High Level of Innovation
Made in Germany
For modern living spaces
[rcb-consent type="change" tag="a" text="Change privacy settings"]
[rcb-consent type="history" tag="a" text="History of Privacy Settings"]
[rcb-consent type="revoke" tag="a" text="Revoke Consents" successmessage="You have successfully revoked your consent. The page will now reload."]
The controller within the meaning of the General Data Protection Regulation and other national data protection laws of the Member States, as well as other data protection regulations, is:
W. CLASSEN GmbH & Co. KG
Werner-von-Siemens-Strasse 18-20
D-56759 Kaisersesch
Phone: +49 2653-980-0
Email: info@classen.com
Managing Director:
Dr. Hans-Jürgen Hannig, Stefanie Quervel, Mathias Gorecki, Céline Quervel
Commercial Register:
Koblenz Local Court, HRA 4591, VAT ID: DE 123 507 806
Name and Address of the Data Protection Officer
The data protection officer for the data controller is:
Klaus Keukert
CANCOM GmbH
Florinstraße 18, 56218 Mülheim-Kärlich
Email: datenschutz@classen.com
Website: https://www.sul.de
With the following Privacy Policy, we would like to inform you about the types of personal data (hereinafter also referred to as “data”) we process, the purposes for which we process it, and the scope of such processing. This Privacy Policy applies to all processing of personal data carried out by us, both in connection with the provision of our services and, in particular, on our websites, in mobile applications, and within external online platforms, such as our social media profiles (hereinafter collectively referred to as the “Online Services”).
The terms used are not gender-specific.
Below, we outline the legal bases under the General Data Protection Regulation (GDPR) on which we process personal data. Please note that, in addition to the provisions of the GDPR, national data protection regulations in your country of residence or our country of incorporation may apply. Furthermore, should more specific legal bases apply in individual cases, we will inform you of these in the Privacy Policy.
National Data Protection Regulations in Germany: In addition to the data protection provisions of the General Data Protection Regulation, national data protection regulations apply in Germany. These include, in particular, the Act on the Protection against the Misuse of Personal Data in Data Processing (Federal Data Protection Act—BDSG). The BDSG contains, in particular, special provisions regarding the right of access, the right to erasure, the right to object, the processing of special categories of personal data, processing for other purposes, data transfers, and automated decision-making in individual cases, including profiling. Furthermore, it governs data processing for the purposes of the employment relationship (Section 26 BDSG), particularly with regard to the establishment, performance, or termination of employment relationships, as well as the consent of employees. In addition, state data protection laws of the individual federal states may apply.
In accordance with legal requirements, and taking into account the state of the art, the costs of implementation, and the nature, scope, context, and purposes of the processing, as well as the varying likelihoods and severity of threats to the rights and freedoms of natural persons, we implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk.
These measures include, in particular, ensuring the confidentiality, integrity, and availability of data by controlling physical and electronic access to the data, as well as access to, input of, and disclosure of the data, ensuring its availability, and maintaining its separation. Furthermore, we have established procedures that ensure the exercise of data subjects’ rights, the erasure of data, and responses to data breaches. Furthermore, we take the protection of personal data into account from the very beginning of the development and selection of hardware, software, and procedures, in accordance with the principle of data protection through technical design and privacy-friendly default settings.
IP Address Truncation: To the extent possible, or if storing the IP address is not necessary, we truncate your IP address or have it truncated. When an IP address is truncated—a process also known as “IP masking”—the last octet, i.e., the last two numbers of an IP address, is deleted (in this context, the IP address is a unique identifier assigned to an Internet connection by the online access provider). The purpose of truncating the IP address is to prevent or significantly impede the identification of a person based on their IP address.
SSL Encryption (https): To protect the data you submit through our online services, we use SSL encryption. You can recognize such encrypted connections by the prefix https:// in your browser’s address bar.
As part of our processing of personal data, the data may be transferred to or disclosed to other entities, companies, legally independent organizational units, or individuals. Recipients of this data may include, for example, payment institutions in connection with payment transactions, service providers contracted to perform IT tasks, or providers of services and content integrated into a website. In such cases, we comply with legal requirements and, in particular, enter into appropriate contracts or agreements with the recipients of your data to ensure the protection of your data.
Data Transfer Within the Organization: We may transfer personal data to other departments within our organization or grant them access to such data. If this transfer is for administrative purposes, it is based on our legitimate business and operational interests, or it is necessary to fulfill our contractual obligations, or it is based on the consent of the data subjects or a legal authorization.
If we process data in a third country (i.e., outside the European Union (EU) or the European Economic Area (EEA)), or if processing takes place in connection with the use of third-party services or the disclosure or transfer of data to other individuals, agencies, or companies, this is done only in accordance with legal requirements.
Subject to express consent or where transfer is required by contract or law, we process data or have it processed only in third countries with a recognized level of data protection, contractual obligations through the European Commission’s so-called Standard Data Protection Clauses, where certifications are in place, or where binding internal data protection policies are in effect (Articles 44–49 of the GDPR; European Commission information page:https://ec.europa.eu/info/law/law-topic/data-protection/international-dimension-data-protection_de).
The data we process will be deleted in accordance with legal requirements as soon as the consent authorizing its processing is revoked or other legal grounds for processing no longer apply (e.g., if the purpose for which the data was processed no longer exists or the data is no longer necessary for that purpose).
Unless the data is not deleted because it is required for other, legally permissible purposes, its processing is limited to those purposes. This means that the data is blocked and not processed for any other purposes. This applies, for example, to data that must be retained for commercial or tax law reasons, or whose storage is necessary to assert, exercise, or defend legal claims, or to protect the rights of another natural or legal person.
Additional information regarding the deletion of personal data may also be provided in the individual privacy notices included in this Privacy Policy.
We ask that you review the content of our Privacy Policy regularly. We will update the Privacy Policy as soon as changes to our data processing activities make it necessary to do so. We will notify you as soon as the changes require action on your part (e.g., consent) or any other individual notification.
If we provide addresses and contact information for companies and organizations in this Privacy Policy, please note that these addresses may change over time, and we ask that you verify the information before contacting them.
