Privacy policy

Privacy Policy

I. Name and address of the responsible person

  1. The responsible party within the meaning of the General Data Protection Regulation and other national data protection laws of the member states as well as other data protection regulations is:

DVS Beregnung
Herr Andreas Maurer
Ernst-Simon-Str. 8
72072 Tübingen

Telephone: +49 7071 1450050
E-Mail: [email protected]

II. General information on data processing

  1. Scope of the processing of personal data

As a matter of principle, we collect and use personal data of our users only insofar as this is necessary for the provision of a functional website as well as our contents and services. The collection and use of personal data of our users is regularly carried out only with the consent of the user. An exception applies in those cases where it is not possible to obtain prior consent for factual reasons and the processing of the data is permitted by legal regulations.

  1. Legal basis for the processing of personal data

Insofar as we obtain the consent of the data subject for processing operations involving personal data, Article 6 (1) (a) of the EU General Data Protection Regulation (GDPR) serves as the legal basis for the processing of personal data.

When processing personal data that is necessary for the performance of a contract to which the data subject is a party, Art. 6 (1) (b) DSGVO serves as the legal basis. This also applies to processing operations that are necessary for the performance of pre-contractual measures.

Insofar as processing of personal data is necessary for the fulfillment of a legal obligation to which our company is subject, Art. 6 (1) lit. c DSGVO serves as the legal basis.

In the event that vital interests of the data subject or another natural person make processing of personal data necessary, Art. 6 (1) lit. d DSGVO serves as the legal basis.

If the processing is necessary to protect a legitimate interest of our company or a third party and the interests, fundamental rights and freedoms of the data subject do not override the first-mentioned interest, Art. 6 (1) f DSGVO serves as the legal basis for the processing.

  1. Data deletion and storage period

The personal data of the data subject will be deleted or blocked as soon as the purpose of storage ceases to apply. In addition, storage may take place if this has been provided for by the European or national legislator in Union regulations, laws or other provisions to which the person responsible is subject. Data will also be blocked or deleted if a storage period prescribed by the aforementioned standards expires, unless there is a need for further storage of the data for the conclusion or performance of a contract.

III. Provision of the website and creation of log files

  1. Description and scope of data processing

Each time our website is called up, our system automatically collects data and information from the computer system of the calling computer.

The following data is collected in this process:

  • Information about the browser type and the version used
  • The operating system of the user
  • The user's Internet service provider
  • The anonymized IP address of the user
  • Date and time of access
  • Websites from which the user's system accesses our website

This data is also stored in the log files of our system. Not affected by this are the IP addresses of the user or other data that allow the data to be assigned to a user. This data is not stored together with other personal data of the user.

  1. Legal basis for data processing

The legal basis for the temporary storage of the data is Art. 6 para. 1 lit. f DSGVO.

  1. Purpose of data processing

The temporary storage of the IP address by the system is necessary to enable delivery of the website to the user's computer. For this purpose, the user's IP address must remain stored for the duration of the session. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context.

These purposes are also our legitimate interest in data processing according to Art. 6 para. 1 lit. f DSGVO.

  1. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. In the case of the collection of data for the provision of the website, this is the case when the respective session has ended.

  1. Possibility of objection and removal

The collection of data for the provision of the website and the storage of the data in log files is mandatory for the operation of the website. Consequently, there is no possibility of objection on the part of the user.

IV. General information on the use of cookies on this website

  1. General description of the cookie function

Our website uses cookies. Cookies are text files that are stored in the Internet browser or by the Internet browser on the user's computer system. When a user accesses a website, a cookie may be stored on the user's operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is called up again.

Cookies cannot execute programs or transfer viruses to your computer and therefore cannot cause any damage. Their primary purpose is to make the website as a whole more user-friendly and effective, i.e. more pleasant for you.

Cookies can contain data that make it possible to recognize the device used. In some cases, however, cookies only contain information on certain settings that cannot be related to a specific person. However, cookies cannot directly identify a user.

A distinction is made between transient (session) cookies, which are deleted as soon as you close your browser, and persistent (permanent) cookies, which are stored beyond the individual session.

With regard to their function, a distinction is made between cookies:

 – Technical Cookies: these are mandatory in order to navigate the website, use basic functions and ensure the security of the website; they do not collect information about you for marketing purposes, nor do they store which web pages you have visited;

– Performance/Analyse Cookies: these collect information about how you use our website, which pages you visit and, for example, whether errors occur during website use; they do not collect information that could identify you - all information collected is anonymous and is only used to improve our website and find out what interests our users;

Advertising Cookies, Targeting Cookies: these are used to provide the website user with tailored advertising on the website or offers from third parties and to measure the effectiveness of these offers; advertising and targeting cookies are stored for a maximum of 13 months;

Sharing Cookies: these are used to improve the interactivity of our website with other services (e.g. social networks); sharing cookies are stored for a maximum of 13 months.

