1.1 Thank you for visiting our website. This privacy policy explains how we handle your personal data when you use our website. Personal data is any information that can be used to identify you personally.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Emil Krack, Goldschmiede Krack, Marktplatz 6, 67146 Deidesheim, Germany, phone: +49 6326 981960, email: info@goldschmiede-krack.de. The controller is the natural or legal person who, alone or jointly with others, decides on the purposes and means of the processing of personal data.
2.1 If you only use our website for information, i.e. you do not register or otherwise send us information, we only collect the data that your browser transmits to our server ("server log files"). When you open our website, we collect the following data, which we technically need to display the website to you:
The legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files afterwards if there are specific indications of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the controller), this website uses SSL/TLS encryption. You can recognise an encrypted connection by "https://" and the lock symbol in your browser's address bar.
To host our website and display its content, we use a provider that provides its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers unless other recipients are named below for specific processing operations.
We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits its unauthorised disclosure to third parties.
To make visiting our website attractive and to enable certain functions, we use cookies. Cookies are small text files that are stored on your device. Some cookies are deleted automatically when you close your browser ("session cookies"); others remain on your device for longer and allow page settings to be saved ("persistent cookies"). For the latter, you can see the storage period in the cookie settings overview of your browser.
Where cookies we use also process personal data, the legal basis is Art. 6(1)(b) GDPR for the performance of a contract, Art. 6(1)(a) GDPR where you have given consent, or Art. 6(1)(f) GDPR to protect our legitimate interest in the best possible functionality of the website and a customer-friendly and effective design of your visit.
You can set your browser to inform you when cookies are set, to decide individually whether to accept them, or to refuse cookies for certain cases or in general.
Please note that if you do not accept cookies, the functionality of our website may be limited.
5.1 Shopify Inbox (live chat)
This website uses the live chat system of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Personal data you send through the chat is processed under Art. 6(1)(b) GDPR where this is necessary to prepare or perform a contract, or otherwise under Art. 6(1)(f) GDPR based on our legitimate interest in looking after our visitors effectively. We delete the data once your request has been fully dealt with, unless statutory retention periods apply.
In addition, further information may be collected and analysed with the help of cookies to create pseudonymised usage profiles. This information does not identify you personally and is not combined with other data. Where it relates to a person, the legal basis is Art. 6(1)(f) GDPR, based on our legitimate interest in statistically analysing user behaviour to improve our offer. You can prevent cookies through your browser settings, although this may limit the functionality of our website. You can object to the collection and storage of data for pseudonymised usage profiles at any time with effect for the future.
Data is also transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada. An adequate level of data protection for Canada is ensured by an adequacy decision of the European Commission. We have concluded a data processing agreement with the provider that ensures the protection of our visitors' data and prohibits unauthorised disclosure to third parties.
5.2 Our own review reminder
Only if you have expressly consented under Art. 6(1)(a) GDPR, we use your email address to remind you once, after the contract has been fulfilled, to leave a review of our services. You can withdraw your consent at any time by sending a message to the controller.
5.3 Trusted Shops review reminders
For review reminders we use Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany. Only if you have expressly consented under Art. 6(1)(a) GDPR, we pass your email address and, where applicable, further customer data to the provider so that it can send you a review reminder by email. You can withdraw your consent at any time with effect for the future, either to us or to the provider. We and the provider are joint controllers for this processing under Art. 26 GDPR. The joint controllership agreement is available at help.etrusted.com.
5.4 Our own online appointment booking
We process your personal data when you use our online appointment booking. The input form or appointment request shows which data we collect and which fields are required. If a free text field is available, you can describe your request there and decide yourself what additional information to provide. We store and use the data exclusively to arrange the appointment. The legal basis is Art. 6(1)(b) GDPR where the processing is necessary to perform a contract with you or to take steps prior to entering into a contract, and Art. 6(1)(a) GDPR where you have given consent. You can withdraw your consent at any time by sending a message to the controller named at the beginning of this policy.
5.5 Google Calendar
To provide online appointment booking, we use Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to Google LLC, USA. To arrange the appointment, we collect your first and last name and email address (and your phone number if you want a telephone appointment) under Art. 6(1)(b) GDPR and pass them to the provider under Art. 6(1)(f) GDPR, based on our legitimate interest in effective customer management and efficient scheduling, where they are stored to organise the appointment. The provider deletes your data after the appointment has taken place or after the agreed appointment period has expired. We have concluded a data processing agreement with the provider. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
5.6 WhatsApp Business
You can contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. We use the business version of WhatsApp for this.
If you contact us via WhatsApp about a specific transaction (e.g. an order you have placed), we store and use your WhatsApp mobile number and, if provided, your first and last name under Art. 6(1)(b) GDPR to process and answer your request. On the same legal basis, we may ask you via WhatsApp for further data (order number, customer number, address or email address) to assign your request to a specific transaction. If you use our WhatsApp contact for general enquiries (e.g. about our range, availability or our website), we store and use your WhatsApp mobile number and, if provided, your name under Art. 6(1)(f) GDPR, based on our legitimate interest in providing the requested information efficiently and promptly. Your data is only used to answer your request via WhatsApp and is not passed on to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this and automatically transfers phone numbers stored there to a server of its parent company Meta Platforms Inc. in the USA. The address book of this device therefore only contains the WhatsApp contact details of users who have contacted us via WhatsApp. Everyone whose WhatsApp contact details are stored in this address book has already consented, under Art. 6(1)(a) GDPR, to the transfer of their WhatsApp number from their chat contacts' address books when they accepted the WhatsApp terms of use on first using the app. Data of people who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore not transferred.
