Data protection

INFORMATION ABOUT THE PROCESSING OF YOUR DATA

In accordance with Article 12 of the General Data Protection Regulation (hereinafter: DSGVO), we are obliged to inform you about the processing of your data when using our website. We take the protection of your personal data very seriously and this privacy policy informs you about the details of the processing of your data and your legal rights in this regard.

We reserve the right to adapt the data protection declaration with effect for the future, in particular in the event of further development of the website, the use of new technologies or changes to the legal basis or the corresponding jurisdiction.

We encourage you to review the Privacy Policy from time to time and to keep a hard copy or copy for your records.

DEFINITIONS

"Website" or "Internet presence" hereafter means all pages of the responsible person on https://www.casafit.de.
"Personal data" means any information relating to an identified or identifiable natural person. An identifiable person is one who can be identified, directly or indirectly, in particular by reference to an identifier such as a name, an identification number, location data, an online identifier or to one or more factors specific to the physical, physiological, genetic, mental, economic, cultural or social identity of that natural person. Personal data are therefore, for example, the name, e-mail address and telephone number of a person, but also, where applicable, data about preferences, hobbies and memberships.
"Processing" means any operation or set of operations which is performed upon personal data, whether or not by automatic means, such as collection, recording, organisation, filing, storage, adaptation, alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment, combination, restriction, erasure or destruction.
"Pseudonymisation" means the processing of personal data in such a way that the personal data can no longer be attributed to a specific data subject without the use of additional information, provided that such additional information is kept separately and is subject to technical and organisational measures which ensure that the personal data are not attributed to an identified or identifiable natural person.
"Consent" hereinafter means any freely given specific, informed and unambiguous indication of his or her wishes in the form of a statement or other unambiguous affirmative act by which the data subject signifies his or her agreement to the processing of personal data relating to him or her.
"Google" hereinafter means Google, LLC 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA; reachable in the European Union at: Google Dublin, Google Ireland Ltd, Gordon House, Barrow Street, Dublin 4, Ireland, Fax: +353 (1) 436 1001.

SCOPE

The data protection declaration applies to all pages of https://www.casafit.de. It does not extend to any linked websites or Internet presences of other providers.

RESPONSIBLE SUPPLIER

Responsible for the processing of personal data within the scope of this privacy policy is:

Vitalwerk GmbH
Weidmanngasse 29/23
1170 Vienna
Austria
Tel: +43 69911316473

QUESTIONS ABOUT DATA PROTECTION

If you have any questions about data protection with regard to our company or our website, you can contact our data protection officer:

Vitalwerk GmbH
Weidmanngasse 29/23
1170 Vienna
Austria

SECURITY

We have taken comprehensive technical and organizational precautions to protect your personal data from unauthorized access, misuse, loss and other external disturbances. To this end, we regularly review our security measures and adapt them to the state of the art.

YOUR RIGHTS

You have the following rights in relation to personal data relating to you, which you can exercise against us:

Right of access (Art. 15 GDPR),
Right to rectification (Art. 16 DSGVO) or deletion (Art. 17 DSGVO),
Right to restriction of processing (Art. 18 DSGVO),
Right to object to processing (Art. 21 DSGVO),
Right to withdraw your consent (Art. 7 para. 3 DSGVO),
Right to receive the data in a structured, common, machine-readable format ("data portability") as well as the right to have the data transferred to another data controller if the conditions of Art. 20 (1) lit. a, b DSGVO are met (Art. 20 DSGVO).

You can exercise your rights by notifying the contact details listed in the "Responsible Provider" section or by contacting our designated data protection officer.

You also have the right to complain to a data protection supervisory authority about the processing of your personal data carried out by us (Art. 77 DSGVO).

USE OF THE WEBSITE, ACCESS DATA

You can use our website for purely informational purposes without disclosing your identity. When calling up the individual pages of the website in this sense, only access data is transmitted to our web space provider so that the website can be displayed to you. This is the following data:

Browser type/ browser version,
operating system used,
Language and version of the browser software,
Host name of the accessing end device,
IP address,
Website from which the request comes,
Content of the request (concrete page),
Date and time of the server request,
Access Status/HTTP Status Code,
Referrer URL (the previously visited page),
Amount of data transferred,
Time zone difference from Greenwich Mean Time (GMT).

The temporary processing of the IP address by the system is necessary to technically enable the delivery of the website to your computer. The processing of your IP address for the duration of the session is necessary for this. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

The access data are not used to identify individual users and are not merged with other data sources. The access data is deleted when it is no longer necessary to achieve the purpose of its processing. In the case of the collection of data for the provision of the website, this is the case when you end your visit to the website.

IP addresses are stored in log files to ensure the functionality of the website. In addition, we use the data to optimize the website and to ensure the security of our information technology systems. An evaluation of the data for marketing purposes does not take place in this context either. The data is generally deleted after seven days at the latest; processing beyond this is possible in individual cases. In this case, the IP address is deleted or alienated so that an assignment of the calling client is no longer possible.

The collection of data to provide the website and the processing of data in log files is mandatory for the operation of the website. You can object to the processing. Your right to object exists for reasons arising from your particular situation, unless we can demonstrate compelling legitimate grounds for the processing that override your interests, rights and freedoms, or if the processing serves the assertion and exercise of or defence against legal claims (Art. 21 (1) DSGVO). In the event of your justified objection, we will review the situation and either discontinue or adjust the data processing or show you our compelling legitimate grounds on the basis of which we will continue the processing. You can send us your objection via the contact details listed in the section "Responsible provider".

COOKIES

In addition to the aforementioned access data, so-called cookies are stored in the Internet browser of the end device you are using when you use the website. These are small text files with a sequence of numbers that are stored locally in the cache of the browser used. Cookies do not become part of the PC system and cannot execute any programs. They are used to make our website user-friendly. The use of cookies may be technically necessary or for other purposes (e.g. analysis/ evaluation of website usage).

A) TECHNICALLY NECESSARY COOKIES

Some elements of our website require that the calling browser can be identified even after a page change. The following data is processed in the cookies:

Language settings,
Item in shopping cart,
Log-In Information.

The user data collected through technically necessary cookies are not processed to create user profiles. We also use so-called "session cookies", which store a session ID with which various requests from your browser can be assigned to the joint session. Session cookies are necessary for the use of the website. In particular, they allow us to recognize the device you are using when you return to the website. We use this cookie to recognise you on subsequent visits to the website if you have an account with us; otherwise you will have to log in again on each visit. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We use session cookies to make the use of the website more attractive and effective. The session cookies are deleted as soon as you log out or close the browser.

Most browsers are preset to automatically accept cookies. You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21(1) DSGVO). You can send us your objection via the contact details listed in the section "Responsible provider".

By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website in full.

B) TECHNICALLY NOT NECESSARY COOKIES

We also use cookies on the website that enable an analysis of the user's surfing behaviour. The following data, for example, is stored and processed in the cookies:

Entered search terms,
Frequency of page views,
Use of website functions.

These cookies are used to make the use of the website more efficient and attractive. The legal basis for this processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The technically unnecessary cookies are automatically deleted after a specified duration, which may differ depending on the cookie.

You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21(1) DSGVO). You can send us your objection via the contact details listed in the section "Responsible provider".

By changing your browser settings, you have the option to block cookies generally or selectively or to remove cookies that have already been saved. You can also have the corresponding information displayed before setting a cookie. You can also prevent the use of cookies by opening the browser you are using in "private mode". If you change the browser settings for the use of cookies or disable cookies, the functionality of this website may be limited.

