Privacy policy



1) Information About the Collection of Personal Data and Contact Details of the Controller

1.1 We are delighted that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when you use our website. Personal data in this context means all data by which you can be personally identified.

1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (DSGVO/GDPR) is Deniz Richers, Uhlandstraße 52, 10719 Berlin, Germany, Tel.: 030 - 28629023, E-Mail: service@djahedarichers.com. The controller responsible for the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3  For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the character string "https://" and the lock symbol in your browser bar.

 

2) Data Collection When You Visit Our Website

When you use our website for purely informational purposes, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

  • Our website visited
  • Date and time at the moment of access
  • Amount of data sent in bytes
  • Source/referrer from which you reached the page
  • Browser used
  • Operating system used
  • IP address used (if applicable: in anonymized form)

The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to review the server log files retrospectively should concrete indications point to unlawful use.

 

3) Hosting

Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purposes of hosting and displaying the online shop on the basis of processing carried out on our behalf. All data collected on our website is processed on Shopify's servers. Within the scope of the aforementioned Shopify services, data may also be transferred, as part of further processing on our behalf, to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc. or Shopify (USA) Inc. In the event that data is transferred to Shopify Inc. in Canada, the appropriate level of data protection is guaranteed by an adequacy decision of the European Commission. Further information on data protection at Shopify can be found on the following website: https://www.shopify.de/legal/datenschutz
Any further processing on servers other than the aforementioned servers of Shopify takes place only within the scope communicated below.

 

4) Content Delivery Network

4.1 Cloudflare
On our website we use a so-called content delivery network ("CDN") of the technology service provider Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA ("Cloudflare"). A content delivery network is an online service which is used to deliver, in particular, large media files (such as graphics, page content or scripts) via a network of regionally distributed servers connected over the Internet. Using Cloudflare's content delivery network helps us optimize the loading speeds of our website.
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision as well as in the improvement of the stability and functionality of our website.
We have concluded a data processing agreement with Cloudflare (Data Processing Addendum, available at https://www.cloudflare.com/media/pdf/cloudflare-customer-dpa.pdf), by which Cloudflare is obligated to protect the data of our site visitors and not to pass it on to third parties. For the transfer of data from the EU to the USA, Cloudflare relies on the so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information can be found in Cloudflare's privacy policy at: https://www.cloudflare.com/privacypolicy/

4.2  Fastly
On our website we use a so-called content delivery network ("CDN") of the technology service provider Fastly Inc., 475 Brannan St. #300, San Francisco, CA 94107, USA ("Fastly"). A content delivery network is an online service which is used to deliver, in particular, large media files (such as graphics, page content or scripts) via a network of regionally distributed servers connected over the Internet. Using Fastly's content delivery network helps us optimize the loading speeds of our website.
The processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision as well as in the improvement of the stability and functionality of our website. Further information can be found in Fastly's privacy policy at: https://www.fastly.com/privacy

 

5) Cookies

To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted again after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognized on your next visit (so-called persistent cookies). When cookies are set, they collect and process, to an individual extent, certain user information such as browser and location data as well as IP address values. Persistent cookies are automatically deleted after a specified period, which may differ depending on the cookie. You can find the duration of the respective cookie storage in the overview of the cookie settings of your web browser.

In some cases, cookies serve to simplify the ordering process by saving settings (e.g. remembering the contents of a virtual shopping cart for a later visit to the website). Insofar as personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 (1) lit. b GDPR either for the performance of the contract, in accordance with Art. 6 (1) lit. a GDPR in the case of granted consent, or in accordance with Art. 6 (1) lit. f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the site visit.

Please note that you can set your browser in such a way that you are informed about the setting of cookies and can decide individually on their acceptance, or can exclude the acceptance of cookies for specific cases or in general. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that the functionality of our website may be limited if cookies are not accepted.

