1. General information and principles of data processing We are pleased that you are visiting our website. The protection of your privacy and the protection of your personal data, so-called personal data, when using our website is important to us.

According to Article 4 No. 1 GDPR, personal data is all information that relates to an identified or identifiable natural person. This includes, for example, information such as your first and last name, your address, your telephone number, your email address, but also your IP address.
Data that cannot be linked to you personally, for example through anonymization, is not personal data. Processing (e.g. collection, storage, reading, querying, use, transmission, deletion or destruction) in accordance with Art. 4 No. 2 GDPR always requires a legal basis or your consent. Processed personal data must be deleted as soon as the purpose of the processing has been achieved and there are no longer any legally required retention obligations to be met.
Here you will find information about how your personal data is handled when you visit our website. In order to provide the functions and services of our website, it is necessary for us to collect personal data about you.
We also explain to you the type and scope of the respective data processing, the purpose and the corresponding legal basis and the respective storage period.

This privacy policy applies only to this website. It does not apply to other websites to which we simply refer via a hyperlink. We cannot accept responsibility for the confidential handling of your personal data on these third-party websites, as we have no influence on whether these companies comply with data protection regulations. Please find out more about how these companies handle your personal data directly on these websites.

2. Responsible body
The person responsible for the processing of personal data on this website is (see legal notice):

3. Provision and use of the website/server log files
a) Type and scope of data processing
If you use this website without otherwise transmitting data to us (e.g. by registering or using the contact form), we collect technically necessary data via server log files, which are automatically transmitted to our server, including:
• IP address
• Date and time of the request
• Name and URL of the retrieved file
• Website from which access is made (referrer URL)
• Access status/HTTP status code
• Browser type
• Language and version of the browser software
• Operating system

b) Purpose and legal basis
This processing is technically necessary in order to be able to display our website to you. We also use the data to ensure the security and stability of our website.
The legal basis for this processing is Article 6 Paragraph 1 Letter f) GDPR. The processing of the data mentioned is necessary to provide a website and thus serves to protect a legitimate interest of our company.

c) Storage period
As soon as the personal data mentioned is no longer required to display the website, it will be deleted. The collection of data to provide the website and the storage of the data in log files is absolutely necessary for the operation of the website. There is therefore no possibility for the user to object to this aspect. Further storage can take place in individual cases if this is required by law.

4. Use of cookies
a) Type, scope and purpose of data processing
We use cookies. Cookies are small files that we send to the browser of your device and store there when you visit our website.
Some functions of our website cannot be offered without the use of technically necessary cookies. Other cookies, on the other hand, enable us to carry out various analyses. Some cookies can recognize the browser you are using when you visit our website again and transmit various information to us. We use cookies to facilitate and improve the use of our website. Among other things, we can use cookies to make our Internet offering more user-friendly and effective for you, for example by tracking your use of our website and determining your preferred settings (e.g. country and language settings). If third parties process information via cookies, they collect the information directly via your browser. However, cookies do not cause any damage to your device. They cannot run programs and do not contain viruses. Different types of cookies are used on our website, the type and function of which are explained below.
Temporary cookies/session cookies
Our website uses so-called temporary cookies or session cookies, which are automatically deleted as soon as you close your browser. This type of cookie makes it possible to record your session ID. This means that various requests from your browser can be assigned to a common session and it is possible to recognize your device when you visit the website later.
Persistent cookies
So-called permanent cookies are used on our website. Persistent cookies are cookies that are stored in your browser for a longer period of time and can transmit information. The respective storage period differs depending on the cookie. You can delete permanent cookies yourself via your browser settings.
Third-party cookies
We use analytical cookies to monitor anonymized user behavior on our website.
We also use advertising cookies. These cookies can be used to track user behavior for advertising and targeted marketing purposes.
Social media cookies make it possible to establish a connection to your social networks and to share content from our website within your networks.
Browser settings configuration
Most web browsers are preset to automatically accept cookies. However, you can configure your browser so that it only accepts certain cookies or no cookies at all. However, we would like to point out that you may then no longer be able to use all of the functions of our website.
You can also delete cookies already stored in your browser via your browser settings. It is also possible to set your browser so that it notifies you before cookies are stored. Since the different browsers can differ in their respective functions, we ask you to use the respective help menu of your browser for the corresponding configuration options.
Disabling the use of cookies may require storing a persistent cookie on your computer. If you subsequently delete this cookie, you will have to deactivate it again.
b) Legal basis
Due to the purposes of use described, the legal basis for the processing of personal data using cookies is Art. 6 Para. 1 lit. f) GDPR. If you have given us your consent to use cookies based on a notice we have provided on the website (“cookie banner”), the additional legal basis is Art. 6 Para. 1 lit. a) GDPR.

c) Storage period
As soon as the data transmitted to us via the cookies is no longer required for the purposes described above, this information will be deleted. Further storage can take place in individual cases if this is required by law.