As far as we integrate third party cookies into our website, we will inform you separately in the following.

CONTACT OUR COMPANY

When contacting our company, e.g. via the contact form on the website, the personal data you provide will be processed by us in order to answer your inquiry.

For the processing of inquiries via the contact form on the website, it is mandatory to provide a name and a valid e-mail address. At the time of sending the message to us, the following data is also processed:

IP address,
Date/time of registration.

The legal basis for the processing is Art. 6 para. 1 sentence 1 lit. f) DSGVO or Art. 6 para. 1 sentence 1 lit. b) DSGVO, if the contact is aimed at the conclusion of a contract. If the provision of your data is necessary for the conclusion of a contract, it may be impossible to conclude or execute the contract or to process the request if the data is not provided.

The processing of the personal data from the input mask serves us solely to process the contact. In the case of contact by e-mail, this also constitutes the necessary legitimate interest in processing the data. The other personal data processed during the sending process serve to prevent misuse of the contact form and to ensure the security of our information technology systems.

In this context, the data will not be passed on to third parties. The data is processed exclusively for the processing of the conversation. We delete the data accruing in this context after the processing is no longer necessary or restrict the processing to compliance with the existing legally mandatory retention obligations.

PROCESSING AND DISCLOSURE OF PERSONAL DATA FOR CONTRACTUAL PURPOSES

We process your personal data if and insofar as this is necessary for the initiation, establishment, execution and/or termination of a legal transaction with our company. The legal basis for this results from Art. 6 para. 1 p. 1 lit. b) DSGVO. If the data processing is necessary for the conclusion of a contract, the conclusion, execution and/or termination of a legal transaction with our company may be impossible if the data is not provided.

E-mail advertising without subscribing to the newsletter and your right to object

If we receive your e-mail address in connection with the sale of a product or service and you have not objected to this, we reserve the right, on the basis of Section 7 (3) of the German Unfair Competition Act (UWG), to regularly send you offers by e-mail for similar products to those already purchased from our range. This serves to protect our legitimate interests in addressing our customers in an advertising manner, which outweigh our interests in the context of a balancing of interests.

You can object to this use of your e-mail address at any time by sending a message to the contact option described below or via a link provided for this purpose in the advertising e-mail, without incurring any costs other than the transmission costs according to the basic rates.

The passing on of your personal data takes place in this respect, if

it is necessary for the establishment, implementation or termination of legal transactions with our company (e.g. in the case of the transfer of data to a payment service provider / a shipping company for the processing of a contract with your person), (Art. 6 para. 1 sentence 1 lit. b) DSGVO), or
a subcontractor or agent we use solely in the course of providing the offer or service you have requested requires such data (such agents are, unless you are expressly notified otherwise, only entitled to process the data to the extent necessary for the provision of the offer or service), or
an enforceable official order (Art. 6 (1) sentence 1 lit. c) DSGVO) exists, or
there is an enforceable court order (Art. 6 para. 1 sentence 1 lit. c) DSGVO), or
we are obliged to do so by law (Art. 6 (1) sentence 1 lit. c) DSGVO), or
processing is necessary in order to protect the vital interests of the data subject or of another natural person (Article 6(1)(d) of the GDPR), or
it is necessary for the performance of a task carried out in the public interest or in the exercise of official authority (Art. 6 para. 1 sentence 1 lit. e) DSGVO), or
we are authorised or even obliged to disclose data in order to pursue overriding legitimate interests (Art. 6 para. 1 p. 1 lit. f) DSGVO).

A further transfer of your personal data to other persons, companies or bodies will not take place unless you have effectively consented to such a transfer. The legal basis of the processing is then Art. 6 para. 1 p. 1 lit. a) DSGVO.

PROCESSING AND DISCLOSURE OF PERSONAL DATA IN THE ONLINE ORDERING SYSTEM

If you would like to place an order or booking in our online shop, it is necessary for the initiation and conclusion of the contract that you provide personal data such as your name, address and e-mail address. The mandatory information required for the order and contract processing is marked separately, other information is provided voluntarily. In case you do not provide the required data, the conclusion of the contract is impossible. We process your data for order processing, in particular we will forward payment data to the payment service provider chosen by you or to our house bank. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. To prevent unauthorized third parties from accessing your personal data, the ordering process on the website is encrypted using SSL/TLS technology.

You can voluntarily create a customer account in which we store your data for future visits to the website. When you create a customer account, the data you provide will be processed. All other data, including your customer account, you can edit or delete independently after successful registration.

We delete the data accruing in this context after the storage is no longer necessary, or restrict the processing if there are legal retention obligations. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with existing legal obligations.

REGISTRATION/ PASSWORD PROTECTED AREA OF THE WEBSITE / CUSTOMER ACCOUNT

If you wish to use the password-protected area on our website, you must register using the following information:

E-mail address,
First and last name, as well as address, if the opening of a customer account is connected with an order.

Furthermore, the following data is processed at the time of registration:

IP address,
Date/time of registration.

The data will be deleted as soon as they are no longer necessary to achieve the purpose of their processing. This is the case for the data collected during the registration process when the registration on the website is cancelled or modified.

The following functions are available to you in the password-protected area:

Edit your profile data,
view orders that have been placed,
Manage reward system ("friends recruit friends" and loyalty program).

If you use the password-protected area of the website, e.g. to edit your profile data or to view orders placed, we also process the personal data required to initiate or fulfil the contract, in particular address data and payment details. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. The data will be deleted as soon as they are no longer necessary to achieve the purpose of their processing or the deletion is not contrary to legitimate interests. Due to mandatory commercial and tax regulations, we are obliged to store your address, payment and order data for a period of ten years. Two years after termination of the contract, we restrict the processing and reduce the processing to compliance with existing legal obligations. The data processing is necessary for the conclusion or initiation of the contract. In the event that your data is not provided, you may not be able to use the password-protected area and the conclusion or execution of the contract will be impossible.

If you voluntarily provide additional data (e.g. interests, age, gender, preferences), we process your data that is not necessary for the initiation or performance of a contract, as long as you use the password-protected area and if you do not delete it yourself beforehand. Our purpose is to optimise the use of the website for you as a user. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO.

You can manage, change or delete your voluntary data yourself in the password-protected area at any time. You are free to take measures according to the section "Your rights", whereby we ask you to contact our company in the first step in the event of complaints.

APPLICANT PROCESS

We are pleased that you are interested in us and that you are applying or have applied for a position in our company. We would like to provide you with the following information on the processing of your personal data in connection with the application. We process the data required for the online application process (e.g. name, e-mail address and location) as well as data that you have sent us in connection with your application in order to check your suitability for the position (or other open positions in our company) and to carry out the application process.

The legal basis for the processing of your personal data in this application procedure is primarily Section 26 BDSG in the version applicable from 25 May 2018. Accordingly, the processing of data required in connection with the decision on the establishment of an employment relationship is permissible. Should the data be required for legal prosecution after the conclusion of the application process, if applicable, data processing may be carried out on the basis of the requirements of Art. 6 DSGVO, in particular to safeguard legitimate interests pursuant to Art. 6 (1) lit. f) DSGVO. Our interest then consists in the assertion or defence of claims.