As a data subject, you have various rights under the GDPR, which arise in particular from Articles 15 through 21 of the GDPR:
The State Commissioner for Data Protection and Freedom of Information in Rhineland-Palatinate:
Prof. Dr. Dieter Kugelmann
P.O. Box 30 40
55020 Mainz
or:
Hintere Bleiche 34
55116 Mainz
Phone: +49 (0) 6131 8920-0
Fax: +49 (0) 6131 8920-299
Website: https://www.datenschutz.rlp.de/
Email: poststelle@datenschutz.rlp.de
Cookies are text files that contain data from websites or domains visited and are stored by a browser on the user’s computer. A cookie is primarily used to store information about a user during or after their visit to a website. The stored information may include, for example, language settings on a website, login status, a shopping cart, or the point at which a video was viewed. We also include in the term “cookies” other technologies that perform the same functions as cookies (e.g., when user information is stored using pseudonymous online identifiers, also known as “user IDs”).
Unless otherwise specified in the Privacy Policy below, we use only these technically necessary cookies for the purpose of making our website more user-friendly, effective, and secure. Furthermore, cookies enable our systems to recognize your browser even after you navigate to another page and to provide you with services. Some features of our website cannot be provided without the use of cookies. For these features, it is necessary for the browser to be recognized even after you navigate to another page.
The use of cookies or similar technologies is based on Section 25(2) of the TDDDG. The processing of your personal data is based on Article 6(1)(f) of the GDPR, in accordance with our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
We distinguish between the following types and functions of cookies:
Information on Legal Bases:The legal basis onwhich we process your personal data using cookies depends on whether we ask for your consent. If this applies and you consent to the use of cookies, the legal basis for processing your data is your expressed consent. Otherwise, the data processed using cookies is processed on the basis of our legitimate interests (e.g., in the business operation of our online service and its improvement) or, if the use of cookies is necessary to fulfill our contractual obligations.
Retention Period: Unlesswe provide you with specific information regarding the retention period of persistent cookies (e.g., as part of a so-called cookie opt-in), please assume that the retention period may be up to two years.
General Information on Withdrawal of Consent and Objection (Opt-Out): Dependingon whether the processing is based on consent or legal authorization, you have the option at any time to withdraw any consent you have given or to object to the processing of your data through cookie technologies (collectively referred to as “opt-out”). You can initially exercise your right to object through your browser settings, for example, by disabling cookies (although this may also limit the functionality of our online services). You can also object to the use of cookies for online marketing purposes through a variety of services—particularly in the case of tracking—via the websites https://optout.aboutads.info andhttps://www.youronlinechoices.com/. In addition, you can find further information on how to object in the details provided about the service providers and cookies used.
Processing of Cookie Data Based on Consent: Before we process or have data processed in connection with the use of cookies, we ask users for their consent, which may be revoked at any time. Until consent is given, we will use only those cookies that are strictly necessary for the operation of our online service.
Cookie Settings/Opt-Out Option:
The links below provide information on how to manage (including disabling) cookies in the most popular browsers:
Chrome: https://support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: https://support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-lB6schen-63947406-40ac-c3b8-57b9-2a946a29ae09
Mozilla Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: https://support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac
We use the CookieBar plug-in from Frontend Studios GmbH (Treppenstraße 12-14, 34117 Kassel; “CookieBar”) on our website.
This tool allows you to grant consent to data processing via the website—in particular, the use of cookies—and to exercise your right to withdraw consent that has already been granted. The purpose of this data processing is to obtain and document the necessary consents for data processing and thereby comply with legal obligations.
Cookies may be used for this purpose. Among other things, the following information may be collected and transmitted to the provider: the date and time the page was accessed, information about the browser and device you are using, an anonymized IP address, and opt-in and opt-out data. This data will not be disclosed to any other third parties.
Data processing is carried out to fulfill a legal obligation pursuant to Article 6(1)(c) of the GDPR.
For more information about the CookieBar plug-in, visit: https://marketplace.plentymarkets.com/plugins/storefront/widgets/cookiebar_4809.
We process the data of our members, supporters, prospective members, business partners, or other individuals (collectively, “data subjects”) when we have a membership or other business relationship with them, when we carry out our duties, and when they are recipients of services and benefits. In addition, we process the data of data subjects based on our legitimate interests, e.g., in connection with administrative tasks or public relations activities.
The data processed in this context, as well as the nature, scope, purpose, and necessity of its processing, are determined by the underlying membership or contractual relationship, which also dictates the necessity of providing any data (we will, incidentally, indicate which data is required).
We delete data that is no longer necessary for the fulfillment of our statutory and business purposes. This is determined based on the respective tasks and contractual relationships. We retain data for as long as it may be relevant for business transactions, as well as with regard to any warranty or liability obligations, based on our legitimate interest in addressing such matters. The necessity of retaining the data is reviewed on a regular basis; otherwise, statutory retention requirements apply.
We process data from our contractual and business partners, such as customers and prospective customers (collectively referred to as “contractual partners”), in connection with contractual and similar legal relationships, as well as related measures, and in the course of communicating with contractual partners (or on a pre-contractual basis), for example, to respond to inquiries.
We process this data to fulfill our contractual obligations, to safeguard our rights, and for the purposes of administrative tasks associated with this information as well as for business organization. We disclose the data of our contractual partners to third parties in accordance with applicable law only to the extent that this is necessary for the aforementioned purposes or to fulfill legal obligations, or with the consent of the data subjects (e.g., to involved telecommunications, transportation, and other support services, as well as subcontractors, banks, tax and legal advisors, payment service providers, or tax authorities). Contracting parties will be informed about other forms of data processing, such as for marketing purposes, in this Privacy Policy.
We inform our contractual partners of which data is required for the aforementioned purposes either before or during the data collection process—for example, in online forms, through special markings (e.g., colors) or symbols (e.g., asterisks or similar), or in person.
We delete the data after the expiration of statutory warranty obligations and similar obligations, i.e., generally after 4 years, unless the data is stored in a customer account, e.g., as long as it must be retained for legal archiving purposes (e.g., for tax purposes, typically 10 years). We delete data disclosed to us by the contracting party in connection with an order in accordance with the terms of the order, generally upon completion of the order.
To the extent that we use third-party providers or platforms to provide our services, the terms and conditions and privacy policies of the respective third-party providers or platforms apply to the relationship between users and those providers.
We offer our services on online platforms operated by other service providers. In this context, the privacy policies of the respective platforms apply in addition to our privacy policy. This applies in particular with regard to the methods used on the platforms for measuring reach and for interest-based marketing.
In the context of contractual and other legal relationships, in accordance with legal obligations, or otherwise based on our legitimate interests, we offer data subjects efficient and secure payment options and, for this purpose, engage not only banks and credit institutions but also other payment service providers (collectively, “payment service providers”).
