High level of innovation

Made in Germany

Healthy Flooring

CLASSEN - Blue Leaf
Dealer Area

Product Visualizer

Product Visualizer

Go to the planner

Product Consultant

For consultation
Discover fresh ideas, the latest DIY trends, and creative interior design concepts—to add more style and personality to your home.
Learn more
Do you have any questions or would you like a personal consultation? Our team is here to help—we’re fast, friendly, and knowledgeable. Send us an email, give us a call, or use our contact form.
Contact Us

Careers

Want to make a difference? At CLASSEN more than just a job: exciting challenges, real opportunities, and a great team.
Accessories
Change cookie settings
Change cookie settings
 

Privacy Policy

 

[rcb-consent type="change" tag="a" text="Change privacy settings"]

[rcb-consent type="history" tag="a" text="History of Privacy Settings"]

[rcb-consent type="revoke" tag="a" text="Revoke consent" successmessage="You have successfully revoked your consent. The page will now reload."]


Privacy Policy in accordance with the GDPR

Name and address of the controller

The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection regulations, is:

W. CLASSEN & Co. KG
18-20 Werner-von-Siemens-Strasse
D-56759 Kaisersesch
Tel: +49 2653-980-0
Email:classen

Managing Director:

Dr. Hans-Jürgen Hannig, Stefanie Quervel, Mathias Gorecki, Céline Quervel

Commercial Register:
Koblenz Local Court HRA 4591 VAT ID: DE 123 507 806

Name and address of the Data Protection Officer

The data protection officer for the controller is:

Klaus Keukert
CANCOM GmbH
18 Florinstraße, 56218 Mülheim-Kärlich
Email: classen
Website: https://www.sul.de

 

Introduction

With the following Privacy Policy, we would like to inform you about the types of personal data we process (hereinafter also referred to as “data”), the purposes for which we process it, and the scope of such processing. This Privacy Policy applies to all processing of personal data carried out by us, both in connection with the provision of our services and, in particular, on our websites, in mobile applications, and within external online presences, such as our social media profiles (hereinafter collectively referred to as the “Online Offer”).

The terms used are gender-neutral.


Relevant legal basis

Below, we outline the legal bases under the General Data Protection Regulation (GDPR) on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations in your country of residence or our country of incorporation may apply. Furthermore, should more specific legal bases apply in individual cases, we will inform you of these in our Privacy Policy.

National Data Protection Regulations in Germany: In addition to the data protection provisions of the General Data Protection Regulation (GDPR), national data protection regulations apply in Germany. These include, in particular, the Act on the Protection against the Misuse of Personal Data in Data Processing (Federal Data Protection Act – BDSG). The BDSG contains, in particular, special provisions regarding the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, and the transfer of data, as well as automated decision-making in individual cases, including profiling. Furthermore, it regulates data processing for the purposes of the employment relationship (Section 26 BDSG), particularly with regard to the establishment, performance, or termination of employment relationships, as well as the consent of employees. In addition, state data protection laws of the individual federal states may apply.


Safety measures

In accordance with legal requirements, and taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihood and severity of the risks to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.

These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access to, input of, and disclosure of the data, ensuring its availability, and maintaining its separation. Furthermore, we have established procedures that ensure the exercise of data subjects’ rights, the erasure of data, and responses to data breaches. Furthermore, we take the protection of personal data into account from the very beginning of the development and selection of hardware, software, and procedures, in accordance with the principle of data protection by design and through privacy-friendly default settings.

IP Address Truncation: Whenever possible, or if storing the IP address is not necessary, we truncate your IP address or have it truncated. In the case of IP address truncation, also known as “IP masking,” the last octet—that is, the last two digits of an IP address—is deleted (in this context, the IP address is a unique identifier assigned to an Internet connection by the online access provider). The purpose of truncating the IP address is to prevent or significantly hinder the identification of a person based on their IP address.

SSL encryption (https): To protect the data you submit through our website, we use SSL encryption. You can recognize these encrypted connections by the https:// prefix in your browser’s address bar.


Transfer and Disclosure of Personal Data

As part of our processing of personal data, it may happen that the data is transferred to or disclosed to other entities, companies, legally independent organizational units, or individuals. Recipients of this data may include, for example, payment institutions in connection with payment transactions, service providers entrusted with IT tasks, or providers of services and content integrated into a website. In such cases, we comply with legal requirements and, in particular, enter into appropriate contracts or agreements with the recipients of your data to ensure the protection of your data.

Data transfer within the organization: We may transfer personal data to other departments within our organization or grant them access to such data. If this disclosure is made for administrative purposes, it is based on our legitimate business and operational interests, or it is made if necessary to fulfill our contractual obligations, or if the data subject has given consent or if there is a legal basis for such disclosure.


Data processing in third countries

If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if processing occurs in connection with the use of third-party services or the disclosure or transfer of data to other individuals, entities, or companies, this is done solely in accordance with legal requirements.

Subject to express consent or where data transfer is required by contract or law, we process data or have it processed only in third countries with a recognized level of data protection, contractual obligations through the European Commission’s standard data protection clauses, where certifications are in place, or where binding internal data protection policies are in effect (Art. 44–49 GDPR, EU Commission information page:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).


Deletion of Data

The data we process will be deleted in accordance with legal requirements as soon as the consent authorizing its processing is revoked or other legal grounds for processing no longer apply (e.g., if the purpose for which the data was processed no longer exists or if the data is no longer necessary for that purpose).

Unless the data is not deleted because it is required for other legally permissible purposes, its processing will be limited to those purposes. This means that the data will be blocked and not processed for any other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or whose storage is necessary to assert, exercise, or defend legal claims, or to protect the rights of another natural or legal person.

Further information regarding the deletion of personal data may also be provided in the individual privacy notices included in this Privacy Policy.


Changes and Updates to the Privacy Policy

We ask that you review the content of our Privacy Policy on a regular basis. We will update the Privacy Policy as soon as changes to our data processing practices make it necessary to do so. We will notify you as soon as the changes require any action on your part (e.g., consent) or any other individual notification.

Please note that any addresses and contact information for companies and organizations provided in this Privacy Policy may change over time; we ask that you verify this information before contacting them.


Rights of data subjects

As data subjects, you have various rights under the GDPR, which arise in particular from Articles 15 through 21 of the GDPR:

  • Right to object: Youhave the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you that is carried out pursuant to Article 6(1)(e) or (f) of the GDPR; this also applies to profiling based on these provisions. If your personal data is processed for the purpose of direct marketing, you have the right to object at any time to the processing of your personal data for such marketing purposes; this also applies to profiling to the extent that it is related to such direct marketing.
  • Right to withdraw consent: You have the right to withdraw your consent at any time.
  • Right of access: You have the right to request confirmation as to whether your personal data is being processed, as well as access to that data, further information, and a copy of the data in accordance with legal requirements.
  • Right to rectification: In accordance with legal requirements, you have the right to request that data concerning you be completed or that inaccurate data concerning you be corrected.
  • Right to erasure and restriction of processing: In accordance with legal requirements, you have the right to request that data concerning you be erased without delay, or, alternatively, to request that the processing of such data be restricted in accordance with legal requirements.
  • Right to data portability: Youhave the right to receive the personal data concerning you that you have provided to us in a structured, commonly used, and machine-readable format, in accordance with legal requirements, or to request that it be transmitted to another controller.
  • Complaint to a supervisory authority: You also have the right, in accordance with legal requirements, to lodge a complaint with a supervisory authority—in particular in the Member State of your habitual residence, your place of work, or the place where the alleged infringement occurred—if you believe that the processing of your personal data violates the GDPR.