For the purpose and scope of data collection and further processing by WhatsApp, and for your rights and settings to protect your privacy, please see WhatsApp's privacy notice: https://www.whatsapp.com/legal/?eea=1#privacy-policy. We have concluded a data processing agreement with the provider. In the course of this processing, data may be transferred to servers of Meta Platforms Inc. in the USA. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
5.7 Contact form and email
When you contact us (e.g. via the contact form or by email), we process personal data exclusively to handle and answer your request and only to the extent necessary. The legal basis is our legitimate interest in answering your request under Art. 6(1)(f) GDPR. If your enquiry is aimed at concluding a contract, Art. 6(1)(b) GDPR is an additional legal basis. We delete your data once it is clear from the circumstances that the matter has been fully resolved, unless statutory retention obligations apply.
5.8 Brevo (transactional emails)
To send transactional emails, i.e. messages triggered by a specific user action (e.g. conclusion of a contract, registration or password reset), we use Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Based on our legitimate interest in effective and user-friendly email communication, we pass the data you provide during such an action to this provider under Art. 6(1)(f) GDPR so that it sends the emails on our behalf. We have concluded a data processing agreement with the provider.
If you provide personal data when opening a customer account, we collect and process it to the extent required under Art. 6(1)(b) GDPR. The input form on our website shows which data is required to open an account.
You can delete your customer account at any time by sending a message to the controller at the address given above. After your account has been deleted, your data will be deleted, provided that all contracts concluded through it have been fully processed, no statutory retention periods apply and we have no continuing legitimate interest in storing it.
7.1 Email newsletter
If you subscribe to our email newsletter, we regularly send you information about our offers. The only mandatory information is your email address; further information is voluntary and is used to address you personally. We use the double opt-in procedure: you only receive the newsletter after you have expressly confirmed your consent by clicking a verification link sent to the email address you provided. By clicking the confirmation link, you give your consent to the use of your personal data under Art. 6(1)(a) GDPR. We store the IP address assigned by your internet service provider and the date and time of registration so that any later misuse of your email address can be traced. The data collected when you subscribe is used strictly for its intended purpose.
You can unsubscribe at any time using the link in the newsletter or by sending a message to the controller. After you unsubscribe, your email address is deleted from our mailing list without delay, unless you have expressly consented to further use of your data or we reserve the right to use it further as permitted by law and described in this policy.
7.2 Newsletter for existing customers
If you gave us your email address when buying goods or services, we reserve the right to send you regular offers by email for goods or services from our range that are similar to those you have already bought. Under Section 7(3) of the German Act against Unfair Competition (UWG), we do not need separate consent for this. The processing is based solely on our legitimate interest in personalised direct marketing under Art. 6(1)(f) GDPR. If you objected to this use of your email address at the outset, we will not send you such emails. You can object to the use of your email address for this purpose at any time with effect for the future by sending a message to the controller. This only incurs transmission costs at basic rates. After we receive your objection, we stop using your email address for advertising without delay.
7.3 Brevo (newsletter)
Our email newsletters and other promotional emails are sent via Brevo GmbH, Köpenicker Str. 126, 10179 Berlin, Germany. Based on our legitimate interest in effective and user-friendly email marketing, we pass the data you provide when subscribing to this provider under Art. 6(1)(f) GDPR so that it sends the emails on our behalf. Only if you have expressly consented under Art. 6(1)(a) GDPR, we may also statistically evaluate the success of email campaigns using web beacons or tracking pixels in the emails, which measure open rates and specific interactions with the content. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not combined with other data. You can withdraw your consent to email tracking at any time with effect for the future. We have concluded a data processing agreement with the provider.
7.4 Shopify Email
Our email newsletters are sent via Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Data is also transferred to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada. Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass the data you provide when subscribing to this provider under Art. 6(1)(f) GDPR so that it sends the newsletter on our behalf. Subject to your express consent under Art. 6(1)(a) GDPR, the provider also statistically evaluates the success of newsletter campaigns using web beacons or tracking pixels in the emails, which measure open rates and specific interactions with the content. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not combined with other data. You can withdraw your consent to newsletter tracking at any time with effect for the future. We have concluded a data processing agreement with the provider. An adequate level of data protection for Canada is ensured by an adequacy decision of the European Commission.
7.5 SMS marketing
On our website you can sign up for SMS notifications about current offers, promotions and orders you have placed. The only mandatory information is your mobile number; further information is voluntary and is used to address you personally. We use the double opt-in procedure: promotional text messages are only sent after you have expressly confirmed your consent by clicking a verification link sent to the mobile number you provided. By clicking the confirmation link, you give your consent under Art. 6(1)(a) GDPR. We also store the date and time of registration so that any later misuse of your mobile number can be traced. The data collected when you sign up is used exclusively to send you promotional text messages. You can unsubscribe at any time by sending a message to the controller, thereby withdrawing your consent with effect for the future. After you unsubscribe, your mobile number is deleted from the distribution list without delay, unless you have expressly consented to further use or we reserve the right to use it further as permitted by law and described in this policy.
7.6 WhatsApp newsletter
If you subscribe to our WhatsApp newsletter, we regularly send you information about our offers via WhatsApp. The only mandatory information is your mobile number. To subscribe, add our mobile number to your contacts and send us the message "Start" via WhatsApp. By sending this message, you give your consent under Art. 6(1)(a) GDPR to the use of your personal data for sending the newsletter, and we add you to our distribution list. The data collected is used exclusively to send you the newsletter. You can unsubscribe at any time by sending us the message "Stop" via WhatsApp. After you unsubscribe, your mobile number is deleted from our distribution list without delay, unless you have expressly consented to further use or we reserve the right to use it further as permitted by law and described in this policy.