The data processed by the payment service providers includes personal information, such as name and address; banking information, such as account numbers or credit card numbers; passwords, TANs, and checksums; as well as information related to the contract, transaction amounts, and recipients. This information is required to process the transactions. However, the data entered is processed and stored solely by the payment service providers. This means that we do not receive any account- or credit card-related information, but only information confirming or rejecting the payment. Under certain circumstances, the payment service providers may transmit the data to credit bureaus. The purpose of this transmission is to verify identity and creditworthiness. For more information, please refer to the terms and conditions and privacy policies of the payment service providers.
Payment transactions are subject to the terms and conditions and privacy policies of the respective payment service providers, which are available on their respective websites or within the transaction applications. We also refer you to these documents for further information and to exercise your rights of withdrawal, access, and other data subject rights.
In order to provide our online services securely and efficiently, we use the services of one or more web hosting providers, from whose servers (or servers managed by them) the online services can be accessed. For these purposes, we may use infrastructure and platform services, computing capacity, storage space, and database services, as well as security and technical maintenance services.
The data processed in connection with the provision of our hosting services may include any information relating to users of our online services that is generated during their use of the services and in the course of communication. This typically includes the IP address, which is necessary to deliver the content of our online services to browsers, and any data entered within our online services or on websites.
Email Transmission and Hosting: The web hosting services we use also include the transmission, receipt, and storage of emails. For these purposes, we process the addresses of the recipients and senders, as well as other information related to email transmission (e.g., the providers involved) and the content of the respective emails. The aforementioned data may also be processed for the purpose of detecting spam. Please note that emails are generally not sent in encrypted form over the Internet. Although emails are typically encrypted during transmission, they are not encrypted on the servers from which they are sent and received (unless a so-called end-to-end encryption method is used). We therefore cannot assume any responsibility for the transmission of emails between the sender and our server.
Collection of Access Data and Log Files: We (or our web hosting provider) collect data on every access to the server (so-called server log files). Server log files may include the address and name of the web pages and files accessed, the date and time of access, the amount of data transferred, a notification of successful access, the browser type and version, the user’s operating system, the referrer URL (the previously visited page), and, as a rule, IP addresses and the requesting provider.
Server log files can be used, on the one hand, for security purposes—for example, to prevent server overload (particularly in the case of malicious attacks, known as DDoS attacks)—and, on the other hand, to ensure server performance and stability.
Users can create a user account. During registration, users are informed of the required mandatory information, which is processed for the purpose of providing the user account based on the fulfillment of contractual obligations. The data processed includes, in particular, login information (name, password, and an email address). The data entered during registration is used for the purposes of using the user account and for the purposes for which it was created.
Users may be notified via email of events relevant to their user account, such as technical changes. If users have canceled their user account, their data related to that account will be deleted, subject to any statutory retention requirements. It is the users’ responsibility to back up their data prior to the end of the contract term following cancellation. We are entitled to permanently delete all user data stored during the term of the contract.
When you use our registration and login functions, as well as your user account, we store your IP address and the time of each user action. This data is stored based on our legitimate interests, as well as those of our users, in protecting against misuse and other unauthorized use. We do not disclose this data to third parties under any circumstances, unless it is necessary to pursue our claims or we are legally obligated to do so.
We use blogs or similar means of online communication and publication (hereinafter “publication medium”). Readers’ data is processed for the purposes of the publication medium only to the extent necessary for its presentation and for communication between authors and readers, or for security reasons. For further information, please refer to the section on the processing of visitors to our publication medium within this Privacy Policy.
Comments and Posts: When users leave comments or other posts, their IP addresses may be stored based on our legitimate interests. This is done for our protection in case someone posts illegal content in comments or posts (insults, prohibited political propaganda, etc.). In such cases, we could be held liable for the comment or post ourselves and are therefore interested in the author’s identity.
Furthermore, we reserve the right to process user data for the purpose of spam detection based on our legitimate interests.
On the same legal basis, we reserve the right, in the case of surveys, to store users’ IP addresses for the duration of the survey and to use cookies to prevent multiple votes.
We permanently store the personal information provided in comments and posts—including any contact information, website information, and content details—until the user objects.
Loading WordPress Emojis and Smilies: Within our WordPress blog, graphical emojis (or smilies)—that is, small graphic files that express emotions—are used to efficiently integrate content elements; these are retrieved from external servers. The server providers collect users’ IP addresses. This is necessary so that the emoji files can be transmitted to users’ browsers.
Services Used and Service Providers:
When you contact us (e.g., via the contact form, email, phone, or social media), we process the information provided by the person making the inquiry to the extent necessary to respond to the inquiry and take any requested actions.
Responses to contact requests made in the context of contractual or pre-contractual relationships are provided to fulfill our contractual obligations or to respond to (pre-)contractual inquiries, and otherwise based on our legitimate interests in responding to such inquiries.
Web analytics (also referred to as “audience measurement”) is used to analyze visitor traffic to our online platform and may include pseudonymized data on visitor behavior, interests, or demographic information, such as age or gender. With the help of reach analysis, we can, for example, determine at what times our online platform, its features, or its content are used most frequently, or encourage repeat visits. We can also identify which areas require optimization.
In addition to web analytics, we can also use testing methods to, for example, test and optimize different versions of our online offering or its components.
For these purposes, so-called user profiles may be created and stored in a file (known as a “cookie”), or similar methods with the same purpose may be used. This information may include, for example, content viewed, websites visited, and elements used on those sites, as well as technical details such as the browser and computer system used, and information regarding usage times. If users have consented to the collection of their location data, this data may also be processed, depending on the provider.
Users’ IP addresses are also stored. However, we use an IP masking method (i.e., pseudonymization by truncating the IP address) to protect users. In general, no personally identifiable user data (such as email addresses or names) is stored in the context of web analytics, A/B testing, and optimization; instead, pseudonyms are used. This means that neither we nor the providers of the software we use know the actual identity of the users, but only the information stored in their profiles for the purposes of the respective processes.
Notes on Legal Bases:If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.
Services Used and Service Providers:
We process personal data for online marketing purposes, which may include, in particular, the marketing of advertising space or the display of advertising and other content (collectively referred to as “Content”) based on users’ potential interests, as well as the measurement of their effectiveness.
For these purposes, so-called user profiles are created and stored in a file (known as a “cookie”), or similar methods are used to store user information relevant to the display of the aforementioned content. This information may include, for example, content viewed, websites visited, online networks used, as well as communication partners and technical details such as the browser and computer system used, and information regarding usage times. If users have consented to the collection of their location data, this data may also be processed.