The regulatory authority responsible for us:

The State Commissioner for Data Protection and Freedom of Information in Rhineland-Palatinate:

Prof. Dr. Dieter Kugelmann
P.O. Box 30 40
55020 Mainz
or:
34 Hintere Bleiche
55116 Mainz

Phone: +49 (0) 6131 8920-0
Fax: +49 (0) 6131 8920-299
Website: https://www.datenschutz.rlp.de/
Email: poststelle@datenschutz.rlp.de


Use of Cookies

Cookies are text files that contain data from websites or domains visited and are stored by a browser on the user’s computer. A cookie is primarily used to store information about a user during or after their visit to a website. The stored information may include, for example, language settings on a website, login status, a shopping cart, or the point at which a video was viewed. We also include other technologies that perform the same functions as cookies under the term “cookies” (e.g., when user information is stored using pseudonymous online identifiers, also known as “user IDs”).

Technically necessary cookies

Unless otherwise specified in the privacy policy below, we use only these technically necessary cookies for the purpose of making our website more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you navigate to another page and to provide you with services. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after you navigate to another page.

The use of cookies or similar technologies is based on Section 25(2) of the TDDDG. The processing of your personal data is based on Article 6(1)(f) of the GDPR, in accordance with our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.

The following types and functions of cookies are distinguished:

  • Temporary cookies (also known as session cookies): Temporary cookies are deleted at the latest when a user leaves a website and closes their browser.
  • Persistent cookies: Persistent cookies remain stored even after the browser is closed. For example, they can be used to save a user’s login status or display preferred content immediately when the user revisits a website. Similarly, users’ interests—which are used for audience measurement or marketing purposes—can be stored in such a cookie.
  • First-party cookies: First-party cookies are set by us.
  • Third-party cookies: Third-party cookies are primarily used by advertisers (so-called third parties) to process user information.
  • Necessary (also: essential or strictly necessary) cookies: Cookies may be strictly necessary for the operation of a website (e.g., to store logins or other user input, or for security reasons).
  • Statistics, marketing, and personalization cookies: Cookies are also typically used for audience measurement and when a user’s interests or behavior (e.g., viewing certain content, using features, etc.) on individual websites are stored in a user profile. Such profiles are used, for example, to display content to users that corresponds to their potential interests. This process is also referred to as “tracking,” i.e., tracking users’ potential interests. To the extent that we use cookies or “tracking” technologies, we will inform you separately in our Privacy Policy or when obtaining your consent.

Information on Legal Bases:The legal basis onwhich we process your personal data using cookies depends on whether we ask for your consent. If this is the case and you consent to the use of cookies, the legal basis for processing your data is your explicit consent. Otherwise, the data processed using cookies is processed on the basis of our legitimate interests (e.g., in the business operation of our online offering and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations.

Storage period: Unlesswe provide you with specific information regarding the storage period of persistent cookies (e.g., as part of a so-called cookie opt-in), please assume that the storage period may be up to two years.

General Information on Withdrawal of Consent and Opting Out: Dependingon whether the processing is based on consent or legal authorization, you have the option at any time to withdraw any consent you have given or to object to the processing of your data through cookie technologies (collectively referred to as “opting out”). You can initially express your objection through your browser settings, e.g., by disabling the use of cookies (although this may also limit the functionality of our online offering). An objection to the use of cookies for online marketing purposes can also be made through a variety of services, particularly in the case of tracking, via the websites https://optout.aboutads.info andhttps://www.youronlinechoices.com/. In addition, you can find further information on how to object in the details provided regarding the service providers and cookies used.

Processing of cookie data based on consent: Before we process or have processed data in connection with the use of cookies, we ask users for their consent, which may be revoked at any time. Until consent is given, we will only use cookies that are strictly necessary for the operation of our website.

  • Types of data processed: Usage data (e.g., websites visited, content interests, access times), meta/communication data (e.g., device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Legal basis: Consent (Art. 6(1)(a) GDPR), Legitimate interests (Art. 6(1)(f) GDPR).

Cookie settings/opt-out option:

The links below provide information on how to manage (including disabling) cookies in the most popular browsers:

Chrome: https://support.google.com/accounts/answer/61416?hl=de

Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09

Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen

Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac


Using the CookieBar plugin

We use the CookieBar plugin from Frontend Studios GmbH (Treppenstraße 12-14, 34117 Kassel; “CookieBar”) on our website.

This tool allows you to grant consent for data processing via the website—in particular, the use of cookies—and to exercise your right to withdraw consent that has already been granted. The purpose of this data processing is to obtain and document the necessary consents for data processing and thereby comply with legal obligations.

Cookies may be used for this purpose. The following information, among other things, may be collected and transmitted to the provider: the date and time the page was accessed, information about the browser and device you are using, an anonymized IP address, and opt-in and opt-out data. This data will not be shared with any other third parties.

Data processing is carried out to fulfill a legal obligation pursuant to Article 6(1)(c) of the GDPR.

For more information about the CookieBar plugin, visit: https://marketplace.plentymarkets.com/plugins/storefront/widgets/cookiebar_4809.


Performance of duties in accordance with the bylaws or rules of procedure

We process the data of our members, supporters, prospective members, business partners, or other individuals (collectively, “data subjects”) when we have a membership or other business relationship with them, when we are performing our duties, or when they are recipients of services or benefits. In addition, we process the data of data subjects based on our legitimate interests, e.g., in connection with administrative tasks or public relations activities.

The data processed in this context, as well as the nature, scope, purpose, and necessity of such processing, are determined by the underlying membership or contractual relationship, which also dictates the necessity of providing any required data (we will otherwise indicate which data is required).

We delete data that is no longer necessary for the fulfillment of our statutory and business purposes. This is determined based on the respective tasks and contractual relationships. We retain data for as long as it may be relevant for business transactions, as well as with regard to any warranty or liability obligations based on our legitimate interest in their resolution. The necessity of retaining the data is reviewed regularly; otherwise, the statutory retention obligations apply.

  • Types of data processed: Customer information (e.g., names, addresses), payment information (e.g., bank details, invoices, payment history), contact information (e.g., email addresses, phone numbers), contract information (e.g., subject matter of the contract, term, customer category).
  • Data subjects: Users (e.g., website visitors, users of online services), members, business partners, and contractual partners.
  • Purposes of processing: Contractual services, contact requests and communication, and managing and responding to inquiries.
  • Legal basis: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) of the GDPR), legitimate interests (Art. 6(1)(f) of the GDPR).


