Privacy Policy

1. General information and principles of data processing

We are pleased that you are visiting our website. Protecting your privacy and your personal data, so-called personal data, when using our website is an important concern for us.

 

According to Art. 4 No. 1 GDPR, personal data is any information relating to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.

Data that cannot be linked to you, for example through anonymisation, is not personal data. Processing (e.g. collecting, storing, reading, retrieving, using, transmitting, deleting or destroying) according to Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of processing has been achieved and no statutory retention obligations need to be observed any longer.

Here you will find information about how we handle your personal data when you visit our website. To provide the functions and services of our website, it is necessary for us to collect personal data about you.

We also explain the type and scope of the respective data processing, the purpose and the corresponding legal basis, and the respective storage period.

 

This privacy policy applies only to this website. It does not apply to other websites to which we merely refer via a hyperlink. We cannot accept any responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please inform yourself directly on these websites about how these companies handle your personal data.       

 

 

 

 

 

2. Controller

The controller responsible for processing personal data on this website is (see legal notice):

 

3. Provision and use of the website / server log files
4. a) Type and scope of data processing

If you use this website without otherwise transmitting data to us (e.g. by registering or using the contact form), we collect technically necessary data via server log files that are automatically transmitted to our server, including:

• IP address
• Date and time of the request
• Name and URL of the file retrieved
• Website from which access is made (referrer URL)
• Access status/HTTP status code
• Browser type
• Language and version of the browser software
• Operating system

 

1. b) Purpose and legal basis

This processing is technically necessary to display our website to you. We also use the data to ensure the security and stability of our website.

The legal basis for this processing is Art. 6 (1) (f) GDPR. The processing of the data mentioned is necessary for the provision of a website and thus serves to protect a legitimate interest of our company.    

1. c) Storage period

As soon as the personal data mentioned is no longer required to display the website, it will be deleted. The collection of data for the provision of the website and the storage of data in log files is absolutely necessary for the operation of the website. Consequently, there is no possibility for the user to object in this respect. Further storage may take place in individual cases if this is required by law.

 

4. Use of cookies
5. a) Type, scope and purpose of data processing

We use cookies. Cookies are small files that we send to the browser of your device during your visit to our website and that are stored there.

Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses. For example, some cookies can recognise the browser you use when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. Among other things, cookies allow us to make our website more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. Cookies do not cause any damage to your device. They cannot run programs and cannot contain viruses. Various types of cookies are used on our website, the type and function of which are explained below.

Temporary cookies / session cookies

Our website uses so-called temporary cookies or session cookies , which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This allows various requests from your browser to be assigned to a common session and makes it possible to recognise your device on later visits to the website.

Permanent cookies

Our website uses so-called permanent cookies. Permanent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete permanent cookies yourself via your browser settings.

Third-party cookies

We use analytical cookies to monitor anonymised user behaviour on our website.

We also use advertising cookies. These cookies can be used to track user behaviour for advertising and targeted marketing purposes.

Social media cookies make it possible to connect to your social networks and share content from our website within your networks.

Configuring browser settings

Most web browsers are preset to accept cookies automatically. However, you can configure your browser so that it only accepts certain cookies or none at all. Please note, however, that you may then no longer be able to use all the functions of our website.

You can also use your browser settings to delete cookies already stored in your browser. It is also possible to set your browser so that it notifies you before cookies are stored. As the various browsers may differ in how they work, please use the help menu of your browser for the relevant configuration options.

Deactivating the use of cookies may require a permanent cookie to be stored on your computer. If you subsequently delete this cookie, you will have to deactivate it again.

1. b) Legal basis

Due to the purposes described, the legal basis for processing personal data using cookies is Art. 6 (1) (f) GDPR. If you have given us your consent to the use of cookies on the basis of a notice given by us on the website (“cookie banner”), the legal basis is additionally Art. 6 (1) (a) GDPR.

 

1. c) Storage period

As soon as the data transmitted to us via cookies is no longer required for the purposes described above, this information will be deleted. Further storage may take place in individual cases if this is required by law.

 

5. Data collection for pre-contractual measures and contract fulfilment
6. a) Type and scope of data processing

In the pre-contractual stage and when concluding a contract, we collect personal data about you. This includes, for example, first and last name, address, email address, telephone number or bank details.

 

1. b) Purpose and legal basis of data processing

We collect and process this data exclusively for the purpose of performing the contract or fulfilling pre-contractual obligations.

 

The legal basis for this is Art. 6 (1) (b) GDPR. If you have also given your consent, the additional legal basis is Art. 6 (1) (a) GDPR.

