EN Privacy Policy

Privacy Policy EN version

English version: **PRIVACY POLICY** **1) Introduction and Contact Details of the Controller** 1.1 We are delighted that you are visiting our website and thank you for your interest. In the following, we will inform you about the handling of your personal data when using our website. Personal data here refers to all data with which you can be personally identified. 1.2 The controller for data processing on this website, in the sense of the General Data Protection Regulation (GDPR), is ALIAVE s.r.o., Dunajská 66, 81108 Bratislava, Slovakia, Tel.: +421 2 3332 5107, Email: support@brightbuy.online. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data. **2) Data Collection When Visiting Our Website** 2.1 When merely using our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you: - The visited website - Date and time at the moment of access - Amount of data sent in bytes - Source/reference from which you came to the page - Browser used - Operating system used - IP address used (if applicable: in anonymized form) The processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use. 2.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string "https://" and the lock symbol in your browser line. **3) Hosting & Content Delivery Network** Squarespace For hosting our website and displaying the page content, we use the system of the following provider: Squarespace, Le Pole House, Ship Street Great, Dublin 8, Ireland All data collected on our website is processed on the provider's servers. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. In the context of the aforementioned services, data may also be transferred to Squarespace Inc. in the USA as part of further processing on behalf. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission. **4) Cookies** To make visiting our website attractive and enable the use of certain functions, we use cookies, small text files that are stored on your device. Some of the cookies we use are deleted after the browser session, i.e., after closing your browser (so-called "session cookies"). Other cookies remain on your device and enable us to recognize your browser on your next visit (persistent cookies). You can find the storage duration in the overview of cookie settings in your web browser. If individual cookies we use also process personal data, processing is carried out in accordance with Art. 6 Para. 1 lit. b GDPR either for the execution of the contract, according to Art. 6 Para. 1 lit. a GDPR in the case of a given consent, or according to Art. 6 Para. 1 lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit. You can set your browser to inform you about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for specific cases or in general. Please note that the functionality of our website may be limited if you do not accept cookies. **5) Contacting** 5.1 Shopify Inbox This website uses the live chat system of the following provider: Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland The processing of personal data transmitted through the chat is either in accordance with Art. 6 Para. 1 lit. b GDPR, because it is necessary for contract initiation or execution, or according to Art. 6 Para. 1 lit. f GDPR due to our legitimate interest in the effective care of our site visitors. Your data transmitted in this way will be deleted subject to statutory retention periods once the matter in question has been conclusively clarified. Additionally, for the purpose of creating pseud onymized usage profiles, further information may be collected and evaluated using cookies, which, however, do not serve your personal identification and are not merged with other data records. If this information has a personal reference, processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the statistical analysis of user behavior for optimization purposes. The setting of cookies can be prevented by corresponding browser settings. However, the functionality of our website may be limited in this case. You can object to the collection and storage of data for the creation of a pseudonymized usage profile at any time with effect for the future. Data is also transferred to: Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. Adequate data protection is ensured by an adequacy decision of the European Commission for data transfers to Canada. 5.2 Shop Rating Reminder For rating reminders, we use the services of the following provider: Shopauskunft.de GmbH & Co. KG, Habichthorst 38a, 22459 Hamburg, Germany Based on your explicit consent according to Art. 6 Para. 1 lit. a GDPR, we transmit your email address and, if applicable, further customer data to the provider so that they can contact you with a rating reminder by email. You can revoke your consent at any time with effect for the future towards us or the provider. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. 5.3 Zendesk For processing customer inquiries, we use the email ticketing system of the following provider: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland When you submit contact requests via our website by mail, they are stored and organized in the ticket system to enable chronological processing and improve the service experience. You can always see the current status of processing your concern using the individually assigned ticket number. For organizing and processing inquiries, personal data according to the scope of their provision, at least, however, name, first name, and email address, are collected, transmitted to the provider, stored, and read out. The legal basis for processing this data is our legitimate interest in the efficient design of our customer service, the fastest possible response to your concern, and the optimization of our service offer according to Art. 6 Para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. 5.4 WhatsApp Business We offer visitors to our website the opportunity to contact us via the messaging service WhatsApp of WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland, using the so-called "Business Version" of WhatsApp. If you contact us via WhatsApp concerning a specific transaction (for example, an order placed), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name according to Art. 6 Para. 1 lit. b GDPR for processing and answering your request. On the same legal basis, we may ask you via WhatsApp to provide further data (order number, customer number, address, or email address) to assign your request to a specific transaction. If you use our WhatsApp contact for general inquiries (such as about the range of services, availability, or our website), we store and use the mobile phone number you use on WhatsApp as well as – if provided – your first and last name according to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the efficient and timely provision of the requested information. Your data will always be used only to respond to your concern via WhatsApp. A disclosure to third parties does not take place. Please note that WhatsApp Business gets access to the address book of the mobile device we use for this purpose and automatically transfers stored telephone numbers to a server of the parent company Meta Platforms Inc. in the USA. For the operation of our WhatsApp Business account, we use a mobile device whose address book only stores the WhatsApp contact data of those users who have also contacted us via WhatsApp. This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts according to Art. 6 Para. 1 lit. a GDPR upon first use of the app on their device by accepting the WhatsApp terms of use. A transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded. Please refer to WhatsApp's privacy policy for the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and setting options for protecting your privacy: https://www.whatsapp.com/legal/?eea=1#privacy-policy In the context of the above processing, data may be transferred to servers of Meta Platforms Inc. in the USA. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission. 5.5 In the context of contacting us (e.g., via contact form or email), personal data is processed – exclusively for the purpose of processing and answering your inquiry and only to the extent necessary. The legal basis for processing this data is our legitimate interest in answering your inquiry according to Art. 6 Para. 1 lit. f GDPR. If your contact aims at concluding a contract, then an additional legal basis for processing is Art. 6 Para. 1 lit. b GDPR. Your data will be deleted when it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided no statutory retention obligations are in conflict. **6) Comment Function** In the context of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in case a person violates the rights of third parties or posts illegal content through a comment. We require your email address to contact you if a third party should object to your published content as unlawful. The legal basis for storing your data is Art. 6 Para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties. Subsequent comments can be subscribed to by you as a user. You will receive a confirmation email to ensure that you are the owner of the provided email address (double opt-in procedure). The legal basis for data processing in the case of subscribing to comments is Art. 6 Para. 1 lit. a GDPR. You can unsubscribe from ongoing comment subscriptions at any time with effect for the future, please refer to the confirmation email for further information on the unsubscribe option. **7) Data Processing When Opening a Customer Account** According to Art. 6 Para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the opening of a customer account. Which data is required for opening an account can be seen from the input form on our website. Deleting your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. After deleting your account, your data will be deleted, provided all contracts concluded via the account have been fully settled, no statutory retention periods are opposed, and there is no legitimate interest in further storage on our part. **8) Use of Customer Data for Direct Marketing** 8.1 Subscription to our Email Newsletter If you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter, which means that we will only send you a newsletter if you confirm your consent to receive the newsletter by clicking on a link sent to your email address for this purpose. By activating the confirmation link, you give us your consent to the use of your personal data according to Art. 6 Para. 1 lit. a GDPR. When subscribing to the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of subscription to prevent possible misuse of your email address at a later date. The data collected by us when subscribing to the newsletter will be used exclusively for promotional purposes via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending the appropriate message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is allowed by law and about which we inform you in this declaration. 8.2 Sending the Email Newsletter to Existing Customers If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range via email. We do not need to obtain a separate consent from you for this according to § 7 Abs. 3 UWG. The data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising according to Art. 6 Para. 1 lit. f GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails. You are entitled to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller named at the beginning. After receiving your objection, the use of your email address for advertising purposes will be immediately discontinued. 