Privacy policy

1) Information on the collection of personal data and contact details of the person responsible.

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data is any data that can be used to identify you personally.

1.2 The controller of data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is RESLA GmbH, Maximilianstraße 34, 87719 Mindelheim, Germany, Tel.: +49 8261 229 88 50, e-mail: info@resla-gmbh.de. The controller of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 The responsible party has appointed a data protection officer, who can be reached as follows: "Roland Späht, Maximilianstraße 34, 87719, Mindelheim, +4982612298851, roland.spaeht@resla-gmbh.de".

1.4 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the person responsible). You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line.

2) Data collection when visiting our website

During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in improving the stability and functionality of our website. A transfer or other use of the data does not take place. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

You can view and extract your personal data on the following page: https://shop.backlaxx.com/pages/gdpr-compliance

3) Hosting & Content Delivery Network

Hosting by Shopify
We use the store system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), for the purpose of hosting and displaying the online store on the basis of processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of Shopify's aforementioned services, data may also be transferred to Shopify Inc, 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc, Shopify Payments (USA) Inc or Shopify (USA) Inc as part of further processing on our behalf. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by adequacy decision of the European Commission. For more information about Shopify's privacy policy, please visit the website below: https://www.shopify.de/legal/datenschutz


Further processing on servers other than the aforementioned of Shopify will only take place within the framework communicated below.

Amazon CloudFront
This website uses the Cloudfront Content Delivery Network (CDN). This is a service provided by Amazon Web Services Inc, 410 Terry Avenue North, Seattle, WA 98109-5210. The Cloudfront CDN makes duplicates of a website's data available on various Amazon Web Services (AWS) servers distributed around the world. This provides faster website load times, increased resiliency, and increased protection against data loss. Some of the images and videos embedded on this website are retrieved from Cloudfront CDN when the page is accessed. Through this retrieval, information about your use of our website (such as your IP address) is transmitted to Amazon's servers in other EU countries and stored there. This happens as soon as you enter our website. The use of Amazon Web Services and the Amazon CDN Cloudfront is done in the interest of a higher reliability of the website, increased protection against data loss and a better loading speed of this website. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f DSGVO. You can learn more about the data protection measures of Amazon Web Services at:
https://aws.amazon.com/de/data-protection/

The current privacy policy of Amazon Web Services can be found at: https://aws.amazon.com/de/privacy/

Amazon Web Services Inc., headquartered in the USA, is certified for the us-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

Cloudflare
backlaxx.com uses functions provided by Cloudflare (Cloudflare Inc., 665 3rd St. 200, San Francisco, CA 94107, USA). These serve to protect the website and optimize it. For this purpose page requests are routed via Cloudflare servers. The legal basis is Art. 6 para. 1 f) DSGVO and in this respect a legitimate interest in the secure operation of our website. You can block the transmission of JavaScript through browser settings or extensions. prevent the transmission to Cloudflare servers. With Cloudflare are an Order processing and the standard contractual clauses agreed. Cloudflare has committed to the EU Cloud Code of Conduct and is certified, among other things, by audits in accordance with according to ISO/IEC 27018:2019, SO/IEC 27701:2019 and ISO 27001:2013, among others. For more information on Security and privacy at Cloudflare can be found at: https://blog.cloudflare.com/whatcloudflare-logs/

Datadog
Functions of the Datadog service are integrated into our website. Datadog is a monitoring system provided by Datadog, Inc, 620 8th Ave, 45th Floor, New York, NY 10018, USA ("Datadog"). The system notifies our development team about possible errors on the website. For this purpose, log data is transmitted to Datadog, which is used to analyze and correct the errors. Standard contractual clauses have been concluded with Datadog for the case of data transfer to the USA. For more information on the collection and use of data, please see the Privacy policy from Datadog

jsDelivr
This site uses a so-called "Content Delivery Network" (CDN) from jsDelivr. A CDN is a service with the help of which the content of our online offer, in particular large media files such as graphics or scripts, can be delivered more quickly with the help of regionally distributed servers connected via the Internet. User data is processed solely for the aforementioned purposes and to maintain the security and functionality of the CDN. For this purpose, the browser you use must connect to the servers of the CDN. Through this, the CDN obtains knowledge that our website was accessed via your IP address. The use is based on our legitimate interests, i.e. interest in a secure and efficient provision, analysis and optimization of our online offer pursuant to Art. 6 para. 1 lit. f. DSGVO. For more information, please see the privacy policy of jsDelivr:
https://www.jsdelivr.com/privacy-policy-jsdelivr-net/

Rudderstock
We use the analytics integration of the customer data management platform RudderStack, operated by RudderStack Inc. located at 96 S. Park Street, 94107 San Francisco, USA. Provided that you have given us your consent in accordance with Art. 6 para. 1 lit. a DSGVO, cookies are set by RudderStack and your data is passed on to Google Analytics via RudderStack in order to analyze user behavior on our website. For this purpose, RudderStack cookies as well as user and referral IDs are stored, which allow us to view information about customer activity on the website, including pages visited, categories of pages visited and session duration in Google Analytics. As there is a transfer of personal data to the USA, further protection mechanisms are required to ensure the level of data protection of the GDPR. To ensure this, we have agreed standard data protection clauses with the provider in accordance with Art. 46 (2) lit. c DSGVO. These oblige the recipient of the data in the USA to process the data in accordance with the level of protection in Europe. In cases where this cannot be ensured even through this contractual extension, we endeavor to obtain additional regulations and commitments from the recipient in the USA. You can find more information about the data protection of the third-party provider on the following website: https://www.rudderstack.com/privacy-policy/ If you would like to learn more about how Google Analytics processes your data, please read the relevant section above.

Shopify CDN
We use the content delivery network Shopify CDN. The provider is Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland (hereinafter "Shopify"). Shopify CDN is a globally distributed content delivery network. This technically routes the transfer of information between your browser and our website through the Content Delivery Network. This allows us to increase the global accessibility and performance of our website. The use of Shopify CDN is based on our legitimate interest in providing our website as error-free and secure as possible (Art. 6 para. 1 lit. f DSGVO).

Bunny
We use a content delivery network of the following provider: BUNNYWAY d.o.o., Cesta komandanta Staneta 4A, 1215 Medvode, Slovenia This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing is carried out to protect our legitimate interest in improving the stability and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR. We have concluded an order processing contract with the provider, which ensures the protection of the data of our website visitors and prohibits unauthorized disclosure to third parties.

4) Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your end device. In some cases, these cookies are automatically deleted again after closing the browser (so-called "session cookies"), in other cases, these cookies remain on your end device for longer and allow page settings to be saved (so-called "persistent cookies"). In the latter case, you can find the storage period in the overview of the cookie settings of your web browser. If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b DSGVO either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a DSGVO in the case of consent given, or in accordance with Art. 6 para. 1 lit. f DSGVO to protect our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit. You can set your browser in such a way that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting

5.1 - Chatra (Roger Wilco LLC)
This website uses technology provided by Roger Wilco LLC, Millen, White, Zelano & Branigan, Jeff Cohen, 2200 Clarendon Blvd, Suite 1400A, Arlington, VA 22201, USA (www.chatra.io) to collect and store pseudonymized data for the purpose of web analytics and to operate the live chat system used to respond to live support requests. From this pseudonymized data, usage profiles can be created under a pseudonym. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor's Internet browser. Among other things, the cookies enable the recognition of the Internet browser. Insofar as the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of our legitimate interest in effective customer service and the statistical analysis of user behavior for optimization purposes.The data collected using Chatra technologies will not be used to personally identify the visitor to this website without the separately granted consent of the data subject and will not be merged with personal data about the bearer of the pseudonym. In order to avoid the storage of Chatra cookies, you can set your Internet browser so that no cookies can be stored on your computer in the future or so that cookies that have already been stored are deleted. However, switching off all cookies may mean that some functions on our Internet pages can no longer be executed. You can deactivate the collection and storage of data for the purpose of creating a pseudonymized user profile at any time with future effect by sending us your objection informally by e-mail to the e-mail address given in the imprint. For the purpose and scope of the data collection and the further processing and use of the data by Chatra, as well as your rights in this regard and setting options for protecting your privacy, please refer to Chatra's privacy policy: https://chatra.io/privacy-policy/

5.2 Rating reminder by Trusted Shops
If you have given us your express consent to this during or after your order in accordance with Art. 6 Para. 1 lit. a DSGVO, we will transmit your e-mail address to the rating platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a rating reminder by e-mail. You can revoke your consent at any time by sending a message to the data controller or to the rating platform.

5.3 When contacting us (e.g. via contact form or e-mail), personal data will be processed - exclusively for the purpose of processing and responding to your request and only to the extent necessary for this purpose. The legal basis for processing this data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f DSGVO. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) lit. b DSGVO. Your data will be deleted when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

5.4 Rating reminder through judge.me
Within our online offer, functions and contents of the service Judge.me can be integrated, in particular for the collection and display of product ratings in our store. Judge.me is a service of Judge.me LLC, PO Box 7403, Jackson, Wyoming 83002, USA. This includes, in particular, a rating and Q&A module on the product pages, with which users can express their liking for the content and products and also write their own content for other users. The privacy policy of Judge.me can be found at: https://judge.me/privacy.

6) Comment function

The follow-up comments can be subscribed to by you as a user. For this purpose, you will receive a confirmation e-mail so that it can be ensured that you are the owner of the specified e-mail address (double opt-in procedure). The legal basis for data processing in the case of comment subscriptions is Art. 6 para. 1 lit. a DSGVO. You can unsubscribe from ongoing comment subscriptions at any time with effect for the future, for more information on the unsubscribe option, please refer to the confirmation email.

7) Use of customer data for direct advertising

7.1 Subscription to our e-mail newsletter
If you subscribe to our e-mail newsletter, we will send you information about our offers on a regular basis. Mandatory information for sending the newsletter is only your e-mail address. The provision of further data is voluntary and will be used to address you personally. For the newsletter dispatch, we use the so-called double opt-in procedure, which ensures that you will only receive newsletters after you have expressly confirmed your consent to receive the newsletter by activating a verification link sent to the specified mail addressBy activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6 Para. 1 lit. a DSGVO. In doing so, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for the newsletter is used strictly for the intended purpose. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the person responsible mentioned at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data for any other purpose that is permitted by law and about which we inform you in this declaration.

7.2 - Newsletter dispatch via Klaviyo
Our e-mail newsletters are sent via the technical service provider "Klaviyo", 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 para. 1 lit. f DSGVO and serves our legitimate interest in the use of a promotional, secure and user-friendly newsletter system. Please note that your data is usually transferred to a Klaviyo server in the USA and stored there. Klaviyo uses this information to send the newsletter on our behalf. Klaviyo does not use the data of our newsletter recipients to write to them itself or to pass it on to third parties. To protect your data in the USA, we have a data processing agreement with Klaviyo in which Klaviyo undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties. You can view Klaviyo's privacy policy here: https://www.klaviyo.com/privacy

7.3 Goods availability notification by e-mail
For temporarily unavailable items, you can sign up to receive email merchandise availability notifications. In this case, we will send you a one-time e-mail message about the availability of the item you have selected. Mandatory information for sending this notification is only your e-mail address. The provision of further data is voluntary and may be used to address you personally. For the mail dispatch, we use the so-called double opt-in procedure, which ensures that you will only receive a notification if you have expressly confirmed your consent in this regard by activating a verification link sent to the specified mail address.With the activation of the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a DSGVO. In doing so, we store your IP address entered by your Internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your e-mail address at a later date. The data we collect when you register for our goods availability e-mail notification service is used strictly for the intended purpose. You can unsubscribe from the availability notifications at any time by sending a message to the responsible person mentioned at the beginning. After unsubscribing, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we inform you in this statement.

8) Data processing for order processing

8.1 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 Para. 1 lit. b DSGVO.If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, e-mail address) provided by you when placing the order in order to inform you personally about upcoming updates within the legally stipulated period within the framework of our legal information obligations pursuant to Art. 6 (1) lit. c DSGVO by suitable means of communication (e.g. by post or e-mail). Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent that this is necessary for the respective information.To process your order, we also work together with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.

8.2 Use of special service providers for order processing and handling
- Xentral
Order processing is carried out via Xentral, a service of Xentral ERP Software GmbH, Fuggerstraße 11, 86150 Augsburg ("Xentral"). Name, address and, if applicable, other personal data will be passed on to Xentral in accordance with Art. 6 Para. 1 lit. b DSGVO for the purpose of processing the online order. Your data will only be passed on to the extent that this is actually necessary for the processing of the order. Xentral is also used for accounting purposes. Xentral processes incoming and outgoing invoices and, if applicable, also the bank transactions of our company in order to automatically record invoices, match them to the transactions and create the financial accounting in a semi-automated process. Insofar as personal data is also processed in this process, the processing is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in the efficient organization and documentation of our business transactions. Details on Xentral's data protection can be viewed at the following link: https://xentral.com/de/datenschutz/

8.3 Transfer of personal data to shipping service providers
- German Post
If the goods are delivered by Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn, Germany), we will pass on your e-mail address to Deutsche Post in accordance with Art. 6 (1) (a) of the German Data Protection Regulation (DSGVO) prior to delivery of the goods for the purpose of coordinating a delivery date or announcing delivery, provided you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to Deutsche Post for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with Deutsche Post or delivery notification is not possible. The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis Deutsche Post.

- DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we will pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a DSGVO prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b DSGVO. The disclosure is made only to the extent necessary for the delivery of goods. In this case, prior coordination of the delivery date with DHL or delivery notification is not possible. The consent can be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DHL.