Commercial and business services

We process data from our contractual and business partners, such as customers and prospective customers (collectively referred to as “contractual partners”), in connection with contractual and similar legal relationships, as well as related activities and communications with contractual partners (or in the pre-contractual phase), for example, to respond to inquiries.

We process this data to fulfill our contractual obligations, to safeguard our rights, and for the purposes of administrative tasks associated with this information as well as for business organization. We disclose the data of our contractual partners to third parties within the scope of applicable law only to the extent that this is necessary for the aforementioned purposes or to fulfill legal obligations, or with the consent of the data subjects (e.g., to involved telecommunications, transportation, and other support services, as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). Contracting parties are informed about other forms of processing, e.g., for marketing purposes, within the scope of this Privacy Policy.

We inform our contractual partners of the data required for the aforementioned purposes either before or during the data collection process, for example in online forms, through special markings (e.g., colors) or symbols (e.g., asterisks or similar), or in person.

We delete the data once statutory warranty obligations and similar obligations have expired, i.e., generally after 4 years, unless the data is stored in a customer account, e.g., as long as it must be retained for legal archiving purposes (e.g., for tax purposes, typically 10 years). We delete data disclosed to us by the contractual partner in connection with an order in accordance with the terms of the order, generally upon completion of the order.

To the extent that we use third-party providers or platforms to provide our services, the terms and conditions and privacy policies of the respective third-party providers or platforms apply to the relationship between users and those providers.

  • Types of data processed: Customer information (e.g., names, addresses), payment information (e.g., bank details, invoices, payment history), contact information (e.g., email addresses, phone numbers), contract information (e.g., subject matter of the contract, term, customer category).
  • Data subjects: Prospective customers , business partners, and contractual partners.
  • Purposes of processing: Contractual services, contact requests and communication, office and organizational procedures, administration, and responding to inquiries.
  • Legal basis: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) of the GDPR), Legal obligation (Art. 6(1)(c) of the GDPR), Legitimate interests (Art. 6(1)(f) of the GDPR).


Use of Online Marketplaces for E-Commerce

We offer our services on online platforms operated by other service providers. In this context, the privacy policies of the respective platforms apply in addition to our privacy policy. This applies in particular to the methods used on these platforms for measuring reach and for interest-based marketing.

  • Types of data processed: Master data (e.g., names, addresses), payment data (e.g., bank details, invoices, payment history), contact data (e.g., email, phone numbers), contract data (e.g., subject matter of the contract, term, customer category), usage data (e.g., websites visited, interest in content, access times), Meta/communication data (e.g., device information, IP addresses).
  • Affected individuals:
  • Purposes of processing: Contractual obligations and services.
  • Legal basis: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) of the GDPR), legitimate interests (Art. 6(1)(f) of the GDPR).


payment service provider

In the context of contractual and other legal relationships, in accordance with legal obligations, or otherwise based on our legitimate interests, we offer data subjects efficient and secure payment options and, for this purpose, engage not only banks and credit institutions but also other payment service providers (collectively, “payment service providers”).

The data processed by payment service providers includes personal information, such as name and address; banking information, such as account numbers or credit card numbers; passwords, TANs, and verification codes; as well as details related to the contract, transaction amounts, and recipients. This information is required to process the transactions. However, the data entered is processed and stored solely by the payment service providers. This means that we do not receive any account or credit card-related information, but only information confirming or rejecting the payment. Under certain circumstances, the payment service providers may transmit the data to credit bureaus. The purpose of this transmission is to verify identity and creditworthiness. For more information, please refer to the Terms and Conditions and Privacy Policy of the payment service providers.

Payment transactions are subject to the terms and conditions and privacy policies of the respective payment service providers, which are available on their respective websites or within the transaction applications. We also refer you to these documents for further information and to exercise your rights of withdrawal, access, and other data subject rights.

  • Types of data processed: Customer information (e.g., names, addresses), payment information (e.g., bank details, invoices, payment history), contract information (e.g., subject matter of the contract, term, customer category), usage data (e.g., websites visited, content interests, access times), Meta/communication data (e.g., device information, IP addresses).
  • Data subjects: Customers , prospective customers.


Provision of the online service and web hosting

In order to provide our online services securely and efficiently, we use the services of one or more web hosting providers whose servers (or servers managed by them) make our online services accessible. For these purposes, we may utilize infrastructure and platform services, computing capacity, storage space, and database services, as well as security and technical maintenance services.

The data processed in connection with the provision of our hosting services may include any information relating to users of our online services that is generated during their use of and interaction with the services. This typically includes the IP address, which is necessary to deliver the content of our online services to browsers, as well as any data entered within our online services or on our websites.

Email Sending and Hosting: The web hosting services we use also include the sending, receiving, and storage of emails. For these purposes, we process the addresses of the recipients and senders, as well as other information related to email transmission (e.g., the involved providers) and the content of the respective emails. The aforementioned data may also be processed for the purpose of detecting SPAM. Please note that emails are generally not sent in encrypted form over the Internet. As a rule, emails are encrypted during transmission, but (unless a so-called end-to-end encryption method is used) not on the servers from which they are sent and received. We therefore cannot assume any responsibility for the transmission of emails between the sender and the recipient on our server.

Collection of access data and log files: We (or our web hosting provider) collect data regarding every access to the server (so-called server log files). Server log files may include the address and name of the accessed web pages and files, the date and time of access, the amount of data transferred, a notification of successful access, browser type and version, the user’s operating system, referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider.

Server log files can be used, on the one hand, for security purposes—for example, to prevent server overload (particularly in the case of malicious attacks, known as DDoS attacks)—and, on the other hand, to ensure server performance and stability.

  • Types of data processed: Content data (e.g., text entries, photographs, videos), usage data (e.g., websites visited, content interests, access times), meta/communication data (e.g., device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Legal basis: Legitimate interests (Art. 6(1)(f) of the GDPR).


Registration, Sign-In, and User Account

Users can create a user account. During registration, users are informed of the required mandatory information, which is processed for the purpose of providing the user account based on the fulfillment of contractual obligations. The processed data includes, in particular, login information (name, password, and an email address). The data entered during registration is used for the purposes of using the user account and its intended purpose.

Users may be notified via email about matters relevant to their user account, such as technical changes. If users have terminated their user account, their data related to the user account will be deleted, subject to any legal retention requirements. It is the users’ responsibility to back up their data prior to the end of the contract period following termination. We are entitled to irrevocably delete all user data stored during the term of the contract.

When you use our registration and login functions, as well as your user account, we store your IP address and the time of each user action. This data is stored based on our legitimate interests, as well as those of our users, in protecting against misuse and other unauthorized use. This data is generally not disclosed to third parties, unless it is necessary to pursue our claims or there is a legal obligation to do so.

  • Types of data processed: Personal information (e.g., names, addresses), contact information (e.g., email addresses, phone numbers), content data (e.g., text entries, photographs, videos), and metadata/communication data (e.g., device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Contractual services, security measures, administration, and responding to inquiries.
  • Legal basis: Consent (Art. 6(1)(a) GDPR), performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR).


