Data transfer and recipients

• we have explicitly indicated this in the description of the respective data processing,
• if you have given your express consent to this in accordance with Art. 6 Para. 1 S. 1 lit. a GDPR, 
• the disclosure is necessary for the assertion, exercise or defense of legal claims pursuant to Art. 6 (1) p. 1 lit. f GDPR and there is no reason to assume that you have an overriding interest worthy of protection in the non-disclosure of your data, 
• in the event that a legal obligation exists for the disclosure pursuant to Art. 6 (1) sentence 1 lit. c GDPR, and as far as this is necessary for the processing of contractual relationships with you according to Art. 6 para. 1 p. 1 lit. b GDPR.
  
  

Access to and storage of information in terminal equipment

By using our website, information (e.g. IP address) may be accessed or stored (e.g. cookies) in your terminal equipment. This access or storage may involve further processing of personal data within the meaning of the GDPR. 

In cases where such access to information or such storage of information is absolutely necessary for the technically error-free provision of our services, this is done on the basis of Section 25 (1) Sentence 1, (2) No. 2 TTDSG.

In cases where such a process serves other purposes (e.g. the needs-based design of our website), it will only be carried out on the basis of Section 25 (1) TTDSG with your consent in accordance with Article 6 (1) a GDPR. The consent can be revoked at any time for the future. The requirements of the GDPR and the German Federal Data Protection Act (BDSG) apply to the processing of your personal data.

For more information on the processing of your personal data and the relevant legal bases in this context, please refer to the following sections on the specific processing activities on our website.

Webhosting

This website is hosted by an external service provider (hoster). The hosting of this website takes place in Germany, Hamburg. Personal data collected on this website is stored on the hoster's servers. This may include IP addresses, contact requests, meta and communication data, website accesses and other data generated via a website.

We collect the listed data in order to be able to guarantee a smooth connection setup of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary to provide you with the website. The legal basis for the processing of the data is our legitimate interest in the correct presentation and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

We have concluded an order processing contract with the provider in accordance with the requirements of Art. 28 GDPR, in which we oblige the provider to protect our customers' data and not to pass it on to third parties.

Server-Logfiles

When you call up our website, it is technically necessary for data to be transmitted to our web server via your Internet browser. The following data is recorded during an ongoing connection for communication between your internet browser and our web server:

• Date and time of request
• Name of requested file
• Page from which the file was requested
• Access status
• Used web browser and operating system
• (Full) IP address of the requesting computer
• Amount of data transmitted

We collect the listed data in order to be able to guarantee a smooth connection setup of the website and a technically error-free provision of our services. The processing of this data is absolutely necessary to provide you with the website. The log files are used to evaluate system security and stability as well as for administrative purposes. The legal basis for the processing of the data is our legitimate interest in the protection and functionality of our website in accordance with Art. 6 para. 1 lit. f GDPR.

For reasons of technical security, in particular to defend against attempted attacks on our web server, we store this data for a short period of time. After 28 days at the latest, the data is anonymized by shortening the IP address at domain level, so that it is no longer possible to establish a link to the individual user.

In addition, the data is processed anonymously for statistical purposes, if necessary. This data is never stored together with other personal data of the user, compared with other data or passed on to third parties.

Scope of the processing of your personal data for the individual processing purposes

In the following, we inform you in detail about the processing of your personal data for the various processing purposes.

Your personal data will be deleted when it is no longer needed for processing for the respective processing purpose, unless we are allowed to continue processing the data for another processing purpose within the scope of legal requirements and in accordance with the information provided in this privacy policy.

1. Use of our website for information purposes

If you visit our website without transmitting any information to us, we only process the personal data that your browser transmits to our server. The following data is technically necessary to display our Internet presence to you and to ensure stability and security:

• the page you are visiting 
• date and time of the request 
• data volume transferred 
• source or reference from where you reached the page 
• the browser you use 
• operating system you use 
• your IP address

Your personal data is processed on the basis of Article 6 (1) (f) GDPR to protect our legitimate interest in maintaining the proper operation of our website.