Data of applicants will be deleted after 6 months in case of rejection. In the event that you have agreed to further storage of your personal data, we will transfer your data to our applicant pool. There, the data will be deleted after two years. If you have been awarded a position during the application process, the data from the applicant data system will be transferred to our personnel information system.

We use a specialist software provider for the application process. This provider acts as a service provider for us and may also obtain knowledge of your personal data in connection with the maintenance and care of the systems. We have concluded a so-called order processing contract with this provider, which ensures that the data processing is carried out in a permissible manner.

Your application data will be reviewed by the HR department after receipt of your application. Suitable applications are then forwarded internally to the department managers for the respective open position. Then the further procedure is coordinated. In the company, only those persons have access to your data who need this for the proper course of our application procedure.

E-MAIL MARKETING

EXISTING CUSTOMER ADVERTISING

We reserve the right to use the e-mail address provided by you in the context of the order in accordance with the statutory provisions in order to send you the following content by e-mail during or after the order, provided that you have not already objected to this processing of your e-mail address:

other interesting offers from our portfolio,
to events of our company,
Ask for special requests for product development,
Feedback Requests.

If the sending of electronic information is not necessary for the execution of the contract (e.g. e-mail in informational form) and the legal basis of Art. 6 para. 1 sentence 1 lit. b) DSGVO is relevant, the processing is based on the legal basis according to Art. 6 para. 1 sentence 1 lit. f) DSGVO. Our legitimate interests in the aforementioned processing lie in the increase and optimization of our services, sending direct advertising and ensuring customer satisfaction. We delete your data when you terminate your user contract, but no later than three years after termination of the contract.

We would like to point out that you can object to the receipt of direct advertising and data processing for the purpose of direct advertising at any time, without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) DSGVO). After you have exercised your right of objection, we will delete your data in connection with existing customer advertising. To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsible provider".

USE OF ZENLOOP FOR SENDING FEEDBACK REQUESTS

We also process your email address to send feedback questions. The email contains a so-called NPS query, a "Net Promoter Score" for measuring customer satisfaction, which is created and sent by Zenloop (Zenloop GmbH, Brunnenstraße 196, 10119 Berlin). For this purpose Zenloop receives your e-mail address, name and order number after your order. Zenloop stores your data and your feedback within the European Union. Zenloop uses your data after anonymization to create reports or benchmarks, using the anonymized data for security and operational management, statistical analysis and research and development purposes. Zenloop will generally delete your data after the legal retention periods have expired, unless other legal grounds justify the data processing. For further information, please refer to Zenloop's privacy policy at https://www.zenloop.com/de/legal/privacy .

We, as well as the companies affiliated with our company, use your data to make our offer more attractive and to make improvements. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

USE OF MAILJET TO SEND PRODUCT-RELATED FEEDBACK REQUESTS

We use the email marketing service "Mailjet" of the provider Mailjet GmbH (c/o Workrepublic, Berliner Allee 26, 40212 Düsseldorf, Germany; https://www.mailjet.de/) to send you product-related feedback requests by email after your purchase. For this purpose Mailjet processes your e-mail address within the European Union as long as this is necessary for the provision of their service. In addition, technical information such as the browser used, the time of the page request and the IP address are processed. This information is processed for evaluation and technical improvement of our service.

The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Mailjet and no possibility to influence it.

For more information, please see Mailjet's Privacy Policy, available at https://www.mailjet.de/sicherheit-datenschutz/ , and Privacy Policy, available at https://www.mailjet.de/privacy-policy/?_ga=2.212624340.1786717741.1542624534-1074210499.1542624534.

NEWSLETTER VIA "WHATSAPP

We use a messenger marketing service from the provider telegra GmbH, with its registered office at Oskar-Jäger-Strasse 125, 50825 Cologne, Germany (Web: https://www.telegra.de/) to send messages via WhatsApp. This is a white label solution of atms Telefon- und Marketing Services GmbH, with its registered office at Leonard-Bernstein-Strasse 10 Saturn Tower, 1220 Vienna (Web: https://atms.at/de).

With the help of this service we can organize and manage the newsletter dispatch via the messenger service WhatsApp.

If, after entering the phone number, a confirmation of the newsletter subscription by entering the word "Start" via WhatsApp - message to us, not within three weeks, we delete this information automatically after three weeks after entering the phone number at the latest.

After completing the registration for the newsletter dispatch via WhatsApp, we process the telephone number and the displayed user name of the recipient concerned for the purpose of sending our newsletter. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. a) DSGVO. We delete this data when you end the newsletter subscription, after three months at the latest.

A revocation of consent to the processing of personal data for the receipt of the newsletter via WhatsApp is possible at any time, either by sending a message to us (see contact details in the section "Responsible provider") or by sending a "stopde" message via WhatsApp to us. In this case, the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by the revocation (Art. 13 para. 2 lit. c) DSGVO).

In addition, you have the right to object to the processing of your personal data for the purpose of direct marketing pursuant to Art. 21 (2) DSGVO. If you object to the processing for direct marketing purposes, the personal data will no longer be processed for these purposes.

If you contact us via WhatsApp within the newsletter, e.g. in the form of queries about products, we will process your message in order to answer it. The legal basis in this respect is Art. 6 para. 1 p. 1 lit. b) DSGVO. The data entered by you for the purpose of receiving newsletters (e.g. telephone number, messages sent), and in particular the user name and IP address, are also processed on the servers of the messenger marketing service providers within the European Union. By using WhatsApp, WhatsApp Ireland Limited (4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland) of course also receives the transmitted data, in accordance with its terms of use and privacy policy. You can find these here https://www.whatsapp.com/legal/?lang=de#key-updates.

Our messages sent via the messenger marketing service allow us to analyse the behaviour of the recipients. Among other things, we can analyse which recipients have received the message or opened the message.

The evaluation of the aforementioned information serves to identify the reading habits of the recipients in order to better adapt and distribute our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We process this data until the expiry of two years after termination of the contract. Insofar as the newsletter registration takes place outside of the conclusion of a contract, we process this data until the expiry of two years after the termination of the usage process. We delete this data when the newsletter subscription ends within the periods specified above.

As a matter of principle, we have no knowledge of the storage period with the messenger marketing service providers and no possibility of influencing it. telegra GmbH automatically deletes Messenger messages after 90 days(https://www.telegra.de/wam/). Further information on data protection and the protection of your privacy can also be found at https://atms.at/de/whatsatool-faq.

COMMENT FUNCTION/GUESTBOOK ON THE WEBSITE

By means of the link to our shop system sent via Mailjet, you can rate the product you have purchased on our website, provided you have a customer account.

When you make an entry, we process the following personal data:

E-mail address,
First and last name,
Username,
Residence.

Furthermore, the following data will be processed at the time the entry is made:

IP address,
Date/time of entry.

When publishing your entry, the e-mail address you have provided will not be published, only the name you have entered in your customer account. There is no obligation to use a clear name, a pseudonymous use of the function is free to you. Within your customer account you can change the display name at any time. Your entry will be checked by us before publication. We reserve the right to remove entries at any time if they are found to be illegal.

We process your e-mail address and your name/pseudonym in order to be able to determine, if necessary, whether the entry is a genuine testimonial. Furthermore, we would like to be able to contact you if your entry on the website is objected to as being illegal, and to be able to defend ourselves against complaints or claims that may be brought against us on the basis of your entry.

For this purpose we also process your IP address. We delete the IP address after 1 week. We process your e-mail address in any case as long as the entry on the website continues to exist or we are dealing with the entry in the context of a legal dispute.