Please note that WhatsApp Business has access to the address book of the mobile device we use and automatically transfers phone numbers stored there to a server of its parent company Meta Platforms Inc. in the USA. The address book of the device we use for the newsletter therefore only contains the WhatsApp contact details of our newsletter recipients. Everyone whose WhatsApp contact details are stored there has already consented, under Art. 6(1)(a) GDPR, to the transfer of their WhatsApp number from their chat contacts' address books when they accepted the WhatsApp terms of use on first using the app. Data of people who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore not transferred. For the purpose and scope of processing by WhatsApp and your rights and settings, please see WhatsApp's privacy notice: https://www.whatsapp.com/legal/?eea=1#privacy-policy. We have concluded a data processing agreement with WhatsApp. Data may be transferred to servers of Meta Platforms Inc. in the USA; for such transfers the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
7.7 Back-in-stock notifications by email
For items that are temporarily unavailable, you can sign up to be notified by email once when the selected item is available again. The only mandatory information is your email address; further information is voluntary and may be used to address you personally. We use the double opt-in procedure: you only receive a notification after you have expressly confirmed your consent by clicking a verification link sent to your email address. By clicking the link, you give your consent under Art. 6(1)(a) GDPR. We store the IP address assigned by your internet service provider and the date and time of registration so that any later misuse of your email address can be traced. The data is used strictly for its intended purpose. You can cancel these notifications at any time by sending a message to the controller. Your email address is then deleted from the list without delay, unless you have expressly consented to further use or we reserve the right to use it further as permitted by law and described in this policy.
7.8 Shopping cart reminders by email
If you leave our shop before completing your order, you can choose to receive a one-time email reminder of the contents of your shopping cart. The only mandatory information is your email address; further information is voluntary and may be used to address you personally. We use the double opt-in procedure: you only receive a reminder after you have expressly confirmed your consent by clicking a verification link sent to your email address. By clicking the link, you give your consent under Art. 6(1)(a) GDPR to receiving a shopping cart reminder. We store the IP address assigned by your internet service provider and the date and time of registration so that any later misuse of your email address can be traced. The data is used strictly for its intended purpose. You can cancel these reminders at any time by sending a message to the controller. Your email address is then deleted from the list without delay, unless you have expressly consented to further use or we reserve the right to use it further as permitted by law and described in this policy.
7.9 Advertising by post
Based on our legitimate interest in personalised direct marketing, we reserve the right under Art. 6(1)(f) GDPR to store your first and last name and postal address and, if we have received them from you in the course of our contractual relationship, your title, academic degree, year of birth and professional, industry or business designation, and to use them to send you interesting offers and information about our products by post. You can object to the storage and use of your data for this purpose at any time.
8.1 Image files for personalised products
We offer customers the option of commissioning the personalisation of products by sending us image files, either by email to the address given on our website, through a messaging function or through an upload form on our website (with automated, encrypted transmission). The submitted image is used as a template for personalising the selected product. We collect, store and use the files exclusively to make the personalised product as described on our website. If the files are passed on to specialised service providers to make and process the order, we inform you about this explicitly in the following paragraphs; they are not passed on beyond that. Where the files contain personal data (in particular images of identifiable persons), all these processing operations take place exclusively to process your online order under Art. 6(1)(b) GDPR. Once the order has been fully processed, the image files are deleted automatically and completely.
8.2 Carriers and banks
Where necessary for performing the contract for delivery and payment purposes, we pass the personal data we collect to the commissioned transport company and the commissioned credit institution under Art. 6(1)(b) GDPR.
If, under a corresponding contract, we owe you updates for goods with digital elements or for digital products, we process the contact details you provided when ordering in order to inform you personally within the scope of our statutory information obligations under Art. 6(1)(c) GDPR. Your contact details are used strictly for notices about updates we owe and only to the extent required for the respective information.
8.3 Shipping service providers
We use the following transport service providers:
If you have expressly consented to this during the ordering process, we pass your email address and/or phone number to the respective provider under Art. 6(1)(a) GDPR before delivery so that it can arrange a delivery date with you or notify you of the delivery. Otherwise, for the purpose of delivery, we only pass the recipient's name and the delivery address to the provider under Art. 6(1)(b) GDPR, and only to the extent necessary for delivering the goods; in that case the delivery date cannot be arranged with you in advance and no delivery notification is possible. You can withdraw your consent at any time with effect for the future, either to the controller named above or to the provider.