1. c) Storage period

The data will be deleted as soon as it is no longer required for the purpose of its processing.

 

In addition, there may be statutory retention obligations, for example retention obligations under commercial or tax law pursuant to the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

 

6. Order form

Our website has an order form that can be used for electronic pre-orders.

 

1. a) Type and scope of data processing

Our data collection is limited to the following data:

• First and last name
• Telephone number
• Email address
• Account details
• Name of the product

1. b) Purpose and legal basis

The purpose of data processing is to be able to process your order properly.

The legal basis for this is Art. 6 (1) (b) GDPR. The processing of the data serves to fulfil a contract or is necessary for pre-contractual measures taken at the request of the data subject.

 

1. c) Storage period

The data will be deleted as soon as it is no longer required to achieve the purpose of processing.

In addition, there may be statutory retention obligations, for example retention obligations under commercial or tax law pursuant to the German Commercial Code (HGB) or the German Fiscal Code (AO). If such retention obligations exist, we will block or delete your data at the end of these retention obligations.

 

7. Registration
8. a) Type and scope of data processing

You can register on our website. When you register, we collect and store the data you enter in the input form (e.g. last name, first name, email address). The data is not passed on to third parties.

 

1. b) Purpose and legal basis of data processing

Your registration is required for the use of certain content and services on our website or for the fulfilment of a contract or for pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or to have it completely deleted from the controller's database.

The legal basis for processing in the case of consent is Art. 6 (1) (a) 
GDPR. If your registration serves to prepare the conclusion of a contract, Art. 6 (1) (b) GDPR is an additional legal basis.        

1. 
   c) Storage period

The data collected during registration is stored by us as long as you are registered on our website and is deleted afterwards. Statutory retention periods remain unaffected.

 

8. Data transfer

We only pass on your personal data to third parties if:

1. a) you have given your express consent to this in accordance with Art. 6 (1) (a) GDPR.
2. b) this is legally permissible and necessary in accordance with Art. 6 (1) (b) GDPR for the fulfilment of a contractual relationship with you or for pre-contractual measures.
3. c) there is a legal obligation for the transfer in accordance with Art. 6 (1) (c) GDPR.

We are legally obliged to transmit data to public authorities, e.g. tax authorities, social insurance institutions, health insurance funds, supervisory authorities and law enforcement authorities.

1. d) the transfer is necessary in accordance with Art. 6 (1) (f) GDPR to protect legitimate business interests and to assert, exercise or defend legal claims, and there is no reason to assume that you have an overriding interest worthy of protection in your data not being passed on.
2. e) in accordance with Art. 28 GDPR, we use external service providers as processors who have been obliged to handle your data with care.

 

We use such service providers in the following areas:

• IT
• Logistics
• Telecommunications

When transferring data to external bodies in third countries, i.e. outside the EU or EEA, we ensure that these bodies treat your personal data with the same care as within the EU or EEA. We only transfer personal data to third countries for which the EU Commission has confirmed an adequate level of protection, or if we ensure the careful handling of personal data through contractual agreements or other suitable guarantees.

9. Job applications
   a) Type and scope of data processing

You can apply via our website or by email. When you apply, we collect and store the data you enter in the input form or send us by email.

 

1. b) Purpose and legal basis
   We process your data only for the purpose of processing your application.
   The data is not passed on to third parties. The legal basis for processing is Art. 88 (1) GDPR in conjunction with Section 26 BDSG and additionally Art. 6 (1) (b) GDPR.

If you give us your consent to be included in our applicant pool, the legal basis is Art. 6 (1) (a) GDPR.

 

1. c) Storage period

If we cannot offer you a position, we store your data for a maximum of six months after the end of the application process, taking into account Section 61b (1) ArbGG in conjunction with Section 15 AGG. The period begins with receipt of the rejection letter.

 

If you have given us your consent to be included in our applicant pool, we store your data for a maximum of two years.

 

1. d) Data transfer

Your data is only received by those involved in the decision (responsible HR or specialist departments, management, works council).

We are also obliged to transmit your data to public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office, social insurance institutions etc.).

 

Further data recipients may be those bodies for which you have given us your consent to data transfer.

 

10. Comment function
11. a) Type and scope of data processing

You can comment on posts on our website. When you comment on a post, we collect and store the data you enter in the input form. In addition to the comments you leave, information on the time the comment was entered and, if applicable, the user name (pseudonym) you have chosen are stored and published. Furthermore, the IP address assigned by the data subject's internet service provider (ISP) is stored. The data is not passed on to third parties.