If you or we delete your entry, we will process the e-mail address, the name provided and other voluntary details until the expiry of the statutory limitation periods for the aforementioned reasons of prevention and defence, but will restrict the processing of this data after 6 months.

We do not disclose the data to third parties unless we are obliged to do so by law or on the basis of official or judicial orders or the disclosure is necessary for the enforcement of our legitimate interests. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

You can have your entry deleted by us at any time. To do so, please contact us using the contact details listed in the "Person responsible" section. You are free to take measures according to the section "Your rights", whereby we ask you to contact our company in the first step in the event of complaints.

You have the possibility to subscribe to our e-mail newsletter on the website, with which we inform you regularly about the following contents:

Offers from our portfolio,
Events of our company,
Offers (including events) of third parties, insofar as you have given your consent to this,
New articles/collections,
Special offer/ limited time offers.

To receive the newsletter, you must provide a valid e-mail address.

The registration for our email newsletter takes place in the double opt-in process. After you have entered the data marked as mandatory, we will send you an e-mail to the e-mail address you have provided, in which we ask you to explicitly confirm your subscription to the newsletter (by clicking on a confirm link). In this way, we ensure that you actually wish to receive our e-mail newsletter. If the confirmation does not take place within 24 hours, we block the information transmitted to us and delete it automatically after one month at the latest.

Furthermore, the following data is also processed at the time of subscription:

IP address,
Date/time of subscription to the newsletter,
Time of your confirmation of the confirm link.

We process your IP address, the time of your newsletter registration and the time of your confirmation in order to document your newsletter registration and to prevent the misuse of your personal data. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We process this data until the expiry of two years after termination of the contract. Insofar as the newsletter registration takes place outside of the conclusion of a contract, we process this data until the expiry of two years after the termination of the usage process. We delete this data when the newsletter subscription ends.

After your confirmation, we process the email address of the recipient concerned for the purpose of sending our email newsletter. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. a) DSGVO. We delete this data when you end the newsletter subscription.

You can revoke your consent to the processing of your email address for the receipt of the newsletter at any time, either by sending a message to us (see the contact details in the section "Responsible provider") or by clicking directly on the unsubscribe link contained in the newsletter. In this case, the lawfulness of the processing carried out on the basis of the consent until the revocation is not affected by the revocation (Art. 13 para. 2 lit. c) DSGVO).

We would like to point out that we evaluate your user behaviour when sending the newsletter. For this evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are embedded on our website. For the evaluations, we link the data mentioned in the section "Access data" and the web beacons with your e-mail address and an individual ID. Links received in the newsletter also contain this ID.

With the data obtained, we create a user profile to tailor the newsletter to your individual interests. We record when you read our newsletter, which links you click on in it and infer your personal interests from this. We link this data to actions you have taken on our website. The information is processed as long as you have subscribed to the newsletter. After unsubscribing, we process the data purely statistically and anonymously.

The purpose of this is to evaluate the use and optimisation of the email advertising that we send you. The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

We would like to point out that you can object to the receipt of direct advertising and data processing for the purpose of direct advertising at any time, without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) DSGVO). After you have exercised your right to object, we will delete your data in connection with direct advertising. To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsible provider".

You can also prevent tracking by deactivating the display of images by default in your email program. In this case, the newsletter will not be displayed in full and you may not be able to use all functions. If you display the images manually, the above-mentioned tracking will take place.

E-MAIL MARKETING SERVICE "MAILCHIMP"

We use the e-mail marketing service "MailChimp" of the provider Rocket Science Group, LLC (675 Ponce De Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA, Web: https://mailchimp.com/; hereinafter: "MailChimp").

If you have registered for the newsletter, the data provided during registration will be stored and processed on MailChimp's servers in the USA. Mailchimp has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view the certification of the Rocket Science Group at https://www.privacyshield.gov/participant?id=a2zt0000000TO6hAAG . MailChimp processes this information to send and evaluate the newsletters on our behalf. The newsletters contain so-called "web-beacon", which are pixel-sized files that are retrieved from the MailChimp server when the newsletter is opened. As part of the retrieval, technical information such as the browser used, time of page retrieval and IP address are collected. This information is processed for evaluation and technical improvement of our service. Furthermore, it is evaluated whether and when newsletters are opened and which links are clicked on by the reader. This information can theoretically be assigned to individual newsletter recipients. However, neither we nor MailChimp intend to monitor individual recipients; rather, the evaluation of the aforementioned information serves to identify the reading habits of recipients in order to better adapt, optimize and control our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at MailChimp and no possibility to influence it.

We would like to point out that you can object to the receipt of direct advertising and data processing for the purpose of direct advertising at any time, without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) DSGVO). After you have exercised your right to object, we will delete your data in connection with direct advertising. To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsible provider".

This simultaneously ends the processing for the receipt of the newsletter and for the statistical analyses. A separate objection of the dispatch via MailChimp or the statistical analysis is not possible.

Alternatively, you can object at https://www.aboutads.info/choices/ and https://www.youronlinechoices.com/ (for the European Union). You can also prevent the use of cookies by opening the browser in "private mode".

Furthermore, according to its own information, MailChimp can use the transmitted data to optimize and improve its own services, e.g. for the technical optimization of the dispatch and the presentation of the newsletter. According to MailChimp, it does not process the data in order to send you its own advertising, nor does it pass the data on to third parties.

It may happen that you, as a recipient of the newsletter, are redirected to the website of MailChimp, for example, if you follow the link contained in the newsletter to retrieve the newsletter online in the event of display problems in the email program. In this context, we would like to point out that further analysis services and cookies may be used on the MailChimp website, which may process your personal data on behalf of MailChimp. We have no influence on this processing.

EMARSYS" E-MAIL MARKETING SERVICE

We use the e-mail marketing service "Emarsys" of the provider Emarsys eMarketing Systems AG, with its registered office at Hans-Fischer-Strasse 10, 80339 Munich, Web: https://www.emarsys.com/de hereinafter: "Emarsys") for sending newsletters. Emarsys is a service with which the newsletter dispatch can be organised and analysed. The data you enter for the purpose of receiving newsletters (e.g. e-mail address) will also be processed on Emarsys servers in the USA.

Our newsletters sent with Emarsys allow us to analyze the behavior of newsletter recipients. Among other things, we can analyze how many recipients have opened the newsletter message and how often which link in the newsletter was clicked. With the help of so-called conversion tracking, it can also be analysed whether a predefined action (e.g. purchase of a product on our website) has taken place after clicking on the link in the newsletter.

The evaluation of the aforementioned information serves to identify the reading habits of the recipients in order to better adapt and control our newsletter content accordingly. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We process this data until the expiry of two years after termination of the contract. Insofar as the newsletter registration takes place outside of the conclusion of a contract, we process this data until the expiry of two years after the termination of the usage process. We delete this data when the newsletter subscription ends. We have no knowledge of the storage period at Emarsys and no possibility to influence it. Further information on data protection and the protection of your privacy can be found at https://www.emarsys.com/en/privacy-policy/.

We would like to point out that you can object to the receipt of direct advertising and data processing for the purpose of direct advertising at any time, without incurring any costs other than the transmission costs according to the basic rates. You have a general right to object without giving reasons (Art. 21 (2) DSGVO). After you have exercised your right to object, we will delete your data in connection with direct advertising. To do so, click on the unsubscribe link in the respective email or send us your objection to the contact details listed in the section "Responsible provider".

