Privacy Policy

Hosting

Hosting and website-delivery services are provided in part by our service providers as processors on our behalf. Unless otherwise stated in this privacy policy, all access data and all data collected in forms provided for that purpose on this website are processed on their servers. If you have questions about our service providers and the basis of our cooperation with them, please contact us using the contact details described in this privacy policy.

2.1 Data processing for contract performance

For the purpose of contract performance (including enquiries about and handling of any claims arising from warranty, breach of contract, and withdrawal rights, as well as any statutory update obligations) pursuant to Art. 6 (1) sentence 1 (b) GDPR, we collect personal data that you voluntarily provide to us as part of your order. Mandatory fields are marked as such, since in these cases we require the data to perform the contract and cannot process the order without it. The data collected in each case is apparent from the respective input forms. Further information on the processing of your data, in particular on disclosure to our service providers for the purpose of order and payment processing, can be found in the following sections of this privacy policy. Once the contract has been fully performed, your data is restricted from further processing and deleted after expiry of the tax- and commercial-law retention periods pursuant to Art. 6 (1) sentence 1 (c) GDPR, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 (a) GDPR, or we reserve the right to a further use of data that is permitted by law and about which we inform you in this statement.

2.2 Customer account

Insofar as you have given your consent under Art. 6 (1) sentence 1 (a) GDPR by choosing to open a customer account, we use your data for the purpose of opening the customer account and for storing your data for further future orders on our website. Your customer account can be deleted at any time, either by sending a message to the contact option described in this privacy policy or via a function provided for that purpose in the customer account. After deletion of your customer account, your data is deleted, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 (a) GDPR, or we reserve the right to a further use of data that is permitted by law and about which we inform you in this statement.

Contact

As part of customer communication, we collect personal data pursuant to Art. 6 (1) sentence 1 (b) GDPR to process your enquiries when you voluntarily provide us with such data when contacting us (e.g. via contact form or email). Mandatory fields are marked as such, since in these cases we require the data to process your enquiry. The data collected in each case is apparent from the respective input forms. Once your enquiry has been fully processed, your data is deleted, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 (a) GDPR, or we reserve the right to a further use of data that is permitted by law and about which we inform you in this statement.

4.1 Data processing for transaction handling

We pass on to Stripe the data necessary for processing the payment transaction, insofar as this is required to process the payment. This serves to perform the contract pursuant to Art. 6 (1) sentence 1 (b) GDPR. Stripe collects some of the data required to process the payment itself, e.g. via the checkout page hosted by Stripe. Stripe's privacy policy applies in addition. Data may be transferred to third countries outside the EU/EEA; insofar as no adequacy decision by the European Commission exists, our cooperation is based on the European Commission's standard contractual clauses. If you have questions about our payment-processing partners or the basis of our cooperation with them, please contact us using the contact option named in this privacy policy.

4.2 Data processing for fraud prevention and optimizing our payment processes

Where applicable, we pass on to Stripe additional data which, together with the data required to process the payment, is used for the purpose of fraud prevention and optimizing our payment processes (e.g. invoicing, handling of disputed payments, supporting bookkeeping). This serves to safeguard our legitimate interests in protecting against fraud and in efficient payment management, which predominate within the context of a balancing of interests, pursuant to Art. 6 (1) sentence 1 (f) GDPR.

Email newsletter with sign-up

If you sign up for our newsletter, we use the data required for this purpose, or data you have separately provided to us, to regularly send you our email newsletter on the basis of your consent pursuant to Art. 6 (1) sentence 1 (a) GDPR.

You may unsubscribe from the newsletter at any time, either by sending a message to the contact option described below or via a link provided for that purpose in the newsletter.

After you unsubscribe, we delete your email address from the recipient list, unless you have expressly consented to further use of your data pursuant to Art. 6 (1) sentence 1 (a) GDPR, or we reserve the right to a further use of data that is permitted by law and about which we inform you in this statement.