 

1. b) Purpose and legal basis

The data you transmit (e.g. the IP address) is stored for security reasons and in case the data subject violates the rights of third parties or posts illegal content through a comment.

The personal data collected is not passed on to third parties unless such transfer is required by law or serves the legal defence of the controller.

 

The legal basis for processing the personal data transmitted when using the comment function is, if and to the extent that you have given your consent, Art. 6 (1) (a) GDPR. You can withdraw this consent at any time. The lawfulness of the data processing already carried out remains unaffected by the withdrawal.

A further legal basis is Art. 6 (1) (f) GDPR.

We have a legitimate interest in processing in case the rights of third parties are violated or illegal content is posted. This serves security in case someone writes unlawful content in comments and posts (insults, prohibited political propaganda, etc.).

 

1. c) Storage period

The comments and the associated data (e.g. IP address) are stored and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons.

11. Contact form
12. a) Type and scope of data processing

On our website we offer you the opportunity to contact us via a form provided. When you submit your request via the contact form, reference is made to this privacy policy in order to obtain your consent.

 

If you use the contact form, the following personal data will be processed:

- Salutation

- First name

- Last name

- Title

- Company

- Industry

- Position

- Street

- House number

- Postcode

- City

- Country

- Email address

- Telephone number

- Subject

- Content of the message

 

1. b) Purpose and legal basis

Providing your email address serves the purpose of sending you a reply to your request by email. When using the contact form, your personal data is not passed on to third parties.

 

The legal basis for processing is consent in accordance with Art. 6 (1) (a) GDPR on the basis of the declaration of consent given voluntarily by you below, which can be withdrawn at any time with effect for the future:

 

1. c) Storage period

The data you enter in the contact form remains with us until you ask us to delete it, withdraw your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed).

Mandatory statutory provisions – in particular retention periods under the German Commercial Code (HGB) or the German Fiscal Code (AO) – remain unaffected.

 

12. Contact by email

On our website you can contact us by email.

1. a) Type and scope of data processing

You can contact us by email. Our data collection is limited to the email address of the email account you use to contact us and to the personal data you voluntarily provide when contacting us.

 

1. b) Purpose and legal basis

The purpose of data processing is to be able to respond to your request properly. The legal basis for this is Art. 6 (1) (f) GDPR. There is a legitimate interest in processing the above personal data in order to be able to handle your request properly.

 

1. c) Storage period

The duration of storage of the above data depends on the background of your contact. Your personal data is regularly deleted once the purpose of the communication no longer applies and storage is no longer necessary. This may result, for example, from your request having been dealt with.

 

13. Newsletter
    a) Type and scope of data processing

On our website you can subscribe to a free regular email newsletter. In order to send you the newsletter regularly, we need your email address.

 

We use the so-called double opt-in procedure for sending the newsletter.

 

This means that we will only send you an email newsletter once you have expressly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm by clicking on a corresponding link that you wish to receive newsletters from us in future.

 

This ensures that only you yourself, as the owner of the email address provided, can subscribe to the newsletter. Your confirmation must be made promptly after receipt of the confirmation email, otherwise your newsletter subscription will be automatically deleted from our database.

When you subscribe to the newsletter, we collect and store the data you enter in the input form (e.g. last name, first name, email address).

When you subscribe to the newsletter, we also store your IP address assigned by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any misuse of your email address at a later date. For the confirmation email sent for control purposes (double opt-in
email), we also store the date and time of the click on the confirmation link and the IP address assigned by the internet service provider (ISP).

 

1. b) Purpose and legal basis
   The data we collect when you subscribe to the newsletter is used exclusively for advertising purposes by means of the newsletter.

The processing of your email address for sending the newsletter is based on Art. 6 (1) (a) GDPR and Section 7 (2) No. 3 UWG on the declaration of consent given voluntarily by you below, which can be withdrawn at any time with effect for the future.

In addition, the processing is based on Art. 6 (1) (f) GDPR due to our legitimate interest in documenting proof of the required consent.

 

1. c) Storage period

Your email address is stored for as long as you are subscribed to the newsletter. After unsubscribing from the newsletter, your email address will be deleted unless you have expressly consented to further use of your data.

 

14. Tracking and analysis tools

An exact overview of the web analysis and social media tools we use can be found here.

 

Amazon Pay

We offer the option of processing payment via the payment service provider Amazon Payments Europe S.C.A., 5 Rue Plaetis, 2338 Luxembourg.