8.4 Payment service providers
Apple Pay
If you choose to pay with "Apple Pay" of Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland ("Apple"), the payment is made via the Apple Pay function of your device running iOS, watchOS or macOS by charging a payment card stored in Apple Pay. Apple Pay uses security features built into your device's hardware and software to protect your transactions; to approve a payment, you enter a code you have set and verify with Face ID or Touch ID. For payment processing, the information you provide during the ordering process and information about your order are passed to Apple in encrypted form. Apple encrypts this data again with a developer-specific key before passing it to the payment service provider of the card stored in Apple Pay, so that only the website where the purchase was made can access the payment data. After the payment, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm the payment. Where personal data is processed in these transfers, this is done exclusively for payment processing under Art. 6(1)(b) GDPR. Apple keeps anonymised transaction data, including the approximate purchase amount, the approximate date and time and whether the transaction was completed; the anonymisation completely rules out any personal reference, and Apple uses this data to improve Apple Pay and other Apple products and services. If you use Apple Pay on your iPhone or Apple Watch to complete a purchase made in Safari on your Mac, the Mac and the authorising device communicate through an encrypted channel on Apple's servers; Apple does not process or store this information in a form that identifies you. You can turn off the option to use Apple Pay on your Mac in your iPhone settings under "Wallet & Apple Pay" by deactivating "Allow Payments on Mac". Further information on data protection with Apple Pay: https://support.apple.com/en-us/HT203027
Google Pay
If you choose to pay with "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment is made via the Google Pay app on your NFC-enabled mobile device running at least Android 4.4 by charging a payment card stored in Google Pay or a payment system verified there (e.g. PayPal). To approve a Google Pay payment of more than EUR 25, you must first unlock your device using the verification method you have set up (e.g. face recognition, password, fingerprint or pattern). For payment processing, the information you provide during the ordering process and information about your order are passed to Google. Google then sends your payment information stored in Google Pay to the originating website in the form of a one-time transaction number, which is used to verify the payment. This number contains no information about the actual payment details of your stored payment methods; it is created and transmitted as a numerical token valid only once. Google only acts as an intermediary for processing the payment; the transaction itself takes place exclusively between you and the originating website by charging the payment method stored in Google Pay. Where personal data is processed in these transfers, this is done exclusively for payment processing under Art. 6(1)(b) GDPR. Google reserves the right to collect, store and evaluate certain transaction-specific information for every Google Pay transaction, including the date, time and amount of the transaction, the merchant's location and description, the merchant's description of the goods or services bought, photos you attached to the transaction, the names and email addresses of seller and buyer or sender and recipient, the payment method used, your description of the reason for the transaction and any offer associated with it. According to Google, this processing is based exclusively on Art. 6(1)(f) GDPR, based on the legitimate interest in proper accounting, verifying transaction data and optimising and maintaining the Google Pay service. Google also reserves the right to combine the processed transaction data with other information collected and stored by Google when you use other Google services. Google Pay terms of use: payments.google.com. Further information on data protection with Google Pay: payments.google.com
Klarna
This website offers one or more online payment methods of Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden. If you choose a payment method of this provider for which you pay in advance (e.g. credit card), we pass the payment data you provide during the ordering process (including name, address, bank and card information, currency and transaction number) and information about the content of your order to the provider under Art. 6(1)(b) GDPR, exclusively for payment processing and only to the extent necessary for this. If you choose a payment method for which the provider pays in advance (e.g. purchase on invoice, instalments or direct debit), you will also be asked to provide certain personal data during the ordering process (first and last name, street, house number, postcode, town, date of birth, email address, phone number and, where applicable, data on an alternative payment method). To protect our legitimate interest in determining our customers' ability to pay, we pass this data to the provider for a credit check under Art. 6(1)(f) GDPR. On the basis of the personal data you provide and further data (such as shopping cart, invoice amount, order history and payment experience), the provider checks whether the selected payment option can be granted with regard to payment and/or default risks. In addition to the provider's internal criteria, identity and credit information from the following credit agencies may be taken into account under Art. 6(1)(f) GDPR: cdn.klarna.com. The credit report may contain probability values (score values). Where score values are included, they are based on a scientifically recognised mathematical-statistical method; the calculation includes, among other things, address data. You can object to this processing at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data where this is necessary to process the payment in accordance with the contract.
PAYONE
This website offers one or more online payment methods of PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt am Main, Germany. If you choose a payment method of this provider for which you pay in advance (e.g. credit card), we pass the payment data you provide during the ordering process (including name, address, bank and card information, currency and transaction number) and information about the content of your order to the provider under Art. 6(1)(b) GDPR, exclusively for payment processing and only to the extent necessary for this.
PayPal
This website offers one or more online payment methods of PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg. If you choose a payment method of this provider for which you pay in advance, we pass the payment data you provide during the ordering process (including name, address, bank and card information, currency and transaction number) and information about the content of your order to the provider under Art. 6(1)(b) GDPR, exclusively for payment processing and only to the extent necessary for this. If you choose a payment method for which we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postcode, town, date of birth, email address, phone number and, where applicable, data on an alternative payment method). To protect our legitimate interest in determining your ability to pay, we pass this data to the provider for a credit check under Art. 6(1)(f) GDPR. On the basis of the data you provide and further data (such as shopping cart, invoice amount, order history and payment experience), the provider checks whether the selected payment option can be granted with regard to payment and/or default risks. The credit report may contain probability values (score values), which are based on a scientifically recognised mathematical-statistical method and include, among other things, address data. You can object to this processing at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data where this is necessary to process the payment in accordance with the contract.
PayPal Checkout
This website uses PayPal Checkout, an online payment system of PayPal consisting of PayPal's own payment methods and local payment methods of third-party providers. If you pay via PayPal, credit card via PayPal, direct debit via PayPal or, if offered, "Pay Later" via PayPal, we pass your payment data to PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg ("PayPal") for payment processing under Art. 6(1)(b) GDPR and only to the extent necessary for this. For credit card via PayPal, direct debit via PayPal and, if offered, "Pay Later" via PayPal, PayPal reserves the right to carry out a credit check. For this, your payment data may be passed to credit agencies under Art. 6(1)(f) GDPR, based on PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the check regarding the statistical probability of default to decide whether to offer the respective payment method. The credit report may contain probability values (score values), which are based on a scientifically recognised mathematical-statistical method and include, among other things, address data. You can object to this processing at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data where this is necessary to process the payment in accordance with the contract.