Your personal data will be deleted after 6 months, unless they are further required for the assertion of rights or the enforcement of claims due to measures against the proper operation of our website. In this case, the deletion will take place immediately after the conclusion of the corresponding procedure.

2. Inquiry processing 

If you contact us with an inquiry or a request, we process the personal data and information/documents you provide. Regardless of the way you send us your inquiry or request, these may be:

• date and time of contact 
• name data 
• contact details 
• request/concern data 
• information/documents submitted

Depending on the content of your inquiry or request, the processing of your personal data and the transmitted information/documents is based on your consent pursuant to Article 6 (1) (a) GDPR to respond to your inquiry or on Article 6 (1) (b) GDPR to perform pre-contractual measures or on Article 6 (1) (b) GDPR to fulfill a contract to which you are a party or on Article 6 (1) (f) GDPR to protect our legitimate interest in responding to your inquiry or request. 1 letter b) GDPR for the performance of a contract to which you are a party or on the basis of Article 6 (1) (f) GDPR to protect our legitimate interest in responding to inquiries/concerns and in taking other measures in connection with the processing of inquiries/concerns.

Insofar as we provide a contact form and you contact us via this contact form, you grant consent with the following content by sending your message, about which you will be informed separately in the contact form:

"I consent to the processing of my e-mail address and other personal data provided by me for the purpose of responding to my message. I can revoke this consent at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation."

You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, it is sufficient to send a corresponding message to the person responsible, whose contact details you can find in the information on the person responsible. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.

Insofar as this is necessary for the processing of your inquiry/your request, we transmit your personal data to third parties within the framework of the legal requirements. In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the minimum necessary.

Your personal data will be deleted when your inquiry/concern has been resolved, unless we are allowed to continue processing the data for another processing purpose within the scope of legal requirements and in accordance with the information in this privacy policy.

3. Fulfillment of contracts 

If you provide us with personal data for the purpose of concluding a contract or in connection with the creation of a customer account, we process the data you provide for the purpose of processing the contract. This is your customer data (e.g. your name and address) and the contract data (e.g. details of the products covered by the contract and payment and delivery information).

The processing of your personal data is based on Article 6 (1) (b) GDPR for the performance of a contract to which you are a party.

Insofar as this is necessary for the fulfillment of the contract with you, we transmit your personal data to third parties within the framework of the legal requirements. This transfer is made to the service providers involved in the processing of the contract. These are the providers of the processing tools we use. These are furthermore the companies commissioned with the transport. And, these are the payment service providers entrusted with the payment matters.

If you use the payment service provider PayPal for the processing of payment transactions, we expressly point out that the PayPal privacy policy applies to all PayPal transactions: https://www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_DE 

In cases where your personal data is transferred to third parties, the scope of the transferred data is limited to the minimum necessary.

Your personal data will be deleted after the expiry of the retention periods of 6 or 10 years under tax and commercial law, unless we are allowed to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy. 

4. Newsletter advertising

If you register for our newsletter, we will process the e-mail address you provide - and if you also provide other personal data - in order to send you information about our offers by e-mail. In this respect, only the specification of your e-mail address is obligatory. If you voluntarily provide additional personal data, we may process this data in order to address you personally in the newsletter.

When you sign up for our newsletter, you give consent with the following content: "I agree to be informed by e-mail about interesting offers and therefore consent to the processing of my e-mail address and the other personal data provided by me for the purpose of sending the newsletter. I can revoke this consent at any time and without giving reasons with effect for the future. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation."

The registration for our newsletter takes place in the so-called double opt-in process. This means: After registration, you will first receive an e-mail with a message about the registration to the newsletter and a request for confirmation of the registration. Your confirmation of registration is necessary to document the required consent to send the newsletter and to be able to recognize registrations to third-party e-mail addresses. In connection with the registrations for the newsletter and the confirmations, the IP address as well as the date and time are logged in order to be able to prove the granting of consent in accordance with the legal requirements, if necessary.

The processing of your personal data is based on your consent in this regard pursuant to Article 6 (1) (a) GDPR. 