8.4 Use of payment service providers (payment services)
- Amazon Pay
If you select the payment method "Amazon Pay", the payment will be processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we will pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 (1) lit. b DSGVO. The transfer of your data takes place exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this purpose. If cookies, i.e. small text files that are stored on the end device, are set when using Amazon Pay, this is done exclusively on the basis of your express consent pursuant to Art. 6 (1) lit. a DSGVO. This consent can be revoked at any time via the "Cookie Consent Tool" implemented on the website. You can find more information about the privacy policy of Amazon Payments at the following internet address: https://pay.amazon.de/help/82974

- Apple Pay If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your terminal device running iOS, watchOS or macOS by charging a payment card deposited with "Apple Pay". Apple Pay uses security functions integrated into the hardware and software of your device to protect your transactions. For the release of a payment, the entry of a code previously defined by you as well as the verification by means of the "Face ID" or "Touch ID" function of your terminal device is therefore required.For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the source website to confirm the success of the payment. If personal data is processed during the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b DSGVO. Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was completed successfully. The anonymization completely eliminates any reference to individuals. Apple uses the anonymized data to improve Apple Pay and other Apple products and services. When you use Apple Pay on iPhone or Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate over an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone settings. Go to "Wallet & Apple Pay," and uncheck "Allow payments on Mac." For more information about Apple Pay privacy, visit the web address below: https://support.apple.com/de-de/HT203027

- Google Pay
If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing is carried out via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and having an NFC function by charging a payment card deposited with Google Pay or a payment system verified there (e.g. PayPal). For the release of a payment via Google Pay in the amount of more than €25, the prior unlocking of your mobile end device by the respective verification measure set up (such as facial recognition, password, fingerprint or pattern) is required. For the purpose of payment processing, the information you provide during the ordering process, together with information about your order, will be passed on to Google. Google then transmits your payment information stored in Google Pay in the form of a uniquely assigned transaction number to the source website, with which a completed payment is verified. This transaction number does not contain any information about the real payment data of your payment means deposited in Google Pay, but is created and transmitted as a one-time valid numeric token. For all transactions via Google Pay, Google only acts as an intermediary to process the payment transaction. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the means of payment deposited with Google Pay. Insofar as personal data is processed during the described transfers, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b DSGVO. Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, merchant location and description, a description of the purchased goods or services provided by the merchant, photos that you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description for the reason for the transaction and, if applicable, the offer associated with the transaction. According to Google, this processing is carried out exclusively in accordance with Art. 6 para.1 lit. f DSGVO on the basis of the legitimate interest in proper billing, verification of transaction data and optimization and functional maintenance of the Google Pay service. Google also reserves the right to merge the processed transaction data with further information collected and stored by Google when using other Google services. The terms of use of Google Pay can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de

You can find further information on data protection with Google Pay at the following Internet address: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de

-ipaymentIf the payment method(s) "direct debit via ipayment" and/or "credit card via ipayment" is/are offered, we will pass on your personal data to 1&1 Internet AG, Elgendorfer Str. 57, 56410 Montabaur (hereinafter "1&1") in accordance with Art. 6 Para. 1 lit. b DSGVO for payment processing purposes, insofar as this is necessary for payment processing. For more information on 1&1's handling of personal data, please refer to 1&1's privacy policy at https://www.1und1.de/Datenschutz.

- Klarna
If you select a Klarna payment service, the payment processing will be carried out by Klarna Bank AB (publ), https://www.klarna.com/de/, Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). In order to enable the processing of the payment, your personal data (first and last name, street, house number, zip code, city, gender, email address, phone number and IP address) as well as data related to the order (e.g. invoice amount, article, delivery type) will be forwarded to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 para. 1 lit. a DSGVO during the ordering process. You can see which credit agencies your data may be forwarded to here: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies

The credit report may contain probability values (score values). If score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information obtained about the statistical probability of non-payment for a weighed decision on the establishment, implementation or termination of the contractual relationship. You may withdraw your consent at any time by sending a message to the data controller or to Klarna. However, Klarna remains entitled to process your personal data, if applicable, insofar as this is necessary for the processing of payments in accordance with the contract. Your personal data will be processed in accordance with the applicable data protection regulations and as specified in Klarna's Privacy Policy for Data Subjects Located in Germany. https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy or for affected persons domiciled in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy treated.

- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered

- "Purchase on account" or "installment payment" via PayPal, we will pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing. PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection, including information on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

- Paypal Checkout
This website uses PayPal Checkout, an online payment system from PayPal, which consists of PayPal's own payment methods and local payment methods from third-party providers.When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "Pay Later" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 para. 1 lit. b DSGVO and only insofar as this is necessary for the payment processing. For the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "Pay later" via PayPal - PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 para. 1 lit. f DSGVO on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in terms of the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual payment processing. If you select the PayPal payment method "purchase on account", your payment data will first be transmitted to PayPal in preparation for the payment, whereupon PayPal will forward them to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") in order to process the payment. The legal basis in each case is Art. 6 para. 1 lit. b DSGVO. In this case, RatePay carries out an identity and credit check on its own behalf to determine solvency in accordance with the principle already mentioned above and passes on your payment data to credit agencies on the basis of the legitimate interest in determining solvency in accordance with Art. 6 (1) lit. f DSGVO. A list of the credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/
When using the payment method of a local third party provider, your payment data will first be forwarded to PayPal for the preparation of the payment in accordance with Art. 6 (1) lit. b DSGVO. Depending on your selection of an available local payment method, PayPal will then transmit your payment data to the corresponding provider in order to execute the payment in accordance with Art. 6 (1) lit. b DSGVO:

- Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany)

- iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, The Netherlands)

- giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main, Germany)

- bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium)

- blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland).

- eps (STUZZA Studiengesellschaft für Zusammenarbeit im Zahlungsverkehr GmbH, Frankgasse 10/8, 1090 Vienna, Austria)

- MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France)

- Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland)

For further information on data protection, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, the payment processing is carried out by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process, together with information about your order (name, address, account number, bank routing number, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b DSGVO. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this purpose. You can find more information about the data protection of Shopify Payments at the following Internet address: https://www.shopify.com/legal/privacy. You can find data protection information on Stripe Payments Europe Ltd. here: https://stripe.com/de/privacy

- Stripe
If you choose a payment method of the payment service provider Stripe, the payment is processed via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the ordering process together with information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 para. 1 lit. b DSGVO. You can find more information about Stripe's data protection at the URL https://stripe.com/de/privacy#translation.Stripe reserves the right to perform a credit check based on mathematical-statistical methods in order to safeguard the legitimate interest in determining the User's ability to pay. The personal data necessary for a credit check and obtained in the course of payment processing may be transmitted by Stripe to selected credit agencies, which Stripe discloses to Users upon request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, these have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Stripe uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the authorization to use the selected payment method. You can object to this processing of your data at any time by sending a message to Stripe or the assigned credit agencies.However, Stripe may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

8.5 Credit assessment
If we make advance payments (e.g. delivery on account), we reserve the right to carry out a credit check on the basis of mathematical-statistical methods in order to protect our legitimate interest in determining the solvency of our customers. We transmit the personal data required for a credit check to the following service provider in accordance with Art. 6 Para. 1 lit. f DSGVO: SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. We use the result of the credit assessment with regard to the statistical probability of non-payment for the purpose of deciding on the establishment, implementation or termination of a contractual relationship. You can object to this processing of your data at any time by sending a message to the data controller or to the aforementioned credit agency. However, we may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