  1. Type and scope of data processing through cookies

We primarily use session cookies, which are necessary to design and ensure user-friendly operation of our website. Some elements of our website require that the calling browser can be identified even after a page change. The following data is stored and transmitted in the cookies:

  • Language settings
  • Log-in informationen

In addition, we also use performance/analysis cookies from Google on our website, which enable an analysis of the user's surfing behavior (see V.).

In this way, the following data can be transmitted, among others:

  • Search terms entered
  • Frequency of page views
  • Use of website functions

The user data collected in this way is pseudonymized by technical precautions. Therefore, it is no longer possible to assign the data to the calling user. The data is not stored together with other personal data of the users. More detailed information on data collection via the Google Analytics tool is provided below under V.

When calling up our website, users are informed by an info banner about the use of cookies for analysis and advertising purposes, referred to this data protection declaration and asked for express consent to their use by opt-in.

  1. Legal basis for data processing

The legal basis for the processing of personal data using technically necessary cookies is Art. 6 (1) lit. f DSGVO.

The legal basis for the processing of personal data using cookies for analysis purposes is Art. 6 para. 1 lit. a DSGVO, provided that the user has given his consent to this effect.

  1. Purpose of the data processing

The purpose of using technically necessary cookies is to simplify the use of websites for users. Some functions of our website cannot be offered without the use of cookies. For these, it is necessary that the browser is recognized even after a page change. Our website also uses a consent tool to obtain your consent to the storage of certain cookies in your browser or to the use of certain technologies and to document this in accordance with data protection law.

We require cookies for the following applications:

  • Consent tool to collect and store consent for cookie use
  • Shopping cart content as part of the order process
  • Adoption of language settings
  • Remembering search terms

The user data collected through technically necessary cookies are not used to create user profiles.

The analysis and sharing cookies are used for the purpose of improving the quality of our website and its content. Through these cookies we learn how the website is used by you, which offers and content are of particular interest to you and the extent to which our social media presences are perceived and used as a source of information. In this way, we can constantly optimize our offers and align them to your needs.

  1. Duration of storage, possibility of objection and elimination

With regard to the storage period, a distinction must be made between the following types of cookies

  • Transient Cookies
  • Persistent Cookies

Transient Cookies are automatically deleted when you close the browser. These include, in particular, the necessary session cookies. These store a so-called session ID, with which various requests of your browser can be assigned to the common session. This allows your computer to be recognized when you return to our website. The session cookies are deleted when you log out or close the browser.

Persistent Cookies, which include the analysis and advertising cookies used, are deleted automatically only after a specified period of time, which may differ depending on the cookie. You can delete the cookies in the security settings of your browser at any time. Therefore, you as a user also have full control over the use of cookies. By changing the settings in your Internet browser, you can disable or restrict the transfer of cookies. Cookies that have already been stored can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all functions of the website in full.

  1. Consent to data collection, revocation

You can consent to the collection of your data by analysis advertising cookies or revoke consent previously given. The consent is as well as the revocation via the cookie banner provided by us (cookie consent tool).

V. Use of analysis and advertising tools

  1. Google Analytics

Our website uses for the case of your consent during the time of your visit to our website Google Analytics, a web analytics service provided by Google Inc. ("Google"). The provider is Google Inc, 1600 Amphitheatre Parkway Mountain View, CA 94043, USA.

Google uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookies about your use of the website

  • browser type/version,
  • operating system used,
  • referrer URL (the previously visited page),
  • Hostname des zugreifenden Rechners (IP-Adresse),
  • time of the server request,

are usually transferred to a Google server in the USA and stored there.

The website also uses Google Analytics with the extension "_anonymizeIp()" so that data is only processed anonymously. The IP address is shortened by the last three digits, a clear assignment of the IP address is therefore no longer possible. Only in exceptional cases will the full IP address be transferred to a Google server in the USA and shortened there.

Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. Google may also transfer this information to third parties where required to do so by law, or where such third parties process the information on Google's behalf. Google will not associate your IP address with any other data held by Google.

The storage of Google Analytics cookies and an associated data transfer to Google will only take place with your consent and therefore presently on the basis of Art. 6 para. 1 lit. a DSGVO.

Consent to data collection, revocation

You can consent to the collection of your data by Google Analytics or revoke consent previously given. The consent takes place as well as the revocation via the Cookie- Cookie- Consent- Tool provided by us.

Furthermore, you can initially prevent the installation and storage of cookies by refusing to consent to the use of this service. Furthermore, a general avoidance is possible by a corresponding setting in your browser software. However, we would like to point out that in this case you may not be able to use all functions of this website to their full extent.