If the PayPal payment method "purchase on invoice" is available and selected, your payment data is first sent to PayPal to prepare the payment, and PayPal then forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin, Germany ("Ratepay") to carry out the payment. The legal basis in each case is Art. 6(1)(b) GDPR. In this case Ratepay carries out an identity and credit check in its own name according to the principle described above and passes your payment data to credit agencies under Art. 6(1)(f) GDPR, based on the legitimate interest in determining your ability to pay. The credit agencies Ratepay may use are listed at https://www.ratepay.com/legal-payment-creditagencies/.
If you use a local payment method of a third-party provider, your payment data is first passed to PayPal under Art. 6(1)(b) GDPR to prepare the payment. Depending on the local payment method you select, PayPal then passes your payment data to the respective provider under Art. 6(1)(b) GDPR to carry out the payment:
Further data protection information is available in PayPal's privacy statement: https://www.paypal.com/de/legalhub/paypal/privacy-full
Shopify Payments
This website offers one or more online payment methods of Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. If you choose a payment method of this provider for which you pay in advance (e.g. credit card), we pass the payment data you provide during the ordering process (including name, address, bank and card information, currency and transaction number) and information about the content of your order to the provider under Art. 6(1)(b) GDPR, exclusively for payment processing and only to the extent necessary for this.
Stripe
This website offers one or more online payment methods of Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. If you choose a payment method of this provider, we pass the payment data you provide during the ordering process (including name, address, bank and card information, currency and transaction number) and information about the content of your order to the provider under Art. 6(1)(b) GDPR, exclusively for payment processing and only to the extent necessary for this.
8.5 Electronic withdrawal function for distance contracts
Consumers who conclude contracts on this website for which there is a statutory right of withdrawal can declare their withdrawal using an electronic withdrawal function in accordance with the applicable withdrawal rules. When using this function, you must provide or confirm information identifying the contract as well as further personal data such as your first and last name and your email address. This data is collected and transmitted to us under Art. 6(1)(b) GDPR and only to the extent necessary to process the withdrawal properly. On the same legal basis, we use the data to confirm receipt of the withdrawal by email. A further legal basis is Art. 6(1)(c) GDPR, as we are legally obliged to provide an electronic withdrawal function for paid consumer distance contracts.
9.1 Brevo Tracker
To provide and synchronise various customer management services, this website uses the software-based marketing service of Brevo GmbH, Köpenicker Straße 126, 10179 Berlin, Germany. The service enables the automated processing of feed activities, the management of advertising in the marketing channels used, the analysis of the success of marketing measures, and central email marketing and contact management. For these functions it uses cookies, which are stored in your browser's cache on your device and allow us to analyse how you use the website. The cookies record certain information such as your IP address, your location and the time of the page view.
All of this processing, in particular the setting of cookies to read information on your device, only takes place if you have given your express consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool on the website. Other legal bases that apply to specific functions of the service (such as the express consent required under Art. 6(1)(a) GDPR for sending newsletters) remain unaffected. We have concluded a data processing agreement with the provider.
9.2 Google AdSense
This website uses Google AdSense, an online advertising service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses cookies, i.e. text files stored on your computer that allow your use of the website to be analysed, as well as web beacons (small invisible graphics) that can record, collect and evaluate simple actions such as visitor traffic. The information generated about your use of this website (including your IP address) is usually transferred to a Google server and stored there; it may also be transferred to servers of Google LLC in the USA. Google uses this information to evaluate your usage behaviour with regard to AdSense ads. The IP address transmitted by your browser in the context of Google AdSense is not combined with other Google data. Google may pass the information to third parties where required by law and/or where third parties process the data on Google's behalf.
All of this processing, in particular reading information on your device via cookies and/or web beacons, only takes place if you have given your express consent under Art. 6(1)(a) GDPR. Without your consent, Google AdSense is not used during your visit. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool on the website. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission. Further information on Google's privacy policy: https://business.safety.google/privacy/ and https://policies.google.com/privacy
Google Analytics 4
This website uses Google Analytics 4, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which allows your use of our website to be analysed. By default, Google Analytics 4 sets cookies when you visit the website, which are stored on your device and collect certain information. This includes your IP address, which Google shortens by the last digits to rule out a direct personal reference. The information is transferred to Google servers and processed further there; transfers to Google LLC in the USA are also possible. Google uses the information on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide further services related to website and internet use. The shortened IP address transmitted by your browser in the context of Google Analytics is not combined with other Google data. The data collected through Google Analytics 4 is stored for two months and then deleted.
All of this processing, in particular the setting of cookies on your device, only takes place if you have given your express consent under Art. 6(1)(a) GDPR. Without your consent, Google Analytics 4 is not used during your visit. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool on the website. We have concluded a data processing agreement with Google. Further legal information on Google Analytics 4: https://business.safety.google/privacy/, https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites
Demographics
Google Analytics 4 uses the "demographics" feature and can create statistics about the age, gender and interests of visitors. This is done by analysing advertising and information from third-party providers and helps to identify target groups for marketing activities. The data cannot be attributed to a specific person and is deleted after being stored for two months.