5.1. Consent to the use of cookies.

In order to obtain your valid consent to the use and storage of cookies in the browser you use to access our website, and to properly document this, we use a consent management platform: CookieFirst. This technology is provided by Digital Data Solutions BV, Plantage Middenlaan 42a, 1018 DH, Amsterdam, Netherlands. Website: https://cookiefirst.com referred to as CookieFirst.

When you access our website, a connection is established with CookieFirst's server in order to give us the opportunity to obtain valid consent from you for the use of certain cookies. CookieFirst then stores a cookie in your browser in order to be able to activate only those cookies to which you have consented and to properly document this. The processed data is stored until the predefined storage period expires or you request the deletion of the data. Notwithstanding the foregoing, certain statutory retention periods may apply.

CookieFirst is used to obtain the legally required consent for the use of cookies. The legal basis for this is Article 6(1)(c) of the General Data Protection Regulation (DSGVO/GDPR).

5.2. Data processing agreement

We have concluded a data processing agreement with CookieFirst. This is a contract required under data protection law which ensures that the data of our website visitors is processed only in accordance with our instructions and in compliance with the GDPR.

5.3. Server log files

Our website and CookieFirst automatically collect and store information in so-called server log files, which your browser automatically transmits to us. The following data is collected:

  • Your consent status or the withdrawal of your consent
  • Your anonymized IP address
  • Information about your browser
  • Information about your device
  • The date and time of your visit to our website
  • The URL of the webpage on which you saved or updated your consent settings
  • The approximate location of the user who saved their consent preferences
  • A universally unique identifier (UUID) of the website visitor who clicked on the cookie banner

5.4. Cookie table

This cookie list was created and is updated by the Cookie Scan.



6) Contacting Us

When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 (1) lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for the processing is Art. 6 (1) lit. b GDPR. Your data will be deleted once your inquiry has been conclusively processed. This is the case when it can be inferred from the circumstances that the matter concerned has been conclusively clarified, and provided that no statutory retention obligations stand in the way of deletion.

 

7) Data Processing When Opening a Customer Account and for Contract Processing

Pursuant to Art. 6 (1) lit. b GDPR, personal data will furthermore be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be effected by sending a message to the above-mentioned address of the controller. We store and use the data you provide for the purpose of contract processing. After complete performance of the contract or deletion of your customer account, your data will be blocked with regard to retention periods under tax and commercial law and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved on our part.

 

8) Use of Customer Data for Direct Advertising

8.1 Subscription to our e-mail newsletter

If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and will be used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed to us that you consent to receiving the newsletter. We will then send you a confirmation e-mail asking you to confirm, by clicking on a corresponding link, that you wish to receive the newsletter in the future.

By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) lit. a GDPR. When you register for the newsletter, we store your IP address entered by the Internet service provider (ISP) as well as the date and time of registration so that any possible misuse of your e-mail address can be traced at a later date. The data collected by us when you register for the newsletter is used exclusively for the purposes of advertising communication by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the controller named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list without delay, unless you have expressly consented to further use of your data or we reserve the right to a use of data beyond this which is permitted by law and about which we inform you in this declaration.

8.2 Newsletter dispatch via Klaviyo

Our e-mail newsletters are sent via the technical service provider "Klaviyo", 225 Franklin St, Boston, MA 02110, USA (http://www.klaviyo.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer is carried out in accordance with Art. 6 (1) lit. f GDPR and serves our legitimate interest in the use of an effective, secure and user-friendly newsletter system. Please note that your data is generally transferred to a Klaviyo server in the USA and stored there.

Klaviyo uses this information to send the newsletter on our behalf. Klaviyo does not use the data of our newsletter recipients to contact them itself or to pass the data on to third parties.
To protect your data in the USA, we have concluded a data processing agreement ("Data-Processing-Agreement") with Klaviyo, in which Klaviyo undertakes to protect the data of our users, to process it on our behalf in accordance with its data protection provisions and, in particular, not to pass it on to third parties.