You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plugin available under the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser add-on, especially for browsers on mobile devices, you can also prevent the collection by Google Analytics by setting an opt-out cookie in your browser, which prevents the future collection of your data when visiting this website. The opt-out cookie is only valid in this browser and only for our website and is stored on your device. If you delete the cookies in this browser, you must set the opt-out cookie again.

You can find more information about Google Analytics on the Internet at the following link from the manufacturer Google: https://support.google.com/analytics/answer/6004245?hl=de).

To fully comply with the legal data protection requirements, we have concluded an order processing agreement with Google.

  1. Google AdWords and Google Conversion-Tracking

This website uses Google AdWords. AdWords is an online advertising program of Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, United States ("Google").

Within the framework of Google AdWords, we use the so-called conversion tracking. If you click on an ad placed by Google, a cookie is set for conversion tracking, subject to your consent. Cookies are small text files that the Internet browser stores on the user's computer. These cookies lose their validity after 30 days and do not serve to personally identify the user. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google AdWords customer receives a different cookie. The cookies cannot be tracked across AdWords customers' websites. The information obtained using the conversion cookie is used to create conversion statistics for AdWords customers who have opted in to conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information that can be used to personally identify users. If you generally do not wish to participate in tracking, you can object to this use in principle by simply deactivating the Google conversion tracking cookie via your internet browser under user settings. You will then not be included in the conversion tracking statistics.

The storage of "conversion cookies" only takes place with your consent on the basis of Art. 6 (1) lit. a DSGVO.

Consent to data collection, revocation

You can consent to the collection of your data by Google Analytics or revoke consent previously given by clicking on the link to the Consent Tool (bottom left "Cookies").

In this context, you will also receive further information about the scope and purpose of the cookies used.

Incidentally, you can set your browser so that you are informed about the setting of cookies and only allow cookies in individual cases, exclude the acceptance of cookies for certain cases or in general and activate the automatic deletion of cookies when closing the browser. If you disable cookies, the functionality of this website may be limited.

More information on Google AdWords and Google conversion tracking can be found in Google's privacy policy: https://www.google.de/policies/privacy/.

To fully comply with the legal data protection requirements, we have concluded an order processing agreement with Google.

  1. Facebook Pixel

Our website uses the visitor action pixel from Facebook, Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA ("Facebook") for conversion measurement.

This makes it possible to track the behavior of site visitors after they have been redirected to the provider's website by clicking on a Facebook ad. This allows the effectiveness of the Facebook ads to be evaluated for statistical and market research purposes and future advertising measures to be optimized.

The collected data is anonymous for us as the operator of this website, we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes, in accordance with the Facebook Data Use Policy. This allows Facebook to enable the placement of advertisements on Facebook pages as well as outside of Facebook. This use of the data cannot be influenced by us as the site operator. You can find more information about protecting your privacy in Facebook's privacy policy: https://www.facebook.com/about/privacy/. You can also deactivate the "Custom Audiences" remarketing feature in the Ad Settings section at https://www.facebook.com/ads/preferences/?entry_product=ad_settings_screen. To do this, you must be logged into Facebook. If you do not have a Facebook account, you can disable usage-based advertising from Facebook on the European Interactive Digital Advertising Alliance website: http://www.youronlinechoices.com/de/praferenzmanagement/.

  1. Matomo

This website uses the open source web analytics service Matomo. Matomo uses so-called "cookies". These are text files that are stored on your computer and enable an analysis of your use of the website. For this purpose, the information generated by the cookie about the use of this website is stored on our server. The IP address is anonymized before storage.

Matomo cookies remain on your terminal device until you delete them. The storage of Matomo cookies is based on Art. 6 para. 1 lit. a DSGVO.

The information generated by the cookies about the use of this website will not be disclosed to third parties. You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website.

If you do not agree to the storage and use of your data, you can deactivate the storage and use here. In this case, an opt-out cookie will be stored in your browser, which prevents Matomo from storing usage data. If you delete your cookies, this will have the effect that the Matomo opt-out cookie will also be deleted. The opt-out must be reactivated when you visit our site again.

  1. Use of Smartlook

This website uses functions of the web analytics service Smartlook. The provider is Smartlook.com, s.r.o.. ID No.: 095 08 830, Šumavská 524/31, Veveří, 602 00 Brno, Czech Republic, EU .

We use Smartlook to analyze and regularly improve the use of our website. We can use the obtained statistics to improve our offer and make it more interesting for you as a user. On behalf of the operator of this website, Smartlook will use this information for the purpose of evaluating your use of the website, compiling reports on website activity and providing other services relating to website activity and internet usage. The information generated by the cookie about your use of this website is usually transmitted to a Smartlook server and stored there.