9) Online marketing

9.1 Facebook Pixel for the creation of Custom Audiences with extended data matching (with cookie consent tool). Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used in the mode of extended data matching, which is operated by Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook"). Based on his or her explicit consent, when a user clicks on an advertisement played on Facebook and served by us, an addition is added to the URL of our linked page by Facebook Pixel. Then, after redirection, this URL parameter is inscribed in the user's browser via a cookie that our linked page sets itself. In addition, this cookie collects specific customer data, such as the mail address, which we collect on our website linked to the Facebook ad during transactions such as purchase transactions, account logins or registrations (extended data matching). The cookie is then read by Facebook Pixel and allows the data, including specific customer data, to be forwarded to Facebook. With the help of the Facebook Pixel with extended data matching, it is possible for Facebook, on the one hand, to precisely determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook pixel with advanced data matching to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offer or who have certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited), which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel with advanced data matching, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard variant of Facebook Pixel, the extended data matching feature helps us to better measure the effectiveness of our advertising campaigns by capturing more attributed conversions. All transmitted data is stored and processed by Facebook so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with Facebook's data usage policy (https://www.facebook.com/about/privacy/) may use. The data may enable Facebook and its partners to place advertisements on and outside of Facebook.These processing operations are carried out exclusively when explicit consent is given in accordance with Art. 6 Para. 1 lit. a DSGVO. The information generated by Facebook is usually transmitted to a Facebook server and stored there; this may also involve transmission to the servers of Meta Platforms Inc. in the USA. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

9.2 - Google AdSense This website uses Google AdSense, a web advertising service Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, which are text files placed on your computer, to help the website analyze how users use the site. In addition, Google AdSense also uses so-called "web beacons" (small invisible graphics) to collect information, through the use of which simple actions such as visitor traffic on the website can be recorded, collected and analyzed. The information generated by the cookie and / or web beacon (including your IP address) about your use of this website is usually transmitted to a Google server and stored there. This may also involve transmission to the servers of Google LLC. in the USA. Google uses the information thus obtained to carry out an evaluation of your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other data from Google. The information collected by Google may be transferred to third parties if this is required by law and/ or if third parties process this data on behalf of Google.All processing described above, in particular reading out information on the end device used via cookies and/or web beacons, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. Without this consent, Google AdSense will not be used during your visit to the site. You can revoke your consent at any time with future effect by deactivating this service in the "Cookie Consent Tool" provided on the website. Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/

9.3 Use of Affiliate Programs

- ADCELL Partner Program (Firstlead GmbH) We participate in the partner program "ADCELL" of Firstlead GmbH, Rosenfelder St. 15-16, 10315 Berlin (hereinafter "ADCELL"). As part of its services, ADCELL stores cookies on end devices of users for the documentation of transactions (e.g. "sales leads") when a visitor clicks on an advertisement with the partner link. These cookies serve the sole purpose of correctly assigning the success of an advertising medium and the corresponding billing within the network. ADCELL also uses so-called tracking pixels. These allow information such as visitor traffic on the pages to be evaluated.The information generated by cookies and tracking pixels about the use of this website (including the IP address) and delivery of advertising formats are transmitted to a server of ADCELL and stored there. Among other things, ADCELL can recognize that the partner link on this website has been clicked. ADCELL may pass this (anonymized) information on to contractual partners under certain circumstances, but data such as the IP address will not be merged with other stored data. All processing described above, in particular the reading of information on the end device used, only takes place if you have given your express consent to this in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

- Webgains (ad pepper media GmbH)
We participate in the affiliate program "Webgains" of ad pepper media GmbH, FrankenStraße 150C, 90461 Nuremberg, Germany (hereinafter "Webgains"). Webgains is a German affiliate network that offers affiliate marketing. Affiliate marketing is an Internet-based form of distribution that enables commercial operators of websites, so-called merchants or advertisers, to display advertisements, which are usually remunerated via click or sale commissions, on websites of third parties, such as distribution partners, who are also called affiliates or publishers. The merchant provides an advertising medium via the affiliate network, i.e. an advertising banner or other suitable means of Internet advertising, which is subsequently integrated by an affiliate on its own Internet pages. In this context, we have placed advertisements as links on our website. In doing so, we use cookies from Webgains. These are small text files that are stored on your terminal device in order to track the origin of orders generated via such links. This allows Webgains to recognize, among other things, that you have clicked on the partner link on our website. This information is required for payment processing between us and Webgains. Insofar as the information also contains personal data, the described processing is carried out on the basis of our legitimate financial interest in processing commission payments with Webgains pursuant to Art. 6 (1) lit. f DSGVO. For more information on the use of data by Webgains, please refer to the privacy policy of Webgains at https://www.webgains.com/public/de/datenschutzerklaerung/
If you wish to block the evaluation of user behavior via cookies, you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general.As far as legally required, we have obtained your consent pursuant to Art. 6 (1) lit. a DSGVO for the processing of your data as described above. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above to make an objection.

10) Web analytics services

10.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your IP address) will be transmitted to and stored by Google on servers in the United States. This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening and excludes a direct personal reference. Through the extension, your IP address is shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google LLC.server in the USA and shortened there. On our behalf, Google will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. In this context, the IP address transmitted by your browser as part of Google (Universal) Analytics will not be merged with other Google data. Google Analytics also enables the creation of statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called "demographic characteristics". This allows the definition and differentiation of user groups of the website for the purpose of targeting marketing measures. However, data records collected via "demographic characteristics" cannot be assigned to a specific person. Details on the processing triggered by Google Analytics and Google's handling of website data can be found here: https://policies.google.com/technologies/partner-sites
All processing described above, in particular the setting of Google Analytics cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. Without this consent, Google Analytics will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website. We have concluded an order processing agreement with Google for the use of Google Analytics, which obliges Google to protect the data of our site visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Google refers to so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA. Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