The legal basis is our legitimate interest in efficient and secure payment processing pursuant to Art. 6 (1) (f) GDPR. In this context, we pass on the following data to Amazon Pay insofar as this is necessary for the fulfilment of the contract (Art. 6 (1) (b) GDPR): name, address, bank details, possibly credit card number, invoice amount, currency and transaction number. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this.

 

For various services such as payment by direct debit, Amazon carries out a credit check to ensure your willingness and ability to pay. This corresponds to the legitimate interest of Amazon Pay (pursuant to Art. 6 (1) (f) GDPR) and serves the performance of the contract (pursuant to Art. 6 (1) (b) GDPR). For this purpose, your data (name, address and date of birth, bank account details) is passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment was carried out or rejected or whether a review is pending.

Further information on data protection at Amazon Pay can be found at:

https://pay.amazon.com/de/help/201751600

 

Doubleclick by Google

On some of our websites we use Doubleclick, a service of Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (hereinafter: “Google”). Doubleclick uses cookies to show you personalised advertising. The cookies do not contain any personal information.

The information generated by the cookies about your use is usually transferred to a Google server in the USA and stored there.

 

The data transmitted by your browser in the context of Doubleclick is not merged with other Google data.

You can prevent the storage of cookies by setting your browser software accordingly. You can deactivate the display of personalised advertising using a browser plug-in, which you can install here:
https://www.google.com/settings/ads/plugin

You can also deactivate the display of personalised advertising here.

The legal basis for processing data using Double Click is Art. 6 (1) (f) GDPR.

 

Further information on data protection at Google can be found here: https://www.google.de/intl/de/policies/technologies/ads/

 

Facebook
If you visit our Facebook fan page, Facebook Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, collects, stores and processes your personal data in accordance with Facebook's data policy, which can be found here:

https://de-de.facebook.com/policy.php

As part of the “Facebook Insights” function, Facebook may provide us with the following data categories, among others, in anonymised/statistical form for the purpose of measuring performance and optimising our Facebook presence:

 

- Predefined interactions on our fan page

- Timestamp

- Country/city of the user

- HTTP language code

- Age/gender group

- Previously visited website (so-called referral URL)

- User's device

- Facebook user ID (if logged in)

With regard to the processing of Insights data, Facebook and we are jointly responsible, with Facebook having assumed primary responsibility. This concerns the processing of Insights data and the implementation of data subject rights. Please therefore contact Facebook directly regarding all obligations under the GDPR with regard to the processing of Insights data. We will forward any related requests we receive to Facebook. Further details are set out in the Joint Controller Addendum, which can be found here:

www.facebook.com/legal/terms/page_controller_addendum

Further information on Facebook Insights can be found here:

https://analytics.facebook.com/features/list#automated_insights

www.facebook.com/legal/terms/information_about_page_insights_data

 

Facebook Custom Audience / Facebook Pixel

Within our website we use the visitor action pixel of the provider Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland (“Facebook”). The Facebook remarketing tag or tracking pixel has been implemented. Facebook and we are jointly responsible for the data processing.

 

The Facebook pixel enables Facebook to determine the visitors of our online offering as a target group for the display of ads (so-called “Facebook ads”). A user can also be tracked across several websites. We use the Facebook pixel to display the Facebook ads we place only to those Facebook users who have shown an interest in our online offering or who have certain characteristics (e.g. interest in certain topics or products determined on the basis of the websites visited) that we transmit to Facebook (so-called “custom audiences”).

 

With the help of the Facebook pixel, we can also track the effectiveness of Facebook ads for statistical and market research purposes (“audience insights”) by seeing whether users were redirected to our website after clicking on a Facebook ad (so-called “conversion”).

 

The Facebook pixel is a JavaScript code that sends the following data to Facebook:

• HTTP header information: including IP address, information about the web browser, page location, document, URL of the website and device of the web browser (computer, smartphone, tablet, other) as well as day and time of use
• Pixel-specific data: pixel ID and Facebook cookie data including your Facebook ID (these are used to link events to a specific Facebook advertising account and thus assign them to a Facebook user)
• Additional information about the visit and about standard and custom data events.

 

Further information can be found here.

 

We also use the additional function “automatic advanced matching”. Here, data such as first and last name, place of residence, email addresses, telephone numbers or Facebook IDs of users are transmitted to Facebook in encrypted form to create target groups (“custom audiences” or “lookalike audiences”). This also includes data of non-Facebook users and of users who are not logged in to Facebook when visiting our website. This also makes it possible to identify website visitors who have deactivated the storage of third-party cookies.

