Privacy policy

Data Protection Policy

Unless otherwise stated below, the provision of your personal data is neither required by law or contract nor necessary for the conclusion of a contract. You are not obliged to provide the data. Failure to provide it will have no consequences. This applies only insofar as no other information is provided for the processing operations described below.

“Personal data” means any information relating to an identified or identifiable natural person.

Server log files

You can visit our websites without providing any personal information.

Each time you access our website, usage data is transmitted to us or to our web host / IT service provider by your internet browser and stored in log data (so-called server log files). This stored data includes, for example, the name of the page accessed, the date and time of access, the IP address, the amount of data transferred and the requesting provider.

Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the uninterrupted operation of our website and improving our services.

Your data may be transferred to and processed in third countries outside the EU, in particular Canada and the USA. The European Commission has issued an adequacy decision for Canada. An adequacy decision by the European Commission is also in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified under the TADPF. This data transfer takes place on the basis of contractual obligations comparable to the European Commission’s Standard Contractual Clauses.

Contact

Controller / Data Protection Officer

Controller responsible for data processing:
Nadine Trautwein, Jan Oßenbrink, Mittelbreede 5, 33719 Bielefeld, Germany
Telephone: +49 (0) 5232 9805350
Email: nadine.trautwein@hunter.de, jan.ossenbrink@hunter.de

Data Protection Officer:
Tarox AG, Dirk Tscholitsch, Stellenbachstr. 49-51, 44536 Lünen
Tel.: 0231 - 98980-705
Email: dsgvo@tarox.de

Unsolicited contact by the customer via email

If you contact us by email on your own initiative for business purposes, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves to handle and respond to your contact request.

If the contact is intended to carry out pre-contractual measures (e.g. advice regarding a prospective purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR.

If contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.

We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the contact form

When you use the contact form, we collect your personal data (name, email address, message text) only to the extent provided by you. The data processing serves the purpose of contacting you. If the contact is intended to carry out pre-contractual measures (e.g. advice regarding a prospective purchase, preparation of an offer) or concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. If contact is made for other reasons, this data processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in handling and responding to your request. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR. We use your email address only to process your request. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

Collection and processing when using the withdrawal button

If you have concluded a contract via our online presence, we provide you with a withdrawal function (withdrawal button) through which you can submit your declaration of withdrawal directly. When you use the withdrawal function, we collect your personal data (name, email address, information identifying the contract or part of the contract you wish to withdraw from, and the time (date and time) at which the declaration of withdrawal was submitted) only to the extent provided by you. The data processing serves the purpose of providing you with the legally required option to withdraw from your contract and of properly processing your withdrawal. If the contact concerns a contract already concluded between you and us, this data processing is carried out on the basis of Art. 6(1)(b) GDPR. Otherwise, the data processing is carried out on the basis of Art. 6(1)(c) GDPR in order to fulfil the legal obligation to provide you with a withdrawal function on our online presence. We use your email address only to process your declaration of withdrawal. Your data will subsequently be deleted in compliance with statutory retention periods, unless you have consented to further processing and use.

The processing of your personal data serves the purpose of complying with the legal requirements for the legally compliant design of the withdrawal function and is carried out on the basis of Art. 6(1)(c) GDPR. This data processing is also carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in providing you with a user-friendly withdrawal option. In this case, you have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you based on Art. 6(1)(f) GDPR.

Customer account / Orders

Customer account

When you open a customer account, we collect your personal data to the extent specified there. The data processing serves the purpose of improving your shopping experience and simplifying order processing. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Your customer account will then be deleted.

Collection, processing and disclosure of personal data for orders

When you place an order, we collect and process your personal data only insofar as this is necessary to fulfil and process your order and to deal with your enquiries. The provision of the data is necessary for the conclusion of the contract. Failure to provide the data means that no contract can be concluded. Processing is carried out on the basis of Art. 6(1)(b) GDPR and is necessary for the performance of a contract with you.

Your data may be disclosed, for example, to shipping companies, dropshipping or fulfilment providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly comply with statutory requirements. The scope of the data transfer is limited to the minimum necessary.