This simultaneously ends the processing for the receipt of the newsletter and for the statistical analyses. A separate objection of the dispatch via Emarsys or the statistical analysis is not possible.

PAYMENT SERVICE PROVIDER (PSP)/ PAYMENT SERVICE PROVIDER

PAYPAL

On our website we offer you the payment via PayPal. The provider of this payment service is PayPal (Europe) S.à.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter: "PayPal").

If you select payment via PayPal, the payment data you entered will be transmitted to PayPal. The transmission of your data to PayPal is based on Art. 6 para. 1 p. 1 lit. b) DSGVO (processing for the performance of a contract). If the data is not provided, it may be impossible to conclude or execute the contract. We have no knowledge of the storage period at PayPal and no possibility to influence it.

AT ONCE BY KLARNA

If you select the payment method "SOFORT" in the context of your order, we will forward the data provided by you to Sofort GmbH (Theresienhöhe 12, 80339 Munich, Germany; Web: https://www.sofort.de/; hereinafter "SOFORT") in the context of payment processing.

"SOFORT" is a direct transfer procedure, in which a transfer can already be filled out during the order process and executed in real time. For this purpose, you will be redirected to the website of the payment service provider SOFORT.

The legal basis of the processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. The data processing is necessary in particular for the conclusion of the contract. If the data is not provided, it may be impossible to conclude or execute the contract. We have no knowledge of the storage period at SOFORT and no possibility to influence it. For further information on the collection and processing of your data by "SOFORT", please visit https://www.sofort.de/datenschutz.html.

KLARNA

If you choose the payment option "Klarna Invoice" or "Klarna Installment Purchase" of Klarna GmbH (Theresienhöhe 12, 80339 Munich, Germany; Web: https://www.klarna.com/de/; hereinafter "Klarna"), Klarna will perform an identity and credit check based on the data provided by you. The details can be found in the information displayed to you in our booking/ordering process. The legal basis of processing for payment processing is Art. 6 para. 1 p. 1 lit. b) DSGVO. The data processing is necessary in particular for the conclusion of the contract. If the data is not provided, it may be impossible to conclude or execute the contract.

Klarna and we have a legitimate interest in the transmission of the personal data of the user concerned. Klarna and we need this in order to obtain information from credit agencies for the purpose of checking identity and creditworthiness. The legal basis is Art. 6 para. 1 p. 1 lit. f) DSGVO. We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are statutory retention obligations. This may be the credit agencies mentioned at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy .

The data processing is also necessary in this respect for the conclusion of the contract. If the data is not provided, it may be impossible to conclude or execute the contract.

In order to carry out the credit check, Klarna retrieves information on the user concerned from the payment service providers that carry out the payment processing and processes this data for the purpose of calculating a probability value based on a scientifically recognised mathematical-statistical method for forecasting the credit risk (formation of "score values"). The evaluation of the score values enables Klarna to make a decision on the establishment, execution or termination of the contractual relationship. In addition to the address data, information on previous payment behaviour and probability values for expected future payment behaviour are also included. We have no knowledge of the storage period at Klarna and no possibility to influence it.

For more information on the processing of your data by Klarna, please visit https://www.klarna.com/de/datenschutz/ and https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy.

However, Klarna remains entitled to process and transmit customer data if this is necessary for the contractual processing of payments or is required by law or by official or judicial authorities. Contact can be made with Klarna at [email protected].

PAYMENT BY STRIPE

The payment service provider Stripe (Stripe Payments Europe Ltd., Block 4, Harcourt Centre, Harcourt Road, Dublin 2, Ireland) is available to you as a payment method. Your data will be transmitted to Stripe, whereby Stripe may carry out an identity and creditworthiness check on the basis of the data provided by you (name, address, account number, bank code, any credit card number, invoice amount, currency and transaction number). The details can be found in the information displayed to you in our booking process. The legal basis for processing for payment processing is Art. 6 para. 1 p. 1 lit b) DSGVO. The data processing is necessary in particular for the conclusion of the contract. If the data is not provided, it may be impossible to conclude or execute the contract.

In the context of an identity and credit check based on your data, Stripe and we have a legitimate interest in the transmission of the personal data of the user concerned. Stripe and we require this in order to obtain information from credit agencies for the purpose of the identity and credit check (Art. 6 para. 1 p. 1 lit. f) DSGVO). This may be the credit agencies mentioned at https://stripe.com/de/privacy .

We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal obligations to retain data.

Further information on the privacy policy of the Stripe service can be found at: www.stripe.com/de/privacy.

However, Stripe remains entitled to process and transmit the customer data if this is necessary for the contractual processing of payments or is required by law or by the authorities or the courts. Contact can be made with Stripe at. [email protected].

EPS TRANSFER

If you select the payment option eps-transfer in the webshop you will be redirected to a central list of participating Austrian banks. After selecting your bank, you will be connected to the login of your corresponding online banking. After logging in, you make the payment as usual via online banking by signing a TAN - no further entries such as IBAN, amount or merchant are required. You will then receive an electronic order confirmation

DISCLOSURE OF PERSONAL DATA FOR LAW ENFORCEMENT/ADDRESS TRACING/COLLECTION PURPOSES

We reserve the right, in the event of non-payment, to pass on the data provided with the order to a lawyer and/or external companies (e.g. Verband der Vereine Creditreform e.V., Hellersbergstraße 12, D-41460 Neuss) for the purposes of address determination and/or legal enforcement if there is a justified interest in accordance with Art. 6 Para. 1 S. 1 lit. f) DSGVO.

In addition, we may share your information when necessary to protect our rights, the rights of our affiliates, our partners, our employees and/or users of our website. Under no circumstances will we sell or rent your data to third parties. The transfer of this data is based on Art. 6 para. 1 p. 1 lit. f) DSGVO.

We delete the data accruing in this context after the storage is no longer necessary or restrict the processing if there are legal obligations to retain data.

HOSTING

We use external hosting services that serve to provide the following services: Infrastructure and platform services, computing capacity, storage resources and database services, security as well as technical maintenance services. All data required for the operation and use of our website is processed.

We use external hosting services for the operation of this website. By using external hosting services, we aim to provide our website efficiently and securely. The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO.

The collection of data for the provision and use of the website and the processing of data via external web hosts is absolutely necessary for the operation of the website. You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21 (1) DSGVO). You can send us your objection via the contact details listed in the section "Responsible provider".

INTEGRATION OF THIRD PARTY CONTENT

Third-party content such as videos, maps, RSS feeds or graphics from other websites are integrated on the website. This integration always requires that the providers of this content ("third party providers") perceive the IP addresses of the users. This is because without the IP address they cannot send the content to the browser of the respective user. The IP address is thus required for the display of this content.

We strive to only use content from third-party providers who only process the IP address for the delivery of the content. However, we have no influence if the third-party providers process the IP addresses, e.g. for statistical purposes. Insofar as this is known to us, we will inform you of this below.

Some of the third party providers may process data outside the European Union.

You can object by installing a JavaScript blocker such as the browser plugin 'NoScript'(www.noscript.net) or by deactivating JavaScript in your browser. You can object to the processing. Your right to object exists for reasons arising from your particular situation. We will not further process your data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms, or if the processing serves the purpose of asserting, exercising or defending legal claims (Art. 21(1) DSGVO). You can send us your objection via the contact details listed in the section "Responsible provider".