Users’ IP addresses are also stored. However, we use available IP masking methods (i.e., pseudonymization by truncating the IP address) to protect users. In general, no plaintext user data (such as email addresses or names) is stored as part of online marketing procedures; instead, pseudonyms are used. This means that neither we nor the providers of online marketing services know the actual identities of users, but only the information stored in their profiles.
The information contained in the profiles is typically stored in cookies or using similar methods. These cookies can generally be read later on other websites that use the same online marketing method; they can be analyzed for the purpose of displaying content, supplemented with additional data, and stored on the server of the online marketing provider.
In exceptional cases, personal data may be associated with user profiles. This is the case, for example, when users are members of a social network whose online marketing methods we use, and the network links users’ profiles to the aforementioned information. Please note that users may enter into additional agreements with these providers, such as by providing consent during registration.
As a general rule, we only have access to aggregated information about the performance of our advertisements. However, through what is known as conversion tracking, we can determine which of our online marketing methods have led to a so-called conversion—that is, for example, the signing of a contract with us. Conversion tracking is used solely to analyze the effectiveness of our marketing efforts.
Unless otherwise specified, please assume that the cookies used will be stored for a period of two years.
Notes on Legal Bases:If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.
Services Used and Service Providers:
We maintain online presences on social media platforms and, in this context, process user data in order to communicate with users active on those platforms or to provide information about us.
Please note that this may involve the processing of user data outside the European Union. This may pose risks to users, as it could, for example, make it more difficult to enforce their rights.
Furthermore, user data within social networks is generally processed for market research and advertising purposes. For example, usage profiles can be created based on users’ behavior and the resulting interests. These usage profiles can in turn be used, for example, to display advertisements within and outside the networks that are presumed to correspond to users’ interests. For these purposes, cookies are typically stored on users’ computers, in which users’ usage behavior and interests are recorded. Furthermore, data may also be stored in the user profiles regardless of the devices used by the users (particularly if the users are members of the respective platforms and are logged in to them).
For a detailed description of the specific processing methods and opt-out options, please refer to the privacy policies and information provided by the operators of the respective networks.
We would also like to point out that requests for information and the exercise of data subject rights are most effectively handled by the service providers themselves. Only the service providers have access to users’ data and can take appropriate action and provide information directly. If you still need assistance, however, you can contact us.
Facebook: We are jointly responsible with Facebook Ireland Ltd. for the collection (but not the further processing) of data from visitors to our Facebook page (known as a “fan page”). This data includes information about the types of content users view or interact with, or the actions they take (see “Things You and Others Do and Share” in the Facebook Data Policy: https://www.facebook.com/policy), as well as information about the devices used by users (e.g., IP addresses, operating system, browser type, language settings, cookie data; see “Device Information” in the Facebook Data Policy: https://www.facebook.com/policy). As explained in the Facebook Data Policy under “How do we use this information?”, Facebook also collects and uses information to provide analytics services—known as “Page Insights”—to page administrators, so they can gain insights into how people interact with their pages and the content associated with them. We have entered into a specific agreement with Facebook (“Information on Page Insights,”https://www.facebook.com/legal/terms/page_controller_addendum), which specifically outlines the security measures Facebook must adhere to and in which Facebook has agreed to fulfill the rights of data subjects (i.e., users can, for example, submit requests for information or deletion directly to Facebook). Users’ rights (in particular the rights to access, erasure, objection, and filing a complaint with the competent supervisory authority) are not restricted by the agreements with Facebook. Further information can be found in the “Page Insights Information” (https://www.facebook.com/legal/terms/information_about_page_insights_data).
Services Used and Service Providers:
We incorporate functional and content elements into our online offerings that are sourced from the servers of their respective providers (hereinafter referred to as “third-party providers”). These may include, for example, graphics, videos, social media buttons, and posts (hereinafter collectively referred to as “content”).
This integration always requires that the third-party providers of this content process users’ IP addresses, since they would not be able to send the content to users’ browsers without the IP address. The IP address is therefore necessary for displaying this content or these features. We make every effort to use only content whose respective providers use the IP address solely for the purpose of delivering the content. Third-party providers may also use so-called pixel tags (invisible graphics, also known as “web beacons”) for statistical or marketing purposes. These “pixel tags” allow information—such as visitor traffic on the pages of this website—to be analyzed. This pseudonymous information may also be stored in cookies on the user’s device and may include, among other things, technical information about the browser and operating system, referring websites, the time of the visit, and other details regarding the use of our online service; it may also be linked to such information from other sources.
Notes on Legal Bases:If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Otherwise, user data is processed on the basis of our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.
Facebook Plugins and Content: We are jointly responsible with Facebook Ireland Ltd. for the collection or receipt—as part of a transfer (but not the further processing)—of “Event Data” that Facebook collects or receives as part of a transfer through the Facebook social plugins (and content embedding features) running on our website, for the following purposes: a) Displaying content and advertising information that corresponds to users’ presumed interests; b) Delivering commercial and transaction-related messages (e.g., contacting users via Facebook Messenger); c) Improving ad delivery and personalizing features and content (e.g., improving the ability to identify which content or advertising information is likely to match users’ interests). We have entered into a special agreement with Facebook (“Addendum for Controllers,” https://www.facebook.com/legal/controller_addendum), which specifically outlines the security measures Facebook must adhere to (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to fulfill the rights of data subjects (i.e., users can, for example, submit requests for information or deletion directly to Facebook). Note: When Facebook provides us with metrics, analyses, and reports (which are aggregated—i.e., do not contain information about individual users and are anonymous to us), this processing does not take place under joint controllership but rather on the basis of a data processing agreement (“Data Processing Terms,” https://www.facebook.com/legal/terms/dataprocessing), the “Data Security Terms” (https://www.facebook.com/legal/terms/data_security_terms), and—with regard to processing in the U.S.—on the basis of standard contractual clauses (“Facebook-EU Data Transfer Addendum,”https://www.facebook.com/legal/EU_data_transfer_addendum). Users’ rights (in particular the rights to access, erasure, objection, and filing a complaint with the competent supervisory authority) are not restricted by the agreements with Facebook.