General information

To make visiting our website attractive and to enable the use of certain functions, we use technologies including so-called cookies on various pages. Cookies are small text files that are automatically stored on your device. Some of the cookies we use are deleted again after the end of the browser session, i.e. once you close your browser (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (persistent cookies). You can find the storage duration in the overview of the cookie settings in your web browser. When using our online offering, we use strictly necessary technologies in order to provide the digital service you have expressly requested — for example, to keep you logged in during a session or to remember your language setting. Storing information on your device, or accessing information already stored on your device, does not require consent to that extent.

For functions that are not strictly necessary, storing information on your device, or accessing information already stored on your device, requires your consent. Please note that if consent is not given, parts of the website may not be fully usable. Any consent you give remains in effect until you adjust or reset the relevant settings on your device.

We use technologies that are strictly necessary for the use of certain functions of our website. Through these technologies, IP address, time of visit, device and browser information, as well as information about your use of our website, are collected and processed. This serves our legitimate interests, which predominate within the context of a balancing of interests, in an optimized presentation of our offering pursuant to Art. 6 (1) sentence 1 (f) GDPR.

In addition, we use technologies to fulfil the legal obligations to which we are subject (e.g. to be able to prove consent to the processing of your personal data), as well as for web analytics and online marketing. Further information on this, including the respective legal basis for the data processing, can be found in the following sections of this privacy policy.

You can find the cookie settings for your browser at the following links: Microsoft Edge™ / Safari™ / Chrome™ / Firefox™ / Opera™.

Insofar as you have consented to the use of the technologies pursuant to Art. 6 (1) sentence 1 (a) GDPR, you may withdraw your consent at any time by sending a message to the contact option described in the privacy policy.

7.1 Use of Google services

We use the technologies of Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland ("Google") described below. Information automatically collected by Google's technologies about your use of our website is generally transferred to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. Unless stated otherwise for an individual technology, data processing is based on an agreement concluded for the respective technology between joint controllers pursuant to Art. 26 GDPR. Further information on data processing by Google can be found in Google's privacy notices. Our service providers are based in and/or use servers in countries outside the EU and the EEA. For some of these countries, an adequacy decision by the European Commission exists; for others, our cooperation is based on the European Commission's standard contractual clauses.

Google Analytics

For the purpose of website analysis, Google Analytics automatically collects and stores data (IP address, time of visit, device and browser information, as well as information about your use of our website), from which usage profiles are created using pseudonyms. Cookies may be used for this purpose. If you visit our website from within the EU, your IP address is stored on a server located in the EU to derive location data and is then immediately deleted before the traffic is forwarded for processing to further Google servers. Data processing is based on an agreement on data processing on our behalf concluded with Google.

For the purpose of optimizing the marketing of our website, we have activated the data-sharing settings for "Google products and services". This allows Google to access the data collected and processed by Google Analytics and subsequently use it to improve Google's services. Data is shared with Google under these data-sharing settings on the basis of an additional agreement between controllers. We have no influence on the subsequent processing of data by Google.

Google Ads

For advertising purposes in Google search results and on third-party websites, the so-called Google Remarketing Cookie is set when you visit our website. Through the collection and processing of data (IP address, time of visit, device and browser information, as well as information about your use of our website), and by means of a pseudonymous cookie ID and based on the pages you have visited, this cookie enables interest-based advertising. Further data processing takes place only if you have activated the "personalized advertising" setting in your Google account. If you are logged into Google during your visit to our website in that case, Google uses your data together with Google Analytics data to create and define audience lists for cross-device remarketing.

7.2 Use of Meta services

Meta Ads Manager

We use Meta Ads Manager to advertise this website on Facebook (by Meta) as well as on other platforms. We determine the parameters of the respective advertising campaign. Meta Platforms Ireland is responsible for the exact implementation, in particular the decision on the placement of advertisements for individual users. Unless stated otherwise for an individual technology, data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR. The joint responsibility is limited to the collection of data and its transfer to Meta Platforms Ireland. Subsequent data processing by Meta Platforms Ireland is not covered by this.