GOOGLE RECAPTCHA

We use "Google reCAPTCHA" (hereinafter: "reCAPTCHA") on our website. The provider of the service is Google.

The purpose of reCAPTCHA is to check whether the data input on the website (e.g. in a contact form) is made by a human or by an automated program. For this purpose, reCAPTCHA analyzes the behavior of the visitor to the website based on various characteristics. This analysis begins automatically as soon as the user accesses the website. For the analysis, reCAPTCHA evaluates various information (e.g. IP address, time spent by the website visitor on the website or mouse movements made by the user). The data collected during the analysis is forwarded to Google. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .

The reCAPTCHA analyses run completely in the background. You will not be notified that an analysis is taking place.

The processing takes place on the basis of Art. 6 para. 1 p. 1 lit. f) DSGVO. We have a legitimate interest in protecting our web offers from abusive automated spying and from unsolicited e-mail advertising (SPAM). We have no knowledge of the storage period for reCAPTCHA and no possibility to influence it.

For more information about Google reCAPTCHA and Google's privacy policy, please see the following links: https://www.google.com/intl/de/policies/privacy/ and https://www.google.com/recaptcha/intro/android.html.

GOOGLE AJAX SEARCH API

We use Google AJAX Search API as a central search service. The integrated search service enables a full text search for contents of the present internet offer.

For the information of the user, the text "Search with Google™ ..." is displayed in the search box. If the user selects the input field of the search box and fills it with a search term, an additional link appears below the search box that refers to this information on data protection.

Data is only transferred to Google as soon as you activate the search box, start a full-text search and thereby call up the search results page. By using the search function within the search results page, your data will also be transferred to Google. This includes, for example, the search terms you entered and the IP address of the computer you are using. If you visit our official website without activating the Google AJAX Search API, no data will be transmitted to Google. We would like to point out that Google is responsible for processing any personal data that may be transferred and that we have no influence on the type and scope of the data transferred or on its further processing. If you are logged in to Google at the same time, the Google service is able to assign the information directly to your user profile. You should log out to avoid the collection of profile information about you.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The processing serves to make our website more attractive and to offer you additional services. We have no knowledge of the storage period at Google and no possibility to influence it.

Further information from Google about the handling of user data (privacy policy) can be found at: https://www.google.com/intl/de/policies/privacy.

By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening the browser in "private mode". If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website in full.

GOOGLE WEB FONTS

We use so-called web fonts, which are provided by Google, for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. Through this, Google obtains knowledge that our website was accessed via your IP address. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active . Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 (1) p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and no possibility to influence it.

For more information about Google Web Fonts, please visit https://developers.google.com/fonts/faq and read Google's privacy policy: https://www.google.com/policies/privacy/.

GOOGLE TAG MANAGER

We use Google Tag Manager on our website. Google Tag Manager is a solution that allows marketers to manage website tags through one interface. The Tag Manager tool itself (which implements the tags) is a cookie-less domain and does not collect any personal data. The tool takes care of triggering other tags, which in turn may collect data. Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, this remains in place for all tracking tags implemented with Google Tag Manager.

YOUTUBE VIDEOS

We use plug-ins of the video platform YouTube.de or YouTube.com on the website, a service which - represented by Google - is operated by YouTube LLC (headquarters at 901 Cherry Avenue, San Bruno, CA 94066, USA; "YouTube"). By means of the plug-ins, we can also integrate visual content ("videos") that we have published on Youtube.de or Youtube.com on this website.

The videos are all embedded in "extended data protection mode", i.e. no data about you as a user is transmitted to YouTube if you do not play the videos. Only when you play the videos, the data mentioned below is transferred. We have no influence on this data transmission.

By visiting the website, YouTube receives the information that you have accessed the corresponding subpage of our website. In addition, the data mentioned in the section "Access data" are transmitted. This occurs regardless of whether YouTube provides a user account through which you are logged in or whether no user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your YouTube profile, you must log out before activating the button. YouTube stores your data as usage profiles and processes them for the purpose of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website. Google also processes your personal data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .

For more information on the purpose and scope of processing by YouTube, please see the privacy policy at https://www.google.de/intl/de/policies/privacy.

By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening the browser in "private mode". If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website in full.

VIMEO

We use the plugins of Vimeo for the integration of videos on our website. Vimeo is operated by Vimeo LLC, 555 West 18th Street, New York, New York 10011, USA. By means of the plug-ins, we can also integrate visual content ("videos") that we have published on www.vimeo.com on this website.

When you visit one of our websites with the Vimeo plugin, a connection to the Vimeo servers is established. This transmits to the Vimeo server which website you have visited. If you are logged in as a member of Vimeo, Vimeo assigns this information to your personal user account. When using the plugin, such as playing a video by activating the play button, this information is also assigned to your user account. Vimeo stores your data as usage profiles and processes them for the purpose of advertising, market research and/or demand-oriented design of its website. Such an evaluation is carried out in particular (even for users who are not logged in) for the provision of needs-based advertising and to inform other users of the social network about your activities on our website.

We have concluded so-called "standard contractual clauses" with Vimeo in order to commit Vimeo to maintaining an appropriate level of data protection. Upon request, we will provide you with a copy of the agreement.

You can find further information on data processing and data protection by Vimeo at https://vimeo.com/privacy.

By changing the settings in your internet browser, you can deactivate or restrict the transfer of cookies. Already stored cookies can be deleted at any time. This can also be done automatically. You can also prevent the use of cookies by opening the browser in "private mode". If cookies are deactivated for our website, it may no longer be possible to use all the functions of the website in full.

SERVICES FOR STATISTICAL, ANALYTICAL AND MARKETING PURPOSES

We use third-party services for statistical, analytical and marketing purposes. This enables us to provide you with a user-friendly, optimized use of the website. The third-party providers use cookies to control their services (see the section "Cookies" above). Personal data is not processed, unless otherwise explained below.

Some of the third party providers offer the possibility to directly object to the use of the respective service, e.g. by setting an opt-out cookie.

If you activate a corresponding opt-out cookie, the external provider will no longer process any data about your usage behavior in the future. A merely selective objection to an individually made selection of external services is also possible. If you change the browser or the end device used or if you delete all cookies, you must set the opt-out cookie again.

Furthermore, you can also object to the use of cookies directly via the opt-out platform of the Bundesverband Digitale Wirtschaft e.V. (BVDW) at or via the deactivation page of the Network Advertising Initiative at . (BVDW) at https://www.meine-cookies.org/cookies_verwalten/praeferenzmanager.html or directly via the deactivation page of the Network Advertising Initiative at https://www.networkadvertising.org/choices/ .

Further information on usage-based advertising and opt-out options can also be found at the following link: https://www.youronlinechoices.com/de/.

You can also prevent the use of cookies by opening the browser you are using in "private mode".

In the following, we inform you about the services of external providers currently used on our website, as well as about the purpose and scope of the respective processing in each individual case and about your existing objection options.

GOOGLE ANALYTICS

In order to be able to optimally adapt our website to your interests, we use Google Analytics, a web analysis service from Google. Google Analytics uses so-called "cookies" (see the section "Cookies" above), which are stored on your computer and which allow an analysis of your use of the website. The information generated about your use of this website is transferred to a Google server in the USA and processed there.

In the event that IP anonymisation is activated on this website, your IP address will be shortened beforehand by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. Google will use this information on our behalf for the purpose of evaluating your use of the website, compiling reports on website activity for website operators and providing other services relating to website activity and internet usage.