 

If no Facebook cookies are stored in your browser, you will not be assigned to any of the user groups referred to as “custom audiences”. However, if the Facebook ID contained in the Facebook cookie has been assigned to a Facebook user, Facebook assigns this user to a so-called “custom audience” based on the rules we have defined.

 

According to the case law of the European Court of Justice, we are jointly responsible with Facebook for the operation of the tracking pixel with regard to compliance with data protection regulations. In this context, Facebook provides the associated IT infrastructure and the website of the social network and is generally the primary contact when it comes to the processing of your data on the pages of the social network (e.g. information or deletion). However, you can also assert your legal rights against us. In this case, we will forward your requests to the operator of the social network.

 

Insofar as data is transferred outside the European Union (EU) or the contracting states of the Agreement on the European Economic Area (EEA), Facebook obliges the recipients (including the US-based Facebook Inc., 1601 S. California Ave, Palo Alto, CA 94304, USA) to comply with an adequate level of data protection on the basis of so-called EU standard contractual clauses. In addition, a transfer to a third country may also take place on the basis of the recognition of an adequate level of data protection by the European Commission.

 

We use the Facebook pixel to display the “Facebook ads” we place to those Facebook users who have shown an interest in our online offering or who have certain characteristics that we transmit to Facebook (so-called “custom audiences”).

 

The legal basis for the use of Facebook Custom Audience is your consent in accordance with Art. 6 (1) (a) GDPR.

 

Further information can be found here and in Facebook's privacy policy.

 

Google AdSense

We use the online advertising service Google AdSense, which can present you with advertising tailored to your interests. Google AdSense is a web analysis service of Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

 

Our interest is to show you advertising that may be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected and processed by our advertising partners. These ads can be recognised by the note “Google ads” in the respective ad.

 

By visiting our website, Google receives the information that you have accessed our website. For this purpose, Google uses a web beacon to set a cookie on your computer. If you are logged in with your Google account, your data can be assigned directly to it. If you do not want it to be assigned to your Google profile, you must log out. It is possible that this data may be passed on to Google's contractual partners, third parties and authorities. This website has also activated Google AdSense ads from third-party providers. The aforementioned data may be transferred to these third-party providers (listed at https://support.google.com/dfp_sb/answer/94149).

 

You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all the functions of this website to their full extent. You can also deactivate interest-based ads from Google via the link: www.google.de/ads/preferences

Please note that this setting will be deleted if you delete your cookies. You can also permanently deactivate interest-based advertising in the Firefox, Chrome and Internet Explorer browsers by downloading and installing the browser plug-in available at the following link:

www.google.com/settings/ads/plugin

Google contact details:

Google Dublin, Google Ireland Ltd.

Gordon House, 4 Barrow Street

Dublin, Ireland

Phone: +353 (1) 436 1000

Fax: +353 (1) 436 1001

 

Further information on data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy

Privacy terms for advertising:

www.google.de/intl/de/policies/technologies/ads

 

 

Google Ads conversion tracking

We use Google Ads to show you advertising on Google websites and those of other third parties. Google Ads is a web analysis service of Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

 

Conversion tracking allows us to determine how successful the individual advertising measures are. Our purpose is to show you advertising that is of interest to you and to make our website more interesting for you. The advertising is delivered by Google via so-called “ad servers”. For this purpose we use cookies, which can be used to measure certain parameters for measuring success, such as the display of ads or clicks by users. If you reach our website via a Google ad, Google Adwords stores a cookie on your PC. These cookies usually lose their validity after 30 days and are not intended to identify you personally. This cookie usually stores the unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) as analysis values.

 

These cookies enable Google to recognise your internet browser. If a user visits certain pages of an Adwords customer's website and the cookie stored on their computer has not yet expired, Google and the customer can recognise that the user clicked on the ad and was redirected to this page. Each Adwords customer is assigned a different cookie. Cookies therefore cannot be tracked via the websites of Adwords customers. We ourselves do not collect or process any personal data in the advertising measures mentioned. We only receive statistical evaluations from Google. Based on these evaluations, we can see which of the advertising measures used are particularly effective. We do not receive any further data from the use of the advertising material; in particular, we cannot identify users on the basis of this information.

Due to the marketing tools used, your browser automatically establishes a direct connection to Google's servers. We have no influence on the scope and further use of the data collected by Google and inform you according to our state of knowledge: By integrating AdWords conversion tracking, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, it is possible that the provider will find out and store your IP address.