We use Smartlook anonymization function on this website. This shortens your IP address and ensures that the analysis data is not personally identifiable. We do not merge the data with other personal data.

We only use the tool in case of your consent, which you can give via the Consent Manager, legal basis is Art. 6 para. 1 p. 1 lit. a DS-GVO. You can also opt out of the analysis function by simply activating the standard "Do not Track" function in your browser. In this case, we will not use your personal data in the manner described here. An explanation of how to activate the "Do not Track" function can be found at this link: https://www.smartlook.com/opt-out/ .

To fully comply with the legal data protection requirements, we have concluded an order processing agreement with Smartlook.

  1. SendinBlue

For the dispatch of newsletters, generally described below under section IX, we use the service of the provider "SendinBlue", registered with the Paris Trade Register under number 498 019 298, with its registered office at 55 Rue d′Amsterdam, 75008 Paris (hereinafter "SendinBlue″). This service allows us to organize and analyze our newsletter distribution. Your data entered to receive the newsletter, such as your email address, are stored on SendinBlue's servers.

Newsletter dispatch with SendinBlue allows us to analyze the behavior of the newsletter recipient. The analysis reveals, among other things, how many recipients actually opened our newsletter and with what frequency links in the newsletter were clicked. SendinBlue supports conversion tracking in order to analyze whether a previously defined action, such as a product purchase, occurred after a link was clicked. Details on data analysis by SendinBlue can be found at: : https://de.sendinblue.com/legal/termsofuse/.

The data processing is based on your consent (Art. 6 para. 1 lit. a DSGVO).

A revocation of your already given consent is possible at any time. For the revocation, an informal message by e-mail or you unsubscribe via the "unsubscribe" link in the newsletter is sufficient. The legality of the data processing operations already carried out remains unaffected by the revocation.

Data entered to set up the subscription will be deleted from our servers and the servers of SendinBlue in the event of unsubscription.

Details of Sendinblue's privacy policy can be found at: https://de.sendinblue.com/legal/privacypolicy/.

In order to fully comply with the legal data protection requirements, we have concluded an order processing agreement with SendinBlue.

  1. HubSpot

We use the services of the software manufacturer HubSpot. HubSpot is a software company from the USA with a branch office in Ireland (HubSpot European Headquarters, Ground Floor, Two Dockland Central, Guild Street, Dublin 1, Ireland).

HubSpot is a service platform. The service used is an integrated software solution that allows us to manage customer data and cover various aspects of our online marketing (Marketing Hub). This includes, among other things, the analysis of landing pages and reporting. In the process, cookies are also stored on the terminal device you use. In this context, the following personal data may be collected and stored:

  • IP address
  • geographical location of the website visitor
  • browser type and version
  • duration of the website visit
  • pages accessed and the content accessed there.

The collected information as well as the content of our website is stored on servers of our software partner HubSpot Ireland. We use HubSpot to analyze the use of our website. This enables us to continuously optimize our website and make it more user-friendly. We also use information to determine which of our company's services are of interest to customers and newsletter subscribers and to contact them for advertising purposes. In addition, we use the evaluation to optimize our web offer for you.

However, we only use your IP address in a shortened version. This means that the IP address of users is shortened by HubSpot within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a HubSpot server in the USA and shortened there.

The information generated by the cookie about the use of the online offer by the user can theoretically also be transmitted to a Google server in the USA and stored there. The processing of the data in the USA is based on EU standard contractual clauses. Through this, HubSpot offers a guarantee of compliance with European data protection law.

We delete the personal data collected via HubSpot as soon as the purpose for which it was collected has been achieved, unless the deletion conflicts with legal retention periods.

The storage of the aforementioned cookies is based on Art. 6 (1) lit. a DSGVO. You can revoke your consent here. Further information on the functioning of HubSpot, can be found in the privacy policy of HubSpot Inc.https://www.hubspot.de/data-privacy/gdpr/product-readiness.

  1. Use of the Google Tag Manager

This website uses the Google Tag Manager of the provider Google, trading as Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland. Through this service, so-called website tags can be managed via an interface. .

These tags are Java script code sections of other tools such as the Google Analytics tracking tool used by us, which are integrated into the source code of our website in a separate folder. .

The Google Tool Manager allows us to implement and control these tags relatively easily in the source code of our website. The Google Tag Manager is therefore primarily an auxiliary service and does not itself process any personal data, unless this is also absolutely necessary for technical reasons.

However, as mentioned, the Google Tool Manager triggers other tags under certain circumstances, such as the already named Google Analytics tool, which in turn may collect personal data. You will be informed separately about the individual tools controlled via GTM within this data protection declaration and any necessary consent to use these tools will be obtained from you.