The IP address transmitted by your browser within the scope of Google Analytics will not be merged with other Google data.

This website uses Google Analytics with the extension "_anonymizeIp()". This means that IP addresses are processed in a shortened form, which means that personal references can be ruled out. As far as the data collected about you a personal reference, this is excluded immediately and the personal data is deleted immediately.

We use Google Analytics to analyze and regularly improve the use of our website. The statistics allow us to improve our offer and make it more interesting for you as a user. For the exceptional cases in which personal data is transferred to the USA, Google has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .

The legal basis for the processing of Google Analytics is Art. 6 para. 1 p. 1 lit. f) DSGVO. The Analytics cookies are deleted after fourteen months at the latest.

For more information from the third party provider Google, please visit:

https://www.google.com/analytics/terms/de.html,
https://www.google.com/intl/de/analytics/learn/privacy.html,
https://www.google.de/intl/de/policies/privacy.

You may refuse the use of cookies by selecting the appropriate settings on your browser, however please note that if you do this you may not be able to use the full functionality of this website. You can also prevent the collection of data generated by the cookie and related to your use of the website (including your IP address) to Google and the processing of this data by Google by downloading and installing the browser plug-in available at the following link: https://tools.google.com/dlpage/gaoptout?hl=de. You can also prevent the use of cookies by opening the browser in "private mode".

HOTJAR

We also use the analytics service Hotjar to make our website better and more user-friendly. The provider of the analytics service is Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta, Europe, +1 (855) 464-6788, [email protected])

This tool records movements on the observed websites in so-called heatmaps. All data is collected without us being able to assign it to specific users. We can only track how the mouse was moved, where clicked and how far scrolled. This allows us to make our website better and more customer friendly. Furthermore, the screen size of the device, the type of device, information on the browser, the country from which access was made and the preferred language are recorded. If personal data is displayed on a website, it is automatically hidden by Hotjar. They are therefore not traceable for us.

To analyse your usage behaviour, we use so-called "cookies" (see the section "Cookies" above), which are stored on your computer and which enable an analysis of your use of the website. The information generated by the "tracking code" and "cookie" about your visit to our website is transmitted to the Hotjar server and stored there. The tracking code collects the following information about your terminal device such as IP address, device type and browser information, geographic location (country only), preferred language to display our website, pages visited, date and time when the website was accessed. Hotjar truncates your IP address before processing it further. Insofar as the data collected about you has a personal reference, this is therefore immediately excluded and the personal data is deleted immediately.

Hotjar will use this information to evaluate your use of our website, compile usage reports and provide other services related to website usage and internet evaluation of the website. Hotjar also uses third-party services, such as Google Analytics and Optimizely, to provide these services. These third parties may store information that your browser sends as part of your website visit, such as cookies or IP requests. For more information on how Google Analytics and Optimizely store and use data, please see their respective privacy statements.

The legal basis for the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. The cookies that Hotjar uses have different storage periods. Some remain valid for up to 365 days, some remain valid only during the current visit. You can find an overview of the storage period at: https://www.hotjar.com/legal/policies/cookie-information. More information about Hotjar Ltd. and about the Hotjar tool can be found at: https://www.hotjar.com/legal/policies/privacy.

You can object to the processing in several ways:

By enabling the Do-Not-Track feature in your browser software supported by Hotjar. Instructions on how to enable Do-Not-Track feature at: https://www.hotjar.com/legal/compliance/opt-out
by an appropriate setting of your browser software, in particular the suppression of third party cookies leads to the fact that you do not receive any advertisements from third party providers or
by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies,
by opening the browser you are using in "private mode" to prevent tracking of your usage patterns.

USAGE-BASED ONLINE ADVERTISING

FACEBOOK CUSTOM AUDIENCES

Furthermore, the website uses the "Website Custom Audiences" function of Facebook (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, e-mail: [email protected], data protection information at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook"). Via so-called web beacons such as the "Facebook pixel", statistical information about you is collected, which is processed by Facebook. This allows users of the website to be shown interest-based advertisements ("Facebook ads") when visiting the Facebook social network or other websites that also use this method.

With the help of the "Facebook Pixel", your browser automatically establishes a direct connection with the Facebook server. We have no influence on the scope and further processing of the data collected by Facebook through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of the "Facebook Pixel", Facebook receives the information that you have accessed the corresponding website of our website or clicked on an ad of ours. In doing so, Facebook receives the information that you have called up certain parts of our website. For this purpose, Facebook uses tracking technologies such as web beacons (tracking pixels) to place a cookie on your computer. Among other things, the data mentioned in the section "Access data" are transmitted. If you are registered with a Facebook service, Facebook can assign the visit to your account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We pursue the interest to show you advertising that is of interest to you and to make our website more interesting for you. In this case, we do not store any of your personal data. We have no knowledge of the storage period at Facebook and no possibility to influence it.

For more information about Facebook's processing, please visit https://www.facebook.com/about/privacy.

Deactivation of the "Facebook Custom Audiences" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_ .

You can prevent Facebook Custom Audiences from working in a number of ways:

by an appropriate setting of your browser software, in particular the suppression of third-party cookies leads to the fact that you do not receive ads from third-party providers;
by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies,
by opening the browser you are using in "private mode" to prevent the use of cookies.

FACEBOOK ANALYTICS

We continue to use the "Facebook Analytics" tool from Facebook (provider is Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland, email: [email protected], privacy policy at: https://www.facebook.com/privacy/explanation; hereinafter: "Facebook"). For the use of Facebook Analytics, we use the so-called "Facebook Pixel" to measure the reach of our advertisements. For this purpose, Facebook uses tracking technologies such as web beacons (tracking pixels) to place a cookie on your computer. Among other things, the data mentioned in the section "Access data" is transmitted.

The information obtained with the help of the "Facebook cookie" is used solely for statistical purposes, is transmitted to us anonymously by Facebook and does not provide any information about the person of the user. It is processed by Facebook in accordance with its privacy policy with your Facebook account. Even if you are not registered with Facebook or have not logged in, it is possible that the provider will learn and store your IP address and other identifying features.

The processing of your data is based on Art. 6 (1) p. 1 lit. f) DS-GVO. With the use of Facebook Analytics, we pursue the interest of being able to better evaluate our website and our advertisements and to improve our service offering. In this case, we do not store any personal data about you. We have no knowledge of the storage period at Facebook and no possibility to influence it.

For more information on Facebook's privacy policy, please refer to the associated privacy policy at https://de-de.facebook.com/about/privacy/.

Deactivation of the "Facebook Analytics" function is possible for logged-in users at https://www.facebook.com/settings/?tab=ads#_ .

You can prevent the "Facebook Analytics" function in various ways:

by an appropriate setting of your browser software, in particular the suppression of third-party cookies leads to the fact that you do not receive ads from third-party providers;
by deactivating the interest-based ads of the providers that are part of the self-regulation campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting is deleted when you delete your cookies.
by opening the browser you are using in "private mode" to prevent tracking of your usage patterns.

GOOGLE ADWORDS CONVERSION

We use the Google Adwords offer from Google to draw attention to our attractive offers on external websites with the help of advertising media (so-called Google AdWords). We can determine how successful the individual advertising measures are in relation to the data of the advertising campaigns.