Blogs and Publications

We use blogs or similar online communication and publication platforms (hereinafter “publication platform”). Reader data is processed for the purposes of the publication platform only to the extent necessary for its operation and for communication between authors and readers, or for security reasons. For further details, please refer to the information regarding the processing of visitors to our publication platform provided in this privacy policy.

Comments and Posts: When users leave comments or other posts, their IP addresses may be stored based on our legitimate interests. This is done for our protection in case someone posts illegal content in comments or posts (insults, prohibited political propaganda, etc.). In such cases, we could be held liable for the comment or post and are therefore interested in the author’s identity.

Furthermore, we reserve the right to process user data for the purpose of spam detection based on our legitimate interests.

On the same legal basis, we reserve the right to store users’ IP addresses for the duration of surveys and to use cookies to prevent multiple votes.

We will permanently store the personal information provided in comments and posts, including any contact and website information, as well as the content of the posts, until the user objects.

Loading WordPress Emojis and Smilies: Within our WordPress blog, graphical emojis (or smilies)—that is, small graphic files that express emotions—are used to efficiently integrate content elements; these are retrieved from external servers. The server providers collect users’ IP addresses. This is necessary so that the emoji files can be transmitted to users’ browsers.

  • Types of data processed: Master data (e.g., names, addresses), contact data (e.g., email addresses, phone numbers), content data (e.g., text entries, photographs, videos), usage data (e.g., websites visited, content interests, access times), meta/communication data (e.g., device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Contractual services, feedback (e.g., collecting feedback via an online form).
  • Legal basis: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) of the GDPR), legitimate interests (Art. 6(1)(f) of the GDPR).

Services used and service providers:


Contact Us

When you contact us (e.g., via the contact form, email, phone, or social media), we process the information provided by the person making the inquiry to the extent necessary to respond to the inquiry and take any requested actions.

We respond to contact requests made in the context of contractual or pre-contractual relationships to fulfill our contractual obligations or to respond to (pre-)contractual inquiries, and otherwise based on our legitimate interest in responding to such inquiries.

  • Types of data processed: Master data (e.g., names, addresses), contact data (e.g., email addresses, phone numbers), content data (e.g., text entries, photographs, videos), usage data (e.g., websites visited, content interests, access times), meta/communication data (e.g., device information, IP addresses).
  • Affected individuals:
  • Purposes of processing: Contact requests and communication.
  • Legal basis: Performance of a contract and pre-contractual inquiries (Art. 6(1)(b) of the GDPR), legitimate interests (Art. 6(1)(f) of the GDPR).


Web Analytics, Monitoring, and Optimization

Web analytics (also referred to as “reach measurement”) is used to analyze visitor traffic to our online platform and may include pseudonymized data on visitor behavior, interests, or demographic information, such as age or gender. With the help of reach analysis, we can, for example, determine at what times our online offering or its functions and content are used most frequently or encourage repeat visits. We can also identify which areas require optimization.

In addition to web analytics, we can also use testing methods to, for example, test and optimize different versions of our website or its components.

For these purposes, so-called user profiles may be created and stored in a file (known as a “cookie”), or similar methods with the same purpose may be used. This information may include, for example, content viewed, websites visited, and elements used on those sites, as well as technical details such as the browser and computer system used, and information regarding usage times. If users have consented to the collection of their location data, this data may also be processed, depending on the provider.

We also store users’ IP addresses. However, we use an IP masking process (i.e., pseudonymization by truncating the IP address) to protect users. In general, no personally identifiable user data (such as email addresses or names) is stored in the context of web analytics, A/B testing, and optimization; instead, pseudonyms are used. This means that neither we nor the providers of the software used know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective processes.

Information on Legal Bases:When we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.

  • Types of data processed: Usage data (e.g., websites visited, content interests, access times), meta/communication data (e.g., device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Audience measurement (e.g., traffic statistics, identification of returning visitors), tracking (e.g., interest-based or behavioral profiling, use of cookies), analysis of visitor activity, profiling (creation of user profiles).
  • Security measures: IP masking (pseudonymization of the IP address).
  • Legal basis: Consent (Art. 6(1)(a) GDPR), Legitimate interests (Art. 6(1)(f) GDPR).

Services used and service providers:


Online marketing

We process personal data for online marketing purposes, which may include, in particular, the marketing of advertising space or the display of advertising and other content (collectively referred to as “content”) based on users’ potential interests, as well as the measurement of its effectiveness.

For these purposes, so-called user profiles are created and stored in a file (known as a “cookie”) or similar methods are used to store user information relevant to the display of the aforementioned content. This information may include, for example, content viewed, websites visited, online networks used, as well as communication partners and technical details such as the browser used, the computer system used, and information regarding usage times. If users have consented to the collection of their location data, this data may also be processed.

Users’ IP addresses are also stored. However, we use available IP masking methods (i.e., pseudonymization by truncating the IP address) to protect users. In general, no clear user data (such as email addresses or names) is stored as part of online marketing procedures; instead, pseudonyms are used. This means that neither we nor the providers of online marketing services know the actual identity of users, but only the information stored in their profiles.

The information in the profiles is typically stored in cookies or using similar methods. These cookies can generally be read later on other websites that use the same online marketing method, analyzed for the purpose of displaying content, supplemented with additional data, and stored on the server of the online marketing provider.

In exceptional cases, personal data may be linked to user profiles. This occurs, for example, when users are members of a social network whose online marketing methods we utilize, and the network links users’ profiles to the aforementioned information. Please note that users may enter into additional agreements with these providers, such as by providing consent during the registration process.

We generally only have access to aggregated data regarding the performance of our advertisements. However, through conversion tracking, we can determine which of our online marketing activities have led to a conversion—that is, for example, the conclusion of a contract with us. Conversion tracking is used solely to analyze the effectiveness of our marketing efforts.

Unless otherwise specified, please assume that the cookies used will be stored for a period of two years.

Information on Legal Bases:When we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.

  • Types of data processed: Usage data (e.g., websites visited, content interests, access times), meta/communication data (e.g., device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Tracking (e.g., interest-based/behavioral profiling, use of cookies), remarketing, analysis of visitor engagement, interest-based and behavioral marketing, profiling (creation of user profiles), audience measurement (e.g., traffic statistics, identification of returning visitors).
  • Security measures: IP masking (pseudonymization of the IP address).
  • Legal basis: Consent (Art. 6(1)(a) GDPR), Legitimate interests (Art. 6(1)(f) GDPR).
  • Opt-out option: We refer you to the privacy policies of the respective providers and the opt-out options provided by them. If no explicit opt-out option is provided, you can disable cookies in your browser settings. However, this may limit certain features of our website. We therefore also recommend the following opt-out options, which are offered in summary form for the respective regions: a) Europe:https://www.youronlinechoices.eu. b) Canada: https://www.youradchoices.ca/choices. c) USA: https://www.aboutads.info/choices. d) Global:https://optout.aboutads.info.