GTM itself does not access this data. If a deactivation has been made at the domain or cookie level, it will otherwise remain in place for all tracking tags, insofar as these are implemented with the Google Tag Manager.

The legal basis for the use of the Google Tag Manager itself is nevertheless also your expressly granted consent within the meaning of Art. 6 lit a) DSGVO, which we obtain from you as part of our consent banner.

You can find more information about Google Tag Manager in Google's privacy policy. https://policies.google.com/privacy?hl=de

https://support.google.com/tagmanager/answer/7157428?hl=de

Please note that American authorities, such as intelligence agencies, could potentially gain access to personal data that is inevitably exchanged with Google when this service is integrated due to the Internet Protocol (TCP) on the basis of American laws such as the Cloud Act.

VI. Use of tools und plugIns

  1. Google reCAPTCHA

We use "Google reCAPTCHA" (hereinafter "reCAPTCHA") on our websites. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

The purpose of reCAPTCHA is to verify whether data entry on our websites (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the website visitor based on various characteristics. This analysis starts automatically as soon as the website visitor enters the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google.

The reCAPTCHA analyses run entirely in the background. Website visitors are not made aware that an analysis is taking place.

The data processing is based on Art. 6 para. 1 lit. f DSGVO. The website operator has a legitimate interest in protecting its web offers from abusive automated spying and from SPAM.

For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

  1. Google Maps

Our website uses the map service Google Maps via an API. The provider is Google Inc, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

To use the functions of Google Maps, it is necessary to store your IP address. This information is usually transferred to a Google server in the USA and stored there. The provider of this site has no influence on this data transmission.

The use of Google Maps is in the interest of an appealing presentation of our online offers and an easy location of the places indicated by us on the website. This represents a legitimate interest within the meaning of Art. 6 para. 1 lit. f DSGVO.

More information on the handling of user data can be found in Google's privacy policy: https://www.google.de/intl/de/policies/privacy/.

VII. Use of Social Media Plug-Ins

This website also uses so-called plug-ins of the providers Facebook, Twitter, Instagram, Pinterest and YouTube

Facebook is operated by Facebook Inc, 1601 S. California Ave, Palo Alto, CA 94304, USA An overview of Facebook's plug-ins can be found here: https://developers.facebook.com/docs/plugins/

YouTube is operated by, YouTube, LLC, 901 Cherry Ave, San Bruno, CA 94066 USA, represented by Google Inc. ("Google") ibid. Further information about plug-ins from YouTube can be found here, among other places: https://plus.google.com/+youtube/posts

Instagram is offered by Instagram Inc, 1601 Willow Road, Menlo Park, CA, 94025, USA integrated. For more information, please see Instagram's privacy policy: http://instagram.com/about/legal/privacy/.

Pinterest is offered by Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland. For more information, please see Pinterest’s privacy policy: https://policy.pinterest.com/de/privacy-policy

If you call up a subpage of our website that is provided with one of the plug-ins listed above, a connection is established to the servers of the associated provider and the plug-in is displayed on the website by notifying your browser. This transmits to the server of the aforementioned network provider which of our Internet pages you have visited. If you are logged in as a member of one of the providers, the provider assigns this information to your personal user account. When using the plug-in functions (e.g. clicking the "Like" button, submitting a comment on Facebook), this information is also assigned to your account, which you can only prevent by logging out before using the plug-in.

The plugins are regularly activated only when you click on the corresponding buttons. If they are grayed out, the plugins are inactive. You have the option to activate the plugins once or permanently.

The plugins establish a direct connection between your browser and the plug-in providers. This only takes place after the plugin has been activated. As the website operator, we have no influence on the nature and scope of the data that the plugin transmits to the server plugin providers.

For more information about the collection and use of data by the network providers, about your rights in this regard and options for protecting your privacy, please refer to the respective privacy notices of the providers:

Privacy Policy:

Facebook, accessible at: https://www.facebook.com/policy.php

YouTube, accessible at: https://www.google.de/intl/de/policies/privacy/

Pinterest, accessible at: https://policy.pinterest.com/de/terms-of-service

Instagram, accessible at: http://instagram.com/about/legal/privacy/

Data processing via our website is based on Art. 6 para. 1 p. 1 lit. a. DSGVO.

If you do not want the network providers to directly assign the data collected via our website to your user profile, you must log out of your network account before visiting our website. The loading of the plug-ins can also be completely prevented with specially developed add-ons for your browser.

VII. General data processing in the context of the ordering process

  1. Scope of data processing

In the course of the ordering process via our website, we collect personal data such as name, address and email address.

  1. Legal basis of data processing

The legal basis for the storage of your data is Article 6 (1) sentence 1 lit. b DGVO.