10.2 Google Analytics 4
Diese Website nutzt Google Analytics 4, einen Dienst des Unternehmens Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), mit dem die Nutzung von Websites analysiert werden kann. Bei der Nutzung von Google Analytics 4 werden standardmäßig sog. "Cookies" eingesetzt. Cookies sind Textdateien, die auf Ihrem Endgerät gespeichert werden und eine Analyse Ihrer Nutzung einer Website ermöglichen. Die durch Cookies erfassten Informationen über Ihre Nutzung der Website (einschließlich der von Ihrem Endgerät übermittelten, um die letzten Stellen gekürzten IP-Adresse, s. dazu unten) werden in der Regel an einen Server von Google übermittelt und dort gespeichert und verarbeitet. Hierbei kann es auch zu einer Übermittlung von Informationen an die Server des Unternehmens Google LLC mit Sitz in den USA und dort zu weiteren Verarbeitungen der Informationen kommen.
Bei der Nutzung von Google Analytics 4 wird die von Ihrem Endgerät bei Ihrer Nutzung der Website übermittelte IP-Adresse standardmäßig und automatisch stets nur in anonymisierter Weise erhoben und verarbeitet, so dass eine direkte Personenbeziehbarkeit der erfassten Informationen ausgeschlossen ist. Diese automatische Anonymisierung erfolgt dadurch, dass die von Ihrem Endgerät übermittelte IP-Adresse von Google innerhalb von Mitgliedstaaten der Europäischen Union (EU) oder von anderen Vertragsstaaten des Abkommens über den Europäischen Wirtschaftsraum (EWR) um die letzten Stellen gekürzt wird. In unserem Auftrag verwendet Google diese und andere Informationen, um Ihre Nutzung der Website auszuwerten, um Berichte (Reports) über Ihre Website-Aktivitäten bzw. Ihr Nutzungsverhalten zusammenzustellen und um weitere mit Ihrer Website-Nutzung und der Internetnutzung verbundene Dienstleistungen uns gegenüber zu erbringen. Dabei wird die im Rahmen von Google Analytics 4 von Ihrem Endgerät übermittelte und gekürzte IP-Adresse nicht mit anderen Daten von Google zusammengeführt. Die im Rahmen der Nutzung von Google Analytics 4 erfassten Daten werden für 2 Monate aufbewahrt und anschließend gelöscht. Google Analytics 4 ermöglicht über eine spezielle Funktion, die sog. „demografischen Merkmale“, darüber hinaus die Erstellung von Statistiken mit Aussagen über Alter, Geschlecht und Interessen von Website-Nutzern auf Basis einer Auswertung von interessenbezogener Werbung und unter Hinzuziehung von Drittanbieterinformationen. Dies macht die Bestimmung und Unterscheidung von Nutzerkreisen der Website zum Zwecke der zielgruppenoptimierten Ausrichtung von Marketingmaßnahmen möglich. Über die „demografischen Merkmale“ erfasste Daten können jedoch keiner bestimmten Person und somit auch nicht Ihnen persönlich zugeordnet werden. Diese über die Funktion „demografische Merkmale“ erfassten Daten werden für zwei Monate aufbewahrt und anschließend gelöscht.
Alle oben beschriebenen Verarbeitungen, insbesondere das Setzen von Google Analytics-Cookies für die Speicherung und das Auslesen von Informationen auf dem von Ihnen für die Nutzung der Website verwendeten Endgerät, erfolgen nur dann, wenn Sie uns hierfür gemäß Art. 6 Abs. 1 lit. a DSGVO Ihre ausdrückliche Einwilligung erteilt haben. Ohne Ihre Einwilligung unterbleibt der Einsatz von Google Analytics 4 während Ihrer Nutzung der Website. Sie können Ihre einmal erteilte Einwilligung jederzeit mit Wirkung für die Zukunft widerrufen. Um Ihren Widerruf auszuüben, deaktivieren Sie diesen Dienst bitte über das auf der Website bereitgestellte „Cookie-Consent-Tool“. Im Zusammenhang mit dieser Website wird als Erweiterung von Google Analytics 4 auch der Dienst Google Signals eingesetzt. Mit Google Signals können wir geräteübergreifende Berichte (Reports) durch Google erstellen lassen (sog. „Cross Device Tracking“). Sofern Sie in Ihren Einstellungen in Ihrem Google-Konto die „personalisierten Anzeigen“ aktiviert und Ihre internetfähigen Endgeräte mit Ihrem Google-Konto verknüpft haben, kann Google das Nutzungsverhalten bei Erteilung Ihrer Einwilligung in den Einsatz von Google Analytics 4 gemäß Art. 6 Abs. 1 lit. a DSGVO geräteübergreifend analysieren und hierauf basierende Datenbankmodelle erstellen. Berücksichtigt werden dabei die Anmeldungen und Gerätetypen aller Website-Nutzer, die in einem Google-Konto angemeldet waren und eine Conversion ausgeführt haben. Die Daten zeigen unter anderem, auf welchem Endgerät Sie das erste Mal auf eine Anzeige geklickt haben und auf welchem Endgerät die diesbezügliche Conversion erfolgt ist. Wir erhalten hierbei keine personenbezogenen Daten von Google, sondern lediglich auf Basis von Google Signals erstellte Statistiken. Sie haben die Möglichkeit, die Funktion „personalisierte Anzeigen“ in den Einstellungen Ihres Google-Kontos zu deaktivieren und damit die geräteübergreifende Analyse im Zusammenhang mit Google Signals abzustellen. Folgen Sie hierzu den Hinweisen auf dieser Seite: https://support.google.com/ads/answer/2662922?hl=de Weitergehende Informationen zu Google Signals finden Sie unter folgendem Link: https://support.google.com/analytics/answer/7532985?hl=de
We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, by which Google is obliged to protect the data of our website users and not to pass it on to third parties. To ensure compliance with the European level of data protection, even in the event of any transfer of data from the EU or EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at https://policies.google.com/privacy?hl=de&gl=de and under https://policies.google.com/technologies/partner-sites

10.3 - Hotjar (hotjar Ltd.)
This website uses the web analytics service Hotjar of Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).This tool can be used to track movements on the websites on which Hotjar is used (so-called heat maps). For example, it is possible to see how far users scroll and how often they click on which buttons. Furthermore, with the help of the tool it is also possible to obtain feedback directly from the users of the website. In this way, we obtain valuable information to make our websites even faster and more customer-friendly. When using this tool, we pay particular attention to the protection of your personal data. For example, we can only track which buttons you click and how far you scroll. Areas of the websites in which personal data of you or third parties are displayed are automatically hidden by Hotjar, and are therefore not traceable at any time. All processing described above, in particular the reading of information on the end device used, is only carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.


10.4 Tracify
We use the web analytics service Tracify on our website or on parts of our website to record how our website is used by its visitors and to evaluate and optimize the effectiveness of our advertising/marketing measures. Tracify is web analytics service provided by Tracify GmbH in Munich, Germany. Tracify GmbH acts for us as a processor on the basis of a commissioned processing agreement pursuant to Art. 28 DSGVO. Tracify enables an analysis of the use of the website and the customer journey without storing cookies or other information on the end device of the user, but only on the basis of browser and device information, such as the IP address of the user, the configuration of the respective user agent (user agent string), the screen resolution, the installed fonts and plugins and the processor of the respective device. The information transmitted to Tracify is completely and irreversibly anonymized immediately after transmission, so that a personal reference is excluded. Only the anonymized aggregated information is analyzed. The data processing when using Tracify takes place entirely in Germany, there is no data transfer to unsafe third countries without an adequate level of data protection. The legal basis for the use of Tracify is our legitimate interest pursuant to Art. 6 para. 1 lit. f) DSGVO in a demand-oriented design of the website and in the evaluation and optimization of our marketing measures.