Services used and service providers:

  • Google Ads and Conversion Tracking: We use the online marketing service “Google Ads” to place ads on the Google Display Network (e.g., in search results, in videos, on websites, etc.) so that they are shown to users who are likely to be interested in the ads. We also track the conversion of these ads. However, we only receive the anonymous total number of users who clicked on our ad and were redirected to a page tagged with a so-called “conversion tracking tag.” We ourselves, however, do not receive any information that can be used to identify users. Service provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland; parent company: Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; website:https://marketingplatform.google.com; privacy policy: https://policies.google.com/privacy.


Social media presence

We maintain online presences on social media platforms and, in this context, process user data in order to communicate with users active on those platforms or to provide information about us.

Please note that this may involve the processing of user data outside the European Union. This may pose risks to users, as it could, for example, make it more difficult to enforce their rights.

Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, usage profiles can be created based on users’ behavior and the resulting interests. These usage profiles can in turn be used, for example, to display advertisements within and outside the networks that are presumed to match users’ interests. For these purposes, cookies are typically stored on users’ computers, in which users’ usage behavior and interests are recorded. Furthermore, data may also be stored in the usage profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them).

For a detailed description of the specific processing methods and opt-out options, please refer to the privacy policies and information provided by the operators of the respective networks.

We would also like to point out that requests for information and the exercise of data subject rights are most effectively handled directly with the service providers. Only the service providers have access to users’ data and can take appropriate action and provide information directly. However, if you still need assistance, please feel free to contact us.

Facebook: We are jointly responsible with Facebook Ireland Ltd. for the collection (but not the further processing) of data from visitors to our Facebook page (known as a “fan page”). This data includes information about the types of content users view or interact with, or the actions they take (see “Things you and others do and provide” in the Facebook Data Policy: https://www.facebook.com/policy), as well as information about the devices used by users (e.g., IP addresses, operating system, browser type, language settings, cookie data; see “Device Information” in the Facebook Data Policy: https://www.facebook.com/policy). As explained in the Facebook Data Policy under “How do we use this information?”, Facebook also collects and uses information to provide analytics services, known as “Page Insights,” to page administrators so they can gain insights into how people interact with their pages and the content associated with them. We have entered into a special agreement with Facebook (“Information on Page Insights,”https://www.facebook.com/legal/terms/page_controller_addendum), which specifically outlines the security measures Facebook must adhere to and in which Facebook has agreed to fulfill data subject rights (i.e., users can, for example, submit requests for information or deletion directly to Facebook). Users’ rights (in particular the rights to access, erasure, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the “Page Insights Information” (https://www.facebook.com/legal/terms/information_about_page_insights_data).

  • Types of data processed: Master data (e.g., names, addresses), contact data (e.g., email addresses, phone numbers), content data (e.g., text entries, photographs, videos), usage data (e.g., websites visited, content interests, access times), meta/communication data (e.g., device information, IP addresses).
  • Data subjects: Users (e.g., website visitors, users of online services).
  • Purposes of processing: Contact requests and communication, tracking (e.g., interest-based/behavioral profiling, use of cookies), remarketing, audience measurement (e.g., traffic statistics, identification of returning visitors).
  • Legal basis: Legitimate interests (Art. 6(1)(f) of the GDPR).

Services used and service providers:


Plugins, embedded functions, and content

We incorporate functional and content elements into our online offerings that are sourced from the servers of their respective providers (hereinafter referred to as “third-party providers”). These may include, for example, graphics, videos, social media buttons, and posts (hereinafter collectively referred to as “content”).

The integration always requires that the third-party providers of this content process the user’s IP address, as they would not be able to send the content to the user’s browser without it. The IP address is therefore necessary for the display of this content or these functions. We strive to use only content whose respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. Pixel tags allow information, such as visitor traffic on the pages of this website, to be analyzed. The pseudonymous information may also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, time of visit, and other details regarding the use of our online offering, as well as being linked to such information from other sources.

Information on Legal Bases:When we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.

Facebook Plugins and Content: We are jointly responsible with Facebook Ireland Ltd. for the collection or receipt (but not the further processing) of “Event Data” that Facebook collects or receives via Facebook Social Plugins (and content embedding features) running on our website for the following purposes: a) Displaying content and advertising information that corresponds to users’ presumed interests; b) Delivering commercial and transaction-related messages (e.g., contacting users via Facebook Messenger); c) Improving ad delivery and personalizing features and content (e.g., improving the identification of which content or advertising information is presumed to correspond to users’ interests). We have entered into a special agreement with Facebook (“Addendum for Controllers,” https://www.facebook.com/legal/controller_addendum), which specifically outlines the security measures Facebook must observe (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to fulfill data subject rights (i.e., users can, for example, submit requests for information or deletion directly to Facebook). Note: When Facebook provides us with metrics, analyses, and reports (which are aggregated, i.e., do not contain information about individual users and are anonymous to us), this processing does not take place under joint controllership but rather on the basis of a data processing agreement (“Data Processing Terms,” https://www.facebook.com/legal/terms/dataprocessing) and the “Data Security Terms” (https://www.facebook.com/legal/terms/data_security_terms), and, with regard to processing in the U.S., on the basis of standard contractual clauses (“Facebook-EU Data Transfer Addendum,”https://www.facebook.com/legal/EU_data_transfer_addendum). Users’ rights (in particular the rights to access, erasure, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook.

Instagram Plugins and Content: We are jointly responsible with Facebook Ireland Ltd. for the collection or receipt (but not the further processing) of “Event Data” that Facebook collects or receives via Instagram features (e.g., content embedding features) implemented on our website for the following purposes: a) Displaying content and advertising information that corresponds to users’ presumed interests; b) Delivering commercial and transaction-related messages (e.g., contacting users via Facebook Messenger); c) Improving ad delivery and personalizing features and content (e.g., improving the identification of which content or advertising information presumably corresponds to users’ interests). We have entered into a special agreement with Facebook (“Addendum for Controllers,” https://www.facebook.com/legal/controller_addendum), which specifically outlines the security measures Facebook must observe (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to fulfill data subject rights (i.e., users can, for example, submit requests for information or deletion directly to Facebook). Note: When Facebook provides us with metrics, analyses, and reports (which are aggregated, i.e., do not contain information about individual users and are anonymous to us), this processing does not take place under joint controllership but rather on the basis of a data processing agreement (“Data Processing Terms,” https://www.facebook.com/legal/terms/dataprocessing) and the “Data Security Terms” (https://www.facebook.com/legal/terms/data_security_terms), and, with regard to processing in the U.S., on the basis of standard contractual clauses (“Facebook-EU Data Transfer Addendum,”https://www.facebook.com/legal/EU_data_transfer_addendum). Users’ rights (in particular the rights to access, erasure, objection, and complaint to the competent supervisory authority) are not restricted by the agreements with Facebook.