Use of Growave (loyalty, reviews, wishlist, UGC & customer retention features)

On our website and in our Shopify store, we use the Growave app provided by Growave (hereinafter “Growave”) to provide customer retention and marketing / store optimisation features (e.g. loyalty / rewards programmes, reviews, wishlists, referral features and, where applicable, user-generated content / UGC, depending on the modules activated by us).

What data may be processed?

Depending on the feature used and the interaction, the following data in particular may be processed:

Master and contact data (e.g. name, email address, customer number),
Order and transaction data (e.g. order number, shopping cart information, purchase history, status),
Account and programme data (e.g. points / rewards status, activities in the loyalty programme, wishlist content),
Review and content data (e.g. reviews, comments, uploaded content such as photos / videos, where used),
Technical data (e.g. IP address, device / browser information, timestamps, usage data, depending on the configuration).

Purposes of processing

Provision and administration of customer retention and store features,
Evaluation / organisation of reviews and interactions (where activated),
Improvement of the user experience, service and store processes,
Prevention of misuse / fraud and ensuring operation.

Legal bases

Depending on the feature and context, processing is carried out on the basis of:

Art. 6(1)(b) GDPR (contract / pre-contractual measures, e.g. processing customer account / order features),
Art. 6(1)(a) GDPR (consent, e.g. for optional features / uploads or where required),
Art. 6(1)(f) GDPR (legitimate interest in an efficient, user-friendly store and customer retention measures).

Processing on behalf of the controller

Insofar as Growave processes personal data on our behalf, this is carried out as processing on behalf of the controller. Growave provides information and compliance documents in its Legal Center: https://www.growave.io/legal.

Transfers to third countries

Depending on the technical design, the transfer of personal data to third countries (outside the EEA) cannot be ruled out. Insofar as a transfer to a third country takes place, it is carried out on the basis of appropriate safeguards (in particular Standard Contractual Clauses), where required. Further information can be found in the Growave Legal Center: https://www.growave.io/legal.

Further information

Further information about data protection at Growave can be found in the relevant Growave notices, e.g.: Privacy Notice (Website).

Reviews / Advertising

Data collection when writing a comment or review

When you comment on or review an article or post, we collect your personal data (name, email address, comment text) only to the extent provided by you. The processing serves the purpose of enabling comments / reviews and displaying comments / reviews.

By submitting the comment / review, you consent to the processing of the transmitted data. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Your personal data will then be deleted.

When your comment / review is published, only the name provided by you will be published.

In addition, when you submit the comment / review, your IP address is stored for the purpose of preventing misuse of the comment or review function and ensuring the security of our information technology systems. By submitting the comment / review, you consent to the processing of the transmitted data. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Your IP address will then be deleted.

Use of Trustpilot

We use the “Trustpilot” review system provided by Trustpilot A/S (Pilestræde 58, 1112 Copenhagen, Denmark; “Trustpilot”) on our website.

Trustpilot enables us to collect customer reviews and display them on our website in order to give you an insight into the quality of our services.

Following an order, you may receive an invitation from us or Trustpilot to submit a review and may then provide a review. The following data, among other things, may be processed by us or Trustpilot: email address, name, information about your device and location (IP address, browser settings, type of browser used, browser language, time zone), information about your Trustpilot user account (username, photo, preferred language), information about the purchased product or service used (reference or order number, product details), the content of your review and the star rating you have given, as well as your product photos or videos (if you have attached them to your product review). This data may also be used to verify your review, where applicable.

Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent, provided that you have expressly consented to the disclosure of your data and receipt of the review request. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

Further information about data protection when using Trustpilot can be found at: de.legal.trustpilot.com/for-reviewers/enduser-privacy-terms.

Use of the email address for sending newsletters

We use your email address to send information and offers by newsletter, provided that you have expressly consented to this. The data processing serves exclusively the purpose of promotional communication. For this purpose, we process your email address and, where applicable, other data that you voluntarily provided when subscribing to our newsletter.

Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notifying us. Your email address will then be removed from the mailing list. Despite its removal from the mailing list, we may continue to store your email address in a so-called blacklist in order to prevent you from receiving newsletter emails from us in the future. This storage is carried out on the basis of Art. 6(1)(f) GDPR due to our and your legitimate interest in preventing the renewed use of your email address for sending our newsletter. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Use of Klaviyo

We use the service provided by Klaviyo Inc. (125 Summer St Floor 7, Boston, MA 02111, USA; “Klaviyo”) to send newsletters as part of processing on our behalf.

We transmit the information you provide when subscribing to the newsletter (email address and, where applicable, first and last name) to Klaviyo. The data processing serves the purpose of sending the newsletter and statistically evaluating it.

To evaluate newsletter campaigns, the newsletters sent contain a 1x1 pixel graphic (tracking pixel) or a tracking link. This enables us to determine whether you have opened the newsletter and whether you have clicked any integrated links. In this context, we collect personal data such as your IP address, browser type, device and the time. Usage profiles can be created from this data under a pseudonym. The data collected is not used to identify you personally. The data collected is used only for statistical evaluation in order to improve newsletter campaigns.

Your data is generally transferred to and stored on Klaviyo servers in the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Klaviyo is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Your personal data is processed on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in a targeted, effective and user-friendly newsletter system. You have the right, on grounds relating to your particular situation, to object at any time to the processing of personal data concerning you.

Further information about data protection at Klaviyo can be found at www.klaviyo.com/legal/privacy-notice and at www.klaviyo.com/legal/data-processing-agreement.

Use of the email address for availability notifications

We offer a product availability notification service on our website. If an item is temporarily unavailable, you have the option of entering your email address for the respective item and being informed by us by email when it becomes available, provided that you have consented to this. When the item becomes available, you will receive a one-time email notification about the availability of the respective item. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. You can unsubscribe from the availability notification at any time by notifying us. Your email address will then be removed from the mailing list.

Shipping service providers / Merchandise management

Disclosure of the email address to shipping companies for information about the shipping status

As part of contract processing, we disclose your email address to the transport company, provided that you have expressly consented to this during the ordering process. The disclosure serves the purpose of informing you by email about the shipping status. Processing is carried out on the basis of Art. 6(1)(a) GDPR with your consent. You may withdraw your consent at any time by notifying us or the transport company, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

Use of an external merchandise management system

We use a merchandise management system to process contracts as part of processing on our behalf. For this purpose, the personal data collected from you as part of the order is transmitted to Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32.

Your personal data is processed for the purpose of performing the contract concluded with you and is carried out on the basis of Art. 6(1)(b) GDPR.

Payment service providers

Use of PayPal

We use the PayPal payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of enabling us to offer you payment through the payment service. When you select and use payment via PayPal, the data required for payment processing is transmitted to PayPal in order to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

All PayPal transactions are subject to PayPal’s Privacy Policy. You can find it at www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of PayPal Express

We use the PayPal Express payment service provided by PayPal (Europe) S.à.r.l. et Cie, S.C.A. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”) on our website. The data processing serves the purpose of enabling us to offer you payment through the PayPal Express payment service.

To integrate this payment service, PayPal must collect, store and analyse data when the website is accessed (e.g. IP address, device type, operating system, browser type, location of your device). Cookies may also be used for this purpose. The cookies enable your browser to be recognised.

Cookies or comparable technologies are used with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

When you select and use PayPal Express, the data required for payment processing is transmitted to PayPal in order to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR.

Further information about data processing when using the PayPal Express payment service can be found in the corresponding Privacy Policy at www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Shopify Payments