You can revoke your consent at any time and without giving reasons with effect for the future. For this purpose, it is sufficient to send a message to the person responsible, whose contact details you can find in the information on the person responsible. The lawfulness of the processing carried out until the revocation remains unaffected in the event of revocation.

If you revoke your consent or unsubscribe from our newsletter, your e-mail address and any other data transmitted will be deleted immediately, unless we are allowed to continue processing the data for another processing purpose within the scope of the legal requirements and in accordance with the information in this privacy policy.

5. Use of cookies  

We use so-called cookies on our website. These are small files that are stored on your device and through which certain information is transmitted to us. The use of cookies serves to enable you to use certain functions and to make our offer more user-friendly overall.

Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your device even after the end of the browser session, i.e. after you close your browser, and enable us or our partner companies (third-party cookies) to recognize you the next time you visit our website (so-called persistent cookies).

External links

Social networks are integrated on our website as a link to the corresponding services. After clicking on the embedded text/image link, you will be redirected to the page of the respective provider. User information will only be transferred to the respective provider after the forwarding. For information on the handling of your personal data when using these websites, please refer to the respective data protection provisions of the providers you use. 

1. Social media appearances

In the following, you will find information on the handling of your data that is collected through your use of our social media presences on social networks and platforms. Your data will be processed in accordance with the statutory regulations. 

1.1 Social media provider 

1.1.1 Responsible entity 

If your personal data is processed by a provider listed below, this provider is the data controller within the meaning of the GDPR. For the assertion of your data subject rights, we point out that these can be asserted most effectively with the respective providers. Only they have access to the data collected from you. Should you still require assistance, please feel free to contact us at any time. We have online presences on the social media platforms of the following providers: 

• Twitter International Company, One Cumberland Place, Fenian Street, Dublin 2, D02 AX07 Ireland
• YouTube, Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland 
• LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland 

1.1.2 Data protection of 

Instructions on how to contact the data protection officer of the other social media providers can be found here: 

• Twitter Inc.: https://twitter.ethicspointvp.com/custom/twitter/forms/data/form_data.asp 
• LinkedIn Ireland Unlimited Company: https://www.linkedin.com/help/linkedin/ask/TSO-DPO
• YouTube: To contact YouTube's Privacy Officer, please contact: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Irland. 

2. General details on social media platforms 

2.1 Responsible entity 

The responsible party for data processing within the meaning of the GDPR is the entity named at the beginning of this privacy policy, insofar as data transmitted by you via one of the social media platforms is processed by us ourselves. 

2.2 Our data privacy officer

If you have any concerns about data processing carried out by us as the data controller, you can contact our data protection officer using the contact details provided at the beginning of this privacy policy.

3. General data processing on the social media platforms 

3.1 Data processing for market research and advertising 

In general, personal data is processed on the company website for market research and advertising purposes. For this purpose, a cookie is set in your browser, which enables the respective provider to recognize you when you visit a website. By means of the collected data, usage profiles can be created. These are used to display advertisements within and outside the platform that presumably correspond to your interests. Furthermore, data can also be stored in the usage profiles regardless of the devices you use. This is regularly the case if you are a member of the respective platforms and logged in to them. 

3.2 Data processing when contacting 

We ourselves collect personal data when you contact us, for example, via a contact form or a messenger service such as Meta/Facebook Messenger. Which data is collected depends on the information you provide and the contact data you have provided or released. These are stored for the purpose of processing the request and for the case of follow-up questions with us. Under no circumstances will we pass on the data to third parties without your consent. The legal basis for processing the data is our legitimate interest in responding to your request pursuant to Art. 6 (1) lit. f GDPR and, if applicable, Art. 6 (1) lit. b GDPR if your request is aimed at concluding a contract. Your data will be deleted after final processing of your request, provided that this does not conflict with any statutory retention obligations. We assume that processing is complete if it can be inferred from the circumstances that the matter in question has been conclusively clarified. 