  1. Purpose of data processing

We use the data provided by you in the course of the ordering process without your separate consent exclusively for the fulfillment and processing of the contractual relationship concluded with you.

In this context, personal data will only be processed by us to the extent technically necessary. Under no circumstances will personal data be used for any other purpose outside our company, sold or otherwise passed on to third parties without your express consent, which may be revoked at any time. This does not include the transfer of your data to the shipping company commissioned with the delivery, insofar as this is necessary for the delivery of the goods.

To process payments, we pass on your payment data to the credit institution commissioned with the payment. There are various payment methods available to you:

PayPal

If you choose the payment method PayPal, you will be automatically redirected to the online payment service PayPal (Europe) S.a`r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. In this case, the PayPal terms of use apply, which the customer can access at https://www.paypal.com/de/webapps/mpp/ua/useragreement-full or - if no PayPal account is available - at https://www.paypal.com/de/webapps/mpp/ua/privacywax-full.. The payment amount will then be debited from the customer's account after entering the required data and selecting the payment method provided by PayPal (direct debit, credit card, invoice) via PayPal after completion of the order. If the customer chooses "PayPal Invoice" as payment method, the seller assigns his payment claim against the customer to PayPal within the framework of an ongoing factoring contract. In this case, the General Terms of Use for the Use of PayPal Invoice Purchase, available at https://www.paypal.com/de/webapps/mpp/ua/pui-terms, shall apply.

Amazon Payments

If the payment method Amazon Payments is selected, the customer is automatically redirected to the online payment service Amazon, trading under Amazon EU SARL, Amazon Services Europe SARL and Amazon Media EU SARL, all three located at 5, Rue Plaetis L 2338, Luxembourg. In this case, the Amazon terms and conditions of use and protection apply, which the customer can retrieve at https://pay.amazon.com/de/help/201751600. The payment amount will then be debited from the customer's account after entering the required data and selecting the payment method provided by Amazon after completion of the order.

Klarna- Instant bank transfer

If the payment method Instant bank transfer is selected, the customer will be automatically redirected to the online payment service of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden. In this case, the terms of use and privacy policy of Klarna Bank AB apply, which the customer can access at https://www.klarna.com/sofort/datenschutz/. The payment amount will then be debited from the customer's account stored in the payment system after the required data has been entered upon completion of the order.

  1. Duration of storage, possibility of objection and elimination

The user has the possibility to object to the processing of his personal data. If the data is required for the fulfillment of a contract or for the implementation of pre-contractual measures, however, early deletion of the data is only possible insofar as contractual or legal obligations do not prevent deletion.

In this case, once the contract has been completely fulfilled and the purchase price has been paid in full, the user's data will be blocked for further use and deleted after expiry of the provisions of tax and commercial law, unless the user has expressly consented to the further use of this data.

VIII. Newsletter dispatch

  1. Description and scope of data processing

On our website there is the possibility to subscribe to a free newsletter. When registering for the newsletter, the data from the input mask is transmitted to us. To order the newsletter, only the email address is required. The entry of first and last name is optional. In addition, the following data is collected during registration:

  • IP address of the calling computer
  • Date and time of registration

For the processing of data, your consent is obtained during the registration process and reference is made to this privacy policy.

No data will be passed on to third parties in connection with the processing of data for the dispatch of newsletters. The data is used exclusively for sending the newsletter.

  1. Legal basis for data processing

The legal basis for the processing of data after registration for the newsletter by the user is Art. 6 para. 1 lit. a DSGVO if the user has given his consent.

  1. Purpose of data processing

The collection of the user's e-mail address serves to deliver the newsletter. The voluntary indication of the first name and surname enables the personal address of the user within the email. The collection of other personal data during the registration process serves to prevent misuse of the services or the email address used.

  1. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. Accordingly, the user's e-mail address is stored as long as the subscription to the newsletter is active. The other personal data collected during the registration process is usually deleted after a period of seven days.

  1. Possibility of objection and removal

The subscription to the newsletter can be cancelled by the affected user at any time. For this purpose, a corresponding link can be found in each newsletter. This also enables revocation of consent to the storage of personal data collected during the registration process.

IX. Registration/Opening of customer account

  1. Description and scope of data processing

On our website, we offer users the opportunity to register by providing personal data and to set up a customer account. The data is entered in an input mask and transmitted to us and stored. The data is not passed on to third parties. The following data is also stored at the time of registration:

  • The IP address of the user
  • Date and time of registration

As part of the registration process, the user's consent to the processing of this data is obtained.