5. Data collection to carry out pre-contractual measures and to fulfill the contract
a) Type and scope of data processing
We collect personal data about you in the pre-contractual area and upon conclusion of the contract. This concerns, for example, first and last name, address, email address, telephone number or bank details.

b) Purpose and legal basis of data processing
We collect and process this data exclusively for the purpose of executing the contract or fulfilling pre-contractual obligations.

The legal basis for this is Article 6 Paragraph 1 Letter b) GDPR. If you also give your consent, the additional legal basis is Art. 6 Para. 1 lit. a) GDPR.
c) Storage period
The data will be deleted as soon as it is no longer required for the purpose of its processing.

There may also be statutory retention obligations, for example commercial or tax retention obligations under the Commercial Code (HGB) or the Tax Code (AO). If such retention obligations exist, we will block or delete your data when these retention obligations end.

6. Order form
There is an order form on our website that can be used for electronic pre-orders.

a) Type and scope of data processing
Our data collection is limited to the following data:
• First and Last Name
• Telephone number
• E-mail address
• Account details
• Name of the product
b) Purpose and legal basis
The purpose of data processing is to enable you to process your order properly.
The legal basis for this is Article 6 Paragraph 1 Letter b) GDPR. The processing of the data serves to fulfill a contract or is necessary for the implementation of a pre-contractual measure that was carried out at the request of the data subject.

c) Storage period
The data will be deleted as soon as it is no longer needed to achieve the purpose of processing.
There may also be statutory retention obligations, for example commercial or tax retention obligations under the Commercial Code (HGB) or the Tax Code (AO). If such retention obligations exist, we will block or delete your data when these retention obligations end.

7. Registration option
a) Type and scope of data processing
You can register on our website. When you register, we collect and store the data that you enter in the input mask (e.g. last name, first name, email address). A disclosure to third parties does not occur.

b) Purpose and legal basis of data processing
Your registration is required for the use of certain content and services on our website or for the fulfillment of a contract or to carry out pre-contractual measures. After registration, you are free to change the personal data provided during registration at any time or to have it completely deleted from the data base of the person responsible for processing.
In the event of consent, the legal basis for processing is Article 6 Paragraph 1 Letter a).
GDPR. If your registration serves to prepare for the conclusion of a contract, Art. 6 Para. 1 lit. b) GDPR is an additional legal basis.

c) Storage period
The data collected during registration will be stored by us for as long as you are registered on our website and will then be deleted. Statutory retention periods remain unaffected.

8. Data transfer
We will only share your personal information with third parties if:
a) You have given your express consent to this in accordance with Article 6 Paragraph 1 Letter a) GDPR.
b) this is legally permissible and is necessary in accordance with Article 6 Paragraph 1 Letter b) GDPR to fulfill a contractual relationship with you or to carry out pre-contractual measures.
c) according to Art. 6 Para. 1 lit. c) GDPR there is a legal obligation for the transfer.
We are legally obliged to transmit data to government authorities, such as tax authorities, social security institutions, health insurance companies, supervisory authorities and law enforcement authorities.
d) the disclosure in accordance with Article 6 Para. 1 lit. f) GDPR is necessary to protect legitimate company interests, as well as to assert, exercise or defend legal claims and there is no reason to assume that you have an overriding legitimate interest in not disclosing of your data.
e) in accordance with Art. 28 GDPR, we use external service providers, so-called processors, who are obliged to handle their data carefully.

We use such service providers in the areas:
• IT
• Logistics
• Telecommunications
When transferring data to external bodies in third countries, i.e. outside the EU or EEA, we ensure that these bodies treat your personal data with the same care as within the EU or EEA. We only transfer personal data to third countries where the EU Commission has confirmed an adequate level of protection or if we ensure the careful handling of the personal data through contractual agreements or other appropriate guarantees.