You can view Klaviyo's data protection provisions here: https://www.klaviyo.com/privacy

 

9) Data Processing for Order Handling

9.1 To process your order, we work with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) lit. b GDPR.

9.2 Use of special service providers for order processing and handling

- Billbee
Order handling is carried out via the service provider "Billbee" (Billbee GmbH, Paulinenstrasse 54, 32756 Detmold). Name, address and, where applicable, further personal data are passed on to Billbee in accordance with Art. 6 (1) lit. b GDPR exclusively for the purpose of processing the online order. Your data is only passed on insofar as this is actually necessary for processing the order. Details on data protection at Billbee and Billbee's privacy policy can be viewed on Billbee's website at "billbee.io".

9.3 Use of payment service providers (payment services)

  • Amazon Pay
    If you select the payment method "Amazon Pay", payment is processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we pass on the information you provided during the ordering process together with the information about your order in accordance with Art. 6 (1) lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this purpose. You can find further information on the data protection provisions of Amazon Payments at the following Internet address: https://pay.amazon.com/de/help/201751600
    - Apple Pay
    If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, payment is processed via the "Apple Pay" function of your end device operated with iOS, watchOS or macOS by charging a payment card stored with "Apple Pay". Apple Pay uses security functions that are integrated into the hardware and software of your device to protect your transactions. To authorize a payment, it is therefore necessary to enter a code previously defined by you as well as to verify it by means of the "Face ID" or "Touch ID" function of your end device.
    For the purpose of payment processing, the information you provide during the ordering process, together with the information about your order, is passed on to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay in order to carry out the payment. The encryption ensures that only the website via which the purchase was made can access the payment data. After the payment has been made, Apple sends your device account number as well as a transaction-specific, dynamic security code to the originating website in order to confirm the success of the payment.
    Insofar as personal data is processed in the transmissions described, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 (1) lit. b GDPR.
    Apple retains anonymized transaction data, including the approximate purchase amount, the approximate date and time as well as the indication of whether the transaction was completed successfully. Anonymization completely excludes any reference to a person. Apple uses the anonymized data to improve "Apple Pay" and other Apple products and services.
    If you use Apple Pay on the iPhone or the Apple Watch to complete a purchase that you made via Safari on the Mac, the Mac and the authorization device communicate via an encrypted channel on Apple's servers. Apple does not process or store any of this information in a format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in the settings of your iPhone. Go to "Wallet & Apple Pay" and disable "Allow Payments on Mac".
    Further information on data protection with Apple Pay can be found at the following Internet address: https://support.apple.com/de-de/HT203027
    - Klarna
    If you select a Klarna payment service, payment is processed via Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable the processing of the payment, your personal data (first and last name, street, house number, postal code, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. invoice amount, item, delivery method) are passed on to Klarna for the purpose of identity and credit checks, provided that you have expressly consented to this in accordance with Art. 6 (1) lit. a GDPR during the ordering process. You can see here to which credit agencies your data may be forwarded:
    https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
    The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values incorporates, among other things, but not exclusively, address data. Klarna uses the information obtained on the statistical probability of a payment default for a balanced decision on the establishment, performance or termination of the contractual relationship.
    You can withdraw your consent at any time by sending a message to the controller responsible for data processing or to Klarna. However, Klarna may still remain entitled to process your personal data insofar as this is necessary for processing payments in accordance with the contract.
    Your personal data will be treated in accordance with the applicable data protection provisions and as set out in Klarna's privacy policy for data subjects domiciled in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
    and for data subjects domiciled in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
    respectively.
    - Paypal
    When paying via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") as part of the payment processing. The transfer takes place in accordance with Art. 6 (1) lit. b GDPR and only insofar as this is necessary for payment processing.
    PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) lit. f GDPR on the basis of PayPal's legitimate interest in determining your ability to pay. PayPal uses the result of the credit check with regard to the statistical probability of payment default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values incorporates, among other things, but not exclusively, address data. For further information on data protection law, including on the credit agencies used, please refer to PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
    You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still remain entitled to process your personal data insofar as this is necessary for processing payments in accordance with the contract.
    - Shopify Payments
    We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered via the payment service provider Shopify Payments, payment is processed via the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process together with the information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b GDPR. Your data is passed on exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only insofar as it is necessary for this purpose. Further information on data protection at Shopify Payments can be found at the following Internet address: https://www.shopify.com/legal/privacy.
    Information on data protection law relating to Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy

 

10) Use of Social Media: Videos

Use of YouTube videos

This website uses the YouTube embedding function to display and play videos of the provider "YouTube", which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").

Here, the extended data protection mode is used, which, according to the provider, only initiates the storage of user information once the video(s) are played. When playback of embedded YouTube videos is started, the provider "YouTube" sets cookies in order to collect information about user behavior. According to information from "YouTube", these serve, among other things, to record video statistics, improve user-friendliness and prevent abusive practices. If you are logged in to Google, your data will be assigned directly to your account when you click on a video. If you do not wish your data to be associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 (1) lit. f GDPR on the basis of Google's legitimate interests in displaying personalized advertising, market research and/or the needs-based design of its website. You have the right to object to the creation of these user profiles; to exercise this right, you must contact YouTube. When using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Regardless of whether the embedded videos are played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations without our influence.

Further information on data protection at "YouTube" can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

Where legally required, we have obtained your consent in accordance with Art. 6 (1) lit. a GDPR for the processing of your data as described above. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, deactivate this service in the Cookie Consent Tool provided on the website.

 

11) Online Marketing

11.1 Facebook Pixel for the creation of Custom Audiences (with Cookie Consent Tool)
Within our online offering, the so-called "Facebook pixel" of the social network Facebook is used, which is operated by Facebook Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland ("Facebook").
If a user clicks on an advertisement placed by us that is displayed on Facebook, Facebook Pixel adds a parameter to the URL of our linked page. If our page permits the sharing of data with Facebook via pixel, this URL parameter is written into the user's browser via a cookie which our linked page itself sets. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is able, on the one hand, to determine the visitors of our online offering as a target group for the display of advertisements (so-called "Facebook ads"). Accordingly, we use the Facebook pixel to display the Facebook ads placed by us only to those Facebook users who have also shown an interest in our online offering or who exhibit certain characteristics (e.g. interests in certain topics or products determined on the basis of the websites visited) which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook pixel, we also want to ensure that our Facebook ads correspond to the potential interest of users and do not have a harassing effect. This further allows us to evaluate the effectiveness of the Facebook advertisements for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook advertisement (so-called "conversion").
The collected data is anonymous to us, meaning it does not allow us to draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so that a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to place advertisements on and outside of Facebook.
The data processing operations associated with the use of the Facebook pixel take place only if you have given your express consent in accordance with Art. 6 (1) lit. a GDPR. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, remove the checkmark placed next to the setting for the "Facebook Pixel" in the Cookie Consent Tool embedded on the website.

11.2 Use of Google Ads Conversion Tracking

This website uses the online advertising program "Google Ads" and, within the framework of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use the Google Ads offering to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google Adwords). We can determine, in relation to the data of the advertising campaigns, how successful the individual advertising measures are. In doing so, we pursue the aim of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.

The conversion tracking cookie is set when a user clicks on an Ads advertisement placed by Google. Cookies are small text files that are stored on your end device. These cookies generally lose their validity after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the advertisement and was redirected to this page. Each Google Ads customer receives a different cookie. Cookies can therefore not be tracked across the websites of Google Ads customers. The information obtained with the help of the conversion cookie is used to create conversion statistics for Google Ads customers who have opted for conversion tracking. Customers learn the total number of users who clicked on their advertisement and were redirected to a page tagged with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. If you do not wish to participate in the tracking, you can block this use by deactivating the Google conversion tracking cookie in your Internet browser under the keyword "user settings". You will then not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising pursuant to Art. 6 (1) lit. f GDPR. When using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.