We use the “Shopify Payments” payment service provided by Shopify International Limited (2nd Floor Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website. In this case, payment processing is carried out by the payment service provider Stripe Payments Europe, Ltd. (1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland; “Stripe”). The data processing serves the purpose of enabling us to offer you payment through the Shopify Payments payment service. When you select and use a corresponding “Shopify Payments” payment method, the data required for payment processing is transmitted to Stripe in order to perform the contract with you using the selected payment method. This processing is carried out on the basis of Art. 6(1)(b) GDPR. Stripe reserves the right to obtain a credit report, where applicable, on the basis of mathematical and statistical procedures using credit agencies. For this purpose, Stripe transmits the personal data required for a credit check to a credit agency and uses the information received about the statistical probability of a payment default to make a balanced decision on the establishment, performance or termination of the contractual relationship. The credit report may include probability values (score values) calculated on the basis of scientifically recognised mathematical and statistical methods, which may include address data in the calculation. Your legitimate interests are taken into account in accordance with statutory provisions. The data processing serves the purpose of checking creditworthiness for the initiation of a contract. Processing is carried out on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in protection against payment default where Stripe makes an advance payment. You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you based on Art. 6(1)(f) GDPR by notifying Stripe. The provision of the data is necessary for the conclusion of the contract using your chosen payment method. Failure to provide the data means that the contract cannot be concluded using the payment method selected by you. Further information about data processing when using the Shopify Payments payment service can be found in Shopify’s Privacy Policy at: https://www.shopify.com/de/legal/datenschutz. Further information about data processing during payment processing through the payment service provider Stripe can be found in Stripe’s Privacy Policy at: https://stripe.com/de/privacy.

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or by the internet browser on a user’s computer system. When a user accesses a website, a cookie may be stored on the user’s operating system. This cookie contains a characteristic string of characters that enables the browser to be uniquely identified when the website is accessed again.

Cookies are stored on your computer. You therefore have full control over the use of cookies. By selecting the appropriate technical settings in your internet browser, you can be notified before cookies are placed and decide whether to accept them on an individual basis, as well as prevent the storage of cookies and the transmission of the data they contain. Cookies already stored can be deleted at any time. However, please note that you may then be unable to use all functions of this website to their full extent.

The following links provide information on how to manage (including disable) cookies in the most commonly used browsers:

Chrome: support.google.com/accounts/answer/61416?hl=de
Microsoft Edge: support.microsoft.com/de-de/microsoft-edge/cookies-in-microsoft-edge-löschen…
Mozilla Firefox: support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Safari: support.apple.com/de-de/guide/safari/manage-cookies-and-website-data-sfri11471/mac

Technically necessary cookies

Unless otherwise stated below in this Privacy Policy, we use only these technically necessary cookies for the purpose of making our services more user-friendly, effective and secure. Cookies also enable our systems to recognise your browser after you change pages and to offer you services. Some functions of our website cannot be offered without the use of cookies. For these functions, the browser must be recognised again after a page change.

Cookies or comparable technologies are used on the basis of Section 25(2) TDDDG. Your personal data is processed on the basis of Art. 6(1)(f) GDPR due to our overriding legitimate interest in ensuring the optimal functionality of the website and a user-friendly and effective design of our services.

You have the right, on grounds relating to your particular situation, to object at any time to this processing of personal data concerning you.

Use of Cookiebot

We use the Cookiebot consent management tool provided by Cybot A/S, Havnegade 39, 1058 Copenhagen, Denmark; “Cookiebot”, on our website.

The tool enables you to grant consent to data processing via the website, in particular the placement of cookies, and to exercise your right to withdraw consent already granted. The data processing serves the purpose of obtaining and documenting the required consent to data processing and thereby complying with legal obligations.

Cookies may be used for this purpose. The following information, among other things, may be collected and transmitted to Cookiebot: anonymised IP address, date and time of consent, URL from which the consent was sent, anonymous, random, encrypted key, consent status. This data is not disclosed to any other third parties.

The data processing is carried out to fulfil a legal obligation on the basis of Art. 6(1)(c) GDPR.

Further information about data protection at Cookiebot can be found at: www.cookiebot.com/de/privacy-policy/

Analysis / Advertising tracking / Communication

Use of Google Analytics 4

We use the Google Analytics web analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

The data processing serves the purpose of analysing this website and its visitors and is also used for marketing and advertising purposes. On behalf of the operator of this website, Google will use the information obtained to evaluate your use of the website, compile reports on website activity and provide the website operator with other services relating to website and internet usage.

The following information, among other things, may be collected: IP address, date and time of the page view, click path, information about the browser and device you use, pages visited, referrer URL (the website through which you accessed our website), location data and purchase activity. Google may link your data with other data, such as your search history, your personal accounts, usage data from other devices and any other data that Google holds about you.