8.3 WhatsApp Newsletter If you subscribe to our WhatsApp newsletter, we will regularly send you information about our offers via WhatsApp. The only mandatory information for sending the newsletter is your mobile phone number. For sending the newsletter, you add our communicated mobile phone number to the address contacts of your mobile device and send us the message "Start" via WhatsApp. By sending this WhatsApp message, you give us your consent for the use of your personal data according to Art. 6 Para. 1 lit. a GDPR for the purpose of newsletter dispatch. We will then add you to our newsletter distribution list. The data collected by us when subscribing to the newsletter will be used exclusively for promotional communication through the newsletter. You can unsubscribe from the newsletter at any time by sending us the message "Stop" via WhatsApp. After unsubscribing, your mobile phone number will be immediately deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is allowed by law and about which we inform you in this declaration. Please note that WhatsApp has access to the address book of the mobile device we use for sending the newsletter and automatically transfers stored phone numbers to a server of Facebook in the USA. For sending our WhatsApp newsletter, we therefore use a mobile device whose address book only stores the WhatsApp contact data of our newsletter subscribers. This ensures that every person whose WhatsApp contact data is stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts according to Art. 6 Para. 1 lit. a GDPR by accepting the WhatsApp terms of use upon first use of the app on their device. A transmission of data of users who do not use WhatsApp and/or have not contacted us via WhatsApp is thus excluded. Please refer to WhatsApp's privacy policy for the purpose and scope of data collection and the further processing and use of data by WhatsApp, as well as your related rights and setting options for protecting your privacy: https://www.whatsapp.com/legal/?eea=1#privacy-policy In the context of the above processing, data may be transferred to servers of Meta Platforms Inc. in the USA. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework, which ensures compliance with the European level of data protection based on an adequacy decision by the European Commission. 8.4 Email Product Availability Notification For temporarily unavailable items, you can sign up to receive email product availability notifications. We will send you a one-time email notification about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. The provision of further data is voluntary and may be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which means that you will only receive a notification if you confirm your consent to receive such a notification by clicking on a link sent to your email address for this purpose. By activating the confirmation link, you give us your consent for the use of your personal data according to Art. 6 Para. 1 lit. a GDPR. When subscribing to our email notification service for product availability, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of subscription to prevent possible misuse of your email address at a later date. The data collected by us when subscribing to our email notification service for product availability will be used exclusively for the purpose of informing you about the availability of a specific item in our online shop. You can unsubscribe from the availability notifications at any time via the link provided in the notification or by sending the appropriate message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our notification distribution list for product availability, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is allowed by law and about which we inform you in this declaration. 8.5 Email Shopping Cart Reminders In case of interrupting your shopping process on our website before completing the order, you have the option to be reminded once via email about the contents of your virtual shopping cart. The only mandatory information for sending this reminder is your email address. The provision of further data is voluntary and may be used to address you personally. For sending the email, we use the so-called double opt-in procedure, which means that you will only receive a notification if you confirm your consent to receive such a notification by clicking on a link sent to your email address for this purpose. By activating the confirmation link, you give us your consent for the use of your personal data according to Art. 6 Para. 1 lit. a GDPR for sending a shopping cart reminder. When subscribing to our email notification service for shopping cart reminders, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of subscription to prevent possible misuse of your email address at a later date. The data collected by us when subscribing to our email notification service for shopping cart reminders will be used exclusively for the purpose of reminding you via email about the contents of your shopping cart in our online shop. You can unsubscribe from the shopping cart reminders at any time via the link provided in the reminder or by sending the appropriate message to the controller mentioned at the beginning. After unsubscribing, your email address will be immediately deleted from our notification distribution list for shopping cart reminders, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is allowed by law and about which we inform you in this declaration. 8.6 Advertising by Mail Based on our legitimate interest in personalized direct mail, we reserve the right to store your first and last name, your postal address, and - if we have received additional information from you within the framework of the contractual relationship - your title, academic degree, your year of birth, and your professional, industry or business name according to Art. 6 Para. 1 lit. f GDPR and to use this information to send you interesting offers and information about our products by letter post. You can object to the storage and use of your data for this purpose at any time by sending an appropriate message to the controller. **9) Data Processing for Order Handling** 9.1 To the extent necessary for contract processing, personal data collected by us is transferred to the transport company commissioned with the delivery and to the credit institution commissioned with payment matters according to Art. 6 Para. 1 lit. b GDPR. If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we process the contact data you provided during the order (name, address, email address) to personally inform you about upcoming updates within the legally required period by a suitable communication channel (e.g., by mail or email) according to Art. 6 Para. 1 lit. c GDPR. Your contact data is strictly used for the purpose of informing you about owed updates and is processed by us only to the extent necessary for the respective information. Furthermore, we work with the following service provider(s) to fulfill our contractual obligations to our customers. Certain personal data is transmitted to these service providers according to the following information. 9.2 To fulfill our contractual obligations to our customers, we cooperate with external shipping partners. We pass on your name as well as your delivery address and, if necessary for the delivery, your telephone number exclusively for the purposes of the goods delivery Art. 6 Para. 1 lit. b GDPR to a shipping partner selected by us. 9.3 Easybill For order processing, we use the following provider: easybill GmbH, Düsselstr. 21, 41564 Kaarst, Germany Name, address, and possibly other personal data are transferred according to Art. 6 Para. 1 lit. b GDPR exclusively for the purpose of processing the online order to the provider. The transfer of your data takes place here only insofar as it is actually necessary for processing the order. 9.4 Shopify Order Printer For order processing, we use the following provider: Shopify International Limited, Victoria Buildings, 2nd floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland Name, address, and possibly other personal data are transferred according to Art. 6 Para. 1 lit. b GDPR for the purpose of processing the online order to the provider. The transfer of your data takes place here only insofar as it is actually necessary for processing the order. The provider is also used for accounting. Thus, the provider processes incoming and outgoing invoices as well as possibly bank movements of our company to automatically capture invoices, match them to transactions, and create the financial accounting in a partially automated process. If personal data is processed in the process, the processing is carried out in accordance with Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the efficient organization and documentation of our business transactions. 9.5 Transfer of Personal Data to Shipping Service Providers - DACHSER SE As a transport service provider, we use the following provider: DACHSER SE, Logistics Center Munich, European Logistics, Zamilastraße 11, 81677 Munich, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - Deutsche Post As a transport service provider, we use the following provider: Deutsche Post AG, Charles-de-Gaulle-Str. 20, 53113 Bonn, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - DHL As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - DHL Express As a transport service provider, we use the following provider: DHL Express Germany GmbH, Heinrich-Brüning-Str. 5, 53113 Bonn, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - DHL Freight As a transport service provider, we use the following provider: DHL Freight GmbH, Godesberger Allee 102-104, 53175 Bonn, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - DPD As a transport service provider, we use the following provider: DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - FedEx As a transport service provider, we use the following provider: FedEx Express Germany GmbH, Langer Kornweg 34 k, 65451 Kelsterbach, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - GLS As a transport service provider, we use the following provider: General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - Hermes As a transport service provider, we use the following provider: Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - Kühne+Nagel As a transport service provider, we use the following provider: Kühne + Nagel AG & Co. KG, Wilhelm-Kaisen-Brücke 1, 28195 Bremen We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - Schenker As a transport service provider, we use the following provider: Schenker Deutschland AG, Lyoner Straße 15, 60528 Frankfurt am Main, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods . In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - TNT As a transport service provider, we use the following provider: TNT Express GmbH, Haberstraße 2, 53842 Troisdorf, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. - UPS As a transport service provider, we use the following provider: United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany We pass on your email address and/or telephone number prior to delivery of the goods for the purpose of agreeing on a delivery date or to announce delivery according to Art. 6 Para. 1 lit. a GDPR, provided that you have given your explicit consent to this in the ordering process. Otherwise, for the purpose of delivery according to Art. 6 Para. 1 lit. b GDPR, we only pass on the name of the recipient and the delivery address to the provider. The transfer takes place only insofar as it is necessary for the delivery of goods. In this case, prior coordination of the delivery date with the provider or the delivery announcement is not possible. The consent can be revoked at any time with effect for the future towards the above-mentioned controller or towards the respective provider. 