9. Application option
a) Type and scope of data processing
You can apply on our website or by email. When you apply, we collect and store the data that you enter in the input mask or that you send to us by email.

b) Purpose and legal basis
We only process your data for the purpose of processing your application.
A disclosure to third parties does not occur. The legal basis for the processing is Art. 88 Para. 1 GDPR in conjunction with Section 26 BDSG and additionally Art. 6 Para. 1 lit. b) GDPR.
If you give us your consent to be included in our applicant pool, the legal basis is Article 6 Paragraph 1 Letter a) GDPR.

c) Storage period
If we cannot offer you a job, we will store your data for a maximum of six months after the end of the application process, taking into account Section 61b Paragraph 1 ArbGG in conjunction with Section 15 AGG. The start of the deadline is the receipt of the rejection letter.

If you have given us your consent to be included in our applicant pool, we will store your data for a maximum of two years.

d) Data transfer
Only those departments that are involved in the decision (responsible human resources or specialist departments, management, works council) will receive your data.
We are also obliged to provide your data to public bodies and institutions (e.g. public prosecutor's office, police, supervisory authorities, tax office, social security institutions, etc.).

Other data recipients may include those entities for which you have given us your consent to transfer data.

10. Comment function
a) Type and scope of data processing
You can comment on posts on our website. When you comment on a post, we collect and store the data you enter in the input mask. In addition to the comments you leave, information about the time you entered the comment and possibly the user name (pseudonym) you chose will also be saved and published. Furthermore, the IP address assigned by the data subject's Internet service provider (ISP) is stored. A disclosure to third parties does not occur.

b) Purpose and legal basis
The data you transmit (e.g. the IP address) is for security reasons and in the event that the person concerned violates the rights of third parties or posts illegal content through a comment made.
This collected personal data will not be passed on to third parties unless such transfer is required by law or serves the legal defense of the person responsible for processing.

The legal basis for the processing of personal data transmitted when using the comment function is, if and to the extent that you have given your consent, Article 6 (1) (a) GDPR. You can revoke this consent at any time. The legality of the data processing operations that have already taken place remains unaffected by the revocation.
Another legal basis is Article 6 Paragraph 1 Letter f) GDPR.
We have a legitimate interest in processing if the rights of third parties are violated or illegal content is posted. This is for security if someone writes illegal content in comments and posts (insults, banned political propaganda, etc.)

c) Storage period
The comments and the associated data (e.g. IP address) are saved and remain on our website until the commented content has been completely deleted or the comments have to be deleted for legal reasons.
11. Contact form
a) Type and scope of data processing
On our website we offer you the opportunity to contact us using a form provided. When sending your request via the contact form, reference is made to this data protection declaration to obtain your consent.

If you use the contact form, the following personal data about you will be processed:
- Salutation
- First name
- Last name
- Title
- Company
- Industry
- Function
- Street
- Street number
- Postal code
- Location
- country
- E-mail address
- Phone number
- Reference
- Content of the message

b) Purpose and legal basis
The purpose of providing your email address is to send you an email response to your query. When you use the contact form, your personal data will not be passed on to third parties.

The legal basis for the processing is consent in accordance with Art. 6 Para. 1 lit.

c) Storage period
The data you enter in the contact form will remain with us until you request us to delete it, revoke your consent to storage or the purpose for data storage no longer applies (e.g. after your request has been processed).
Mandatory legal provisions - in particular retention periods according to the Commercial Code (HGB) or the Tax Code (AO) - remain unaffected.

12. Contact options via email
You can contact us via email on our website.
a) Type and scope of data processing
You can contact us by email. Our data collection is limited to the email address of the email account you used to contact us as well as any personal data you provide when contacting us.

b) Purpose and legal basis
The purpose of data processing is to be able to answer your request appropriately. The legal basis for this is Article 6 Paragraph 1 Letter f) GDPR. There is a legitimate interest in processing the above-mentioned personal data in order to be able to process your request properly.

c) Storage period
The duration of storage of the above-mentioned data depends on the background of your contact. Your personal data will be deleted regularly if the intended purpose of the communication no longer applies and storage is no longer necessary. This can result, for example, from processing your request.

13. Newsletters
a) Type and scope of data processing
On our website you have the option of subscribing to a free, regular email newsletter. In order to be able to send you the newsletter regularly, we need your email address.

We use the so-called double opt-in procedure to send the newsletter.

This means that we will only send you an email newsletter if you have expressly confirmed to us that you consent to the newsletter being sent. We will then send you a confirmation email in which you will be asked to confirm that you would like to receive newsletters from us in the future by clicking on a corresponding link.