  • Types of data processed: Usage data (e.g., websites visited, interest in content, access times), meta/communication data (e.g., device information, IP addresses), event data (Facebook) (“Event data” refers to data that may be transmitted by us to Facebook, e.g., via Facebook Pixel (through apps or other means), and relates to individuals or their actions; The data includes, for example, information about visits to websites, interactions with content, features, app installations, product purchases, etc.; the event data is processed for the purpose of creating target groups for content and advertising information (Custom Audiences); event data does not include login data or interaction data, e.g., comments under an embedded post; Contact information (i.e., data that (clearly) identifies data subjects, such as names, email addresses, and phone numbers) is also not included in event data; location data (data indicating the location of an end user’s device), contact data (e.g., email, phone numbers), content data (e.g., text entries, photographs, videos), inventory data (e.g., names, addresses).
  • Data subjects: Users (e.g., website visitors, users of online services), communication partners.
  • Purposes of processing: Provision of our online services and user-friendliness, contractual services, contact requests and communication, direct marketing (e.g., via email or mail), tracking (e.g., interest-based/behavioral profiling, use of cookies), interest-based and behavioral marketing, profiling (creation of user profiles), security measures, administration, and responding to inquiries.
  • Legal basis: Legitimate interests (Art. 6(1)(f) GDPR), consent (Art. 6(1)(a) GDPR), performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR).

Services used and service providers:


Planning, Organization, and Tools

We use services, platforms, and software from other providers (hereinafter referred to as “third-party providers”) for the purposes of organizing, managing, planning, and delivering our services. When selecting third-party providers and their services, we comply with all applicable legal requirements.

In this context, personal data may be processed and stored on third-party servers. This may involve various types of data that we process in accordance with this Privacy Policy. Such data may include, in particular, users’ master data and contact information, as well as data relating to transactions, contracts, other processes, and their contents.

If, in the course of communication, business, or other relationships with us, users are directed to third-party providers or their software or platforms, those third-party providers may process usage data and metadata for security purposes, to optimize their services, or for marketing purposes. We therefore ask that you review the privacy policies of the respective third-party providers.

Services used and service providers:

BITE Recruitment Manager:BITE GmbH, Magirus-Deutz-Straße 16, 89077 Ulm, Germany

Notes on Legal Bases:If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Furthermore, the use of third-party providers may be part of our (pre)contractual services, provided that the use of such providers has been agreed upon in this context. Otherwise, user data is processed based on our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.

  • Types of data processed: Master data (e.g., names, addresses), contact data (e.g., email addresses, phone numbers), content data (e.g., text entries, photographs, videos), usage data (e.g., websites visited, content interests, access times), meta/communication data (e.g., device information, IP addresses).
  • Data subjects: Communication partners , users (e.g., website visitors, users of online services).
  • Legal basis: Consent (Art. 6(1)(a) GDPR), performance of a contract and pre-contractual inquiries (Art. 6(1)(b) GDPR), legitimate interests (Art. 6(1)(f) GDPR).


Newsletters and electronic notifications

We send newsletters, emails, and other electronic notifications (hereinafter “newsletters”) only with the recipients’ consent or when permitted by law. If the content of a newsletter is specifically described during the sign-up process, that description is decisive for the user’s consent. In addition, our newsletters contain information about our services and our company.

To subscribe to our newsletters, all you need to do is provide your email address. However, we may ask you to provide a name so that we can address you personally in the newsletter, or to provide additional information if it is necessary for the purposes of the newsletter.

Double opt-in procedure:Subscription to our newsletter is always carried out using a so-called double opt-in procedure. This means that after subscribing, you will receive an email asking you to confirm your subscription. This confirmation is necessary to ensure that no one can subscribe using someone else’s email address. Newsletter subscriptions are logged to provide proof of the subscription process in accordance with legal requirements. This includes storing the time of subscription and confirmation, as well as the IP address. Changes to your data stored with the mailing service provider are also logged.

Deletion and Restriction of Processing: Wemay store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them, in order to be able to demonstrate that consent was previously given. The processing of this data is limited to the purpose of potentially defending against claims. An individual request for erasure is possible at any time, provided that the prior existence of consent is confirmed at the same time. In the event of obligations to permanently honor objections, we reserve the right to store the email address solely for this purpose in a blocklist.

We log the registration process based on our legitimate interests for the purpose of verifying that it was carried out properly. If we engage a service provider to send emails, we do so based on our legitimate interests in maintaining an efficient and secure email delivery system.

Information on Legal Bases:Newsletters are sent based on the recipients’ consent or, if consent is not required, based on our legitimate interests in direct marketing, provided that such marketing is permitted by law, e.g., in the case of marketing to existing customers. If we engage a service provider to send emails, this is done based on our legitimate interests. The registration process is recorded on the basis of our legitimate interests to demonstrate that it was carried out in accordance with the law.

Contents: Information about us, our blog posts, and press releases.

  • Types of data processed:Personal information (e.g., names, addresses), contact information (e.g., email addresses, phone numbers), metadata/communication data (e.g., device information, IP addresses), usage data (e.g., websites visited, content interests, access times).
  • Affected individuals:Communication partners.
  • Purposes of processing:Direct marketing (e.g., via email or mail).
  • Legal basis:Consent (Art. 6(1)(a) of the GDPR), legitimate interests (Art. 6(1)(f) of the GDPR).
  • Opt-out option:You can unsubscribe from our newsletter at any time, i.e., withdraw your consent or opt out of receiving further issues. You will find a link to unsubscribe from the newsletter at the bottom of each issue, or you can use any of the contact options listed above—preferably email—to do so.

Services used and service providers:


Server log files

You can visit our website without providing any personal information.

Every time you access our website, your internet browser transmits usage data to us or our web host/IT service provider, which is then stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services. 

Customer initiates contact via email

If you contact us on your own initiative via email, we will collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to handle and respond to your inquiry.
If the contact serves the purpose of taking pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If the contact is made for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons arising from your particular situation.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.


Collection and Processing of Data When Using the Contact Form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The data is processed for the purpose of contacting you.

If the contact is made for the purpose of carrying out pre-contractual measures (e.g., providing advice regarding a purchase inquiry, preparing a quote) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.

If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, which is grounded in our legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons arising from your particular situation.

We will use your email address solely to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.


WhatsApp Business

When you contact us for business purposes via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA). 
Data processing serves to handle and respond to your contact request. For this purpose, we collect and process your mobile phone number stored on WhatsApp, your name (if provided), and any other data you have provided. We use a mobile device for this service, whose address book contains only data from users who have contacted us via WhatsApp. Therefore, no personal data is transferred to WhatsApp unless you have already given your consent to WhatsApp for this purpose.
Your data is transferred by WhatsApp to servers operated by Meta Platforms Inc. in the United States. An adequacy decision by the European Commission exists for the United States, namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has obtained TADPF certification and is therefore committed to complying with European data protection principles. If the contact serves the purpose of taking pre-contractual measures (e.g., consultation regarding purchase interest, preparation of an offer) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.

If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, reflecting our legitimate interest in providing a quick and easy way to contact us and in responding to your inquiry. In this case, you have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons arising from your particular situation.
We use your personal data solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF commits to adhering to these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/7735.

For more information about the terms of use and privacy policy for WhatsApp, please visithttps://www.whatsapp.com/legal/#terms-of-serviceandhttps://www.whatsapp.com/legal/#privacy-policy.


Customer Account

When you open a customer account, we collect your personal data to the extent specified there. The purpose of this data processing is to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. Your customer account will then be deleted.