You can find further information on Google's data protection provisions at the following Internet address: https://www.google.de/policies/privacy/

You can permanently object to the setting of cookies by Google Ads conversion tracking by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de

Please note that certain functions of this website may not be available or may only be available to a limited extent if you have deactivated the use of cookies.

Where legally required, we have obtained your consent in accordance with Art. 6 (1) lit. a GDPR for the processing of your data as described above. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, deactivate this service in the Cookie Consent Tool provided on the website or, alternatively, follow the option described above for lodging an objection.

11.3 Google Marketing Platform

This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("GMP").

GMP uses cookies to serve advertisements that are relevant to users, to improve campaign performance reports, or to prevent a user from seeing the same advertisements more than once. Via a cookie ID, Google records which advertisements are served in which browser and can thus prevent them from being displayed more than once. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR.

In addition, GMP can use cookie IDs to record so-called conversions that relate to ad requests. This is the case, for example, when a user sees a GMP ad and later, using the same browser, accesses the advertiser's website and purchases something via this website. According to Google, GMP cookies do not contain any personal information.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google's server. We have no influence on the scope and further use of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge as follows: Through the integration of GMP, Google receives the information that you have accessed the corresponding part of our website or clicked on one of our advertisements. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is a possibility that the provider will obtain and store your IP address. When using GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.

If you wish to object to participation in this tracking procedure, you can deactivate cookies for conversion tracking by setting your browser to block cookies from the domain www.googleadservices.com, (see https://www.google.de/settings/ads), whereby this setting will be deleted if you deactivate your cookies. Alternatively, you can inform yourself about the setting of cookies at the Digital Advertising Alliance at the Internet address www.aboutads.info and configure your desired settings. Finally, you can set your browser in such a way that you are informed about the setting of cookies and can decide individually on their acceptance, or can exclude the acceptance of cookies for specific cases or in general. If cookies are not accepted, the functionality of our website may be limited.

You can find further information on the data protection provisions of GMP by Google at the following Internet address: https://www.google.de/policies/privacy/

Where legally required, we have obtained your consent in accordance with Art. 6 (1) lit. a GDPR for the processing of your data as described above. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the option described above for lodging an objection.

 

12) Web Analytics Services

12.1  Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analytics service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google (Universal) Analytics uses so-called "cookies", which are text files that are stored on your end device and enable an analysis of your use of the website. The information generated by the cookie about your use of this website (including the shortened IP address) is generally transmitted to a Google server and stored there; it may also be transmitted to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and excludes any direct identifiability of persons. Through this extension, your IP address is shortened by Google beforehand within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a server of Google LLC. in the USA and shortened there. On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with further services associated with website use and Internet use. In this context, the IP address transmitted by your browser within the framework of Google (Universal) Analytics is not merged with other Google data.
Google Analytics also enables, via a special function, the so-called "demographic characteristics", the creation of statistics with statements about the age, gender and interests of site visitors on the basis of an evaluation of interest-based advertising and with the involvement of third-party information. This allows the definition and differentiation of user groups of the website for the purpose of target-group-optimized alignment of marketing measures. However, data records collected via the "demographic characteristics" cannot be assigned to a specific person.
All the processing operations described above, in particular the setting of Google Analytics cookies for the reading of information on the end device used, will only be carried out if you have given us your express consent to do so in accordance with Art. 6 (1) lit. a GDPR. Without this granting of consent, Google Analytics will not be used during your visit to the site.
You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please deactivate this service in the Cookie Consent Tool provided on the website. We have concluded a data processing agreement with Google for the use of Google Analytics, which obligates Google to protect the data of our site visitors and not to pass it on to third parties.
For the transfer of data from the EU to the USA, Google relies on the so-called standard data protection clauses of the European Commission, which are intended to ensure compliance with the European level of data protection in the USA.
Further information on Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=de&gl=de