9.6 Use of Payment Service Providers (Payment Services) - Apple Pay If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment processing is carried out via the "Apple Pay" function of your iOS, watchOS, or macOS operated device by charging a payment card stored in "Apple Pay". Apple Pay uses security features integrated into the hardware and software of your device to protect your transactions. Therefore, for the release of a payment, the entry of a code previously defined by you as well as the verification via "Face ID" or "Touch ID" function of your device is required. For the purpose of payment processing, the information you provide during the ordering process along with information about your order is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay to carry out the payment. The encryption ensures that only the website through which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number and a transaction-specific, dynamic security code to the originating website to confirm payment success. Insofar as personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing according to Art. 6 Para. 1 lit. b GDPR. Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time, and whether the transaction was successfully completed. Anonymization eliminates any personal reference. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services. When you use Apple Pay on your iPhone or Apple Watch to complete a purchase you made through Safari on your Mac, the Mac and the authorization device communicate through an encrypted channel on Apple servers. Apple does not process or store any of this information in a format that can identify you. You can disable the ability to use Apple Pay on your Mac in the settings on your iPhone. Go to "Wallet & Apple Pay", and disable "Allow Payments on Mac". Further information on data protection with Apple Pay can be found at the following web address: https://support.apple.com/de-de/HT203027 - Google Pay If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), payment processing is carried out via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and equipped with an NFC function by charging a payment card stored in Google Pay or a verified payment system (e.g., PayPal). For the release of a payment over Google Pay in the amount of more than 25,- €, the prior unlocking of your mobile device by the respective verification measure (for example, face recognition, password, fingerprint, or pattern) is necessary. For the purpose of payment processing, the information you provide during the ordering process along with information about your order is passed on to Google. Google then transmits your Google Pay stored payment information in the form of a unique transaction number to the originating website, which verifies a completed payment. This transaction number contains no information about the real payment data of your payment means stored in Google Pay, but is created and transmitted as a one-time valid numeric token. For all transactions via Google Pay, Google acts only as an intermediary to process the payment transaction. The transaction is carried out exclusively in the relationship between the user and the originating website by charging the payment means stored in Google Pay. Insofar as personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing according to Art. 6 Para. 1 lit. b GDPR. Google reserves the right to collect, store, and evaluate certain transaction-specific information for each transaction conducted via Google Pay. This includes the date, time, and amount of the transaction, merchant location and description, a description of the goods or services purchased provided by the merchant, photos you have attached to the transaction, the name and email address of the seller and buyer or sender and recipient, the payment method used, your description for the reason for the transaction, and any offer associated with the transaction. According to Google, this processing is carried out exclusively according to Art. 6 Abs.1 lit. f GDPR based on the legitimate interest in proper billing, verification of transaction data, and the optimization and maintenance of the Google Pay service. Google also reserves the right to merge the processed transaction data with further information that is collected and stored by Google when using other Google services. The terms of use for Google Pay can be found here: https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=de Further information on data protection with Google Pay can be found at the following web address: https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=de - Klarna On this website, one or more online payment methods of the following provider are available: Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden When selecting a payment method of the provider, where you go into advance payment (e.g., credit card payment), your payment data (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order are passed on to the provider according to Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place here exclusively for the purpose of payment processing with the provider and only insofar as it is actually necessary for this purpose. When selecting a payment method of the provider, where the provider goes into advance payment (e.g., invoice or installment purchase or direct debit), you will also be asked in the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, possibly data on an alternative payment method). To safeguard our legitimate interest in determining the solvency of our customers, these data are forwarded by us according to Art. 6 Para. 1 lit. f GDPR to the provider for the purpose of a credit assessment. The provider checks on the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option selected by you can be granted with regard to payment and/or default risks. In the decision-making process within the application review, identity and credit information from the following credit agencies can be included according to Art. 6 Para. 1 lit. f GDPR: https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing. - Paypal On this website, one or more online payment methods of the following provider are available: PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg When selecting a payment method of the provider, where you go into advance payment, your payment data (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order are passed on to the provider according to Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place here exclusively for the purpose of payment processing with the provider and only insofar as it is actually necessary for this purpose. When selecting a payment method of the provider, where we go into advance payment, you will also be asked in the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, possibly data on an alternative payment method). To safeguard our legitimate interest in determining the solvency of our customers, these data are forwarded by us according to Art. 6 Para. 1 lit. f GDPR to the provider for the purpose of a credit assessment. The provider checks on the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option selected by you can be granted with regard to payment and/or default risks. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing. - Paypal Checkout This website uses PayPal Checkout, an online payment system of PayPal that consists of PayPal's own payment methods and local payment methods from third-party providers. When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "Pay Later" via PayPal, we transmit your payment data as part of the payment processing to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place according to Art. 6 Para. 1 lit. b GDPR and only insofar as it is necessary for the payment processing. PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered - "Pay Later" via PayPal. For this purpose, your payment data may be passed on to credit agencies according to Art. 6 Para. 1 lit. f GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing. When selecting the PayPal payment method "Invoice Purchase," your payment data is first transmitted to PayPal for payment preparation, after which PayPal forwards it to Ratepay GmbH, Franklinstraße 28-29, 10587 Berlin ("Ratepay") for payment processing. The legal basis is Art. 6 Para. 1 lit. b GDPR in each case. In this case, Ratepay conducts an identity and credit check in its own name to determine the payment capacity according to the principle already mentioned above and passes on your payment data to credit agencies due to the legitimate interest in determining the payment capacity according to Art. 6 Para. 1 lit. f GDPR. A list of credit agencies that Ratepay may use can be found here: https://www.ratepay.com/legal-payment-creditagencies/ When using a local third-party provider payment method, your payment data is first passed on to PayPal according to Art. 6 Para. 1 lit. b GDPR for payment preparation. Depending on your selection of an available local payment method, PayPal then transmits your payment data for payment processing according to Art. 6 Para. 1 lit. b GDPR to the respective provider: - Sofort (SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany) - iDeal (Currence Holding BV, Beethovenstraat 300 Amsterdam, Netherlands) - giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main - bancontact (Bancontact Payconiq Company, Rue d'Arlon 82, 1040 Brussels, Belgium) - blik (Polski Standard Płatności sp. z o.o., ul. Czerniakowska 87A, 00-718 Warsaw, Poland) - eps (PSA Payment Services Austria GmbH, Handelskai 92, Gate 2 1200 Vienna, Austria) - MyBank (PRETA S.A.S, 40 Rue de Courcelles, F-75008 Paris, France) - Przelewy24 (PayPro SA, Kanclerska 15A, 60-326 Poznań, Poland) Further privacy information can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full - Shopify Payments On this website, one or more online payment methods of the following provider are available: Shopify International Limited, Victoria Buildings, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland When selecting a payment method of the provider, where you go into advance payment (e.g., credit card payment), your payment data (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order are passed on to the provider according to Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place here exclusively for the purpose of payment processing with the provider and only insofar as it is actually necessary for this purpose. - SOFORT On this website, one or more online payment methods of the following provider are available: SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany When selecting a payment method of the provider, where you go into advance payment (e.g., credit card payment), your payment data (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order are passed on to the provider according to Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place here exclusively for the purpose of payment processing with the provider and only insofar as it is actually necessary for this purpose. - Stripe On this website, one or more online payment methods of the following provider are available: Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland When selecting a payment method of the provider, where you go into advance payment (e.g., credit card payment), your payment data (including name, address, bank and payment card information, currency, and transaction number) as well as information about the content of your order are passed on to the provider according to Art. 6 Para. 1 lit. b GDPR. The transfer of your data takes place here exclusively for the purpose of payment processing with the provider and only insofar as it is actually necessary for this purpose. When selecting a payment method of the provider, where the provider goes into advance payment (e.g., invoice or installment purchase or direct debit), you will also be asked in the order process to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, email address, phone number, possibly data on an alternative payment method). To safeguard our legitimate interest in determining the solvency of our customers, these data are forwarded by us according to Art. 6 Para. 1 lit. f GDPR to the provider for the purpose of a credit assessment. The provider checks on the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option selected by you can be granted with regard to payment and/or default risks. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing. 9.7 Credit Check If we make advance performance (e.g., delivery on invoice), we reserve the right to conduct a credit check based on mathematical-statistical procedures to safeguard our legitimate interest in determining the solvency of our customers. We transmit the personal data necessary for a credit check according to Art. 6 Para. 1 lit. f GDPR to the following service provider: SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. We use the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the establishment, execution, or termination of a contractual relationship. You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to the above-mentioned credit agency. However, we may remain entitled to process your personal data if this is necessary for contractual payment processing. **10) Online Marketing** 10.1 Google AdSense This website uses Google AdSense, a web ad service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called "cookies", text files that are stored on your computer and that enable an analysis of your use of the website. In addition, Google AdSense uses so-called "web beacons" (small invisible graphics) to collect information, which can record, collect, and evaluate simple actions such as visitor traffic on the website. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is usually transferred to a Google server and stored there. This may also result in a transfer to the servers of Google LLC. come in the USA. Google uses the information thus obtained to evaluate your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if this is legally required and/or as far as third parties process this data on behalf of Google. All processing described above, especially reading information on the used device through cookies and/or web beacons, will only be performed if you have provided us with your explicit consent according to Art. 6 Para. 1 lit. a GDPR. Without giving your consent, Google AdSense will not be used during your visit to the site. You can revoke your consent at any time with effect for the future by disabling this service in the "Cookie Consent Tool" provided on the website. Data transfers to the USA are based on the EU-US Data Privacy Framework, ensuring compliance with the European level of data protection. Google's privacy policy can be viewed here: https://www.google.de/policies/privacy/ 10.2 Amazon Affiliate Program We participate in the affiliate program of the following provider: Amazon EU S.a.r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg In this context, we have placed links on our website that lead to offers on websites of the provider or third parties ("partner sites"). For measuring the success of an affiliate link, evaluating orders generated through such a link, and the corresponding billing of commission payments, the provider uses cookies and/or similar technologies, which are generally set on the partner sites for which we are not responsible in terms of data protection. Here, the provider regularly processes the IP address and possibly further device information. All processing described above, especially reading or storing information on the device used, will only be carried out if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites. 10.3 eBay We participate in the affiliate program of the following provider: eBay Partner Network, Inc., 2145 Hamilton Ave., San Jose, CA 95125, USA. In this context, we have placed links on our website that lead to offers on the provider's websites or those of third parties ("partner sites"). For measuring the success of an affiliate link, evaluating orders generated through such a link, and the corresponding billing of commission payments, the provider uses cookies and/or similar technologies, which are essentially set on the partner sites, and for which we are not responsible in terms of data protection. In this process, the provider regularly also processes the IP address and possibly further end device information. All processing described above, especially reading or storing information on the end device you use, only occurs if you have given your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by using the cookie consent management options on the partner sites. For the transfer of data to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection. 11) Web Analytics Services 11.1 Google (Universal) Analytics This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website. By default, when visiting the website, Google (Universal) Analytics sets cookies, which are small text fragments stored on your end device and collect certain information. This information also includes your IP address, which, however, is truncated by Google to exclude direct personal reference. The information is transferred to Google servers and processed there. Transfers to Google LLC based in the USA are also possible. Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activities for us, and to provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated is not merged with other Google data. The data collected in the context of using Google (Universal) Analytics are stored for a duration of two months and then deleted. All processing described above, especially setting cookies on the used end device, only occurs if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. Without your consent, Google (Universal) Analytics will not be used during your site visit. You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. Further legal information about Google (Universal) Analytics can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites. Demographic Characteristics Google (Universal) Analytics uses the special function "demographic characteristics" and can thereby create statistics that provide information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This can identify target groups for marketing activities. The collected data cannot be assigned to any specific person and are deleted after being stored for two months. Google Signals As an extension to Google (Universal) Analytics, this website may use Google Signals to allow cross-device reports to be generated. If you have activated personalized ads and linked your devices with your Google account, Google can analyze your usage behavior across devices and create database models, including cross-device conversions, subject to your consent to the use of Google Analytics according to Art. 6 Para. 1 lit. a GDPR. We do not receive personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized Advertising" function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de. UserIDs As an extension to Google (Universal) Analytics, this website may use the "UserIDs" function. If you have consented to the use of Google (Universal) Analytics according to Art. 6 Para. 1 lit. a GDPR, set up an account on this website, and log in on various devices with this account, your activities, including conversions, can be analyzed across devices. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 11.2 Google Analytics 4 This website uses Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website. By default, when visiting the website, Google Analytics 4 sets cookies, which are small text fragments stored on your end device and collect certain information. This information also includes your IP address, which, however, is truncated by Google to exclude direct personal reference. The information is transferred to Google servers and processed there. Transfers to Google LLC based in the USA are also possible. Google uses the collected information on our behalf to evaluate your use of the website, to compile reports on website activities for us, and to provide other services related to website and internet usage. The IP address transmitted by your browser as part of Google Analytics and truncated is not merged with other Google data. The data collected in the context of using Google Analytics 4 are stored for a duration of two months and then deleted. All processing described above, especially setting cookies on the used end device, only occurs if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your site visit. You can revoke your given consent at any time with effect for the future. To exercise your right of revocation, please deactivate this service via the "Cookie Consent Tool" provided on the website. We have concluded a data processing agreement with Google, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties. Further legal information about Google Analytics 4 can be found at https://policies.google.com/privacy?hl=de&gl=de and at https://policies.google.com/technologies/partner-sites. Demographic Characteristics Google Analytics 4 uses the special function "demographic characteristics" and can thereby create statistics that provide information about the age, gender, and interests of site visitors. This is done by analyzing advertising and information from third-party providers. This can identify target groups for marketing activities. The collected data cannot be assigned to any specific person and are deleted after being stored for two months. Google Signals As an extension to Google Analytics 4, this website may use Google Signals to allow cross-device reports to be generated. If you have activated personalized ads and linked your devices with your Google account, Google can analyze your usage behavior across devices and create database models, including cross-device conversions, subject to your consent to the use of Google Analytics according to Art. 6 Para. 1 lit. a GDPR. We do not receive personal data from Google, only statistics. If you want to stop the cross-device analysis, you can deactivate the "Personalized Advertising" function in the settings of your Google account. Follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de. More information about Google Signals can be found at the following link: https://support.google.com/analytics/answer/7532985?hl=de. UserIDs As an extension to Google Analytics 4, this website may use the "UserIDs" function. If you have consented to the use of Google Analytics 4 according to Art. 6 Para. 1 lit. a GDPR, set up an account on this website, and log in on various devices with this account, your activities, including conversions, can be analyzed across devices. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 12) Retargeting/ Remarketing and Conversion Tracking 12.1 Meta Pixel with Advanced Data Matching Within our online offer, we use the "Meta Pixel" service in the mode of advanced data matching of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Meta") When a user clicks on an ad we have placed on Facebook or Instagram, the URL of our linked page is extended by a parameter using "Meta Pixel". This URL parameter is then entered into the user's browser by a cookie, which our linked page itself sets. In addition, this cookie captures specific customer data such as the email address that we collect on our webpage linked to the Facebook or Instagram ad during processes such as purchase completions, account logins, or registrations (advanced data matching). The cookie is then read out, enabling the transmission of the data, including the specific customer data, to Meta. We use "Meta Pixel" with advanced data matching to make our ads (so-called "Ads") on Facebook and/or Instagram more effective and to ensure that they match the interests of users or display certain characteristics (e.g., interests in certain topics or products , determined based on visited webpages), which we transmit to Meta (so-called "Custom Audiences"). In addition, we analyze the effectiveness of our ads by tracking whether users were redirected to our website after clicking an ad (conversion). Compared to the standard variant of "Meta Pixel", the advanced data matching function helps us better measure the effectiveness of our ad campaigns by capturing more associated conversions. All data transmitted are stored and processed by Meta, enabling a connection to the respective user profile and allowing Meta to use the data for its advertising purposes according to Meta's data usage policy (https://www.facebook.com/about/privacy/). The data may enable Meta and its partners to place ads on and off Facebook. All processing described above, especially setting cookies to read information on the used end device, is only performed if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the webpage. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. The information generated by Meta is usually transferred to a Meta server and stored there; in this context, data may also be transferred to Meta Platforms Inc. servers in the USA. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 12.2 billiger.de Sales Tracking This website uses the conversion tracking technology of the following provider: solute.de GmbH, Zeppelinstraße 15, D-76185 Karlsruhe, Germany. If you arrived at our website from an advertisement on the domain of the provider, cookies and/or similar technologies (tracking pixels, web beacons, pings, or HTTP requests) can be used to track the success of the advertisement. This tracking technology reads out certain end device and browser information, including your IP address, to capture and evaluate predefined user actions (e.g., completed transactions, leads, searches on the website, views of product pages) defined by us. This enables the creation of statistics about user behavior on our website after being redirected from an advertisement, serving to optimize our offer. All processing described above, especially setting cookies to read information on the used end device, is only performed if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the webpage. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. 12.3 Google Ads Conversion Tracking This website uses the online advertising program "Google Ads" and, within Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the offer of Google Ads to draw attention to our attractive offers on external websites using advertising materials (so-called Google Adwords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns. Our aim is to show you advertising that is of interest to you, to make our website more interesting for you, and to achieve a fair calculation of the incurred advertising costs. The conversion tracking cookie is set when a user clicks on an ad placed by Google. Cookies are small text files that are stored on your end device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can thus not be tracked across the websites of Google Ads customers. The information obtained using the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive information that personally identifies users. As part of the use of Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA. Details about the processing triggered by Google Ads Conversion Tracking and Google's handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites. All processing described above, especially setting cookies to read information on the used end device, is only performed if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the " Cookie Consent Tool" provided on the webpage. You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plugin available from Google at the following link: https://www.google.com/settings/ads/plugin?hl=de. Please note that certain functions of this website may not be used or may only be used to a limited extent if you have deactivated the use of cookies. Google's privacy policy is available here: https://www.google.de/policies/privacy/. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 12.4 Google Marketing Platform This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP"). GMP uses cookies to display ads relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google records which ads are displayed in which browser through a cookie ID and can thus prevent them from being displayed more than once. In addition, GMP can use cookie IDs to track conversions related to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, visits the advertiser's website and buys something through that website. According to Google, GMP cookies do not contain personal information. Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected through the use of this tool by Google and therefore inform you according to our level of knowledge as follows: By integrating GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can associate the visit with your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider may learn and store your IP address. As part of the use of GMP, personal data may also be transmitted to the servers of Google LLC. in the USA. All processing described above, especially setting cookies to read information on the used end device, is only performed if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the webpage. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. GMP's privacy policy by Google can be found here: https://www.google.de/policies/privacy/. 13) Page Functionalities 13.1 Facebook Plugins On our website, we use plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. These plugins enable direct interactions with content on the social network. To increase the protection of your data when visiting our website, the plugins are initially deactivated using a so-called "2-click" or "Shariff" solution integrated into the page. This integration ensures that when you access a page of our website that contains such plugins, no connection is yet established with the servers of the provider. Only when you activate the plugins and thereby give your consent according to Art. 6 Para. 1 lit. a GDPR for data transmission, does your browser establish a direct connection to the servers of the provider. This way, information about your used end device (including your IP address), your browser, and your browsing history is transmitted to the provider and possibly further processed there, regardless of a login to an existing user profile. If you are logged into an existing user profile on the social network of the provider, information about interactions performed via the plugins is also published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data already transmitted to the provider. Data may also be transferred to: Meta Platforms Inc., USA. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.2 Instagram Plugins On our website, we use plugins from the social network of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland. These plugins enable direct interactions with content on the social network. To increase the protection of your data when visiting our website, the plugins are initially deactivated using a so-called "2-click" or "Shariff" solution integrated into the page. This integration ensures that when you access a page of our website that contains such plugins, no connection is yet established with the servers of the provider. Only when you activate the plugins and thereby give your consent according to Art. 6 Para. 1 lit. a GDPR for data transmission, does your browser establish a direct connection to the servers of the provider. This way, information about your used end device (including your IP address), your browser, and your browsing history is transmitted to the provider and possibly further processed there, regardless of a login to an existing user profile. If you are logged into an existing user profile on the social network of the provider, information about interactions performed via the plugins is also published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data already transmitted to the provider. Data may also be transferred to: Meta Platforms Inc., USA. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.3 LinkedIn Plugins On our website, we use plugins from the social network of the following provider: LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland. These plugins enable direct interactions with content on the social network. To increase the protection of your data when visiting our website, the plugins are initially deactivated using a so-called "2-click" or "Shariff" solution integrated into the page. This integration ensures that when you access a page of our website that contains such plugins, no connection is yet established with the servers of the provider. Only when you activate the plugins and thereby give your consent according to Art. 6 Para. 1 lit. a GDPR for data transmission, does your browser establish a direct connection to the servers of the provider. This way, information about your used end device (including your IP address), your browser, and your browsing history is transmitted to the provider and possibly further processed there, regardless of a login to an existing user profile. If you are logged into an existing user profile on the social network of the provider, information about interactions performed via the plugins is also published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data already transmitted to the provider. Data may also be transferred to: LinkedIn Inc., USA. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection. 