10.5 Google Tag Manager
We use the Google Tag Manager. The provider is Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. The Google Tag Manager is a tool that allows us to integrate tracking or statistical tools and other technologies on our website. The Google Tag Manager itself does not create user profiles, does not store cookies and does not perform any independent analyses. It only serves to manage and play out the tools integrated via it. However, the Google Tag Manager collects your IP address, which may also be transferred to Google's parent company in the United States. The use of the Google Tag Manager is based on Art. 6 (1) lit. f DSGVO. The website operator has a legitimate interest in a quick and uncomplicated integration and management of various tools on his website. If a corresponding consent has been requested, the processing is based exclusively on Art. 6 para. 1 lit. a DSGVO; the consent can be revoked at any time.

10.6 NEORY Wir verwenden auf unserem Internetauftritt "NEORY", einen Dienst der NEORY GmbH, Hafenpromenade 3a, 44263 Dortmund, Deutschland (nachfolgend bezeichnet als: "NEORY"). NEORY speichert und verarbeitet Informationen über Ihr Nutzerverhalten auf unserem Internetauftritt. NEORY verwendet hierfür unter anderem Cookies, also kleine Textdateien, die lokal im Zwischenspeicher Ihres Webbrowsers auf Ihrem Endgerät gespeichert werden und die eine Analyse der Benutzung unseres Internetauftritts durch Sie ermöglichen. Wir verwenden NEORY zu Marketing- und Optimierungszwecken, insbesondere um die Nutzung unseres Internetauftritts analysieren und um einzelne Funktionen und Angebote sowie das Nutzungserlebnis fortlaufend verbessern zu können. Durch die statistische Auswertung des Nutzerverhaltens können wir unser Angebot verbessern und für Sie als Nutzer interessanter ausgestalten. Hierin liegt auch unser berechtigtes Interesse an der Verarbeitung der vorstehenden Daten durch den Drittanbieter. Rechtsgrundlage ist Art. 6 Abs. 1 S. 1 lit. f) DSGVO. Die Installation von Cookies können Sie verhindern, indem Sie vorhandene Cookies löschen und eine Speicherung von Cookies in den Einstellungen Ihres Webbrowsers deaktivieren. Wir weisen darauf hin, dass Sie in diesem Fall möglicherweise nicht alle Funktionen unseres Internetauftritts vollumfänglich nutzen können. Sie können die Erfassung der vorgenannten Informationen durch NEORY auch dadurch verhindern, indem Sie auf einer der nachfolgend verlinkten Webseiten ein Opt-Out-Cookie setzen: https://www.neory.com/privacy.html http://www.youronlinechoices.com/de/praferenzmanagement/ Wir weisen Sie darauf hin, dass diese Einstellung gelöscht wird, wenn Sie Ihre Cookies löschen. Sie können der Erfassung und Weiterleitung personenbezogenen Daten widersprechen oder die Verarbeitung dieser Daten verhindern, indem sie die Ausführung von Java-Script in Ihrem Browser deaktivieren. Zudem können Sie die Ausführung von Java-Script Code insgesamt dadurch verhindern, indem Sie einen Java-Script-Blocker installieren (z.B. https://noscript.net/ oder https://www.ghostery.com). Wir weisen darauf hin, dass Sie in diesem Fall möglicherweise nicht alle Funktionen unseres Internetauftritts vollumfänglich nutzen können. Informationen des Drittanbieters: NEORY GmbH, Hafenpromenade 3a, 44263 Dortmund, Deutschland. Weitere Informationen des Drittanbieters zum Datenschutz können Sie der nachfolgenden Webseite entnehmen: https://www.neory.com/privacy.html 10.7 Klar! Diese Website nutzt den Webanalysedienst des folgenden Anbieters: Klar Insights GmbH, Marktstr. 18, 80802 München, Deutschland Mithilfe von Cookies und/oder vergleichbaren Technologien (Tracking-Pixel, Web-Beacons, Algorithmen zum Auslesen von Endgeräte- und Browserinformationen) erhebt und speichert der Dienst pseudonymisierte Besucherdaten, darunter Informationen des verwendeten Endgeräts wie die IP-Adresse und Browserinformationen, um sie für statistische Analysen des Nutzungsverhaltens auf unserer Website auszuwerten und pseudonymisierte Nutzungsprofile zu erstellen. Unter anderem ist so die Auswertung von Bewegungsmustern (sog. Heatmaps) möglich, welche die Dauer von Seitenbesuchen sowie Interaktionen mit Seiteninhalten (z. B. Texteingaben, Scrollen, Klicks und Mouse-Overs) aufzeigen. Die Pseudonymisierung schließt eine direkte Personenbeziehbarkeit grundsätzlich aus. Eine Zusammenführung mit auf andere Weise erhobenen Klardaten zu Ihrer Person findet nicht statt. Alle oben beschriebenen Verarbeitungen, insbesondere das Auslesen oder Speichern von Informationen auf dem verwendeten Endgerät, werden nur dann vollzogen, wenn Sie uns gemäß Art. 6 Abs. 1 lit. a DSGVO dazu Ihre ausdrückliche Einwilligung erteilt haben. Sie können Ihre erteilte Einwilligung jederzeit mit Wirkung für die Zukunft widerrufen, indem Sie diesen Dienst in dem auf der Webseite bereitgestellten „Cookie-Consent-Tool“ deaktivieren. Wir haben mit dem Anbieter einen Auftragsverarbeitungsvertrag geschlossen, der den Schutz der Daten unserer Seitenbesucher sicherstellt und eine unberechtigte Weitergabe an Dritte untersagt.

10.7 VWO
Wir nutzen für unsere Webseite den Webanalysedienst Visual Website Optimizer („VWO“), betrieben von der Wingfy (14th Floor, KLJ Tower North, Netaji Subhash Place, Pitam Pura, Delhi 110034, Indien). Mit Hilfe von VWO werden auf Basis unseres berechtigten Interesses an der statistischen Analyse des Nutzerverhaltens zu Optimierungs- und Marketingzwecken pseudonymisierte Besucherdaten gesammelt, ausgewertet und gespeichert. Wir erstellen mit VWO Usertests zur Optimierung und Weiterentwicklung unserer Webseite. VWO analysiert dabei statistische Daten über die Nutzung unseres Webangebots. Zusätzlich wird das Tool als A/B-Testtool herangezogen. Dabei werden Daten wie zum Beispiel die Anzahl der Besucher, das Klickverhalten und die durchschnittliche aktive Verweildauer der Webseitennutzer, den entsprechenden Testvarianten zugeordnet. VWO verwendet Cookies, die unter anderem dazu dienen, den Browser des Besuchers wiederzuerkennen und ermöglichen so eine genauere Ermittlung der Statistikdaten. Die IP-Adresse des Nutzers hat an den erhobenen Informationen teil, wird aber sofort nach der Erhebung und vor deren Speicherung pseudonymisiert, um den Personenbezug auszuschließen. Um der Datenerhebung und -speicherung Ihrer pseudonymisierten Besucherdaten für die Zukunft zu widersprechen, können Sie unter nachfolgendem Link einen Opt-Out-Cookie von VWO beziehen, dieser bewirkt, dass zukünftig keine Besucherdaten Ihres Browsers bei VWO erhoben und gespeichert werden: vwo.com/opt-out. Der Opt-Out-Cookie wird von VWO gesetzt. Mehr Informationen zum Thema Datenschutz finden Sie unter: vwo.com/privacy-policy.