12.2 Hotjar (Hotjar Ltd.)

This website uses the web analytics service Hotjar of Hotjar Ltd. Hotjar Ltd. is a European company based in Malta (Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe Tel.: +1 (855) 464-6788).
With this tool, movements on the websites on which Hotjar is used can be tracked (so-called heatmaps). For example, it is possible to see how far users scroll and which buttons users click and how often. Furthermore, with the help of the tool, it is also possible to obtain feedback directly from the users of the website. In this way, we obtain valuable information to make our websites even faster and more customer-friendly. The above analysis is carried out on the basis of our legitimate interests in optimization and marketing purposes and the interest-oriented design of our website in accordance with Art. 6 (1) lit. f GDPR. When using this tool, we pay particular attention to the protection of your personal data. Thus, we can only track which buttons you click and how far you scroll. Areas of the websites in which personal data of you or of third parties is displayed are automatically hidden by Hotjar and are therefore not traceable at any time.

Hotjar offers every user the option of preventing the use of the Hotjar tool by means of a "Do Not Track header" so that no data about the visit to the respective website is recorded. This is a setting that is supported by all common browsers in their respective current versions. For this purpose, your browser sends a request to Hotjar with the instruction to deactivate the tracking of the respective user. If you use our website with different browsers/computers, you must set up the "Do Not Track header" separately for each of these browsers/computers.
Detailed instructions with information on your browser can be found at: https://www.hotjar.com/opt-out
Further information about Hotjar Ltd. and about the Hotjar tool can be found at: https://www.hotjar.com
The privacy policy of Hotjar Ltd. can be found at: https://www.hotjar.com/privacy

Where legally required, we have obtained your consent in accordance with Art. 6 (1) lit. a GDPR for the processing of your data as described above. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the option described above for lodging an objection.

 

13) Retargeting/ Remarketing/ Referral Advertising

Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, with which we advertise this website in the Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising by means of a pseudonymous cookie ID and on the basis of the pages you visit. The processing is carried out on the basis of our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) lit. f GDPR.
Any data processing beyond this only takes place if you have consented vis-a-vis Google to your Internet and app browsing history being linked by Google to your Google account and to information from your Google account being used to personalize the ads you view on the web. In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data in order to form target groups. When using Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can permanently object to the setting of cookies by Google Ads Remarketing by downloading and installing the Google browser plug-in available at the following link:
https://www.google.com/settings/ads/onweb/
Further information and the data protection provisions regarding advertising and Google can be viewed here:
https://www.google.com/policies/technologies/ads/
Where legally required, we have obtained your consent in accordance with Art. 6 (1) lit. a GDPR for the processing of your data as described above. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, deactivate this service in the Cookie Consent Tool provided on the website or, alternatively, follow the option described above for lodging an objection.

Pinterest Retargeting Pixel
A pixel (Pinterest Tag) of Pinterest Europe Ltd. (Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest") is integrated on this website. With the help of the pixel, information about the surfing behavior of website visitors can be collected, stored and evaluated in pseudonymized form. Insofar as personal data is also processed in this context, this is done on the basis of our legitimate interest in the display of personalized advertising in accordance with Art. 6 (1) lit. f GDPR. The information can be assigned to the person of the user with the aid of further information that Pinterest has stored about the user, e.g. on account of the ownership of an account on the social network "Pinterest". Pinterest uses an algorithm to analyze the surfing behavior and can subsequently display targeted product recommendations as personalized advertising banners on the user's Pinterest account. Pinterest may also combine the information collected via the pixel with further information that Pinterest has collected via other websites and/or in connection with the use of the social network "Pinterest", and thus create pseudonymized usage profiles. Under no circumstances, however, can the collected information be used to personally identify visitors to this website.
Where legally required, we have obtained your consent in accordance with Art. 6 (1) lit. a GDPR for the processing of your data as described above. You can withdraw your consent at any time with effect for the future by deactivating pixel tracking in the Cookie Consent Tool embedded on this website.
Where applicable, data collected via the pixel may be transferred to servers of Pinterest Inc. in the USA. Further information on data protection at Pinterest Europe Limited can be found here: https://policy.pinterest.com/de/privacy-policy