This is to ensure that only you, as the owner of the email address provided, can register for the newsletter. Your confirmation must take place promptly after receiving the confirmation email, otherwise your newsletter registration will be automatically deleted from our database.
If you subscribe to the newsletter, we collect and store the data that you enter in the input mask (e.g. last name, first name, email address).
When you register for the newsletter, we also save your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. In the confirmation email sent for control purposes (double opt in the
Email) we also store the date and time of the click on the confirmation link and the IP address entered by the Internet Service Provider (ISP).

b) Purpose and legal basis
The data we collect when you register for the newsletter will be used exclusively for advertising purposes via the newsletter.
The processing of your e-mail address for sending the newsletter is based on Article 6 Paragraph 1 Letter a) GDPR and Section 7 Paragraph 2 No. 3 UWG, which you have voluntarily submitted below and can be revoked at any time in the future Declaration of consent.
In addition, the processing is based on Art. 6 Para. 1 lit f) GDPR due to our legitimate interests in documenting proof of the necessary consent.

c) Storage period
Your email address will be stored for as long as you have subscribed to the newsletter. After you unsubscribe from the newsletter, your email address will be deleted unless you have expressly consented to further use of your data.

14. Tracking and Analysis Tools
You can find an exact overview of the web analysis and social media tools we use here:


Amazon Pay
We offer the option of processing the payment process via the payment service provider Amazon Payments Europe SCA 5, Rue Plaetis - 2338 Luxembourg.
The legal basis for this is our legitimate interest in efficient and secure payment processing. Art. 6 Paragraph 1 Letter f GDPR. In this context, we pass on the following data to Amazon Pay to the extent that it is necessary for the fulfillment of the contract (Art. 6 Para. 1 lit b. GDPR): name, address, account details, possibly credit card number, invoice amount, currency and transaction number. Your data will be passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent that it is necessary for this purpose.
Amazon carries out a credit check for various services such as direct debit payments to ensure your willingness and ability to pay. This corresponds to the legitimate interest of Amazon Pay (according to Art. 6 Para. 1 lit. f GDPR) and serves to implement the contract (according to Art. 6 Para. 1 lit. b GDPR). For this purpose, your data (name, address and date of birth, bank account details) will be passed on to credit agencies. We have no influence on this process and only receive the result of whether the payment has been made, declined or is pending verification.
Further information about data protection at Amazon Pay can be found at:
https://pay.amazon.com/de/help/201751600

Consent manager
We have integrated the consent management tool “consentmanager” (www.consentmanager.net) from consentmanager AB, Håltgelvågen 1b, 72348 Västerås, Sweden, mail@consentmanager.net, on our website to obtain consent for data processing or use of cookies or comparable functions. Using “consentmanager”, you have the opportunity to grant or reject your consent to certain functionalities of our website, for example for the purposes of integrating external elements, integrating streaming content, statistical analysis, reach measurement and personalized advertising. You can use “consentmanager” to grant or reject your consent for all functions or give your consent for individual purposes or individual functions. The settings you have made can also be changed later. The purpose of integrating “consentmanager” is to allow the users of our website to decide on the above-mentioned things and to offer the opportunity to change settings that have already been made as part of the further use of our website. When using “consentmanager”, personal data and information from the end devices used are processed (IP address, language, browser, etc.) and sent to consentmanager AB. The information about the settings you have made is also stored in your device.
The legal basis for the processing is Article 6 Paragraph 1 Sentence 1 Letter c) GDPR in conjunction with Article 7 Paragraph 1 GDPR, insofar as the processing serves to fulfill the legally standardized proof requirements for granting consent. Furthermore, Art. 6 Paragraph 1 Sentence 1 Letter f) GDPR is the relevant legal basis. Our legitimate interests in processing lie in storing user settings and preferences regarding the use of cookies and evaluating consent rates. A new request for consent will be made no later than twenty-four months after the user settings have been made. The user settings you have made will then be saved again for this period, unless you first delete the information about your user settings in the end device capacities intended for this purpose.
You can object to the processing if the processing is based on Article 6 Paragraph 1 Sentence 1 Letter f) GDPR. You have the right to object for reasons that arise from your particular situation. To object, please send an email to mail@consentmanager.net.