11) Retargeting/ Remarketing/ Referral advertising

Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, with this we advertise for this website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your terminal device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. Additional data processing only takes place if you have consented to Google linking your Internet and app browsing history to your Google account and using information from your Google account to personalize ads that you view on the web. In this case, if they are logged into Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, Google temporarily links your personal data with Google Analytics data to form target groups. The use of Google Ads Remarketing may also involve the transmission of personal data to the servers of Google LLC. in the USA. Details on the processing triggered by Google Ads Remarketing and on Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/ Further information and the privacy policy regarding advertising and Google can be viewed here: https://www.google.com/policies/technologies/ads/
All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

Kupona (KUPONA Ltd.)
This website uses retargeting technology from KUPONA GmbH, Frankfurter Straße 8, 36043 Fulda ("Kupona"). This makes it possible to target visitors to our website with personalized, interest-related advertising who have already shown interest in our store and our products. The advertising material is displayed on the basis of a cookie-based analysis of previous user behavior, but no personal data is stored. In the cases of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymized data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You are thus shown advertising that is most likely to match your product and information interests. All processing described above, in particular the setting of cookies for reading out information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.

TikTok Pixel
This website uses the "TikTok Pixel", a tracking technology of the social network "TikTok" of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland ("TikTok"). With the help of cookies (small text files that are stored on the end device used), information about the surfing behavior on our website is collected in pseudonymized form, transmitted to TikTok, stored there and analyzed to then enable the playout of interest-based and personalized product recommendations on TikTok. The object of the information collected and processed pseudonymously in this way is basically the device ID, the device type, time stamp, the operating system used and the IP address. The information can be assigned to the person of the User with the aid of further information that TikTok has stored about the User, e.g. due to the ownership of an account on the social network "TikTok". TikTok may also combine the information collected through the pixel with other information that TikTok has collected through other websites and / or in connection with the use of the social network "TikTok", and thus create pseudonymous usage profiles. In no case can the information collected be used to personally identify visitors to this website. The TikTok Pixel further enables us to track the effectiveness of advertisements on TikTok. If the user is redirected from an ad on TikTok to pages on this website and the cookies have not yet expired, the pixel captures and can track certain user actions predefined by us (e.g., completed transactions, leads, searches on the website, views of product pages). When such an action is performed, your browser sends an HTTP request from the cookie to TikTok's server via the TikTok pixel, with which certain information about the action is transmitted. Through this transmission, TikTok can compile statistics about the usage behavior on our website after forwarding from a TikTok ad, which serve us to optimize our offer.All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. We have entered into an order processing agreement with TikTok for the use of the TikTok Pixel, which obligates TikTok to protect the data of our site visitors and not to disclose it to third parties. TikTok generally transmits collected information outside the European Economic Area and relies on so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.

12) Page functionalities

12.1 Facebook plugins with 2-click solution
Our website uses so-called social plugins ("plugins") of the social network Facebook, which is operated by Meta Platforms Ireland Ltd, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). To increase the protection of your data when visiting our website, the plugins are initially deactivated by means of a so-called "2-click" solution integrated into the page. You can recognize deactivated plugins by the fact that they are grayed out. This integration ensures that when you call up a page of our website that contains such plugins, no connection is yet established with the Facebook servers. Only when you activate the plugins and thus give your consent to the data transfer in accordance with Art. 6 (1) lit. a DSGVO, your browser establishes a direct connection to the Facebook servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of the data that Facebook collects with the help of the plugins. According to our knowledge, Facebook in any case receives information about which of our websites you have currently and previously accessed. By integrating the plugins, Facebook also receives the information that your browser has accessed the corresponding page of our website if you do not have a profile on Facebook or are not currently logged in. The information collected (including your IP address) is transmitted from your browser directly to a server of Meta Platforms Inc. in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed there to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data that has already been transferred to Facebook. The purpose and scope of the data collection and the further processing and use of the data by Facebook, as well as your rights in this regard and setting options for protecting your privacy, can be found in Facebook's privacy policy: https://www.facebook.com/policy.php

12.2 Use of Youtube videos
This website uses the Youtube embedding function to display and play videos from the provider "Youtube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider "Youtube" uses cookies to collect information about user behavior. According to information from "Youtube", these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behavior. If you are logged in to Google, your data is directly assigned to your account when you click on a video. If you do not want the assignment to your YouTube profile, you must log out before activating the button. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. The use of YouTube may also result in the transmission of personal data to the servers of Google LLC. in the USA. Independently of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence. All processing described above, in particular the reading of information on the end device used via the tracking pixel, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO. Without this consent, Youtube videos will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website via alternative options communicated to you on the website. For further information on data protection at "Youtube", please refer to the Youtube terms of use at https://www.youtube.com/static?template=terms and in Google's privacy policy at https://www.google.de/intl/de/policies/privacy

12.3 - Best Currency Converter
This website uses the service "Best Currency Converter" of Grizzly Apps SRL, Str. Muresului Nr. 7 Bloc E23, Scara B, Apartament 15, Brasov, Romania ("Best Currency Converter"). Based on our legitimate interest in displaying prices in the local currency of your location, Best Currency Converter collects your IP address pursuant to Art. 6 (1) lit. f DSGVO and evaluates it in order to adapt price displays on the website to your location. A permanent storage of the IP address does not take place. Furthermore, Best Currency Converter sets a functional cookie in the browser of your end device after the first currency adjustment in order to save the currency setting for the duration of a session. After this session expires, the cookie is automatically deleted.For more information about the privacy policy of "Best Currency Converter", see https://currency.grizzlyapps.com/privacy-policy

12.4 - Typeform
To conduct surveys or for online forms, we use the service of TYPEFORM SL Carrer Bac de Roda, 163, local, 08018 Barcelona, Spain ("Typeform"). Typeform enables us to design and evaluate surveys and online forms. In addition to the respective personal data you enter into the forms, information about your operating system, browser, date and time of your visit, referrer URL and your IP address is also collected, transmitted to Typeform and stored on Typeform's servers. The storage of the information you enter in the forms is password-protected to ensure that third-party access is excluded and that only we can evaluate the information data for the purpose specified in the form.When processing personal data that is required to fulfill a contract with you (this also applies to processing operations that are required to carry out pre-contractual measures), Art. 6 (1) lit. b DSGVO serves as the legal basis. If you have given us your consent for the processing of your data, the processing is based on Art. 6 (1) a DSGVO. Consent given can be revoked at any time with effect for the future.We have concluded an order processing contract with Typeform for the use of the above services, which obliges Typeform to protect the data of our site visitors and not to pass it on to third parties, and you can find Typeform's privacy policy at: https://admin.typeform.com/to/dwk6gt/

12.5 - Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google") for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly. For this purpose, the browser you are using must connect to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google obtains knowledge that our website was accessed via your IP address. The processing of personal data in the course of establishing a connection with the provider of the fonts is only carried out if you have given us your express consent to do so in accordance with Art. 6 Para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website. If your browser does not support web fonts, a default font will be used by your computer. You can find more information about Google Web Fonts at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

12.6 Google reCAPTCHA
On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is primarily used to distinguish whether an input is made by a natural person or is abused by machine and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in determining individual ownership on the Internet and the prevention of abuse and spam. In the context of the use of Google reCAPTCHA, there may also be a transmission of personal data to the servers of Google LLC. in the U.S.A.Further information on Google reCAPTCHA as well as the privacy policy of Google can be viewed at: https://www.google.com/intl/de/policies/privacy/
As far as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 para. 1 lit. a DSGVO. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the option described above to make an objection.