Pinterest Tag Conversion Tracking
This website uses the conversion tracking technology "Pinterest Tag" of Pinterest Europe Ltd., Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
If you have reached our website from a pin on Pinterest, we set a cookie on your computer which interacts with a "tag" likewise implemented by Pinterest in the form of a JavaScript code. Cookies are small text files that are stored on your end device. These cookies lose their validity after 180 days and are not used for personal identification.
If the user is redirected from a pin on Pinterest to pages of this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track them (e.g. completed transactions, leads, search queries on the website, views of product pages). When such an action is carried out, your browser sends, via the Pinterest tag, an HTTP request from the cookie to the Pinterest server, transmitting certain information about the action (including the type of action, time, browser type of the end device).
Through this transmission, Pinterest can create statistics about usage behavior on our website after redirection from a Pinterest pin, which serve us to optimize our offering.
Insofar as personal user data is processed in this context, this is done in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in the statistical evaluation of the success of product advertisements on Pinterest and of the purchasing behavior of users, and thus serves the optimization of our online offering.
However, we do not receive any information with which users can be personally identified.
If you do not wish to participate in the tracking, you can object to this by deactivating the Pinterest Tag conversion tracking cookie in your Internet browser under user settings. You will then not be included in the conversion tracking statistics. Alternatively, using the deactivation page for consumers from the EU http://www.youronlinechoices.com/de/praferenzmanagement/
you can check whether advertising cookies from Microsoft are set in your browser and deactivate them.
You can find further information on Pinterest's data protection provisions at the following Internet address: https://policy.pinterest.com/de/privacy-policy
Where legally required, we have obtained your consent in accordance with Art. 6 (1) lit. a GDPR for the processing of your data as described above. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the option described above for lodging an objection. 

Pinterest Conversion API
In addition to the Pinterest Tag, we use the so-called Pinterest Conversion API (CAPI). This enables us to transmit certain events, such as completed purchases or product views, to Pinterest server-side. The transmitted data may contain pseudonymized information such as a hashed e-mail address (using SHA256) or technical parameters. This is done with the aim of better evaluating the performance of our Pinterest advertising and providing interest-based content.
The data transmission via the Pinterest Conversion API takes place in addition to the client-side Pinterest Tag and is only activated if you have consented to the use of marketing cookies.
The processing is carried out on the basis of your consent in accordance with Art. 6 (1) lit. a GDPR. Further information on data protection at Pinterest can be found at: https://policy.pinterest.com/de/privacy-policy

 

14) Tools and Miscellaneous

14.1  CookieFirst
This website uses the cookie consent tool "CookieFirst" of Digital Data Solutions B.V., Plantage Middenlaan 42a, 1018DH, Amsterdam, Netherlands ("CookieFirst") to obtain user consents for cookies requiring consent and for cookie-based applications.
The tool sets technically necessary cookies in order to store your cookie preferences. This data processing is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing a cookie consent management service for website visitors.

14.2 Google Web Fonts
For the uniform display of fonts, this site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). When you access a page, your browser loads the required web fonts into your browser cache in order to display texts and fonts correctly.
For this purpose, the browser you use must connect to Google's servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google learns that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offerings. This constitutes a legitimate interest within the meaning of Art. 6 (1) lit. f GDPR. If your browser does not support web fonts, a standard font will be used by your computer.
Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

14.3  Google reCAPTCHA

On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function serves above all to distinguish whether an input is made by a natural person or improperly by machine and automated processing. The service includes the sending of the IP address and, if applicable, further data required by Google for the reCAPTCHA service to Google, and is carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in establishing individual responsibility on the Internet and preventing misuse and spam. When using Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC. in the USA.