Facebook
If you access our Facebook fan page, Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, collects, stores and processes your personal data in accordance with Facebook's privacy policy. The data protection policy can be found here:
https://de-de.facebook.com/policy.php
As part of the “Facebook Insights” function, Facebook may provide us with, among other things, the following categories of data in anonymized/statistical form for the purpose of measuring performance and optimizing our Facebook presence:
- Predefined interactions on our fan page
- Time stamp
- User's country/city
- HTTP language code
- Age/gender group
- Previously visited website (so-called referral URL)
- User's device
- Facebook user ID (if logged in)
There is a joint responsibility between Facebook and us regarding the processing of Insights data, within which Facebook has assumed primary responsibility. This concerns the processing of insights data and the implementation of the rights of those affected. Please contact Facebook directly regarding all obligations under the GDPR with regard to the processing of Insights data. We will forward any inquiries we receive in this regard to Facebook. Further details on this are regulated in the Joint Controller Addendum, which you can find here: www.facebook.com/legal/terms/page_controller_addendum
You can find more information about Facebook Insights here:
www.facebook.com/legal/terms/information_about_page_insights_data

Google AdSense
We use the online advertising service Google AdSense, which can show you advertising tailored to your interests. Google AdSense is a web analysis service provided by Google Ireland Ltd, Google Building Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).
Our aim is to show you advertising that might be of interest to you in order to make our website more interesting for you. For this purpose, statistical information about you is collected, which is processed by our advertising partners. These advertisements can be identified by the reference “Google ads” in the respective advertisement.
By visiting our website, Google receives the information that you have accessed our website. To do this, Google uses a web beacon to set a cookie on your computer. If you are logged in with your Google account, your data can be assigned directly to it. If you do not want to be associated with your Google profile, you must log out. It is possible that this data will be passed on to Google's contractual partners, third parties and authorities. This website also has third-party Google AdSense ads enabled. The aforementioned data can be transferred to these third parties (named at https://support.google.com/dfp_sb/answer/94149).
You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also deactivate interest-based ads on Google via the link: www.google.de/ads/preferences
Please note that this setting will be deleted if you delete your cookies. You can also permanently disable interest-based advertising on the Firefox, Chrome and Internet Explorer browsers by downloading and installing the browser plugin available at the following link:
www.google.com/settings/ads/plugin
Google contact details:
Google Dublin, Google Ireland Ltd.
Gordon House, 4 Barrow Street
Dublin Ireland
Telephone: +353 (1) 436 1000
Fax: +353 (1) 436 1001
Further information about data protection at Google can be found here: http://www.google.com/intl/de/policies/privacy
Privacy Policy for Advertising:
www.google.de/intl/de/policies/technologies/ads

Google Analytics
We use the tracking tool Google Analytics from Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, Tel: +353 1 543 1000, Fax: +353 1 686 5660, Email: support-deutschland on our website @google.com (“Google”).
Google Analytics uses so-called “cookies”, text files that are stored on your computer and that enable the use of the website to be analyzed.
The information generated by the cookie about your use of this website is usually transmitted to a Google server in the USA and stored there.
On behalf of the operator of this website, Google will use this information to systematically evaluate your use of the website, to compile reports on website activity and to provide other services related to website activity and internet usage to the website operator.
If individual pages of our website are accessed, the following data is stored:
• Three bytes of the IP address of the user's accessing system (anonymized
IP address)
• The website accessed
• The website from which the user accessed the page on our website (referral URL)
• The subpages that are accessed from the page accessed
• The time spent on the website
• The frequency of accessing the website
We use Google Analytics with IP anonymization activated. This will make them
IP addresses shortened by the last octet (e.g.: 192.168.79.***; so-called IP masking). It is no longer possible to assign the shortened IP address to the user's accessing computer or device.
The Google Analytics service is used to analyze the usage behavior of our website. The legal basis is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR.
We will delete the stored data as soon as they are no longer needed for our recording purposes. In our case, the storage period is a maximum of 24 months.
You can prevent the storage of cookies by setting your browser software accordingly; However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent. You can also prevent Google from collecting the data generated by the cookie and relating to your use of the website (including your IP address) and from processing this data by Google by downloading the browser plug-in available under the following link and install:
http://tools.google.com/dlpage/gaoptout?hl=de
For more information about the Google Analytics Terms of Use:
www.google.com/analytics/terms/de.html
Further information on data protection from Google Analytics:
https://support.google.com/analytics/answer/6004245?hl=de
You can also change your consent in the cookie settings [Change your consent] at any time.