Instagram Plugins and Content: We are jointly responsible with Facebook Ireland Ltd. for the collection or receipt—as part of a transfer (but not the subsequent processing)—of “Event Data” that Facebook collects or receives as part of a transfer through Instagram features (e.g., content embedding features) implemented on our website, for the following purposes: a) Displaying content and advertising information that corresponds to users’ presumed interests; b) Delivering commercial and transaction-related messages (e.g., contacting users via Facebook Messenger); c) Improving ad delivery and personalizing features and content (e.g., improving the ability to identify which content or advertising information is likely to correspond to users’ interests). We have entered into a special agreement with Facebook (“Addendum for Controllers,” https://www.facebook.com/legal/controller_addendum), which specifically outlines the security measures Facebook must adhere to (https://www.facebook.com/legal/terms/data_security_terms) and in which Facebook has agreed to fulfill the rights of data subjects (i.e., users can, for example, submit requests for information or deletion directly to Facebook). Note: When Facebook provides us with metrics, analyses, and reports (which are aggregated—i.e., do not contain information about individual users and are anonymous to us), this processing does not take place under joint controllership but rather on the basis of a data processing agreement (“Data Processing Terms,” https://www.facebook.com/legal/terms/dataprocessing), the “Data Security Terms” (https://www.facebook.com/legal/terms/data_security_terms), and—with regard to processing in the U.S.—on the basis of standard contractual clauses (“Facebook-EU Data Transfer Addendum,”https://www.facebook.com/legal/EU_data_transfer_addendum). Users’ rights (in particular the rights to access, erasure, objection, and filing a complaint with the competent supervisory authority) are not restricted by the agreements with Facebook.
Services Used and Service Providers:
We use services, platforms, and software from other providers (hereinafter referred to as “third-party providers”) for the purposes of organizing, managing, planning, and providing our services. When selecting third-party providers and their services, we comply with legal requirements.
In this context, personal data may be processed and stored on third-party servers. This may involve various types of data that we process in accordance with this Privacy Policy. In particular, this data may include users’ master data and contact information, as well as data related to transactions, contracts, other processes, and their contents.
If, in the course of communication, business relationships, or other interactions with us, users are referred to third-party providers or their software or platforms, those third-party providers may process usage data and metadata for security purposes, to optimize their services, or for marketing purposes. We therefore ask that you review the privacy policies of the respective third-party providers.
Services Used and Service Providers:
BITE Recruitment Manager:BITE GmbH, Magirus-Deutz-Straße 16, 89077 Ulm, Germany
Notes on Legal Bases:If we ask users for their consent to the use of third-party providers, the legal basis for data processing is consent. Furthermore, the use of third-party providers may be part of our (pre)contractual services, provided that the use of such providers has been agreed upon in this context. Otherwise, user data is processed based on our legitimate interests (i.e., our interest in providing efficient, cost-effective, and user-friendly services). In this context, we would also like to draw your attention to the information regarding the use of cookies in this Privacy Policy.
We send newsletters, emails, and other electronic notifications (hereinafter “newsletters”) only with the recipients’ consent or when permitted by law. If the content of a newsletter is specifically described during the sign-up process, that description is decisive for the users’ consent. In addition, our newsletters contain information about our services and our company.
To subscribe to our newsletters, all you need to do is provide your email address. However, we may ask you to provide a name—so we can address you personally in the newsletter—or additional information, if it is necessary for the purposes of the newsletter.
Double-Opt-In Process:Signing up for our newsletter generally follows a so-called double-opt-in process. This means that after signing up, you will receive an email asking you to confirm your subscription. This confirmation is necessary to ensure that no one can sign up using someone else’s email address. Newsletter subscriptions are logged to provide proof of the subscription process in accordance with legal requirements. This includes storing the time of subscription and confirmation, as well as the IP address. Changes to your data stored with the email service provider are also logged.
Deletion and Restriction of Processing: Wemay store unsubscribed email addresses for up to three years based on our legitimate interests before deleting them, in order to be able to prove that consent was previously given. The processing of this data is limited to the purpose of potentially defending against claims. An individual request for erasure may be submitted at any time, provided that the prior existence of consent is confirmed at the same time. In the event of obligations to permanently honor objections, we reserve the right to store the email address solely for this purpose in a blocklist.
We log the registration process based on our legitimate interests for the purpose of verifying that it was carried out properly. To the extent that we engage a service provider to send emails, we do so based on our legitimate interests in having an efficient and secure email delivery system.
Notes on Legal Bases:Newsletters are sent based on the recipients’ consent or, if consent is not required, based on our legitimate interests in direct marketing, provided and to the extent that this is permitted by law, e.g., in the case of marketing to existing customers. To the extent that we engage a service provider to send emails, this is done based on our legitimate interests. The registration process is recorded based on our legitimate interests in order to demonstrate that it was carried out in accordance with the law.
Contents: Information about us, our blog posts, and press releases.
Services Used and Service Providers:
You can visit our website without providing any personal information.
Every time you access our website, your internet browser transmits usage data to us or our web host/IT service provider, and this data is stored in log files (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred, and the requesting provider.
This processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in ensuring the smooth operation of our website and in improving our services.
If you contact us on your own initiative via email, we will collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to handle and respond to your inquiry.
If the contact serves to carry out pre-contractual measures (e.g., consultation regarding a purchase interest, preparation of a quote) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If contact is initiated for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
When you use the contact form, we collect your personal data (name, email address, message text) only to the extent that you provide it. The purpose of this data processing is to contact you.
If the contact is made for the purpose of carrying out pre-contractual measures (e.g., providing advice regarding a potential purchase, preparing a quote) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If you contact us for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in processing and responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your email address solely to process your inquiry. Your data will then be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
If you contact us for business purposes via WhatsApp, we use the WhatsApp Business version provided by WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “WhatsApp”). If you are located outside the European Economic Area, this service is provided by WhatsApp Inc. (1601 Willow Road, Menlo Park, CA 94025, USA).
The purpose of data processing is to handle and respond to your contact request. For this purpose, we collect and process your mobile phone number stored with WhatsApp, your name (if provided), and any other data you have provided. For this service, we use a mobile device whose address book contains only data from users who have contacted us via WhatsApp. Therefore, no personal data is transferred to WhatsApp unless you have already given your consent to WhatsApp for such a transfer.
Your data is transferred by WhatsApp to servers operated by Meta Platforms Inc. in the United States. An adequacy decision by the European Commission is in place for the United States: the Trans-Atlantic Data Privacy Framework (TADPF). Meta Platforms Inc. has obtained certification under the TADPF and is therefore committed to complying with European data protection principles. If the contact serves the purpose of taking pre-contractual measures (e.g., consultation regarding purchase interest, preparation of a quote) or relates to a contract already concluded between you and us, this data processing is based on Article 6(1)(b) of the GDPR.