Google Signals
As an extension of Google Analytics 4, Google Signals may be used on this website to create cross-device reports. If you have activated personalised ads and linked your devices to your Google account, Google can, subject to your consent to the use of Google Analytics under Art. 6(1)(a) GDPR, analyse your usage behaviour across devices and create database models, including on cross-device conversions. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate "Personalised ads" in your Google account settings, following the instructions at https://support.google.com/My-Ad-Center-Help/answer/12155764. More information on Google Signals: https://support.google.com/analytics/answer/7532985
User IDs
As an extension of Google Analytics 4, the "User IDs" feature may be used on this website. If you have consented to the use of Google Analytics 4 under Art. 6(1)(a) GDPR, have created an account on this website and log in with it on different devices, your activities, including conversions, can be analysed across devices.
For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
11.1 Meta Pixel with advanced matching
We use the "Meta Pixel" service in advanced matching mode, provided by Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Meta"). If a user clicks on an ad we placed on Facebook or Instagram, Meta Pixel adds a parameter to the URL of our linked page. After the redirect, this parameter is entered in the user's browser by a cookie set by our linked page. This cookie also records specific customer data, such as the email address, that we collect on the page linked to the ad during actions such as purchases, account logins or registrations (advanced matching). The cookie is then read and allows the data, including this specific customer data, to be transmitted to Meta.
We use Meta Pixel with advanced matching to make our ads on Facebook and/or Instagram more effective and to ensure that they match users' interests or certain characteristics (e.g. interest in certain topics or products, determined from the websites visited) that we transmit to Meta ("Custom Audiences"). We also analyse the effectiveness of our ads by tracking whether users were redirected to our website after clicking an ad (conversion). Compared with the standard version, advanced matching helps us measure the effectiveness of our campaigns better by recording more attributed conversions.
All transmitted data is stored and processed by Meta so that it can be assigned to the respective user profile and Meta can use it for its own advertising purposes in accordance with Meta's data policy (https://www.facebook.com/about/privacy/). The data can allow Meta and its partners to show ads on and off Facebook.
All of this processing, in particular the setting of cookies to read information on your device, only takes place if you have given your express consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool on the website. We have concluded a data processing agreement with the provider. The information generated by Meta is usually transferred to a Meta server and stored there; it may also be transferred to servers of Meta Platforms Inc. in the USA. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
11.2 Google Ads remarketing
This website uses retargeting technology of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. For this, Google sets a cookie in your browser which, using a pseudonymous cookie ID and based on the pages you visit, enables interest-based advertising. The information collected generally includes your IP address. Further processing only takes place if you have agreed with Google that your web and app browsing history is linked to your Google account and that information from your Google account is used to personalise ads you see on the web. If you are logged in to Google while visiting our website, Google uses your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this, Google temporarily links your personal data with Google Analytics data to form target groups. Personal data may also be transferred to servers of Google LLC in the USA.
All of this processing, in particular the setting of cookies to read information on your device, only takes place if you have given your express consent under Art. 6(1)(a) GDPR. Without your consent, retargeting technology is not used during your visit. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool on the website. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission. Details of the processing triggered by Google and how Google handles data from websites: https://policies.google.com/technologies/partner-sites. Further information on Google's privacy policy: https://business.safety.google/privacy/ and https://policies.google.com/privacy
11.3 Google Ads conversion tracking
This website uses the online advertising programme "Google Ads" and, as part of it, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our offers with ads on external websites and can determine from the campaign data how successful the individual advertising measures are. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is set when a user clicks on an ad placed by Google. These cookies usually expire after 30 days and are not used to identify you personally. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognise that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie, so cookies cannot be tracked across the websites of Google Ads customers. The information obtained with the conversion cookie, including your IP address, is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag, but they do not receive any information that identifies users personally. Personal data may also be transferred to servers of Google LLC in the USA. Details of the processing: https://policies.google.com/technologies/partner-sites
All of this processing, in particular the setting of cookies to read information on your device, only takes place if you have given your express consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool on the website. You can also permanently object to Google Ads conversion tracking cookies by downloading and installing Google's browser plug-in available at https://support.google.com/My-Ad-Center-Help/answer/12155656. Please note that certain functions of this website may not be available or only to a limited extent if you have deactivated cookies. Google's privacy policy: https://business.safety.google/privacy/ and https://policies.google.com/privacy. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
11.4 Google Marketing Platform
This website uses the online marketing tool Google Marketing Platform ("GMP") of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. GMP uses cookies to show ads that are relevant to users, to improve campaign performance reports or to avoid a user seeing the same ads several times. Using a cookie ID, Google records which ads are shown in which browser and can thus prevent them from being shown repeatedly. GMP can also use cookie IDs to record conversions related to ad requests, for example when a user sees a GMP ad and later, using the same browser, visits the advertiser's website and buys something there. According to Google, GMP cookies do not contain any personal information.
Because of the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through this tool and therefore inform you to the best of our knowledge: by integrating GMP, Google receives the information that you have opened the relevant part of our website or clicked on one of our ads. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, the provider may find out and store your IP address. Personal data may also be transferred to servers of Google LLC in the USA.
All of this processing, in particular the setting of cookies to read information on your device, only takes place if you have given your express consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool on the website. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission. GMP privacy policy: https://business.safety.google/privacy/ and https://policies.google.com/privacy
11.5 TikTok Pixel
This website uses the conversion tracking technology of TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland. If you reached our website from an ad on the provider's platform, cookies and/or similar technologies (tracking pixels, web beacons, pings or HTTP requests) can be used to track the success of the ad. For this, the tracking technology reads certain device and browser information, possibly including your IP address, in order to record and evaluate user actions we have defined (e.g. completed transactions, leads, searches on the website, views of product pages). This allows us to create statistics on usage behaviour on our website after a redirect from an ad, which we use to optimise our offer.