Google first truncates the IP address within Member States of the European Union or in other contracting states to the Agreement on the European Economic Area.

Google uses technologies such as cookies, browser web storage and tracking pixels that enable an analysis of your use of the website. Cookies or comparable technologies are used with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR.

Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal.

The information generated about your use of this website is generally transferred to and stored on a Google server in the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles. Both Google and US public authorities have access to your data.

Further information about the terms of use and data protection can be found at policies.google.com/technologies/partner-sites and at policies.google.com/privacy.

Use of Mouseflow

We use the analysis tool provided by Mouseflow ApS (Flaesketorvet 68, 1711 Copenhagen, Denmark; “Mouseflow”) on our website.

The data processing serves the purpose of personalising and analysing this website and its visitors. Mouseflow uses technologies such as cookies, tracking pixels and scripts. The cookies enable the internet browser to be recognised. The following information, among other things, may be collected: IP address, click path, information about the browser and operating system you use, pages visited, time spent on our website, content viewed and location data.

Usage profiles can be created from this data under a pseudonym. With the Mouseflow web tracking tool, randomly selected individual visits (only with an anonymised IP address) are recorded. This creates a record of mouse movements and clicks with the intention of replaying individual website visits on a sample basis and deriving potential improvements for the website. The data collected using Mouseflow technologies is not used to personally identify visitors to this website and is not combined with personal data about the bearer of the pseudonym without the separate consent of the data subject.

Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Mouseflow is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Further information about the collection and use of your data by Mouseflow can be found at: mouseflow.com/legal/visitor/

Use of HeatMap

We use the analysis tool provided by HeatMap Inc. (6724 Monroe Ave, Eldersburg, Maryland 21784, USA; “HeatMap”) on our website as part of processing on our behalf. The data processing serves the purpose of designing, optimising and analysing our website in line with user needs.

The tool records the movements of website visitors on the website. This creates a record of mouse movements, scrolling behaviour, duration of visits and clicks on the website (so-called heatmap). For this purpose, HeatMap uses cookies, among other technologies. The following information, among other things, may be collected: information about the device you use (screen size, devices, unique device identifier), information about the browser you use and location data (country only).

Usage profiles can be created from this data under a pseudonym. The data is not used to personally identify visitors to the website and is not combined with personal data about the bearer of the pseudonym.

Your data may be transferred to third countries such as the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). HeatMap is not certified under the TADPF.

Further information about the collection and use of your data by HeatMap can be found at: heatmap.com/privacy

Use of Shopify statistics

We use the statistics and analysis functions provided by Shopify International Ltd. (Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) on our website as part of processing on our behalf. Shopify is an affiliate of Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).

The data processing serves the purpose of analysing this website and its visitors. For this purpose, data is stored for marketing and optimisation purposes and provided in reports, analyses and statistics. The following device information, among other things, is collected and processed: information about the web browser, IP address, time zone and some of the cookies installed on your device.

When you navigate the website, information about the websites or products accessed, the referrer URL (the website through which you accessed our website) and information about how you interact with the website is also collected. Technologies such as cookies, web beacons, tags and pixels (electronic files used to collect information about how you navigate the website) are used for this purpose.

Further information about data protection at Shopify can be found at www.shopify.com/de/legal/datenschutz, information about the data processing agreement at www.shopify.com/de/legal/dpa and information about the cookies used at www.shopify.com/de/legal/cookies.

Use of the Meta Pixel

We use the Meta Pixel provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland; “Meta”) on our website.

Meta and we are joint controllers for the collection of your data and its transmission to Meta when the service is integrated. This is based on an agreement between us and Meta concerning the joint processing of personal data, which defines the respective responsibilities. The agreement can be accessed at dede.facebook.com/legal/terms/businesstools .

The application serves the purpose of targeting website visitors with interest-based advertising on the social networks Facebook and Instagram. For this purpose, Meta’s remarketing tag has been implemented on the website. This tag establishes a direct connection to Meta’s servers when the website is visited. This transmits information to the Meta server about which of our pages you have visited. Meta assigns this information to your personal Facebook and/or Instagram user account.

When you visit the Facebook or Instagram social networks, you will then be shown personalised, interest-based ads.