These advertisements are delivered by Google via so-called "ad servers". For this purpose, we use ad server cookies, through which certain parameters for measuring success, such as display of the ads or clicks by users, can be measured. If you access our website via a Google ad, Google AdWords will store a cookie on your device. These cookies usually expire after 30 days and are not intended to identify you. The unique cookie ID, number of ad impressions per placement (frequency), last impression (relevant for post-view conversions) and opt-out information (marking that the user no longer wishes to be addressed) are usually stored as analysis values for this cookie.

These cookies enable Google to recognise your internet browser. If a user visits certain pages of the website of an AdWords customer and the cookie stored on his computer has not yet expired, Google and the customer can recognize that the user has clicked on the ad and was redirected to this page. A different cookie is assigned to each AdWords customer. We only receive statistical evaluations from Google to measure the success of our advertising media.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Google server. We have no influence on the scope and further processing of the data collected by Google through the use of this tool and therefore inform you according to our state of knowledge: Through the integration of AdWords Conversion, Google receives the information that you have called up the corresponding part of our website or clicked on an ad from us. If you are registered with a Google service, Google can assign the visit to your account. Even if you are not registered with Google or have not logged in, there is the possibility that the provider learns your IP address and stores it.

Google processes the data in the USA and has submitted to the EU-US Privacy Shield, https://www.privacyshield.gov/EU-US-Framework. You can view Google's certification at https://www.privacyshield.gov/participant?id=a2zt000000001L5AAI&status=Active .

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We pursue the interest of showing you advertising that is of interest to you, to make our website more interesting for you and to achieve a fair calculation of advertising costs. The storage period at Google is a maximum of eighteen months. You can find more information about Google's privacy policy here: https://www.google.com/intl/de/policies/privacy and https://services.google.com/sitestats/de.html.

You can prevent processing in several ways:

by an appropriate setting of your browser software, in particular the suppression of third-party cookies leads to the fact that you do not receive ads from third-party providers;
by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, which setting will be deleted when you delete your cookies;
by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the link https://www.google.com/settings/ads/plugin. We would like to point out that in this case you may not be able to use all functions of this offer to their full extent;
by opening the browser you are using in "private mode" to prevent the use of cookies;
by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies.

GOOGLE REMARKETING

In addition to Adwords Conversion, we use the Google Remarketing application from Google. This is a procedure with which we would like to address you again. Through this application, our advertisements can be displayed to you after visiting our website during your further internet use. This is done by means of cookies stored in your browser, which Google uses to record and analyse your usage behaviour when you visit various websites. In this way, Google can determine your previous visit to our website. According to its own statements, Google does not combine the data collected in the course of remarketing with your personal data, which may be processed by Google. In particular, according to Google, pseudonymization is used in remarketing.

The legal basis of the processing is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Google and no possibility to influence it.

You can prevent participation in this tracking process in several ways:

by an appropriate setting of your browser software, in particular the suppression of third-party cookies leads to the fact that you do not receive ads from third-party providers;
by disabling cookies for conversion tracking by setting your browser to block cookies from the domain "www.googleadservices.com", https://www.google.de/settings/ads, this setting will be deleted when you delete your cookies;
by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies;
by opening the browser you are using in "private mode" to prevent the use of cookies;
by permanently deactivating it in your Firefox, Internet Explorer or Google Chrome browsers under the link https://www.google.com/settings/ads/plugin.

BING ADS

We use the conversion and tracking tool Bing Ads from Microsoft Corporation (One Microsoft Way, Redmond, WA 98052-6399, hereinafter "Microsoft") on our website.

In doing so, Microsoft stores a cookie on the user's computer in order to enable an analysis of the use of our online offer. The prerequisite for this is that the user has reached our website via an advertisement from Microsoft Bing Ads. In this way, Microsoft and we can recognize that someone has clicked on an ad, has been redirected to our online offer and has reached a previously determined target page. We only learn the total number of users who clicked on a Bing ad and were then redirected to the target page (conversions). No IP addresses are stored.

Due to the marketing tools used, your browser automatically establishes a direct connection with the Microsoft server. We have no influence on the scope and further processing of the data that is initiated by the use of Bing Ads. Microsoft has subjected itself to the EU-US Privacy Shield(https://www.privacyshield.gov/EU-US-Framework) and thereby offers a guarantee of compliance with European data protection law. You can view Microsoft's certification at https://www.privacyshield.gov/participant?id=a2zt0000000KzNaAAK .

The legal basis for the processing of your data is Art. 6 para. 1 p. 1 lit. f) DSGVO. We have no knowledge of the storage period at Microsoft and no possibility to influence it. You can find more information about data protection at Microsoft at: https://privacy.microsoft.com/de-de/privacystatement.

You can object to the processing in several ways:

by an appropriate setting of your browser software, in particular the suppression of third party cookies leads to the fact that you do not receive any advertisements from third party providers or
by opening the browser you are using in "private mode" to prevent the use of cookies, or
by disabling the interest-based ads of the providers that are part of the self-regulatory campaign "About Ads" via the link https://www.aboutads.info/choices, whereby this setting will be deleted when you delete your cookies.

INFORMATION ABOUT THE PROCESSING OF YOUR DATA

DEFINITIONS

SCOPE

RESPONSIBLE SUPPLIER

YOUR RIGHTS

USE OF THE WEBSITE, ACCESS DATA

COOKIES

A) TECHNICALLY NECESSARY COOKIES

B) TECHNICALLY NOT NECESSARY COOKIES

CONTACT OUR COMPANY

PROCESSING AND DISCLOSURE OF PERSONAL DATA FOR CONTRACTUAL PURPOSES

PROCESSING AND DISCLOSURE OF PERSONAL DATA IN THE ONLINE ORDERING SYSTEM

REGISTRATION/ PASSWORD PROTECTED AREA OF THE WEBSITE / CUSTOMER ACCOUNT

APPLICANT PROCESS

E-MAIL MARKETING

EXISTING CUSTOMER ADVERTISING

USE OF ZENLOOP FOR SENDING FEEDBACK REQUESTS

USE OF MAILJET TO SEND PRODUCT-RELATED FEEDBACK REQUESTS

NEWSLETTER VIA "WHATSAPP

COMMENT FUNCTION/GUESTBOOK ON THE WEBSITE

NEWSLETTER

E-MAIL MARKETING SERVICE "MAILCHIMP"

EMARSYS" E-MAIL MARKETING SERVICE

PAYMENT SERVICE PROVIDER (PSP)/ PAYMENT SERVICE PROVIDER

PAYPAL

AT ONCE BY KLARNA

KLARNA

PAYMENT BY STRIPE

EPS TRANSFER

DISCLOSURE OF PERSONAL DATA FOR LAW ENFORCEMENT/ADDRESS TRACING/COLLECTION PURPOSES

HOSTING

INTEGRATION OF THIRD PARTY CONTENT

GOOGLE RECAPTCHA

GOOGLE AJAX SEARCH API

GOOGLE WEB FONTS

GOOGLE TAG MANAGER

YOUTUBE VIDEOS

VIMEO

SERVICES FOR STATISTICAL, ANALYTICAL AND MARKETING PURPOSES

GOOGLE ANALYTICS

HOTJAR

USAGE-BASED ONLINE ADVERTISING

FACEBOOK CUSTOM AUDIENCES

FACEBOOK ANALYTICS

GOOGLE ADWORDS CONVERSION

GOOGLE REMARKETING

BING ADS

PRODUCTS

HELP

LEGAL