Instagram
If you visit our Instagram channel, personal data will be stored and processed by Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland, as Instagram's provider, in accordance with Instagram's privacy policy. The privacy policy can be found here:
https://help.instagram.com/519522125107875
For the purpose of needs-based design and ongoing optimization of our pages, we use the Instagram Insights statistics service. This service records your activity on our site and provides it to us in anonymized statistics. This gives us information about, among other things, the interactions of our fansite visitors, the views of our site, the reach of posts, information about the activity of our subscribers as well as information about which countries and places our visitors come from and statistics about the gender ratio of our visitors. It is not possible for us to draw conclusions about individual users or access individual user profiles.

Meta Pixel / Meta Conversion Tracking
We use the visitor action pixel from the provider Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2 D02 X525, Ireland (“Meta”) within our website. The remarketing tag or tracking pixel from Meta was implemented. Meta and we are jointly responsible for data processing.
The meta pixel makes it possible for Meta to determine the visitors to our online offering as a target group for the display of advertisements (so-called “meta ads”). A user can also be tracked across multiple websites. We use the meta pixel to show the meta advertisements we place only to those meta users who have shown an interest in our online offering or who have certain characteristics (e.g. interest in certain topics or products) based on the websites visited which we transmit to Meta (so-called “Custom Audiences”).
With the help of the meta pixel, we can also understand the effectiveness of the meta ads for statistical and market research purposes (“audience insights”) by seeing whether users were redirected to our website after clicking on a meta ad (so-called “Conversion”).
The meta pixel is a JavaScript code that sends the following data to meta:
• HTTP header information: including IP address, web browser information, page location, document, website URL and web browser device (computer, smartphone, tablet, other) as well as day and time of use
• Pixel-specific data: Pixel ID and meta cookie data including your meta ID (this is used to link events to a specific meta advertising account and therefore assign them to a meta user)
• Additional information about the visit and standard and custom data events.
More information can be found here.
We also use the additional “automatic extended comparison” function. Here, data such as first and last name, place of residence, email addresses, telephone numbers or Meta IDs of the users are transmitted to Meta in encrypted form to form target groups (“Custom Audiences” or “Look Alike Audiences”). This also includes data from non-Meta users and from users who are not logged in to Meta when visiting our website. This can also be used to identify website visitors who have deactivated the storage of third-party cookies.
If no meta cookies are stored in your browser, you will not be classified into one of the user groups known as “Custom Audience”. However, if the Meta ID contained in the Meta cookie has been assigned to a Meta user, Meta assigns this user to a so-called “Custom Audience” based on the rules we have defined.
According to the case law of the European Court of Justice, we are jointly responsible with Meta for the operation of the tracking pixel with regard to compliance with data protection regulations. In this context, Meta provides the associated IT infrastructure and the social network's website and is generally the primary contact when it comes to the processing of your data on the social network's pages (e.g. information or deletion). However, you can also assert your legal rights against us. In this case, we will forward your inquiries to the operator of the social network. We use the meta pixel to display the “meta ads” we place to meta users who have shown an interest in our online offering or who have certain characteristics that we transmit to meta (so-called “custom audiences”) ).
The legal basis for the use of Meta Custom Audience is your consent in accordance with Article 6 Paragraph 1 Letter a) GDPR.
Further information can be found here and in Meta's data protection declaration.

Paypal
We offer the option of processing the payment process via the payment service provider PayPal, PayPal (Europe) S.à.rl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg.
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered
- "Purchase on account" via PayPal, we pass on your payment details to PayPal as part of payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" via PayPal. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding whether to provide the respective payment method. The credit report can contain probability values ​​(so-called score values). To the extent that score values ​​are included in the results of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. Address data, among other things, is included in the calculation of the score values.
Further data protection information, including information about the credit agencies used, can be found in PayPal's data protection declaration: https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Shopify
We host our website at Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. We use Shopify on the basis of processing on our behalf.
When you visit our website, Shopify collects your IP address as well as information about the device you use and your browser. Shopify also analyzes user behavior and creates user statistics. When you make a purchase via our website, your name, email address, shipping and billing addresses, payment details and other data related to the purchase (e.g. telephone number, amount of sales made, etc.) are collected by Shopify. Shopify stores cookies in your browser for analysis purposes.
All data collected on our website is processed on Shopify’s servers. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by the European Commission's adequacy decision. Further information on Shopify's data protection can be found on the following website: https://www.shopify.de/legal/datenschutz