13.4 Reddit Plugins On our website, we use plugins from the social network of the following provider: Reddit Inc., 548 Market St., Suite 16093, San Francisco, CA 94104, USA. These plugins enable direct interactions with content on the social network. To increase the protection of your data when visiting our website, the plugins are initially deactivated using a so-called "2-click" or "Shariff" solution integrated into the page. This integration ensures that when you access a page of our website that contains such plugins, no connection is yet established with the servers of the provider. Only when you activate the plugins and thereby give your consent according to Art. 6 Para. 1 lit. a GDPR for data transmission, does your browser establish a direct connection to the servers of the provider. This way, information about your used end device (including your IP address), your browser, and your browsing history is transmitted to the provider and possibly further processed there, regardless of a login to an existing user profile. If you are logged into an existing user profile on the social network of the provider, information about interactions performed via the plugins is also published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data already transmitted to the provider. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection. 13.5 X-Plugins On our website , we use plugins from the social network of the following provider: Twitter International Unlimited Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland. These plugins enable direct interactions with content on the social network. To increase the protection of your data when visiting our website, the plugins are initially deactivated using a so-called "2-click" or "Shariff" solution integrated into the page. This integration ensures that when you access a page of our website that contains such plugins, no connection is yet established with the servers of the provider. Only when you activate the plugins and thereby give your consent according to Art. 6 Para. 1 lit. a GDPR for data transmission, does your browser establish a direct connection to the servers of the provider. This way, information about your used end device (including your IP address), your browser, and your browsing history is transmitted to the provider and possibly further processed there, regardless of a login to an existing user profile. If you are logged into an existing user profile on the social network of the provider, information about interactions performed via the plugins is also published there and displayed to your contacts. You can revoke your consent at any time by deactivating the activated plugin by clicking on it again. However, the revocation does not affect the data already transmitted to the provider. Data may also be transferred to: X Corp., USA. We have concluded a data processing agreement with the provider, ensuring the protection of our site visitors' data and prohibiting unauthorized disclosure to third parties. For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection. 13.6 Xing Plugins On this website, we use the "XING Share-Button" of the following provider: New Work SE, Am Strandkai 1, 20457 Hamburg. When you access this website, your browser briefly establishes a connection to servers of the provider, which provide the "XING Share-Button" functions (in particular the calculation/display of the counter value). The provider does not store any personal data about you, especially no IP addresses. There is also no evaluation of your usage behavior through the use of cookies in connection with the "XING Share-Button". 13.7 Youtube This website uses plugins for displaying and playing videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to: Google LLC., USA. When you access a page of our website containing such a plugin, your browser establishes a direct connection to the provider's servers to load the plugin. This way, certain information, including your IP address, is transmitted to the provider. When you start the playback of embedded videos via the plugin, the provider also sets cookies to collect information about user behavior, compile playback statistics, and prevent abusive behavior. If you are logged into a user account with the provider during your site visit, your data is directly associated with your account when you click on a video. If you do not wish the association with your profile, you must log out before activating the playback button. All aforementioned processing, especially setting cookies to read information on the used end device, only occurs if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service via the "Cookie Consent Tool" provided on the website. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.8 Spotify On this website, we have integrated functionalities of the following music service provider for playing music titles: Spotify AB, Birger Jarlsgatan 61, 113 56 Stockholm, Sweden. When visiting this page, a direct connection between your browser and the provider's servers can be established via this integration, even if you do not have an account with the provider or are not logged into such an account. The provider receives the information that you have visited our site. The collected information (including your IP address) is directly transmitted from your browser to a server of the provider and stored there. However, the information is not used to personally identify you and is not shared with third parties. If you play a music title via the corresponding function while logged into a user account of the provider, the provider can associate the visit to our site with this account. If you do not want the association with your account, you must log out before activating the playback button. The aforementioned data processing occurs according to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in an appealing acoustic design of the visit to our website. You can also object to the loading of the playback functions of the provider and thus the above-described data processing operations for the future with add-ons for your browser, e.g., with the script blocker "NoScript" (https://noscript.net/). 13.9 Facebook Connect On our website, we provide a single sign-on function of the following provider: Meta Platforms Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. Data may also be transferred to: Meta Platforms Inc., USA. If you have an account with the provider, you can log in with these account details to create a user account or register on our website. When visiting this page, a direct connection between your browser and the provider's servers can be established via this login function, even if you do not have an account with the provider or are not logged into such an account. The provider receives the information that you have visited our site. The collected information (possibly including your IP address) is directly transmitted from your browser to a server of the provider and stored there. However, the information is not used to personally identify you and is not shared with third parties. This data processing occurs according to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in a user-friendly and interactive design of our online presence. If you click the login button to register on our website with your account data from the provider, the provider transmits only based on your explicit consent according to Art. 6 Para. 1 lit. a GDPR the general and publicly accessible information stored in your account (user ID, name, address, email address, age, and gender) to us. We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, last name, address data, country, email address, date of birth), provided you have released these to the provider. Conversely, data (e.g., information about your surfing or purchasing behavior) can be transferred from us to your account with the provider based on your consent. You can revoke your consent at any time with effect for the future towards us. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.10 Google Sign-In On our website, we provide a single sign-on function of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to: Google LLC, USA. If you have an account with the provider, you can log in with these account details to create a user account or register on our website. When visiting this page, a direct connection between your browser and the provider's servers can be established via this login function, even if you do not have an account with the provider or are not logged into such an account. The provider receives the information that you have visited our site. The collected information (possibly including your IP address) is directly transmitted from your browser to a server of the provider and stored there. However, the information is not used to personally identify you and is not shared with third parties. This data processing occurs according to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in a user-friendly and interactive design of our online presence. If you click the login button to register on our website with your account data from the provider, the provider transmits only based on your explicit consent according to Art. 6 Para. 1 lit. a GDPR the general and publicly accessible information stored in your account (user ID, name, address, email address, age, and gender) to us. We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, last name, address data, country, email address, date of birth), provided you have released these to the provider. Conversely, data (e.g., information about your surfing or purchasing behavior) can be transferred from us to your account with the provider based on your consent. You can revoke your consent at any time with effect for the future towards us. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.11 Login With Amazon On our website, we provide a single sign-on function of the following provider: Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg. Data may also be transferred to: Amazon.com Inc., USA. If you have an account with the provider, you can log in with these account details to create a user account or register on our website. When visiting this page, a direct connection between your browser and the provider's servers can be established via this login function, even if you do not have an account with the provider or are not logged into such an account. The provider receives the information that you have visited our site. The collected information (possibly including your IP address) is directly transmitted from your browser to a server of the provider and stored there. However, the information is not used to personally identify you and is not shared with third parties. This data processing occurs according to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in a user-friendly and interactive design of our online presence. If you click the login button to register on our website with your account data from the provider, the provider transmits only based on your explicit consent according to Art. 6 Para. 1 lit. a GDPR the general and publicly accessible information stored in your account (user ID, name, address, email address, age, and gender) to us. We store and use the data transmitted by the provider to set up a user account with the necessary data (salutation, first name, last name, address data, country, email address, date of birth), provided you have released these to the provider. Conversely, data (e.g., information about your surfing or purchasing behavior) can be transferred from us to your account with the provider based on your consent. You can revoke your consent at any time with effect for the future towards us. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.12 idealo Logo On our website, graphic elements from the following provider are integrated to display external customer reviews and/or an external quality seal: idealo internet GmbH, Zimmerstraße 50, 10888 Berlin, Germany. When you visit this page, your browser establishes a direct connection with the provider's servers to properly load the elements. This way, certain browser information, including your IP address, is transmitted to the provider. If personal data are processed in this context, this occurs according to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the optimal marketing of our offer and the appealing design of our online presence. 13.13 Google Maps This website uses an online map service from the following provider: Google Maps (API) by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps to visually present geographical information. By using this service, our location is shown to you, and any arrival is facilitated. As soon as you access those subpages in which the map from Google Maps is integrated, information about your use of our website (such as your IP address) is transferred to Google's servers and stored there; this can also lead to a transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account that you are logged into or whether no user account exists. If you are logged into Google, your data will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage, and evaluation are carried out according to Art. 6 Para. 1 lit. f GDPR based on Google's legitimate interest in displaying personalized advertising, market research, and/or tailor-made design of Google websites. You have the right to object to the creation of these user profiles, whereby you must contact Google to exercise this right. If you do not agree with the future transmission of your data to Google as part of the use of Google Maps, there is also the possibility to completely deactivate the Google Maps web service by turning off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used. To the extent legally required, we have obtained your consent for the processing of your data as described above according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, follow the aforementioned possibility for making an objection. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.14 - Best Currency Converter This website uses the service "Best Currency Converter" by Grizzly Apps SRL, Str. Muresului Nr. 7 Bloc E23, Scara B, Apartament 15, Brasov, Romania ("Best Currency Converter"). Based on our legitimate interest in displaying prices in the local currency of your location, Best Currency Converter collects your IP address according to Art. 6 Para. 1 lit. f GDPR and evaluates it to adjust price displays on the website to your location. The IP address is not stored permanently. Furthermore, after the first currency adjustment, Best Currency Converter sets a functional cookie in the browser of your used end device to save the currency setting for the duration of a session. After this session, the cookie is automatically deleted. 13.15 Google Maps API To enable the verification of certain inputs in the address form of the ordering process of our webshop for input errors in real-time, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to: Google LLC., USA. The provider validates the entered address, verifies the spelling, and possibly completes missing data. For this purpose, the address data you entered are transmitted to the provider, stored there, and evaluated. This processing occurs according to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in the proper recording of correct customer address data for the conscientious fulfillment of our contractual delivery obligations and to prevent contractual execution problems. The provider processes the affected data separately and does not merge them with other data sets, and deletes them once their status or correctness has been confirmed, but no later than after 30 days. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.16 Google reCAPTCHA On this website, we use the CAPTCHA service of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland. Data may also be transferred to: Google LLC, USA. For the visual design of the captcha window, the provider uses "Google Fonts", i.e., fonts loaded by Google from the internet. No further processing of information beyond those already transmitted through the functionality of ReCaptcha by Google takes place here. The service checks whether an action is made by a natural person or abused by machine and automated processing and blocks spam, DDoS attacks, and similar automated malicious access. To ensure that an action is made by a human and not by an automated bot, the provider collects the IP address of the used end device, recognition data of the used browser and operating system type as well as date and duration of the visit and transmits these for evaluation to the provider's servers. The legal basis is our legitimate interest in determining individual responsibility on the internet and preventing abuse and spam according to Art. 6 Para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.17 Google Photos This website uses the image service "Google Photos" by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google"). Google Photos itself does not store information on user end devices or read it. Also, the service does not conduct any independent data analyses. However, to load image files from the Google network during page access, your IP address is transmitted to Google and possibly stored there. Transfers to Google LLC servers in the USA are also possible. This processing is only performed if you have given us your explicit consent according to Art. 6 Para. 1 lit. a GDPR. Without this consent, image files via Google Photos will not be loaded. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the webpage. We have concluded a data processing agreement with Google, obligating Google to protect the data of our site visitors and not to disclose them to third parties. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.18 Google Translate This page uses the translation service "Google Translate" via an API integration from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). So that the translation in your chosen national language is automatically displayed, the browser you use connects to Google's servers. Google uses so-called "cookies", text files stored on your computer that enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transferred to a Google server and stored there; this can also lead to a transmission to the servers of Google LLC. in the USA. If personal data is processed, this occurs according to Art. 6 Para. 1 lit. f GDPR based on our legitimate interest in barrier-free and universal accessibility of our internet presence. To the extent legally required, we have obtained your consent for the processing of your data as described above according to Art. 6 Para. 1 lit. a GDPR. You can revoke your given consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the webpage. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.19 Google Customer Reviews (formerly Google Certified Dealer Program) We work with Google as part of the "Google Customer Reviews" program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This program gives us the opportunity to obtain customer reviews from users of our website. Here, you will be asked after a purchase on our website if you would like to participate in an email survey by Google. If you give your consent according to Art. 6 Para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate the buying experience on our website. The rating you provide is then combined with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Your rating is also used for Google Seller Ratings. As part of the use of Google Customer Reviews, personal data may also be transmitted to the servers of Google LLC. in the USA. You can revoke your consent at any time by sending a message to the data controller or to Google. For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework (EU-US Data Privacy Framework), which, based on a decision of adequacy by the European Commission, ensures compliance with the European level of data protection. 13.20 Zoom For conducting online meetings, video conferences, and/or webinars, we use this provider: Zoom Video Communications Inc., 55 Almaden Blvd, Suite 600, San Jose, CA 95113, USA. The provider processes various data, where the extent of the processed data depends on the data you provide before or during participation in an online meeting, video conference, or webinar. Communication participants' data are processed and stored on the provider's servers. This can include your registration data (name, email address, phone number (optional), and password) and session data (topic, participant IP address, device information, description (optional)). Furthermore, image and audio contributions of participants as well as voice inputs in chats can be processed. For processing personal data required for the performance of a contract with you (this also applies to processing operations that are necessary for carrying out pre-contractual measures), Art. 6 Para. 1 lit. b GDPR serves as the legal basis. If you have given us consent to process your data, processing is based on Art. 6 Para. 1 lit. a GDPR. A given consent can be revoked at any time with effect for the future. Otherwise, the legal basis for data processing in conducting online meetings, video conferences, or webinars is our legitimate interest according to Art. 6 Para. 1 lit. f GDPR in the effective conduct of the online meeting, webinar, or video conference. We have concluded a data processing agreement with the provider, ensuring the protection of the data of our site visitors and prohibiting unauthorized disclosure to third parties. For data transfers to the USA, the provider relies on standard contractual clauses of the European Commission, which are intended to ensure compliance with the European level of data protection. 