13) Tools and other

13.1 - DATEV
We use the cloud-based accounting software of DATEV eG, Paumgartnerstr. 6-14, 90429 Nuremberg ("DATEV") to handle our accounting. DATEV processes incoming and outgoing invoices and, if applicable, also the bank transactions of our company in order to automatically record invoices, match them to the transactions and create the financial accounting from this in a partially automated process. If personal data is also processed in this process, the processing is carried out in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in the efficient organization and documentation of our business transactions. You can find more information about DATEV, the automated processing of data and the data protection regulations under https://www.datev.de/web/de/m/ueber-datev/datenschutz/

- Xentral ERP We use the cloud-based accounting software of Xentral ERP Software GmbH, Fuggerstraße 11, 86150 Augsburg, Germany ("Xentral ERP") to handle our accounting. Xentral ERP processes incoming and outgoing invoices and, if applicable, also the bank transactions of our company in order to automatically record invoices, match them to transactions and create the financial accounting from this in a semi-automated process. If personal data is also processed in this process, the processing is carried out in accordance with Art. 6 (1) f DSGVO on the basis of our legitimate interest in the efficient organization and documentation of our business transactions. For more information about Xentral ERP, the automated processing of data and data protection regulations, please visit https://xentral.com/de/datenschutz/

13.2 Cookie Consent Tool
This website uses a cookie consent tool to obtain effective user consent for cookies and cookie-based applications that require consent. The "cookie consent tool" is displayed to users in the form of an interactive user interface when they access the page, on which consent for certain cookies and/or cookie-based applications can be given by ticking the appropriate box. By using the tool, all cookies/services requiring consent are only loaded if the respective user grants the corresponding consent by setting a check mark. This ensures that such cookies are only set on the respective user's end device if consent has been granted. The tool sets technically necessary cookies to save your cookie preferences. Personal user data is generally not processed in this context. If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 (1) lit. f DSGVO on the basis of our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website. Further legal basis for the processing is Art. 6 para. 1 lit. c DSGVO. As the responsible party, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.Further information on the operator and the setting options of the cookie consent tool can be found directly in the corresponding user interface on our website.

13.3 Translation service Weglot
This website uses the translation service Weglot, registered at 138 rue Pierre Joigneaux, 92270 Bois-Colombes, France. Weglot is registered in the Nanterre Trade, company register no. 818 164 964. Weglot is loaded when you visit the website, so you can change the language to other than German by clicking on the language icon in the footer of the website. This allows a direct connection to be established between your browser and the Weglot server when you visit this website. Weglot thereby receives the information that you have visited this website with your IP address. The storage and analysis of the data is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in the presentation of a significant scope of its website in common languages for non-German speaking visitors. If a corresponding consent has been requested (e.g. consent to store cookies), the processing is based exclusively on Art. 6 (1) lit. a DSGVO; the consent can be revoked at any time. For more information, please see Weglot's privacy policy:
https://weglot.com/privacy/.


13.4 Imgix
We use imgix to optimize the images in real time. For this purpose, your IP address is transmitted to imgix (imgix Inc., 423 Tehama St, San Francisco, CA 94103, USA). These processing operations are carried out exclusively when explicit consent is given in accordance with Art. 6 Para. 1 lit. a DS-GVO. For more info, please visit privacy@imgix.com

13.5 OSANO
Our website uses Osano's cookie consent technology to obtain your consent to the storage of certain cookies on your terminal device and to document this in accordance with data protection law. The provider of this technology is Osano, Inc, 3800 North Lamar Blvd, Suite 200, Austin, Texas 78756, USA (hereinafter "Osano").When you enter our website, a connection is established to Osano's servers to obtain your consent and other declarations regarding cookie use. Subsequently, Osano stores a cookie in your browser in order to be able to assign the consents granted to you or their revocation. The data collected in this way is stored until you request us to delete it, delete the Osano cookie yourself or the purpose for storing the data no longer applies. Mandatory legal storage obligations remain unaffected. According to Osano, the data of European website visitors remains in the EU by being processed exclusively on regional servers.Osano is used to obtain the legally required consent for the use of cookies. The legal basis for this is Art. 6 para. 1 lit. c DSGVO. Conclusion of a contract for order processing We have concluded an order processing contract with Osano. This is a contract required by data protection law, which ensures that Osano only processes the personal data of our website visitors in accordance with our instructions and in compliance with the DSGVO.

14) Rights of the data subject

14.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise prerequisites: Right to information pursuant to Art. 15 GDPR; Right to rectification pursuant to Art. 16 GDPR; Right to erasure pursuant to Art. 17 GDPR; Right to restriction of processing pursuant to Art. 18 GDPR; Right to information pursuant to Art. 19 GDPR; Right to data portability pursuant to Art. 20 GDPR; Right to revoke consent given pursuant to Art. 7(3) GDPR; Right to lodge a complaint pursuant to Art. 77 GDPR.

14.2 RIGHT OF OBJECTION IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING IS FOR THE PURPOSE OF ASSERTING, EXERCISING OR DEFENDING LEGAL CLAIMS.IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA RELATING TO YOU FOR THE PURPOSE OF SUCH MARKETING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.

15) Duration of the storage of personal data

The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and - if relevant - additionally by the respective legal retention period (e.g. retention periods under commercial and tax law).When processing personal data on the basis of express consent pursuant to Art. 6 (1) a DSGVO, this data is stored until the data subject revokes his consent. If there are legal retention periods for data that is processed within the scope of legal business or similar obligations on the basis of Art. 6 Para. 1 lit. b DSGVO, this data will be routinely deleted after the retention periods have expired, insofar as it is no longer required for the fulfillment of a contract or the initiation of a contract and/or there is no continued legitimate interest on our part in the continued storage. When processing personal data on the basis of Art. 6(1)(f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Art. 21(1) DSGVO, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims. When processing personal data for the purpose of direct marketing on the basis of Article 6 (1) (f) DSGVO, this data is stored until the data subject exercises his or her right to object pursuant to Article 21 (2) DSGVO. Unless otherwise stated in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

Follow us on Instagram