Shopify Payments
We use the payment service provider "Shopify Payments". If you choose a payment method offered via the payment service provider Shopify Payments, payment processing will be carried out via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process.
Your data will be transmitted to Stripe on the basis of Article 6 (1) (a) GDPR (consent) and Article 6 (1) (b) GDPR (processing to fulfill a contract). You have the option to revoke your consent to data processing at any time. A revocation does not affect the effectiveness of past data processing operations. All data required for payment processing is used exclusively for making payments and is transmitted via the “SSL” procedure. Stripe is PCI DSS certified.
Stripe may transfer, process and store personal data outside the EU. In this case, Stripe has agreed on EU standard contractual clauses for data transfer outside the EU/EEA, which ensure a level of data protection comparable to the GDPR.
Further information about Shopify Payments’ data protection can be found at the following internet address: https://www.shopify.com/legal/privacy.
You can find more information about Stripe’s data protection at: https://stripe.com/de/privacy.

Social plugins
We currently use the following social media plug-ins: Facebook, Twitter, Xing, LinkedIn, Snapchat, Tik Tok, Pinterest. With the help of a button, personal data is transmitted to the respective plug-in provider and stored there.
The respective plug-in provider saves the data collected about you as usage profiles and uses them for advertising, market research and/or needs-based design of its website. Such an evaluation is carried out in particular (also for users who are not logged in) to display tailored advertising and to inform other users of the social network about your activities on some of our websites. You have the right to object to the creation of these user profiles; to exercise this you must contact the respective plug-in provider. Through the plug-ins we offer you the opportunity to interact with social networks and other users so that we can improve our offering and make it more interesting for you as a user. The legal basis for the use of the plug-ins is Article 6 Paragraph 1 Letter f GDPR.
The data is passed on regardless of whether you have an account with the plug-in provider and are logged in there. If you are logged in to the plug-in provider, the data we collect will be assigned directly to your existing account with the plug-in provider. For US providers, transmission takes place in the USA;
Further information on the purpose and scope of data collection and its processing by the plug-in provider can be found in the data protection declarations of these providers provided below. There you will also find further information about your rights in this regard and setting options to protect your privacy:
• Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 D02 X525, Ireland
www.facebook.com/policy.php
• Twitter, Inc., 1355 Market St, Suite 900, San Francisco, California 94103, USA
twitter.com/privacy
• Xing AG, Gänsemarkt 43, 20354 Hamburg, DE
http://www.xing.com/privacy
• LinkedIn Corporation, 2029 Stierlin Court, Mountain View, California 94043, USA
linkedin.com/legal/privacy-policy
• Snap Group Limited, 77 Shaftesbury Avenue, London, W1D 5DU, UK
https://snap.com/de-DE/privacy/privacy-policy
• TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland
https://www.tiktok.com/legal/privacy-policy?lang=de-DE
• Pinterest Inc., 635 High Street, Palo Alto, CA, USA
https://about.pinterest.com/de/privacy-policy


Tik Tok
On our TikTok channel we present our services in short form and inform you about ongoing promotions. The user’s personal data is processed by TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland (“TikTok”). TikTok's privacy policy can be found at:
https://www.tiktok.com/legal/privacy-policy?lang=de-DE
TikTok's analytics features allow us to measure the performance of our channel. For this purpose, TikTok provides us with, among other things, the following information in statistical form: Audiences (e.g. characteristics of target groups for the delivery of advertisements such as age, gender and country), interactions (e.g. likes, duration of video playback), referral information (e.g. from where the users accessed the video), conclusions about individual users and access to individual user profiles are not possible.
For more information about TikTok's analytics features, see:
https://ads.tiktok.com/marketing_api/docs?rid=bfu8bedbv2c&id=100509

Twitter
You can find out about our offers and services on our Twitter channel.
When you visit our channel, Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland (“Twitter”), as the operator, stores and processes personal data to the extent described in the privacy policy. Find Twitter’s privacy policy Here: https://twitter.com/de/privacy
For the purpose of needs-based design and ongoing optimization of our pages, we use the Twitter Analytics statistics service. This service records your activity on our site and provides it to us in anonymized statistics. This gives us insights into, among other things, impressions (how often a specific ad was viewed by Twitter users and by which target groups), conversions (e.g. website visits, registration) and other interactions (e.g. retweets, hashtag clicks). It is not possible for us to draw conclusions about individual users or access individual user profiles.
For more information about Twitter Analytics, see:
https://business.twitter.com/de/advertising/analytics.html