You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link:

http://www.google.com/settings/ads/plugin

Google contact details:

Google Dublin, Google Ireland Ltd.

Gordon House, 4 Barrow Street

Dublin, Ireland

Phone: +353 (1) 436 1000

Fax: +353 (1) 436 1001

Further information on data protection at Google can be found here: https://business.safety.google/gdpr/

 

Google Ads remarketing

We use Google Ads Remarketing. Google Ads Remarketing is a web analysis service of Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

This application allows our advertising to be displayed to you on other websites after you have visited our website. This is done by means of cookies stored in your browser, through which Google records and evaluates your usage behaviour when you visit various websites. In this way, Google can determine your previous visit to our website. According to Google's own statements, Google does not merge the data collected in the context of remarketing with your personal data that may be stored by Google. In particular, according to Google, pseudonymisation is used in remarketing.

The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

Google contact details:

Google Dublin, Google Ireland Ltd.
Gordon House, 4 Barrow Street
Dublin, Ireland
Phone: +353 (1) 436 1000
Fax: +353 (1) 436 1001

Further information on data protection at Google can be found here: https://business.safety.google/gdpr/

 

 

Google Analytics

Some of our websites use Google Analytics to analyse and improve their use.

Google Analytics is a web analysis service of Google Inc. (“Google”). Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable an analysis of your use of the website. The information generated by the cookie about your use of this website is usually transferred to a Google server in the USA and stored there. If IP anonymisation is activated on this website, however, your IP address will first be shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there. On behalf of the operator of this website, Google will use this information to evaluate your use of the website, to compile reports on website activities and to provide the website operator with further services related to website and internet use. The legal basis for processing data using Google Analytics is your consent in accordance with Art. 6 (1) (a) GDPR. The IP address transmitted by your browser in the context of Google Analytics will not be merged with other Google data.

The legal basis for data processing is your consent in accordance with Art. 6 (1) (a) GDPR.

You can prevent the storage of cookies by setting your browser software accordingly; however, please note that in this case you may not be able to use all the functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by downloading and installing the browser plug-in available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

We use Google Analytics with the extension “_anonymizeIp()”. This shortens IP addresses (so-called IP masking), so that a reference to specific persons can be ruled out.

Information about Google: Google Dublin, Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001

Further information on Google's terms of use:
www.google.com/analytics/terms/de.html

 

Google Fonts

On some of our websites we use Google Fonts. This allows us to integrate certain fonts into our website. These fonts are provided by Google via servers in the USA. When our website is accessed, the visitor's web browser establishes a direct connection to these servers. Among other things, the visitor's IP address is transmitted to Google and stored there.

 

Further information about Google: Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA

Further information on data protection at Google:

https://www.google.com/policies/privacy/

 

Google reCAPTCHA

To ensure sufficient data security when submitting forms, in certain cases we use reCAPTCHA, a service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, California 94043, USA.

This allows us to distinguish whether an entry is made by a human or improperly by automated computer programs (bots). When reCAPTCHA is used, the user's IP address and, if applicable, other data required by Google for the reCAPTCHA service are transmitted to Google. The privacy provisions of Google LLC apply.

The legal basis for the use of reCAPTCHA is Art. 6 (1) (f) GDPR. Checking form entries to determine whether they were created by a human constitutes a legitimate interest of the website operator.

 

Google's European contact details:

Google Dublin, Google Ireland Ltd.

Gordon House, 4 Barrow Street

Dublin D04 E5W5

Ireland
Phone: +353 1 543 1004

Further information on Google LLC's privacy policy can be found at http://www.google.de/intl/de/privacy or https://www.google.com/intl/de/policies/privacy/

 

Google Tag Manager

Google Tag Manager is a solution that allows marketers to manage website tags via one interface. The Tag Manager tool itself (which implements the tags) is a cookieless domain and does not collect any personal data. The tool triggers other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at domain or cookie level, it remains in place for all tracking tags implemented with Google Tag Manager. http://www.google.de/tagmanager/use-policy.html

 

Instagram

If you visit our Instagram channel, personal data is stored and processed by Facebook Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, as the provider of Instagram, in accordance with Instagram's data policy, which can be found here:

https://help.instagram.com/519522125107875

For the purpose of designing and continuously optimising our pages to meet requirements, we use the statistics service Instagram Insights. This service records your activity on our page and provides it to us in anonymised statistics. This gives us insights into, among other things, the interactions of our fan page visitors, the views of our page, the reach of posts, information about the activity of our subscribers, information about which countries and places our visitors come from, and statistics on the gender distribution of our visitors. It is not possible for us to draw conclusions about individual users or to access individual user profiles.