  1. Legal basis for the data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent..

  1. Purpose of data processing

Registration of the user is necessary for the provision of certain content and services on our website. Thus, with successful registration or opening of a customer account, the inventory data provided by the user (name, address, e-mail address, telephone and/or fax number) are stored in a customer database. In this way, you can log in and order with your user name and password for future purchases without having to enter your data again separately. Likewise, it is possible to view orders that have already been placed and to retrieve the contents of their contracts.

  1. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. This is the case for the data collected during the registration process when the registration on our website is cancelled or modified.

  1. Possibility of objection and removal

As a user, you have the option to cancel your registration at any time. You can have the data stored about you deleted or modified at any time after dialing into your customer account.

X. Contact form and e-mail contact

  1. Description and scope of data processing

On our website there is a contact form which can be used for electronic contact. If a user takes advantage of this option, the data entered in the input mask is transmitted to us and stored. At the time the message is sent, the following data is also stored:

  • The IP address of the user
  • Date and time of registration

For the processing of the data, your consent is obtained during the sending process and reference is made to this privacy policy. Alternatively, it is possible to contact us via the e-mail address provided. In this case, the user's personal data transmitted with the e-mail will be stored. In this context, the data will not be passed on to third parties. The data is used exclusively for processing the conversation.

  1. Legal basis for data processing

The legal basis for the processing of the data is Art. 6 para. 1 lit. a DSGVO if the user has given his consent.

The legal basis for the processing of data transmitted in the course of sending an e-mail is Art. 6 (1) lit. f DSGVO. If the e-mail contact aims at the conclusion of a contract, the additional legal basis for the processing is Art. 6 para. 1 lit. b DSGVO.

  1. Purpose of the data processing

The processing of personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

  1. Duration of storage

The data will be deleted as soon as they are no longer required to achieve the purpose for which they were collected. For the personal data from the input mask of the contact form and those sent by e-mail, this is the case when the respective conversation with the user has ended. The conversation is ended when it is clear from the circumstances that the matter in question has been conclusively clarified. The additional personal data collected during the sending process will be deleted after a period of seven days at the latest.

  1. Possibility of objection and elimination

The user has the possibility to revoke his consent to the processing of personal data at any time. If the user contacts us by email, he can object to the storage of his personal data at any time by sending an email message. In such a case, the conversation cannot be continued. All personal data stored in the course of contacting us will be deleted in this case.

XI. Rights of the data subject

If personal data is processed by you, you are a data subject within the meaning of the DSGVO and you are entitled to the following rights vis-à-vis the controller:

  1. Right to information

You may request confirmation from the controller as to whether personal data concerning you are being processed by us.

If such processing is taking place, you may request information from the controller about the following:

(1)       the purposes for which the personal data are processed;

(2)      the categories of personal data which are processed;

(3)       the recipients or categories of recipients to whom the personal data concerning you have been or will be disclosed;

(4)       the planned duration of the storage of the personal data concerning you or, if specific information on this is not possible, criteria for determining the storage period;

(5)     the existence of a right to rectification or erasure of the personal data concerning you, a right to restriction of processing by the controller or a right to object to such processing;

(6)       the existence of a right of appeal to a supervisory authority;

(7)      any available information on the origin of the data, if the personal data are not collected from the data subject;

(8)      the existence of automated decision-making, including profiling, pursuant to Article 22(1) and (4) of the GDPR and, at least in these cases, meaningful information about the logic involved and the scope and intended effects of such processing for the data subject

You have the right to request information about whether personal data concerning you is transferred to a third country or to an international organization. In this context, you may request to be informed about the appropriate safeguards pursuant to Art. 46 DSGVO in connection with the transfer.

  1. Right to rectification

You have a right to rectification and/or completion vis-à-vis the person responsible if the processed personal data concerning you are inaccurate or incomplete. The person responsible shall carry out the rectification without undue delay.

  1. Right to restriction of processing

You may request the restriction of the processing of personal data concerning you under the following conditions:

(1)       if you contest the accuracy of the personal data concerning you for a period enabling the controller to verify the accuracy of the personal data;

(2)       the processing is unlawful and you object to the erasure of the personal data and request instead the restriction of the use of the personal data;

(3)       the controller no longer needs the personal data for the purposes of the processing, but you need it for the establishment, exercise or defense of legal claims; or

(4)       if you have objected to the processing pursuant to Article 21(1) of the GDPR and it is not yet clear whether the controller's legitimate grounds override your grounds.

If the processing of personal data relating to you has been restricted, such data may - apart from being stored - only be processed with your consent or for the establishment, exercise or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest of the Union or a Member State.

If the restriction of processing has been restricted in accordance with the above conditions, you will be informed by the controller before the restriction is lifted.

  1. Right to erasure

a) Obligation to delete

You may request the person responsible to erase the personal data concerning you without undue delay, and the person responsible is obliged to erase such data without undue delay, if one of the following reasons applies:

(1)       The personal data concerning you are no longer necessary for the purposes for which they were collected or otherwise processed.