All of this processing, in particular the setting of cookies to read information on your device, only takes place if you have given your express consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool on the website. We have concluded a data processing agreement with the provider.
12.1 Sign in with Apple
We offer a single sign-on function of Apple Distribution International, Hollyhill Industrial Estate, Hollyhill, Cork, Ireland. If you have an account with the provider, you can use it to create a user account or register on our website. When you visit this page, the login function may establish a direct connection between your browser and the provider's servers, even if you do not have an account with the provider or are not logged in. The provider thereby learns that you have visited our page. The information collected (possibly including your IP address) is transmitted directly from your browser to a server of the provider and stored there; it is not used to identify you personally and is not passed on to third parties. This processing is based on Art. 6(1)(f) GDPR and our legitimate interest in a user-friendly and interactive website.
If you click the login button to register on our website with your account data, the provider transmits the general and publicly accessible information stored in your account (user ID, name, address, email address, age and gender) to us, exclusively on the basis of your express consent under Art. 6(1)(a) GDPR. We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, last name, address, country, email address, date of birth), insofar as you have released it to the provider. Conversely, on the basis of your consent, data (e.g. information about your browsing or purchasing behaviour) may be transferred from us to your account with the provider. You can withdraw your consent at any time with effect for the future by notifying us.
12.2 Google Sign-In
We offer a single sign-on function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to Google LLC, USA. If you have an account with the provider, you can use it to create a user account or register on our website. When you visit this page, the login function may establish a direct connection between your browser and the provider's servers, even if you do not have an account with the provider or are not logged in. The provider thereby learns that you have visited our page. The information collected (possibly including your IP address) is transmitted directly from your browser to a server of the provider and stored there; it is not used to identify you personally and is not passed on to third parties. This processing is based on Art. 6(1)(f) GDPR and our legitimate interest in a user-friendly and interactive website.
If you click the login button to register on our website with your account data, the provider transmits the general and publicly accessible information stored in your account (user ID, name, address, email address, age and gender) to us, exclusively on the basis of your express consent under Art. 6(1)(a) GDPR. We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, last name, address, country, email address, date of birth), insofar as you have released it to the provider. Conversely, on the basis of your consent, data (e.g. information about your browsing or purchasing behaviour) may be transferred from us to your account with the provider. You can withdraw your consent at any time with effect for the future by notifying us. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission. Further information on Google's privacy policy: https://business.safety.google/privacy/
12.3 Google Reviews PRO
To display external customer reviews, our website includes graphic elements of MARKET PUSH APPS S.R.L., Str. Costesti Nr. 66 E, Costesti 337327, Romania. When you open a page containing such elements, your browser connects directly to the provider's servers to load them, and certain browser information, including your IP address, is transmitted to the provider. Where personal data is processed, this is done under Art. 6(1)(f) GDPR, based on our legitimate interest in marketing our offer optimally and presenting our website attractively.
12.4 Trusted Shops Trustbadge
To display external customer reviews and/or an externally awarded quality seal, our website includes graphic elements of Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany. When you open a page containing such elements, your browser connects directly to the provider's servers to load them, and certain browser information, including your IP address, is transmitted to the provider. Where personal data is processed, this is done under Art. 6(1)(f) GDPR, based on our legitimate interest in marketing our offer optimally and presenting our website attractively.
Further processing may take place when you place an online order with us. Subject to your express consent under Art. 6(1)(a) GDPR, your order information (order total, order number, product purchased if applicable) and your email address are transmitted to the provider in encrypted form via the Trustbadge after you complete an order, in order to check whether you are already registered for the provider's services (in particular buyer protection) and, if applicable, to allow you to register. If you are already registered or register with the provider for its services (in particular buyer protection), your order information (order total, order number, product purchased) and your email address are transmitted to the provider under Art. 6(1)(b) GDPR on the basis of the contractual agreement with the provider and processed further by it in order to provide the services. We and the provider are joint controllers for this processing under Art. 26 GDPR. The joint controllership agreement is available at help.etrusted.com.
12.5 TrustedSite badge
To display external customer reviews and/or an externally awarded quality seal, our website includes graphic elements of TrustedSite, LLC, 16 Maiden Lane, 4th floor, San Francisco, California, 94108, USA. When you open a page containing such elements, your browser connects directly to the provider's servers to load them, and certain browser information, including your IP address, is transmitted to the provider. Where personal data is processed, this is done under Art. 6(1)(f) GDPR, based on our legitimate interest in marketing our offer optimally and presenting our website attractively. For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection.
12.6 Google Maps API (address validation)
To check certain entries in the address form of our checkout for errors in real time, we use Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to Google LLC, USA. The provider validates the address entered, checks the spelling and adds any missing data; for ambiguous addresses, correct alternatives are suggested. For this, the address data you enter is transmitted to the provider, stored there and evaluated. This processing is based on Art. 6(1)(f) GDPR and our legitimate interest in recording customers' correct address data in order to fulfil our contractual delivery obligations carefully and to prevent problems in performing the contract. The provider processes the data separately, does not combine it with other data and deletes it as soon as its status or correctness has been confirmed, at the latest after 30 days. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission. Further information on Google's privacy policy: https://business.safety.google/privacy/
12.7 Google Web Fonts
To display fonts consistently, this site uses web fonts of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. When you open a page, your browser loads the required web fonts into its cache to display texts and fonts correctly and connects directly to the provider's servers. Certain browser information, including your IP address, is transmitted to the provider. Data may also be transferred to Google LLC, USA. Personal data is only processed in the course of connecting to the font provider if you have given your express consent under Art. 6(1)(a) GDPR. You can withdraw your consent at any time with effect for the future by deactivating this service in the cookie consent tool on the website. If your browser does not support web fonts, a standard font from your computer is used. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission. Further information on Google's privacy policy: https://business.safety.google/privacy/
12.8 hCaptcha
On this website we use the CAPTCHA service of Intuition Machines, Inc., 350 Alabama St, San Francisco, CA 94110, USA. The service checks whether an entry is made by a human or improperly by automated processing, and blocks spam, DDoS attacks and similar automated malicious access. To ensure that an action is carried out by a human and not by an automated bot, the provider collects the IP address of the device used, identification data of the browser and operating system type, and the date and duration of the visit, and transmits them to the provider's servers for evaluation. The legal basis is our legitimate interest under Art. 6(1)(f) GDPR in establishing individual responsibility on the internet and preventing misuse and spam. We have concluded a data processing agreement with the provider. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission.