If you contact us for other reasons, this data processing is based on Article 6(1)(f) of the GDPR, which is grounded in our overriding legitimate interest in providing a quick and easy way to contact us and in responding to your inquiry. In this case, you have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
We use your personal data solely to process your inquiry. Your data will subsequently be deleted in accordance with statutory retention periods, unless you have consented to further processing and use.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/7735.
For more information on the terms of use and privacy policy for WhatsApp, please visithttps://www.whatsapp.com/legal/#terms-of-serviceandhttps://www.whatsapp.com/legal/#privacy-policy.
When you open a customer account, we collect your personal data to the extent specified there. The purpose of this data processing is to improve your shopping experience and simplify order processing. Processing is carried out on the basis of Article 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us, without this affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation. Your customer account will then be deleted.
When you place an order, we collect and process your personal data only to the extent necessary to fulfill and process your order and to handle your inquiries. Providing this data is necessary for the conclusion of the contract. Failure to provide this data means that a contract cannot be concluded. The processing is based on Article 6(1)(b) of the GDPR and is necessary for the performance of a contract with you.
Your data may be shared, for example, with shipping companies, dropshipping or fulfillment providers, payment service providers, order processing service providers, and IT service providers. In all cases, we strictly comply with legal requirements. The scope of data transfer is limited to the minimum necessary.
We use your email address, independently of the fulfillment of the contract, exclusively for our own promotional purposes to send newsletters, provided that you have expressly consented to this. This processing is based on Article 6(1)(a) of the GDPR with your consent. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal. To do so, you may unsubscribe from the newsletter at any time by using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list.
We use your email address—which we received in connection with the sale of a product or service—to send you electronic advertisements for our own products or services that are similar to those you have already purchased from us, provided you have not objected to this use. Providing your email address is necessary for the conclusion of the contract. Failure to provide your email address will result in the inability to conclude a contract. Processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in direct marketing. You may object to this use of your email address at any time by notifying us. You can find the contact information for exercising your right to object in the legal notice. You may also use the link provided for this purpose in the promotional email. No costs other than the transmission costs according to the standard rates will be incurred for this.
We will share your email address with the shipping company as part of the order fulfillment process, provided you have expressly consented to this during the ordering process. This information is shared for the purpose of informing you via email about the shipping status. This processing is based on Article 6(1)(a) of the GDPR with your consent. You may revoke your consent at any time by notifying us or the shipping company, without affecting the lawfulness of the processing carried out on the basis of your consent prior to revocation.
We use an inventory management system to process contracts as part of our data processing activities. To this end, the personal data collected from you during the ordering process will be transferred to
plentysystems AG, Johanna-Waescher-Straße 7, 34131 Kassel.
The processing of your personal data serves the purpose of fulfilling the contract concluded with you and is carried out on the basis of Article 6(1)(b) of the GDPR.
We use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg; “PayPal”) on our website. The purpose of this data processing is to enable us to offer you the option of paying via this payment service. When you select and use PayPal as your payment method, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.
All PayPal transactions are subject to the PayPal Privacy Policy. You can find it athttps://www.paypal.com/de/webapps/mpp/ua/privacy-full
On our website, we use the PayPal Plus payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg; “PayPal”). The purpose of this data processing is to enable us to offer you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal, or direct debit via PayPal, the data required for payment processing is transmitted to PayPal in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.
For certain payment methods, such as credit card via PayPal or direct debit via PayPal, PayPal reserves the right to obtain a credit check, if necessary, based on mathematical and statistical methods using credit reporting agencies. To this end, PayPal transmits the personal data required for a credit check to a credit bureau and uses the information received regarding the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated using scientifically recognized mathematical and statistical methods, which incorporate, among other things, address data. Your legitimate interests will be taken into account in accordance with legal provisions. The purpose of data processing is to conduct a credit check for the purpose of entering into a contract. Processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in protecting against payment default when PayPal makes an advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying PayPal. Providing this data is necessary to conclude the contract using your preferred payment method. Failure to provide this data will result in the contract not being able to be concluded using the payment method you have selected.
We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg; “PayPal”) on our website. The purpose of this data processing is to enable us to offer you the option of paying via the PayPal Express payment service. To integrate this payment service, it is necessary for PayPal to collect, store, and analyze data (e.g., IP address, device type, operating system, browser type, and your device’s location) when you visit the website. Cookies may also be used for this purpose. These cookies enable your browser to be recognized.
The processing of your personal data is based on Article 6(1)(f) of the GDPR, which is grounded in our overriding legitimate interest in offering a customer-oriented selection of various payment methods. You have the right to object at any time to the processing of your personal data for reasons arising from your particular situation.
When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR. For more information on data processing when using the PayPal Express payment service, please refer to the corresponding privacy policy atwww.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE#Updated_PS.
On our website, we use the PayPal Checkout payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal, L-2449, Luxembourg; “PayPal”). The purpose of this data processing is to enable us to offer you payment via this payment service. When you select and use payment via PayPal, credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, the data required for payment processing is transmitted to PayPal so that we can fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR.
In this process, cookies may be stored that enable your browser to be recognized. The resulting data processing is based on Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in offering a customer-oriented selection of various payment methods. You have the right to object at any time to this processing of your personal data for reasons arising from your particular situation.
Credit Card via PayPal, Direct Debit via PayPal, and “Pay Later” via PayPal
For certain payment methods, such as credit card via PayPal, direct debit via PayPal, or “Pay Later” via PayPal, PayPal reserves the right to obtain a credit check, if necessary, based on mathematical and statistical methods using credit reporting agencies. To this end, PayPal transmits the personal data required for a credit check to a credit reporting agency and uses the information received regarding the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may include probability values (score values) calculated using scientifically recognized mathematical and statistical methods, which incorporate, among other things, address data. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing serves the purpose of conducting a credit check for the initiation of a contract. The processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in protecting against payment default when PayPal makes an advance payment.
You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying PayPal. Providing this data is necessary to conclude the contract using your preferred payment method. Failure to provide this data will result in the contract not being able to be concluded using the payment method you have selected.