Our online presence on Facebook (by Meta), X (formerly Twitter), Instagram (by Meta), YouTube, Pinterest, LinkedIn, Xing

Insofar as you have given your consent under Art. 6 (1) sentence 1 (a) GDPR to the respective social media operator, when you visit our online presences on the social media listed above, your data is automatically collected and stored for market research and advertising purposes, from which usage profiles are created using pseudonyms. These may be used, for example, to display advertisements within and outside the platforms that are presumed to match your interests. Cookies are generally used for this purpose. For detailed information on the processing and use of data by the respective social media operator, as well as contact options and your rights and settings for protecting your privacy in this regard, please refer to the privacy notices of the respective provider. Should you nevertheless need help in this regard, you may contact us.

Facebook (by Meta) is a service offered by Meta Platforms Ireland Ltd., Block J, Serpentine Avenue, Dublin 4, Ireland. Instagram (by Meta) is likewise a service offered by Meta Platforms Ireland Ltd. Information automatically collected by Meta Platforms Ireland about your use is generally transferred to and stored on a server operated by Meta Platforms, Inc., 1601 Willow Road, Menlo Park, California 94025, USA. Data processing is based on an agreement between joint controllers pursuant to Art. 26 GDPR.

X is a service offered by X Internet Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07, Ireland. Automatically collected information is generally transferred to and stored on a server operated by X Corp., FM 1209, Building 2, Bastrop, TX 78602, USA.

YouTube is a service offered by Google Ireland Ltd., Gordon House, Barrow Street, Dublin 4, Ireland. Automatically collected information is generally transferred to and stored on a server operated by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA.

Pinterest is a service offered by Pinterest Europe Ltd., Waterloo Exchange, 3rd Floor, Waterloo Road, Dublin 4, Ireland. Automatically collected information is generally transferred to and stored on a server operated by Pinterest, Inc., 505 Brannan St., San Francisco, CA 94107, USA.

LinkedIn is a service offered by LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. Automatically collected information is generally transferred to and stored on a server operated by LinkedIn Corporation, 1000 W. Maude Avenue, Sunnyvale, CA 94085, USA.

Xing is a service offered by New Work SE, Am Strandkai 1, 20457 Hamburg, Germany.

For server locations outside the EU/EEA, the following applies: insofar as no adequacy decision by the European Commission exists, our cooperation with the providers named above is based on the European Commission's standard contractual clauses.

9.1 Your rights

As a data subject, you have the following rights: under Art. 15 GDPR, the right to request information about your personal data processed by us, to the extent described therein; under Art. 16 GDPR, the right to request the immediate rectification of inaccurate or completion of incomplete personal data stored by us; under Art. 17 GDPR, the right to request the erasure of your personal data stored by us, unless further processing is necessary to exercise the right of freedom of expression and information, to comply with a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims; under Art. 18 GDPR, the right to request the restriction of the processing of your personal data, insofar as you dispute the accuracy of the data, the processing is unlawful but you object to its erasure, we no longer need the data but you need it to assert, exercise, or defend legal claims, or you have objected to the processing pursuant to Art. 21 GDPR; under Art. 20 GDPR, the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, or to request that it be transferred to another controller; and under Art. 77 GDPR, the right to lodge a complaint with a supervisory authority. As a rule, you may contact the supervisory authority of your habitual residence, place of work, or our registered office for this purpose.

Right to object

Insofar as we process personal data as described above to safeguard our legitimate interests, which predominate within the context of a balancing of interests, you may object to this processing with effect for the future. If the processing is carried out for direct marketing purposes, you may exercise this right at any time as described above. Insofar as the processing is carried out for other purposes, you have a right to object only for reasons arising from your particular situation. After you exercise your right to object, we will no longer process your personal data for these purposes, unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights, and freedoms, or the processing serves to assert, exercise, or defend legal claims. This does not apply if the processing is carried out for direct marketing purposes; in that case, we will no longer process your personal data for that purpose.

9.2 Contact options

If you have questions about the collection, processing, or use of your personal data, or about information, rectification, restriction, or erasure of data, as well as the withdrawal of consent given or objection to a specific use of data, please contact us directly using the contact details in our imprint.