13.21 Shopsync for Shopify This text appears to be a privacy policy or data protection statement. Below is the translation: --- This website uses the Shopify app "ShopSync" from ShopSync LLC, PO Box 252, Jefferson City, TN 37760, USA. ShopSync synchronizes the newsletter service "Mailchimp" with our Shopify account so that updates in Mailchimp email lists (such as an opt-out by a newsletter recipient) are automatically reflected in Shopify, and new contact information generated through contracts on Shopify is automatically transferred to Mailchimp email lists. In the former case, data processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the effective and cross-system maintenance of advertising recipient files and the efficient consideration of legally significant status changes. In the latter case, solely based on the express consent of the user pursuant to Art. 6 para. 1 lit. a GDPR after a contract is concluded on Shopify for inclusion in the Mailchimp list, the user's first and last name, address, and email address, along with transaction-related information (purchase amount, time, and date of purchase), are transmitted to Mailchimp by ShopSync. Data transferred in this manner is not stored or retained by ShopSync after synchronization. All information synchronized between Shopify and Mailchimp is transmitted via SSL (Secure Socket Layer) technology, and all transmitted information remains encrypted during the synchronization process. The synchronization process requires the transmission of information over a secure connection to servers hosted by Amazon Web Services in the USA. For further data protection information regarding ShopSync, please refer to: [ShopSync Privacy Policy](https://www.shop-sync.com/privacy-policy) 13.22 Applications for job advertisements via email On our website, we advertise currently vacant positions in a separate section, to which interested parties can apply via email to the provided contact address. Applicants must provide all personal data necessary for a comprehensive assessment, including general information such as name, address, and contact details, as well as performance-related evidence and, if applicable, health-related information. Details of the application can be found in the job advertisement. Upon receipt of the application by email, the data is stored and evaluated solely for the purpose of processing the application. If there are any queries, we will use either the applicant's email address or telephone number. Processing is based on Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), according to which the progress of the application process is considered to be the initiation of an employment contract. If special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data such as information on disability status) are requested from applicants as part of the application process, processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR so that we can exercise the rights arising from labor law and social security and social protection law and comply with our obligations in this regard. Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 para. 1 lit. h GDPR if it serves purposes of preventive healthcare or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnosis, care or treatment in the health or social sector, or for the management of health or social systems and services. If the applicant is not selected or withdraws their application prematurely, their transmitted data as well as all electronic correspondence including the application email will be deleted no later than 6 months after notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to fulfill our obligations to provide evidence under the equal treatment regulations for applicants. In the event of a successful application, the data provided will be processed for the purpose of implementing the employment relationship on the basis of Art. 6 para. 1 lit. b GDPR (in Germany in conjunction with § 26 para. 1 BDSG). 13.23 Online applications via a form On our website, we advertise currently vacant positions in a separate section, to which interested parties can apply via a corresponding form. Applicants must provide all personal data necessary for a comprehensive assessment, including general information such as name, address, and contact details, as well as performance-related evidence and, if applicable, health-related information. Details of the application can be found in the job advertisement. Upon submission of the form, applicant data is transmitted to us encrypted according to the state of the art, stored by us, and evaluated solely for the purpose of processing the application. Processing is based on Art. 6 para. 1 lit. b GDPR (or § 26 para. 1 BDSG), according to which the progress of the application process is considered to be the initiation of an employment contract. If special categories of personal data within the meaning of Art. 9 para. 1 GDPR (e.g. health data such as information on disability status) are requested from applicants as part of the application process, processing is carried out in accordance with Art. 9 para. 2 lit. b GDPR so that we can exercise the rights arising from labor law and social security and social protection law and comply with our obligations in this regard. Cumulatively or alternatively, the processing of special categories of data may also be based on Art. 9 para. 1 lit. h GDPR if it serves purposes of preventive healthcare or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnosis, care or treatment in the health or social sector, or for the management of health or social systems and services. If the applicant is not selected or withdraws their application prematurely, their data submitted via the form as well as all electronic correspondence including the application email will be deleted no later than 6 months after notification. This period is based on our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to fulfill our obligations to provide evidence under the equal treatment regulations for applicants. In the event of a successful application, the data provided will be processed for the purpose of implementing the employment relationship on the basis of Art. 6 para. 1 lit. b GDPR (in Germany in conjunction with § 26 para. 1 BDSG). 14) Tools and Miscellaneous 14.1 - easybill For accounting purposes, we use the cloud-based accounting software service provided by easybill GmbH, Düsselstr. 21, 41564 Kaarst ("easybill"). easybill processes incoming and outgoing invoices as well as, if applicable, our company's bank transactions to automatically record invoices, match them to transactions, and create financial accounting through a partially automated process. If personal data is processed in this context, processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in an efficient organization and documentation of our business transactions. Further information on easybill GmbH, the automated processing of data, and data protection provisions can be found at easybill.de/privacy 14.2 Cookie Consent Tool This website uses a "Cookie Consent Tool" to obtain effective user consent for consent-required cookies and cookie-based applications. The "Cookie Consent Tool" is displayed to users in the form of an interactive user interface when the page is accessed, allowing users to give consent for specific cookies and/or cookie-based applications by checking boxes. By using the tool, all consent-required cookies/services are only loaded if the respective user gives consent by checking the corresponding boxes. This ensures that such cookies are only set on the user's device in the event of consent. The tool sets technically necessary cookies to store your cookie preferences. Personal user data is not processed in this context. If, in individual cases, the processing of personal data (such as the IP address) is nevertheless carried out for the purpose of storing, assigning, or logging cookie settings, this is done in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in legally compliant, user-specific, and user-friendly consent management for cookies and thus in a legally compliant design of our website. Another legal basis for processing is Art. 6 para. 1 lit. c GDPR. As data controllers, we are legally obligated to make the use of technically unnecessary cookies dependent on the respective user's consent. If necessary, we have concluded a data processing agreement with the provider to ensure the protection of data of our website visitors and to prohibit unauthorized disclosure to third parties. Further information about the operator and the settings of the Cookie Consent Tool can be found directly in the corresponding user interface on our website. 14.3 - Adobe Acrobat Sign For the digital signing of documents, we use the services of the following provider: Adobe Systems Software Ireland Limited, 4-6 Riverwalk, City West Business Campus, Dublin 24, Ireland The service enables the legally binding signing of documents by electronic signature from any device. For this purpose, in addition to the electronic signature for verification and proof of the signature, the service collects, stores, and transmits usage data of the device used (in particular the IP address) as well as certain transaction data. Processing is based on our legitimate interest in efficient and time-saving business management and customer-friendly and effective document management in accordance with Art. 6 para. 1 lit. f GDPR. We have concluded a data processing agreement with the provider to protect the data of our website visitors and to prohibit unauthorized disclosure to third parties. 15) Rights of the Data Subject 15.1 The applicable data protection law grants you the following data subject rights (rights of information and intervention) with regard to the processing of your personal data, with reference to the respective legal basis for exercising the rights: Right of access pursuant to Art. 15 GDPR; Right to rectification pursuant to Art. 16 GDPR; Right to erasure pursuant to Art. 17 GDPR; Right to restriction of processing pursuant to Art. 18 GDPR; Right to notification pursuant to Art. 19 GDPR; Right to data portability pursuant to Art. 20 GDPR; Right to withdraw consent granted pursuant to Art. 7 para. 3 GDPR; Right to lodge a complaint pursuant to Art. 77 GDPR. 15.2 RIGHT TO OBJECT IF WE PROCESS YOUR PERSONAL DATA AS PART OF A BALANCING OF INTERESTS BASED ON OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, PROCESSING MAY CONTINUE IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, RIGHTS, AND FREEDOMS, OR IF PROCESSING SERVES THE PURPOSE OF ASSERTING, EXERCISING, OR DEFENDING LEGAL CLAIMS. IF WE PROCESS YOUR PERSONAL DATA FOR THE PURPOSE OF DIRECT MARKETING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH MARKETING. YOU CAN EXERCISE THE OBJECTION AS DESCRIBED ABOVE. IF YOU MAKE USE OF YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES. 16) Duration of Personal Data Storage The duration of the storage of personal data is based on the respective legal basis, the purpose of processing, and, if applicable, additionally on the respective statutory retention period (e.g. commercial and tax retention periods). If personal data is processed based on explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, the data concerned will be stored until you revoke your consent. If there are statutory retention periods for data processed in the context of contractual or quasi-contractual obligations based on Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after the retention periods have expired, provided it is no longer necessary for contract fulfillment or initiation and/or there is no longer a legitimate interest on our part in continuing to store it. If personal data is processed based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 1 GDPR, unless we can demonstrate compelling legitimate grounds for processing that override your interests, rights, and freedoms, or if processing serves to assert, exercise, or defend legal claims. If personal data is processed for the purpose of direct marketing based on Art. 6 para. 1 lit. f GDPR, this data will be stored until you exercise your right to object pursuant to Art. 21 para. 2 GDPR. Unless otherwise specified in the other information in this statement about specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed. --- Please note that this translation may contain legal terminology and should be reviewed by a legal expert to ensure compliance with applicable laws and regulations.