Third-Party Providers
When paying via a third-party payment provider, the data required for payment processing is transmitted to PayPal. This processing is based on Article 6(1)(b) of the GDPR. To execute this payment method, the data may then be passed on by PayPal to the respective provider. This processing is based on Article 6(1)(b) of the GDPR. Examples of local third-party providers include:
Purchase on Account via PayPal
When paying via the “Purchase on Invoice” payment method, the data required for payment processing is first transmitted to PayPal. To process this payment method, PayPal then transmits the data to Ratepay GmbH (Franklinstraße 28-29, 10587 Berlin; “Ratepay”) in order to fulfill the contract with you using the selected payment method. This processing is based on Article 6(1)(b) of the GDPR. Ratepay may conduct a credit check using mathematical and statistical methods (probability or score values) through credit bureaus, following the procedure described above. The purpose of this data processing is to perform a credit check for the purpose of entering into a contract. The processing is based on Article 6(1)(f) of the GDPR, reflecting our overriding legitimate interest in protecting against payment default when Ratepay makes an advance payment. For more information on data protection and which credit bureaus Ratepay uses, please visithttps://www.ratepay.com/legal-payment-dataprivacy/and https://www.ratepay.com/legal-payment-creditagencies/.
For more information on data processing when using PayPal, please refer to the corresponding privacy policy athttps://www.paypal.com/de/webapps/mpp/ua/privacy-full.
If we make an advance payment—for example, in the case of payment by invoice or direct debit—we reserve the right to obtain a credit check, if necessary, based on mathematical and statistical methods using axytos GmbH, Pittlerstraße 47, 63225 Langen, and credit reporting agencies cooperating with it, or Novalnet AG Payment Institution (ZAG), Feringastraße 4, 85774 Unterföhring. To this end, we will transmit the personal data required for a credit check to these entities and use the information received regarding the statistical probability of a payment default to make a balanced decision regarding the establishment, execution, or termination of the contractual relationship. The credit report may contain probability values (scores) that are calculated using scientifically recognized mathematical and statistical methods and incorporate, among other things, address data. Your legitimate interests will be taken into account in accordance with legal provisions. The data processing serves the purpose of conducting a credit check for the purpose of initiating a contract. The processing is carried out on the basis of Article 6(1)(f) of the GDPR, based on our overriding legitimate interest in protecting against default when we make advance payments. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR by notifying us. Providing this data is necessary for concluding the contract using your preferred payment method. Failure to provide this data will result in the contract not being able to be concluded using the payment method you have selected.
We use Google Analytics, a web analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”), on our website.
Data processing is used to analyze this website and its visitors, as well as for marketing and advertising purposes. To this end, Google will use the information collected on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activity, and to provide the website operator with other services related to website and Internet usage.
The following information, among other things, may be collected: IP address, date and time of the page view, click path, information about the browser and device you are using, pages visited, referrer URL (the website from which you accessed our website), location data, and purchase activity. Google may link your data to other data, such as your search history, your personal accounts, your usage data from other devices, and any other data Google has about you.
Google truncates the IP address beforehand within member states of the European Union or in other signatory states to the Agreement on the European Economic Area.
Google uses technologies such as cookies, browser storage, and web beacons that enable the analysis of your use of the website. The use of cookies or similar technologies is based on your consent pursuant to Section 25(1), sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR.
Your personal data is processed with your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
We have entered into a data processing agreement with Google and fully comply with the strict requirements of the German data protection authorities regarding the use of Google Analytics.
We also use the Google Signals service in this context. Google Signals enables cross-device tracking. This means your data can be analyzed across devices if you have enabled “personalized ads” in your account settings and your devices are linked to your Google account. This makes it possible to identify which device you use to search for products and then return later to complete purchases on another device, such as a tablet.
The cross-device reports generated in this context contain only aggregated data. We therefore receive only statistics generated by Google Signals. To prevent Google Signals from collecting and storing data across devices, you can disable the “personalized ads” feature in your Google Account settings. For more information, see https://support.google.com/ads/answer/2662922?hl=de.
For more information about data processing and privacy regarding Google Signals, visithttps://support.google.com/analytics/answer/7532985?hl=de.
We use the advanced implementation of Advanced Consent Mode. Under this mode, user data is transmitted to Google in the form of “pings” even if consent has not been granted. These pings may contain, among other things, the following information: IP address for determining the country of origin (the IP address is not logged), the date and time the page was accessed, the URLs of the pages visited, the user agent, the referrer URL (the website from which our website was accessed), or information about the triggering of website events, such as a conversion. Based on this information, Google models user data to perform a comprehensive usage analysis despite the refusal of consent.
The information generated in this way regarding your use of this website is generally transmitted to a Google server in the United States and stored there. The data transfer to the United States is based on the European Commission’s Standard Contractual Clauses. Details can be found here: https://privacy.google.com/businesses/controllerterms/mccs/.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/5780.
For more information on the Terms of Use and Privacy Policy, please visit https://policies.google.com/technologies/partner-sites and athttps://policies.google.com/privacy?hl=de&gl=de.
We use the Meta Pixel from Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”) on our website. Meta and we are joint controllers for the collection of your data that occurs when the service is integrated and for the transfer of this data to Meta. This is based on an agreement between us and Meta regarding the joint processing of personal data, which defines our respective responsibilities. The agreement is available at https://de-de.facebook.com/legal/terms/businesstools . Under this agreement, we are specifically responsible for fulfilling the information obligations under Articles 13 and 14 of the GDPR, for complying with the security requirements of Article 32 of the GDPR regarding the correct technical implementation and configuration of the Service, and for complying with the obligations under Articles 33 and 34 of the GDPR, to the extent that a personal data breach affects our obligations under the Joint Processing Agreement. Meta is responsible for ensuring that data subjects’ rights under Articles 15–20 of the GDPR are upheld, for complying with the security requirements of Article 32 of the GDPR with regard to the security of the service, and for fulfilling the obligations under Articles 33 and 34 of the GDPR, to the extent that a breach of personal data protection affects Meta’s obligations under the joint processing agreement. The application is used to target website visitors with interest-based advertising on the social networks Facebook and Instagram. To this end, Meta’s remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta’s servers when you visit the website. As a result, information about which of our pages you have visited is transmitted to Meta’s servers. Meta associates this information with your personal Facebook and/or Instagram user account. When you visit the social networks Facebook or Instagram, you will then be shown personalized, interest-based ads. This feature also serves the purpose of generating conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page equipped with a conversion tracking tag, as well as what actions were taken after being redirected to that website. However, we do not receive any information that can be used to personally identify users. Your data may be transferred to the United States. An adequacy decision by the European Commission is in place for the United States: the Trans-Atlantic Data Privacy Framework (TADPF). Meta has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
Your personal data is processed with your consent pursuant to Article 6(1)(a) of the GDPR and Section 25(1) of the TDDDG. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Data transfers to the United States are based on the European Commission’s Standard Contractual Clauses. For details, see here: https://www.facebook.com/legal/EU_data_transfer_addendum and https://de-de.facebook.com/help/566994660333381.