 

PayPal

We offer the option of processing payment via the payment service provider PayPal, PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg.

When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered

– “purchase on account” via PayPal, we pass on your payment data to PayPal as part of the payment processing. For the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” via PayPal, PayPal reserves the right to carry out a credit check. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.

For further data protection information, including on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

 

 

 Shopify

We host our website with Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. We use Shopify on the basis of processing on our behalf.

When you visit our website, Shopify records your IP address as well as information about the device and browser you use. Shopify also analyses user behaviour and creates user statistics. When you make a purchase via our website, your name, email address, delivery and billing addresses, payment data and other data related to the purchase (e.g. telephone number, amount of sales made, etc.) are recorded by Shopify. For the analyses, Shopify stores cookies in your browser.

All data collected on our website is processed on Shopify's servers. In the event of data being transferred to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz

 

Shopify Payments

We use the payment service provider “Shopify Payments”. If you choose a payment method offered via Shopify Payments, payment is processed via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process.

Your data is transmitted to Stripe on the basis of Art. 6 (1) (a) GDPR (consent) and Art. 6 (1) (b) GDPR (processing for the performance of a contract). You can withdraw your consent to data processing at any time. A withdrawal does not affect the validity of data processing operations carried out in the past. All data required for payment processing is used exclusively for carrying out the payments and transmitted via the “SSL” procedure. Stripe is PCI DSS certified.

Stripe may transfer, process and store personal data outside the EU. In this case, Stripe has agreed EU standard contractual clauses for data transfers outside the EU/EEA, which ensure a level of data protection comparable to the GDPR.

Further information on data protection at Shopify Payments can be found at the following web address: https://www.shopify.com/legal/privacy.

More information on data protection at Stripe can be found at: https://stripe.com/de/privacy.

 

Stripe

We offer the option of processing payment via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. When paying via Stripe, we pass on the information you provided during the ordering process together with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) (b) GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary for this. Further information on data protection at Stripe can be found at: https://stripe.com/de/privacy#translation.

 

Social plug-ins

 

We currently use the following social media plug-ins: Facebook, Google+, Twitter, Xing, LinkedIn, Snapchat, TikTok. Using a button, personal data is transmitted to the respective plug-in provider and stored there.

The respective plug-in provider stores the data collected about you as usage profiles and uses them for the purposes of advertising, market research and/or designing its website to meet requirements. Such an evaluation takes place in particular (also for users who are not logged in) to display needs-based advertising and to inform other users of the social network about your activities on some of our websites. You have the right to object to the creation of these user profiles, and you must contact the respective plug-in provider to exercise this right. Via the plug-ins we offer you the opportunity to interact with the social networks and other users so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Art. 6 (1) (f) GDPR.

The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in with the plug-in provider, the data we collect is assigned directly to your existing account with the plug-in provider. For US providers, data is transferred to the USA.

Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the privacy policies of these providers listed below. There you will also find further information on your rights in this regard and settings options to protect your privacy:

• Facebook Inc., 1601 S California Ave, Palo Alto, California 94304, USA

www.facebook.com/policy.php

• Google Inc., 1600 Amphitheatre Parkway, Mountain View, California 94043, USA

www.google.com/policies/privacy/partners/?hl=de

• Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA

twitter.com/privacy

• Xing AG, Gänsemarkt 43, 20354 Hamburg, Germany

http://www.xing.com/privacy

• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA

linkedin.com/legal/privacy-policy

• Snap Group Limited, 77 Shaftesbury Avenue, London, W1D 5DU, UK

https://snap.com/de-DE/privacy/privacy-policy

• TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland

https://www.tiktok.com/legal/privacy-policy?lang=de-DE

 

TikTok

On our TikTok channel we present our services in short form and inform you about current promotions.

 

In doing so, personal data of the user is processed by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). TikTok's privacy policy can be found at:

https://www.tiktok.com/legal/privacy-policy?lang=de-DE

 

With the help of TikTok's analytics functions, we can measure the performance of our channel. For this purpose, TikTok provides us with the following information in statistical form, among other things: audiences (e.g. characteristics of target groups for delivering ads such as age, gender and country), interactions (e.g. likes, duration of video playback), referral information (e.g. where users came to the video from). It is not possible for us to draw conclusions about individual users or to access individual user profiles.

