to Art. 19 GDPR;
Right to data portability according to Art. 20 DSGVO;
Right to revoke consent given in accordance with Art. 7 para. 3 GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

14.2 RIGHT OF OBJECTION

IF WE PROCESS YOUR PERSONAL DATA IN THE CONTEXT OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE AT ANY TIME ON GROUNDS ARISING FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Duration of the storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a DSGVO, the data concerned will be stored until you revoke your consent.

If there are legal retention periods for data that are required in the context of legal transactions or obligations similar to legal transactions on the basis of Art. 6 Para. 1 lit. b DSGVO, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for the fulfillment of the contract or the initiation of the contract and/or there is no legitimate interest on our part to continue storing it.

When processing personal data on the basis of Art. 6 para. 1 lit. f DSGVO, this data will be stored until you exercise your right to object according to Art. 21 para. 1 DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing is for the establishment, exercise or defense of legal claims.

When processing personal data for the purpose of direct marketing on the basis of Art. 6 para. 1 lit. f DSGVO, this data will be stored until you exercise your right to object according to Art. 21 para. 2 GDPR exercise.

Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.