12.9 Google Customer Reviews
We work with Google in the "Google Customer Reviews" programme. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). The programme allows us to collect customer reviews from users of our website. After you have used our services, you are asked on our website whether you would like to take part in an email survey by Google. If you give your consent under Art. 6(1)(a) GDPR, we transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your purchase experience on our website. Your review is then combined with our other reviews and shown in our Google Customer Reviews badge and in our Merchant Center dashboard; it is also used for Google seller ratings. Personal data may also be transferred to servers of Google LLC in the USA. You can withdraw your consent at any time by sending a message to the controller or to Google. For transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection on the basis of an adequacy decision of the European Commission. Further information on Google's privacy policy: https://business.safety.google/privacy/
12.10 Job applications by email or online form
In a separate section of our website we advertise current vacancies, for which applicants can apply by email to the contact address provided or through an online form. Applicants must provide all personal data required for a sound assessment, including general information such as name, address and contact details, evidence of qualifications and, where applicable, health-related information. Details are given in the job advertisement. Applications submitted through the form are transmitted to us in encrypted form in accordance with the state of the art. We store and evaluate the data exclusively to process the application. For queries we use the applicant's email address or phone number. The legal basis is Art. 6(1)(b) GDPR (or Section 26(1) of the German Federal Data Protection Act, BDSG), under which going through the application process counts as preparing an employment contract.
Where special categories of personal data within the meaning of Art. 9(1) GDPR (e.g. health data such as information on severe disability) are requested from applicants, the processing is based on Art. 9(2)(b) GDPR so that we can exercise the rights and fulfil the obligations arising from employment law and social security and social protection law. Alternatively or additionally, the processing of special categories of data may be based on Art. 9(2)(h) GDPR where it is carried out for the purposes of preventive or occupational medicine, the assessment of the applicant's working capacity, medical diagnosis, health or social care or treatment, or the management of health or social care systems and services.
If the applicant is not selected or withdraws the application early, the data submitted and all electronic correspondence, including the application email, are deleted after appropriate notification, at the latest after 6 months. This period is based on our legitimate interest in answering any follow-up questions about the application and, where necessary, meeting our obligations to provide evidence under the rules on equal treatment of applicants. If the application is successful, the data provided is processed under Art. 6(1)(b) GDPR (in Germany in conjunction with Section 26(1) BDSG) for the purpose of carrying out the employment relationship.
Cookie consent tool
To obtain valid consent for cookies and cookie-based applications that require consent, this website uses a cookie consent tool. It is shown to users when they open the site as an interactive interface on which consent for certain cookies and/or cookie-based applications can be given by ticking boxes. The tool ensures that all cookies and services requiring consent are only loaded if the user has given the corresponding consent, so that such cookies are only set on the user's device if consent has been given.
The tool sets technically necessary cookies to store your cookie preferences. As a rule, no personal user data is processed. If, in individual cases, personal data (such as the IP address) is processed to store, assign or log cookie settings, this is done under Art. 6(1)(f) GDPR based on our legitimate interest in legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant website. A further legal basis is Art. 6(1)(c) GDPR: as the controller, we are legally obliged to make the use of technically unnecessary cookies dependent on the user's consent. Where necessary, we have concluded a data processing agreement with the provider. Further information on the operator and the settings of the cookie consent tool is available directly in the tool's interface on our website.
14.1 Applicable data protection law grants you the following rights with regard to the processing of your personal data by the controller (rights of access and intervention). The conditions for exercising them are set out in the provisions cited:
14.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST AFTER BALANCING INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO CONTINUE PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENCE OF LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR SUCH MARKETING. YOU CAN EXERCISE THIS OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
How long we store personal data depends on the respective legal basis, the purpose of the processing and, where relevant, the applicable statutory retention periods (e.g. retention periods under commercial and tax law).
Personal data processed on the basis of express consent under Art. 6(1)(a) GDPR is stored until you withdraw your consent.
Where statutory retention periods apply to data processed under Art. 6(1)(b) GDPR in the context of legal or quasi-legal obligations, this data is routinely deleted after the retention periods have expired, provided it is no longer required to perform or prepare a contract and/or we have no continuing legitimate interest in storing it.
Personal data processed under Art. 6(1)(f) GDPR is stored until you exercise your right to object under Art. 21(1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or the processing serves the establishment, exercise or defence of legal claims.
Personal data processed for direct marketing under Art. 6(1)(f) GDPR is stored until you exercise your right to object under Art. 21(2) GDPR.
Unless otherwise stated in the specific information in this policy, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.
Last updated: 23 September 2026