 

Further information on TikTok's analytics functions can be found at:

https://ads.tiktok.com/marketing_api/docs?rid=bfu8bedbv2c&id=100509

 

YouTube videos

On our YouTube channel you can find videos or helpful tips about our offering. On YouTube, our customer service team also professionally answers users' questions and comments.

Personal data is stored and processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 D04 E5W5, Ireland (“Google”), as the operator of YouTube, in accordance with Google's privacy policy, which can be found here: https://policies.google.com/privacy?hl=de&gl=de

 

With the help of YouTube's analytics functions, we are able to carry out certain statistical evaluations to optimise our channel. This includes in particular details on the most popular videos (e.g. users' viewing time, ranking of videos), target groups (e.g. countries, language settings, age and gender, activity times) and the reach of our channel (e.g. where users were redirected to a video from) and impressions (e.g. how many users saw a particular ad). It is not possible for us to draw conclusions about individual users or to access individual user profiles.

 

Further information on YouTube's analytics functions can be found at:

https://support.google.com/youtube/answer/9002587?hl=de

 

Uptain

To improve interaction with our visitors, we use a JavaScript plug-in from uptain GmbH (“uptain plug-in” https://www.uptain.de). This allows us to analyse your use of the website and improve how we address customers (e.g. through a dialogue window). For this purpose, we collect information about your usage behaviour, i.e. cursor movement, time spent, links clicked and any information provided. The legal basis for processing is our legitimate interest in direct marketing and in providing our website (Art. 6 (1) (f) GDPR). As a processor, uptain GmbH is strictly bound by our instructions. The information collected is not passed on to third parties unless we are legally obliged to do so. Insofar as the information collected by the uptain plug-in contains personal data, it is deleted immediately after your visit to our website.

You can deactivate the use of the uptain plug-in at any time via the following link: https://www.ihreshopdomain.de/datenschutz?__up_tracking_unsubscribe

 

 

 

15. Data security and security measures

We are committed to protecting your privacy and treating your personal data confidentially. To this end, we take extensive technical and organisational security precautions, which are regularly reviewed and adapted to technological progress. 

This includes, among other things, the use of recognised encryption methods (SSL or TLS). However, data disclosed unencrypted, for example by unencrypted email, may possibly be read by third parties. We have no influence on this. It is the responsibility of the respective user to protect the data they provide against misuse by encryption or in any other way.

 

16. Changes to the privacy policy

We reserve the right to update this policy as required at any time.

 

17. Your rights

Here you will find your rights with regard to your personal data. Details can be found in Articles 7, 15–22 and 77 GDPR. You can contact the controller (section 2) in this regard.

 

Right to withdraw your consent under data protection law pursuant to Art. 7 (3) sentence 1 GDPR

You can withdraw your consent to the processing of your personal data at any time with effect for the future. However, this does not affect the lawfulness of the processing carried out until the withdrawal.

 

1. Right of access pursuant to Art. 15 GDPR

You have the right to request confirmation as to whether we process personal data concerning you. If this is the case, you have the right to access this personal data and to further information, e.g. the purposes of processing, the categories of personal data processed, the recipients and the planned duration of storage or the criteria for determining the duration.

 

1. Right to rectification and completion pursuant to Art. 16 GDPR

You have the right to request the immediate rectification of inaccurate data. Taking into account the purposes of processing, you have the right to request the completion of incomplete data.

 

1. Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR

You have a right to erasure insofar as the processing is not necessary.
This is the case, for example, if your data is no longer necessary for the original purposes, you have withdrawn your declaration of consent under data protection law or the data has been processed unlawfully.         

1. Right to restriction of processing pursuant to Art. 18 GDPR

You have a right to restriction of processing, e.g. if you believe that the personal data is inaccurate.

 

1. Right to data portability pursuant to Art. 20 GDPR

You have the right to receive the personal data concerning you in a structured, commonly used and machine-readable format.

 

1. Right to object pursuant to Art. 21 GDPR
   You have the right to object at any time, on grounds relating to your particular situation, to the processing of certain personal data concerning you.   
     
   In the case of direct marketing, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

 

1. Automated individual decision-making, including profiling, pursuant to Art. 22 GDPR

You have the right not to be subject to a decision based solely on automated processing – including profiling – except in the exceptional cases mentioned in Art. 22 GDPR.

 

Decision-making based solely on automated processing – including profiling – does not take place.

 

1. Complaint to a data protection supervisory authority pursuant to Art. 77 GDPR

You can also lodge a complaint with a data protection supervisory authority at any time, for example if you believe that the data processing does not comply with data protection regulations.