The application also serves the purpose of compiling conversion statistics. This enables us to learn the total number of users who clicked on one of our advertisements and were redirected to a page containing a conversion tracking tag, as well as which actions were taken after the redirection to this website. However, we do not receive any information that enables users to be personally identified.

Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Meta is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

You can deactivate the “Custom Audiences” remarketing function here. Further information about the collection and use of data by Meta, your related rights and options for protecting your privacy can be found in Meta’s privacy information at www.facebook.com/about/privacy/.

Use of Google Ads conversion tracking

We use the “Google Ads” online advertising programme and, as part of this, conversion tracking (evaluation of visitor actions) on our website. Google Conversion Tracking is an analysis service provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).

When you click on an advertisement placed by Google, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Google and we can recognise that you clicked on the advertisement and were redirected to this page. Each Google Ads customer receives a different cookie. It is therefore not possible to track cookies across the websites of Ads customers.

The information collected using the conversion cookie serves the purpose of compiling conversion statistics. This enables us to learn the total number of users who clicked on one of our advertisements and were redirected to a page containing a conversion tracking tag. However, we do not receive any information that enables users to be personally identified.

Your data may be transferred to Google LLC servers in the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Google is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Further information and Google’s Privacy Policy can be found at: www.google.de/policies/privacy/

Use of the remarketing or “Similar Audiences” feature

We use the remarketing or “Similar Audiences” feature provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

The application serves the purpose of analysing visitor behaviour and visitor interests. Google uses cookies to analyse website usage, which forms the basis for creating interest-based advertisements. The cookies record website visits and anonymised data about website usage. No personal data of website visitors is stored. If you subsequently visit another website in the Google Display Network, you will be shown advertisements that are highly likely to take account of product and information areas previously viewed.

Further information about Google Remarketing and the corresponding Privacy Policy can be found at: www.google.com/privacy/ads/

Use of Microsoft Advertising

We use Microsoft Advertising provided by Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, USA; “Microsoft”) on our website.

The data processing serves marketing and advertising purposes and the purpose of measuring the success of advertising measures (conversion tracking). We learn the total number of users who clicked on one of our advertisements and were redirected to a page containing a conversion tracking tag. However, this does not enable these users to be personally identified.

Microsoft Advertising uses technologies such as cookies and tracking pixels that enable an analysis of your use of the website. When you click on an advertisement placed by Microsoft Advertising, a conversion tracking cookie is stored on your computer. This cookie has a limited validity period and does not serve to identify you personally.

If you visit certain pages of our website and the cookie has not yet expired, Microsoft and we can recognise that you clicked on the advertisement and were redirected to this page. The following information, among other things, may be collected: IP address, identifiers assigned by Microsoft, information about the browser and device you use, referrer URL (the website through which you accessed our website) and the URL of our website.

Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Microsoft is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Further information about data protection and the cookies used by Microsoft can be found here.

Use of the Pinterest Tag

We use the Pinterest Tag provided by Pinterest Europe Limited (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland; “Pinterest”) on our website.

The application serves the purpose of targeting website visitors with interest-based advertising on the Pinterest social network. For this purpose, Pinterest’s conversion tag has been implemented on the website. This tag establishes a direct connection to Pinterest’s servers when the website is visited. This transmits information to the Pinterest server about which of our pages you have visited. Pinterest assigns this information to your personal Pinterest user account if you are logged into the social network.

When you visit Pinterest, you will then be shown personalised, interest-based Pinterest ads.

If you access our website via a Pin on the Pinterest social network, a conversion tracking cookie is stored on your computer. These cookies have a limited validity period, do not contain personal data and therefore do not serve to identify you personally. If you visit certain pages of our website and the cookie has not yet expired, Pinterest and we can recognise that you clicked on the Pin and were redirected to this page.

The information collected using the conversion cookie serves the purpose of compiling conversion statistics and thereby optimising our website. The following information, among other things, may be processed: total number of users who clicked on one of our Pins and were redirected to our website, subpages visited on our website (e.g. category or product pages), search queries on our website, contents of your shopping cart and completed transactions.

Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF. The data transfer takes place, among other things, on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, available at: commission.europa.eu/…/standard-contractual-clauses-scc_de

Further information about the collection and use of data by Pinterest, your related rights and options for protecting your privacy can be found in Pinterest’s privacy information at policy.pinterest.com/de/privacy-policy.

Use of the TikTok Pixel

We use the TikTok Pixel provided by TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “TikTok Ireland”) and TikTok Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United Kingdom; “TikTok UK”) on our website. Both companies are joint controllers for data processing (hereinafter “TikTok”).

The data processing serves the purpose of identifying and analysing our customers’ website visits, improving customer targeting by displaying targeted advertisements and evaluating the effectiveness of advertisements on TikTok. TikTok uses technologies such as cookies and pixels for this purpose, which enable your browser to be recognised.

The following information, among other things, may be collected and transmitted to TikTok: date and time of the visit, information about the browser and device type you use, screen resolution and IP address. TikTok may assign this information to your personal TikTok user account. Usage profiles can be created from the data collected in this way using pseudonyms. However, this does not enable users to be personally identified.

Your data may be transferred to third countries, such as the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). TikTok is not certified under the TADPF. Data transfers to the USA and to third countries without an adequacy decision take place, among other things, on the basis of Standard Contractual Clauses as appropriate safeguards for the protection of personal data, available at: commission.europa.eu/…/standard-contractual-clauses-scc_de

Further information about data protection can be found at www.tiktok.com/legal/page/eea/privacypolicy/de and ads.tiktok.com/i18n/official/policy/controller-to-controller.

Use of the “Zendesk Chat” live chat system

We use the live chat system provided by Zendesk Inc. (1019 Market Street, 6th Floor, San Francisco, California 94103, USA; “Zendesk”) on our website. The system serves the purpose of communication between you and us as the provider. Usage profiles can be created from this data under a pseudonym. Cookies are used for this purpose. The cookies enable the internet browser to be recognised. Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Zendesk is certified under the TADPF and has therefore undertaken to comply with European data protection principles. Cookies or comparable technologies are used with your consent on the basis of Section 25(1), sentence 1 TDDDG in conjunction with Art. 6(1)(a) GDPR. Your personal data is processed with your consent on the basis of Art. 6(1)(a) GDPR. You may withdraw your consent at any time, without affecting the lawfulness of processing carried out on the basis of consent before its withdrawal. Further information about the collection and use of data by Zendesk, your related rights and options for protecting your privacy can be found in Zendesk’s privacy information at https://www.zendesk.com/company/customers-partners/privacy-policy/.

Plug-ins and other services

Use of Google Tag Manager

We use Google Tag Manager provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.

This application is used to manage JavaScript tags and HTML tags that are used in particular to implement tracking and analysis tools. The data processing serves the purpose of designing and optimising our website in line with user needs.

Google Tag Manager itself neither stores cookies nor processes personal data. However, it enables additional tags to be triggered that may collect and process personal data.

Further information about the terms of use and data protection can be found here.

Use of social plug-ins

We use social network plug-ins on our website. The integration of social plug-ins and the associated data processing serve the purpose of optimising advertising for our products.

When social plug-ins are integrated, a connection is established between your computer and the servers of the social network providers, and the plug-in is displayed on the page by being communicated to your browser, provided that you have expressly consented to this. Both your IP address and information about which of our pages you have visited are transmitted to the providers’ servers. This applies regardless of whether you are registered with or logged into the social network. Data is also transmitted for users who are not registered or logged in.

If you are simultaneously connected to one or more of your social network accounts, the information collected may also be associated with your corresponding profiles. When you use the plug-in functions (e.g. by clicking the button), this information is also assigned to your user account. You can prevent this association by logging out of your social media accounts before visiting our website and before activating the buttons.

The social networks listed below are integrated into our website by means of social plug-ins. Further information about the scope and purpose of the collection and use of data, as well as your related rights and options for protecting your privacy, can be found in the linked privacy information provided by the respective providers.

Facebook

Facebook provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland)

Meta Platforms Ireland and we are joint controllers with respect to the collection of your data and the transmission of this data to Facebook that take place when the service is integrated. This is based on an agreement between us and Meta Platforms Ireland concerning the joint processing of personal data, which sets out the respective responsibilities. The agreement is available at https://www.facebook.com/legal/controller_addendum.