(2)       You revoke your consent on which the processing was based pursuant to Art. 6(1)(a) or Art. 9(2)(a) DSGVO and there is no other legal basis for the processing.

(3)       You object to the processing pursuant to Art. 21 (1) DSGVO and there are no overriding legitimate grounds for the processing, or you object to the processing pursuant to Art. 21 (2) DSGVO.

(4)       The personal data concerning you have been processed unlawfully.

(5)       The erasure of the personal data concerning you is necessary for compliance with a legal obligation under Union or Member State law to which the person responsible is subject.

(6)       The personal data concerning you has been collected in relation to information society services offered pursuant to Article 8(1) DSGVO.

b) Information to third parties

If the person responsible has made the personal data concerning you public and is obliged to erase it pursuant to Article 17(1) of the GDPR, it shall take reasonable measures, including technical measures, having regard to the available technology and the cost of implementation, to inform data controllers which process the personal data that you, as the data subject, have requested that they erase all links to or copies or replications of such personal data.

c) Exceptions

The right to erasure does not exist to the extent that the processing is necessary:

(1)       for the exercise of the right to freedom of expression and information;

(2)       for compliance with a legal obligation which requires processing under Union or Member State law to which the controller is subject, or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the person responsible;

(3)       for reasons of public interest in the area of public health pursuant to Article 9(2)(h) and (i) and Article 9(3) of the GDPR;

(4)       for archiving purposes in the public interest, scientific or historical research purposes, or statistical purposes pursuant to Article 89(1) of the GDPR, insofar as the right referred to in Section a) is likely to render impossible or seriously prejudice the achievement of the purposes of such processing; or

(5)       for the assertion, exercise or defense of legal claims.

  1. Right to information

If you have asserted the right to rectification, erasure or restriction of processing against the person responsible, the person responsible is obliged to inform all recipients to whom the personal data concerning you have been disclosed of this rectification or erasure of the data or restriction of processing, unless this proves impossible or involves a disproportionate effort.

You have the right against the controller to be informed about these recipients.

  1. Right to data portability

You have the right to receive the personal data concerning you that you have provided to the controller in a structured, common and machine-readable format. You also have the right to transfer this data to another controller without hindrance from the person responsible to whom the personal data was provided, provided that

(1)      the processing is based on consent pursuant to Art. 6(1)(a) DSGVO or Art. 9(2)(a) DSGVO or on a contract pursuant to Art. 6(1)(b) DSGVO and

(2)       the processing is carried out with the help of automated procedures.

In exercising this right, you also have the right to obtain that the personal data concerning you be transferred directly from one person responsible to another, insofar as this is technically feasible. Freedoms and rights of other persons must not be affected by this.

The right to data portability does not apply to processing of personal data necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller.

  1. Right to object

You have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of Article 6(1)(e) or (f) DSGVO; this also applies to profiling based on these provisions.

The person responsible shall no longer process the personal data concerning you unless it can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or the processing serves the purpose of asserting, exercising or defending legal claims.

If the personal data concerning you is processed for the purpose of direct marketing, you have the right to object at any time to the processing of the personal data concerning your personal data for the purpose of such advertising; this also applies to profiling, insofar as it is associated with such direct advertising.

If you object to processing for direct marketing purposes, the personal data concerning you will no longer be processed for these purposes.

You have the possibility, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise your right to object by means of automated procedures using technical specifications.

  1. Right to revoke the declaration of consent under data protection law

You have the right to revoke your declaration of consent under data protection law at any time. The revocation of the consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

  1. Automated decision in individual cases including profiling.

You have the right not to be subject to a decision based solely on automated processing - including profiling - which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

(1)       is necessary for the conclusion or performance of a contract between you and the person responsible,

(2)       is permitted by legal provisions of the Union or the Member States to which the controller is subject and these legal provisions contain appropriate measures to protect your rights and freedoms as well as your legitimate interests; or

(3)       is made with your express consent.

However, these decisions may not be based on special categories of personal data pursuant to Article 9(1) of the GDPR, unless Article 9(2)(a) or (g) applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

With regard to the cases referred to in (1) and (3), the controller shall take reasonable steps to safeguard the rights and freedoms as well as your legitimate interests, including at least the right to obtain the intervention of a person on the part of the controller, to express his or her point of view and to contest the decision.

  1. Right to complain to a supervisory authority

Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your residence, workplace or the place of the alleged infringement, if you consider that the processing of personal data concerning you infringes the GDPR.

The supervisory authority to which the complaint has been lodged shall inform the complainant of the status and outcome of the complaint, including the possibility of a judicial remedy under Article 78 GDPR.