YouTube videos
You can find videos or helpful tips about what we offer on our YouTube channel. The customer service team also answers users’ questions and comments professionally on YouTube. Personal data is stored and processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4 D04 E5W5, Ireland (“Google”), as the operator of YouTube, in accordance with Google’s privacy policy. You can find the data protection policy here: https://policies.google.com/privacy?hl=de&gl=deWith the help of YouTube's analytics functions, we are able to carry out certain statistical evaluations to optimize our channel. This includes in particular details about the most popular videos (e.g. how long users spend, ranking of videos), the target groups (e.g. countries, language settings, age and gender, activity times) and the reach of our channel (e.g. where users were redirected to a video from) and Impressions (e.g. how many users saw a particular ad). It is not possible for us to draw conclusions about individual users or access individual user profiles. Further information about YouTube's analytics functions can be found at: https://support.google.com/youtube/answer/9002587?hl=de

Embedding YouTube videos
This website uses the YouTube embedding function to display and play videos from the provider “YouTube”, which belongs to Google LLC., 1600 Amphitheater Parkway, Mountain View, CA 94043, USA (“Google”).
The extended data protection mode is used here, which, according to the provider, only starts saving user information when the videos are played. If the playback of embedded YouTube videos is started, the provider “YouTube” uses cookies to collect information about user behavior. According to information from “YouTube”, these serve, among other things, to record video statistics, improve user-friendliness and prevent abusive behavior. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not want your profile to be associated with YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Article 6 Paragraph 1 Sentence 1 Letter f of the GDPR on the basis of Google's legitimate interests in the display of personalized advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles; to exercise this you must contact YouTube. Regardless of whether the embedded videos are played, every time this website is accessed, a connection is established to the Google “DoubleClick” network, which can trigger further data processing operations without our influence. Further information on data protection at “YouTube” can be found in the provider’s data protection declaration at: https://www.google.de/intl/de/policies/privacy


15. Data security and backup measures
We are committed to protecting your privacy and keeping your personal information confidential. To this end, we take extensive technical and organizational security precautions, which are regularly checked and adapted to technological progress.
This includes, among other things, the use of recognized encryption methods (SSL or TLS). However, data disclosed in unencrypted form, for example if this is done via unencrypted email, may possibly be read by third parties. We have no influence on that. It is the responsibility of the respective user to protect the data they provide against misuse through encryption or in any other way.

16. Changes to the Privacy Policy
We reserve the right at any time to update this statement as necessary.

17. Your Rights
Here you will find your rights regarding your personal data. Details can be found in Articles 7, 15-22 and 77 GDPR. You can contact the responsible body in this regard (Section 2).

Right to revoke your data protection consent in accordance with Art. 7 Para. 3 Sentence 1 GDPR
You can revoke your consent to the processing of your personal data at any time with future effect. However, this does not affect the lawfulness of the processing carried out until the revocation.

a) Right to information according to Art. 15 GDPR
You have the right to request confirmation as to whether we are processing personal data concerning you. If this is the case, you have the right to access this personal data as well as other information, such as the purposes of processing, the categories of personal data processed, the recipients and the planned duration of storage or the criteria for determining the duration.

b) Right to correction and completion according to Art. 16 GDPR
You have the right to immediately request that incorrect data be corrected. Taking into account the purposes of the processing, you have the right to request the completion of incomplete data.

c) Right to deletion (“right to be forgotten”) according to Art. 17 GDPR
You have the right to deletion if processing is not necessary.
This is the case, for example, if your data is no longer necessary for the original purposes, you have revoked your data protection declaration of consent or the data was processed unlawfully.

d) Right to restriction of processing in accordance with Art. 18 GDPR
You have the right to restrict processing, for example if you believe that the personal data is inaccurate.

e) Right to data portability according to Art. 20 GDPR
You have the right to receive the personal data relating to you in a structured, commonly used and machine-readable format.

f) Right to object according to Art. 21 GDPR
You have the right to object to the processing of certain personal data concerning you at any time for reasons relating to your particular situation.

In the case of direct advertising, you as the data subject have the right to object at any time to the processing of personal data concerning you for the purpose of such advertising; This also applies to profiling insofar as it is connected to such direct advertising.

g) Automated decision in individual cases including profiling in accordance with Art. 22 GDPR
You have the right not to be subject to a decision based solely on automated processing - including profiling - except in the exceptional circumstances mentioned in Article 22 GDPR.

Decision-making based solely on automated processing – including profiling – does not take place.

h) Complaint to a data protection supervisory authority in accordance with Art. 77 GDPR
You can also lodge a complaint with a data protection supervisory authority at any time, for example if you believe that data processing is not in accordance with data protection regulations.