Collection, Processing, and Disclosure of Personal Data When Placing Orders

When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is necessary for the conclusion of the contract. Failure to provide this data means that a contract cannot be concluded. The processing is based on Article 6(1)(b) of the GDPR and is necessary for the performance of a contract with you.

Your data may be shared, for example, with shipping companies, dropshipping or fulfillment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly adhere to legal requirements. The scope of data transfer is kept to a minimum.


Advertisement 

Use of the email address for sending newsletters

We use your email address solely for our own promotional purposes to send newsletters, regardless of the fulfillment of the contract, provided that you have expressly consented to this. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of processing carried out on the basis of your consent prior to withdrawal. To do so, you may unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.

Use of the email address for sending direct marketing

We use the email address we received in connection with the sale of a product or service to send you electronic advertisements for our own products or services that are similar to those you have already purchased from us, provided you have not objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide it means that no contract can be concluded. Processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in direct marketing. You may object to this use of your email address at any time by notifying us. You can find the contact details for exercising your right to object in the legal notice. You may also use the link provided for this purpose in the promotional email. No costs other than the transmission costs according to the standard rates will be incurred for this.


Shipping Service Provider Inventory Management 

Sharing your email address with shipping companies to provide updates on the shipping status

We will share your email address with the shipping company as part of the order fulfillment process, provided you have expressly consented to this during the ordering process. This information is shared for the purpose of informing you via email about the shipping status. Processing is based on Article 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us or the shipping company, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation.

Use of an external inventory management system

We use an inventory management system to process orders under a data processing agreement. For this purpose, the personal data collected from you during the ordering process is transferred to

plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel.

The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Art. 6(1)(b) GDPR.


payment service provider

Using PayPal

We use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of this data processing is to enable us to offer you payment via this payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.

All PayPal transactions are subject to the PayPal Privacy Policy. You can find this athttps://www.paypal.com/de/webapps/mpp/ua/privacy-full


Using PayPal Plus

We use the PayPal Plus payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of this data processing is to enable us to offer you payment via this service. When you select and use payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.

For certain payment methods, such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain a credit check based on mathematical and statistical methods using credit reporting agencies, if necessary. To this end, PayPal transmits the personal data required for a credit check to a credit reporting agency and uses the information received regarding the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognized mathematical and statistical methods, which incorporate, among other things, address data. Your legitimate interests are taken into account in accordance with legal provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is carried out on the basis of Art. 6(1)(f) GDPR based on our overriding legitimate interest in protection against payment default when PayPal makes an advance payment.

You have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons arising from your particular situation by notifying PayPal. The provision of the data is necessary for the conclusion of the contract using your preferred payment method. Failure to provide the data will result in the contract not being able to be concluded using the payment method you have selected.

Using PayPal Express

We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg; "PayPal") on our website. The purpose of this data processing is to enable us to offer you the option of paying via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, location of your device) when you visit the website. Cookies may also be used for this purpose. The cookies enable the recognition of your browser.
The processing of your personal data is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR. For more information on data processing when using the PayPal Express payment service, please refer to the corresponding privacy policy atwww.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.

Using PayPal Checkout

We use the PayPal Checkout payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; "PayPal") on our website. The purpose of this data processing is to enable us to offer you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.

In this context, cookies may be stored that enable the recognition of your browser. The resulting data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in offering a customer-oriented range of payment methods. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.

Credit Card via PayPal, Direct Debit via PayPal & “Pay Later” via PayPal 
For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit check based on mathematical-statistical methods using credit bureaus, if necessary. To this end, PayPal transmits the personal data required for a credit check to a credit bureau and uses the information received regarding the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognized mathematical and statistical methods, which incorporate, among other things, address data. Your legitimate interests are taken into account in accordance with legal provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in protecting against payment default when PayPal makes an advance payment. 
You have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons arising from your particular situation by notifying PayPal. The provision of the data is necessary for the conclusion of the contract using your preferred payment method. Failure to provide the data will result in the contract not being able to be concluded using your chosen payment method.

Third-Party Providers
When paying via a third-party payment method, the data required for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) of the GDPR. To execute this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Article 6(1)(b) of the GDPR. Local third-party providers may include, for example:

  • Apple Pay (Apple Distribution International Ltd., Hollyhill Industrial Estate, Hollyhill, Cork, Ireland)
  • Google Pay (Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland)

Purchase on Account via PayPal 
When paying via the "Purchase on Account" payment method, the data required for payment processing is first transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; "Ratepay") in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR. Ratepay may conduct a credit check using mathematical-statistical methods (probability or score values) through credit bureaus, following the procedure described above. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in protecting against payment default when Ratepay provides advance payment. Further information on data protection and which credit bureaus Ratepay uses can be found athttps://www.ratepay.com/legal-payment-dataprivacy/and https://www.ratepay.com/legal-payment-creditagencies/

For more information on data processing when using PayPal, please refer to the corresponding privacy policy athttps://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Data Collection and Processing During Credit Checks

If we provide advance payment, e.g., for payment by invoice or direct debit, we reserve the right to obtain a credit report, if necessary, based on mathematical and statistical methods using axytos GmbH, Pittlerstraße 47, 63225 Langen, and credit agencies cooperating with it, or Novalnet AG Zahlungsinstitut (ZAG), Feringastraße 4, 85774 Unterföhring. For this purpose, we will transmit the personal data required for a credit check to these entities and use the information received regarding the statistical probability of default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (score values) calculated using scientifically recognized mathematical and statistical methods, which incorporate, among other things, address data. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing serves the purpose of a credit check for the initiation of a contract. The processing is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in protecting against payment default when we provide services in advance. You have the right to object at any time to the processing of your personal data based on Article 6(1)(f) of the GDPR for reasons arising from your particular situation by notifying us. The provision of the data is necessary for the conclusion of the contract using your preferred payment method. Failure to provide the data will result in the contract not being able to be concluded using your chosen payment method.


Advertising Tracking Analysis 

Use of Google Analytics 4

We use the web analytics service Google Analytics, provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”), on our website.

Data processing is used to analyze this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and internet usage.

The following information, among other things, may be collected: IP address, date and time of the page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website from which you accessed our website), location data, and purchase activity. Google may link your data with other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.

Google truncates the IP address beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.

Google uses technologies such as cookies, browser storage, and web beacons to analyze how you use the website. The use of cookies or similar technologies is based on your consent in accordance with Section 25(1)(1) of the German Telemedia Act (TDDDG) in conjunction with Article 6(1)(a) of the General Data Protection Regulation (GDPR).

Your personal data is processed with your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities regarding the use of Google Analytics.

We also use the Google Signals service for this purpose. Google Signals enables cross-device tracking. This means your data can be analyzed across devices if you have enabled “personalized ads” in your account settings and your devices are linked to your Google account. This makes it possible to recognize which device you use to search for products and later return to complete purchases on another device, such as a tablet.

The cross-device reports generated in this context contain only aggregated data. We therefore receive only statistics generated by Google Signals. To prevent Google Signals from collecting and storing data across devices, you can disable the “personalized ads” feature in your Google Account settings. For more information, visit https://support.google.com/ads/answer/2662922?hl=de.