Under that agreement, we are responsible in particular for fulfilling the information obligations pursuant to Arts. 13 and 14 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service, and for complying with the obligations under Arts. 33 and 34 GDPR insofar as a personal data breach concerns our obligations under the joint processing agreement.

Meta Platforms Ireland is responsible for enabling the exercise of data subject rights under Arts. 15–20 GDPR, for complying with the security requirements of Art. 32 GDPR with regard to the security of the service, and for complying with the obligations under Arts. 33 and 34 GDPR insofar as a personal data breach concerns Meta Platforms Ireland’s obligations under the joint processing agreement.

Further information about Facebook’s collection and use of data, your rights in this regard and ways to protect your privacy can be found in Facebook’s privacy notice at https://www.facebook.com/about/privacy/.

Instagram

Instagram provided by Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland): https://help.instagram.com/155833707900388

Pinterest provided by Pinterest Inc. (635 High Street, Palo Alto, CA 94301, USA): https://policy.pinterest.com/de/privacy-policy

Your data may be transferred to the USA. The European Commission has adopted an adequacy decision for the USA, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified under the TADPF.

Use of YouTube

We use the function for embedding YouTube videos provided by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “YouTube”) on our website. YouTube is an affiliate of Google LLC (1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; “Google”).

The function displays videos hosted on YouTube in an iFrame on the website. The “Privacy-enhanced mode” option is activated. As a result, YouTube does not store any information about website visitors. Information is transmitted to and stored by YouTube only when you watch a video.

Your data may be transferred to the USA. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). YouTube is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Further information about the collection and use of data by YouTube and Google, your related rights and options for protecting your privacy can be found in YouTube’s privacy information at www.youtube.com/t/privacy.

Use of Adobe Fonts

We use Adobe Fonts provided by Adobe Systems Software Ireland Limited (4-6 Riverwalk Citywest Business Campus, Dublin 24, Ireland; “Adobe”) on our website.

The data processing serves the purpose of displaying fonts consistently on our website. To load the fonts, a connection to Adobe servers is established when the page is accessed. Cookies may be used for this purpose. Your IP address and information about the browser and operating system you use, among other things, are processed and transmitted to Adobe.

Your data may be transferred to third countries such as the USA and India. There is no adequacy decision by the European Commission for India. An adequacy decision by the European Commission is in place for the USA, namely the Trans-Atlantic Data Privacy Framework (TADPF). Adobe is certified under the TADPF and has therefore undertaken to comply with European data protection principles.

Further information about data processing and data protection can be found at www.adobe.com/de/privacy/policy.html and at www.adobe.com/de/privacy/policies/adobe-fonts.html.

Data subject rights and storage period

Storage period

Once the contract has been fully processed, the data will initially be stored for the duration of the warranty period and subsequently in compliance with statutory retention periods, in particular those under tax and commercial law. It will then be deleted after these periods have expired, unless you have consented to further processing and use.

Rights of the data subject

If the statutory requirements are met, you have the following rights under Art. 15 to 20 GDPR: the right of access, rectification, erasure, restriction of processing and data portability.

Under Art. 21(1) GDPR, you also have the right to object to processing based on Art. 6(1)(f) GDPR and to processing for direct marketing purposes.

Right to lodge a complaint with the supervisory authority

Pursuant to Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data is unlawful. You may lodge a complaint, among others, with the supervisory authority responsible for us, which can be contacted using the following details:

Competent supervisory authority (contact):

State Commissioner for Data Protection and Freedom of Information North Rhine-Westphalia
P.O. Box 20 04 44
40102 Düsseldorf
Tel.: +49 211 384240
Fax: +49 211 38424999
Email: poststelle@ldi.nrw.de

Right to object

If the processing of personal data listed here is based on our legitimate interest pursuant to Art. 6(1)(f) GDPR, you have the right, on grounds relating to your particular situation, to object to such processing at any time with effect for the future.

Once you have objected, the processing of the data concerned will cease unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or unless the processing serves the establishment, exercise or defence of legal claims.