You can disable the "Custom Audiences" remarketing feature here. For more information about Meta's collection and use of data, your rights in this regard, and ways to protect your privacy, please see Meta's Privacy Policy athttps://www.facebook.com/about/privacy/.
We use the online advertising program “Google Ads” on our website and, as part of this, conversion tracking (visitor action analysis). Google Conversion Tracking is an analytics service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
When you click on an ad placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain any personal data, and therefore cannot be used to identify you personally. If you visit certain pages on our website and the cookie has not yet expired, Google and we can recognize that you clicked on the ad and were redirected to that page. Each Google Ads customer receives a different cookie. Therefore, it is not possible to track cookies across the websites of Ads customers.
The information collected using the conversion cookie is used to generate conversion statistics. This allows us to determine the total number of users who clicked on one of our ads and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can be used to personally identify users. We use the advanced implementation of Advanced Consent Mode. Under this mode, user data is transmitted to Google in the form of “pings” even if consent has not been granted. These pings may contain, among other things, the following information: IP address to determine the country of origin (the IP address is not logged), the date and time the page was accessed, the URLs of the pages visited, the user agent, the referrer URL (the website from which our website was accessed), or information about the triggering of website events, such as a conversion. Based on this information, Google models user data to perform a comprehensive usage analysis despite the refusal of consent.
Your data may be transferred to Google LLC’s servers in the United States. An adequacy decision by the European Commission is in place for the United States: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is thereby committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1), sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
For more information and Google’s Privacy Policy, please visit: https://www.google.de/policies/privacy/
We use the remarketing or "Similar Audiences" feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; "Google") on our website.
This feature is used to analyze visitor behavior and interests. Google uses cookies to analyze website usage, which serves as the basis for creating interest-based advertisements. These cookies track visits to the website and collect anonymized data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown ads that are highly likely to be based on the product and information sections you previously viewed.
Your data may be transferred to servers operated by Google LLC in the United States. An adequacy decision by the European Commission is in place for the United States: the Trans-Atlantic Data Privacy Framework (TADPF). Google has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1), Sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is carried out with your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to withdrawal.
For more information on Google Remarketing and the associated privacy policy, please visit:https://www.google.com/privacy/ads/
We use Google Tag Manager from Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This application manages JavaScript tags and HTML tags that are used to implement tracking and analytics tools, among other things. Data processing serves the purpose of tailoring our website to user needs and optimizing it.
Google Tag Manager itself does not store cookies, nor does it process personal data. However, it enables the triggering of additional tags that may collect and process personal data.
The use of Google Tag Manager is based on your consent pursuant to Art. 6(1)(a) of the GDPR and § 25(1) of the TDDDG, to the extent that such consent covers the storage of cookies or access to information on the user’s device (e.g., device fingerprinting) within the meaning of the TDDDG. You may revoke your consent at any time.
The company is certified under the “EU-US Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/5780.
You can find more information about our Terms of Use and Privacy Policyhere.
We use the Google Maps embedding feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland, “Google”) on our website.
This feature enables the visual display of geographic information and interactive maps. When pages containing Google Maps are accessed, Google also collects, processes, and uses data from website visitors.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1), sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
Your data may also be transferred to the United States in the course of this process. The company is certified under the “EU-U.S. Data Privacy Framework” (DPF). The DPF is an agreement between the European Union and the United States designed to ensure compliance with European data protection standards when data is processed in the United States. Every company certified under the DPF commits to complying with these data protection standards. For more information on this, please visit the provider’s website at the following link: https://www.dataprivacyframework.gov/participant/5780.
For more information about how Google collects and uses data, please see Google's Privacy Policy at https://www.google.com/privacypolicy.html.
There, in the Privacy Center, you can also change your settings so that you can manage and protect the data processed by Google.
We use the YouTube video embedding feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).
This feature displays videos hosted on YouTube within an iFrame on the website. The “Enhanced Privacy Mode” option is enabled. As a result, YouTube does not store any information about website visitors. Information about the video is only transmitted to YouTube and stored there once you watch a video. Your data may be transferred to the United States. An adequacy decision by the European Commission is in place for the United States: the Trans-Atlantic Data Privacy Framework (TADPF). YouTube has obtained certification under the TADPF and is therefore committed to complying with European data protection principles.
The use of cookies or similar technologies is based on your consent pursuant to Section 25(1), sentence 1 of the TDDDG in conjunction with Article 6(1)(a) of the GDPR. The processing of your personal data is based on your consent pursuant to Article 6(1)(a) of the GDPR. You may withdraw your consent at any time without affecting the lawfulness of the processing carried out on the basis of your consent prior to its withdrawal.
For more information on the collection and use of data by YouTube and Google, your rights in this regard, and ways to protect your privacy, please see YouTube’s privacy policy at https://www.youtube.com/t/privacy.
We use the “Doofinder” search function provided by DooFinder S.L. (Madrid 28037, Rufino González 23 bis, 1º 1, Spain; “Doofinder”) on our website.
The purpose of this data processing is to make it easier to find the information contained on our website and to enhance user-friendliness.
When you use the search function on our website, the following information, among other things, is processed: IP address, information about the device you are using (e.g., device type, model, and version), and an anonymized user ID.
The processing of your personal data is based on Article 6(1)(f) of the GDPR, in accordance with our overriding legitimate interest in designing our website to be as user-friendly as possible. You have the right to object at any time, on grounds relating to your particular situation, to the processing of your personal data based on Article 6(1)(f) of the GDPR.
For more information on data protection at Doofinder, please visit https://www.doofinder.com/en/privacy-policy.
Our Service Hotline
You need to load content from hCaptcha to submit the form. Please note that doing so will result in data being shared with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will result in data being shared with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will result in data being shared with third-party providers.
More InformationYou need to load content from reCAPTCHA to submit the form. Please note that doing so will result in data being shared with third-party providers.
More InformationYou need to load content from Turnstile to submit the form. Please note that doing so will result in data being shared with third-party providers.
More Information