Further information on Google reCAPTCHA as well as Google's privacy policy can be viewed at: https://www.google.com/intl/de/policies/privacy/

Where legally required, we have obtained your consent in accordance with Art. 6 (1) lit. a GDPR for the processing of your data as described above. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the option described above for lodging an objection.

14.4 Google Maps
On our website we use Google Maps (API) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google Maps is a web service for displaying interactive (land) maps in order to present geographical information visually. Through the use of this service, our location is displayed to you and any journey to us is made easier.
As soon as you access the subpages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google servers and stored there; this may also result in transmission to the servers of Google LLC. in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 (1) lit. f GDPR on the basis of Google's legitimate interest in the display of personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles; to exercise this right, you must contact Google. If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.
You can view Google's terms of use at https://www.google.de/intl/de/policies/terms/regional.html; the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on Google's website ("Google Privacy Policy"): https://www.google.de/intl/de/policies/privacy/
Where legally required, we have obtained your consent in accordance with Art. 6 (1) lit. a GDPR for the processing of your data as described above. You can withdraw your consent at any time with effect for the future. To exercise your withdrawal, please follow the option described above for lodging an objection.

 

15) Rights of the Data Subject

15.1  The applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-a-vis the controller with regard to the processing of your personal data, about which we inform you below:

  • Right of access pursuant to Art. 15 GDPR: In particular, you have a right to information about your personal data processed by us, the processing purposes, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, complaint to a supervisory authority, the origin of your data if it was not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the logic involved and the scope and intended effects of such processing concerning you, as well as your right to be informed of the guarantees pursuant to Art. 46 GDPR that exist when your data is forwarded to third countries;
  • Right to rectification pursuant to Art. 16 GDPR: You have a right to the rectification without undue delay of incorrect data concerning you and/or the completion of your incomplete data stored by us;
  • Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17 (1) GDPR are met. However, this right does not exist in particular if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims;
  • Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you contest, is being verified; if you refuse the erasure of your data on account of impermissible data processing and instead request the restriction of the processing of your data; if you need your data for the establishment, exercise or defense of legal claims after we no longer need this data once its purpose has been achieved; or if you have lodged an objection on grounds relating to your particular situation, as long as it has not yet been established whether our legitimate grounds prevail;
  • Right to be informed pursuant to Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of the data or restriction of processing to all recipients to whom the personal data concerning you has been disclosed, unless this proves impossible or involves a disproportionate effort. You have the right to be informed about these recipients.
  • Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format, or to request the transmission to another controller, insofar as this is technically feasible;
  • Right to withdraw granted consent pursuant to Art. 7 (3) GDPR: You have the right to withdraw consent to the processing of data, once given, at any time with effect for the future. In the event of withdrawal, we will delete the data concerned without undue delay, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the withdrawal;
  • Right to lodge a complaint pursuant to Art. 77 GDPR: If you consider that the processing of personal data concerning you infringes the GDPR, you have - without prejudice to any other administrative or judicial remedy - the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

15.2 RIGHT TO OBJECT

IF, IN THE CONTEXT OF A BALANCING OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FUNDAMENTAL FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR THE PURPOSE OF DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL END THE PROCESSING OF THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

 

16) Duration of Storage of Personal Data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and - where relevant - additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).

When personal data is processed on the basis of express consent pursuant to Art. 6 (1) lit. a GDPR, this data is stored until the data subject withdraws their consent.

If statutory retention periods exist for data that is processed within the scope of legal or quasi-legal transactional obligations on the basis of Art. 6 (1) lit. b GDPR, this data is routinely deleted after expiry of the retention periods, provided that it is no longer required for the performance or initiation of a contract and/or no legitimate interest on our part in its continued storage persists.

When personal data is processed on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.

When personal data is processed for the purpose of direct advertising on the basis of Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises their right to object pursuant to Art. 21 (2) GDPR.

Unless otherwise stated in the other information in this declaration on specific processing situations, stored personal data will otherwise be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.