For more information about data processing and privacy regarding Google Signals, please visithttps://support.google.com/analytics/answer/7532985?hl=de

We use the advanced implementation of Advanced Consent Mode. Under this mode, user data is transmitted to Google in the form of “pings” even if consent has not been granted. These pings may contain the following information, among other things: IP address to determine the country of origin (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (the website from which our website was accessed), or information about the triggering of website events such as a conversion. Based on this information, Google models user data to perform a comprehensive usage analysis despite the refusal of consent.

The information generated in this way regarding your use of this website is generally transmitted to a Google server in the United States and stored there. The transfer of data to the United States is based on the EU Commission’s Standard Contractual Clauses. For details, please visit: https://privacy.google.com/businesses/controllerterms/mccs/.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF commits to adhering to these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/5780.

For more information on our Terms of Use and Privacy Policy, please visit https://policies.google.com/technologies/partner-sites and athttps://policies.google.com/privacy?hl=de&gl=de.


Using the Meta Pixel

We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”) on our website. Meta and we are joint controllers for the collection of your data that occurs when the service is integrated and for the transfer of this data to Meta. This is based on an agreement between us and Meta regarding the joint processing of personal data, which sets out our respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools . According to this agreement, we are specifically responsible for fulfilling the information obligations under Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR regarding the correct technical implementation and configuration of the Service, and for complying with the obligations under Articles 33 and 34 of the GDPR, to the extent that a breach of personal data protection affects our obligations under the joint processing agreement. Meta is responsible for enabling data subject rights in accordance with Articles 15–20 of the GDPR, for complying with the security requirements of Article 32 of the GDPR regarding the security of the service, and for fulfilling the obligations under Articles 33 and 34 of the GDPR, insofar as a breach of personal data protection affects Meta’s obligations under the joint processing agreement. The application serves the purpose of targeting website visitors with interest-based advertising on the social networks Facebook and Instagram. To this end, Meta’s remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta’s servers when you visit the website. This transmits information to Meta’s servers regarding which of our pages you have visited. Meta associates this information with your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads. The application also serves the purpose of generating conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag, as well as what actions were taken after being redirected to that website. However, we do not receive any information that can be used to personally identify users. Your data may be transferred to the United States. An adequacy decision by the European Commission exists for the United States: the Trans-Atlantic Data Privacy Framework (TADPF). Meta has obtained TADPF certification and is therefore committed to complying with European data protection principles.

Your personal data is processed with your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.

Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. For more details, please visit: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.

You can disable the "Custom Audiences" remarketing feature here. For more information about Meta’s collection and use of data, your rights in this regard, and ways to protect your privacy, please refer to Meta’s Privacy Policy athttps://www.facebook.com/about/privacy/.


Use of Google Ads Conversion Tracking

We use the online advertising program “Google Ads” on our website, including conversion tracking (visitor action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity period, do not contain any personal data, and therefore do not serve to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Therefore, there is no possibility that cookies can be tracked across the websites of Ads customers.
The information collected using the conversion cookie is used to generate conversion statistics. This tells us the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. We use the advanced implementation of Advanced Consent Mode. In this mode, user data is transmitted to Google in the form of “pings” even if consent has not been granted. These pings may contain the following information, among other things: IP address to determine the IP country (the IP address is not logged), date and time of the page view, URL of the pages visited, user agent, referrer URL (website through which our website was accessed), or information about the triggering of website events such as a conversion. Based on this information, Google models user data to perform a comprehensive usage analysis despite the refusal of consent. 
Your data may be transferred to the servers of Google LLC in the United States. An adequacy decision by the European Commission exists for the United States, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has certified itself under the TADPF and is thus committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent pursuant to Section 25(1), sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
For more information and Google’s privacy policy, please visit: https://www.google.de/policies/privacy/


Use of Google Inc.'s remarketing or "similar audiences" feature

We use the remarketing or "Similar Audiences" feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This feature is used to analyze visitor behavior and interests. Google uses cookies to analyze website usage, which forms the basis for creating interest-based advertisements. These cookies track website visits and collect anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take into account previously viewed product and information sections.
Your data may be transferred to servers operated by Google LLC in the United States. An adequacy decision by the European Commission exists for the United States, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is thereby committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1) Sentence 1 TDDDG in conjunction with Article 6(1)(a) GDPR. The processing of your personal data is carried out with your consent based on Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
For more information on Google Remarketing and the associated privacy policy, please visit:https://www.google.com/privacy/ads/

 
Plug-ins and Other Items

Using Google Tag Manager

We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website. 
This application manages JavaScript tags and HTML tags used to implement tracking and analytics tools, among other things. Data processing serves the purpose of designing and optimizing our website to meet user needs.
Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables the triggering of additional tags that may collect and process personal data.
The use of Google Tag Manager is based on your consent pursuant to Art. 6(1)(a) GDPR and § 25(1) TDDDG, insofar as the consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. Consent may be revoked at any time.

The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when processing data in the United States. Every company certified under the DPF commits to adhering to these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/5780.

For more information on our Terms of Use and Privacy Policy, clickhere.

Use of Google Maps

We use the Google Maps embedding feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, “Google”) on our website.
This feature enables the visual display of geographic information and interactive maps. When pages containing Google Maps are accessed, Google also collects, processes, and uses data from website visitors.

The use of cookies or similar technologies is based on your consent pursuant to Section 25(1), sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.

Your data may also be transferred to the United States. The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/5780.

For more information about how Google collects and uses data, please see Google’s privacy policy at https://www.google.com/privacypolicy.html.
There, you can also change your settings in the Privacy Center so that you can manage and protect the data processed by Google.

Using YouTube

We use the YouTube video embedding feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This feature displays videos hosted on YouTube within an iFrame on the website. The “Enhanced Privacy Mode” option is enabled. As a result, YouTube does not store any information about website visitors. Information is only transmitted to YouTube and stored there once you watch a video. Your data may be transferred to the United States. An adequacy decision by the European Commission exists for the United States: the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has obtained TADPF certification and is therefore committed to complying with European data protection principles.

The use of cookies or similar technologies is based on your consent pursuant to Section 25(1), sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
For more information on the collection and use of data by YouTube and Google, your rights in this regard, and options for protecting your privacy, please refer to YouTube’s privacy policy at https://www.youtube.com/t/privacy.

How to Use Doofinder

We use the “Doofinder” search function provided by DooFinder S.L. (Madrid 28037, Rufino González 23 bis, 1º 1, Spain; “Doofinder”) on our website.
Data processing serves the purpose of making it easier to find the information contained on our website and enhancing user-friendliness.
When using the search function on our website, the following information, among other things, is processed: IP address, information about the device you are using (e.g., device type, model, and version), and an anonymized user ID.
The processing of your personal data is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in designing our website to be as user-friendly as possible. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
For more information on data protection at Doofinder, please visit https://www.doofinder.com/en/privacy-policy.

 

magnifiercrossmenucheckmark-circle