3.3 Data processing for contract handling

If your contact via a social network or other platform aims at the conclusion of a contract for the delivery of goods or the provision of services with us, we process your data for the performance of the contract or for the implementation of pre-contractual measures or for the provision of the requested services. The legal basis for the processing of your data in this case is Art. 6 para. 1 lit. b GDPR. Your data will be deleted if it is no longer required for the performance of the contract or if it is determined that the pre-contractual measures do not lead to the conclusion of a contract corresponding to the purpose of the contact. Please note, however, that it may be necessary to store personal data of our contractual partners even after the conclusion of the contract in order to comply with contractual or legal obligations. 

3.4 Data processing on the basis of consent

If you are asked by the respective providers of the platforms for consent to processing for a specific purpose, the legal basis of the processing is Art. 6 (1) lit. a., Art. 7 GDPR. Consent given can be revoked at any time with effect for the future. 

4. Data sharing and recipients

When visiting and using the platforms listed above, a transfer of personal data to the USA or other third countries outside the EU may occur, which is why further protection mechanisms are required in these cases to ensure the level of data protection of the GDPR. For more information on whether and which suitable guarantees the providers can demonstrate for this, please see the list below. 

We have no influence on the processing of your personal data by the provider and how it is handled. Likewise, we do not have any information on this. For more information, please check the privacy policy of the respective provider and, if necessary, use the opt-out / personalization options regarding data processing by the provider: 

Twitter 

• Privacy Policy: https://twitter.com/de/privacy 
• Opt-out: https://twitter.com/personalization 
• According to its privacy policy, Twitter uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the USA or other third countries outside the EU: https://twitter.com/de/privacy 

YouTube/Google 

• Privacy Policy: https://policies.google.com/privacy?hl=de&gl=de 
• Opt-out: https://adssettings.google.com/authenticated 
• According to its privacy policy, Google uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the USA or other third countries outside the EU: https://policies.google.com/privacy?hl=de&gl=de 

LinkedIn 

• Privacy Policy: https://www.linkedin.com/legal/privacy-policy 
• Opt-Out: https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out 
• According to its privacy policy, LinkedIn uses standard data protection clauses to ensure an adequate level of data protection in accordance with the requirements of the GDPR for data transfers to the USA or other third countries outside the EU: https://www.linkedin.com/legal/privacy-policy und https://www.linkedin.com/help/linkedin/answer/62533?trk=microsites-frontend_legal_privacy-policy&lang=de

Storage duration of your personal data / criteria for determining this duration

Your personal data will be deleted when it is no longer needed for processing for the respective processing purpose, unless we are allowed to continue processing the data for another processing purpose within the scope of legal requirements and in accordance with the information provided in this privacy policy. Information on the duration for which your personal data is stored or the criteria for determining this duration can be found in the information on the processing of your personal data for the individual processing purposes in this privacy policy.

Your rights

The processing of personal data is permitted if the processing is necessary for the purposes of the legitimate interests of the responsible party or of a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child, article 6 ( 1) f) gdpr. 

You, as the data subject, have the right to object at any time, on grounds relating to your particular situation, to the processing of personal data concerning you which is carried out on the basis of article. 6 ( 1) f) gdpr; this also applies to profiling based on these provisions. 

If you exercise your right to object, we will no longer process your personal data unless we can demonstrate compelling legitimate grounds for the processing which override your interests, rights and freedoms as a data subject, or the processing is for the purpose of asserting, exercising or defending legal claims.

If we process your personal data for the purpose of direct marketing, you as the data subject have the right to object at any time to the processing of your personal data for the purpose of such marketing; this also applies to profiling insofar as it is related to such direct marketing.

If you, as the data subject, object to processing for the purposes of direct marketing, your personal data will no longer be processed for these purposes.

General information on providing your personal data

If you wish to conclude a contract with us or contact us with an inquiry, the provision of your personal data is necessary for the conclusion of a contract or the processing of your inquiry. You are not obliged to provide your personal data. However, failure to provide your personal data would result in us not entering into a contract with you or processing your request.

Changes to our privacy policy

We reserve the right to adapt or update this data protection declaration if necessary in compliance with the applicable data protection regulations. This allows us to amend it to meet current legal requirements and take account of changes to our services, e.g. when introducing new services. The most current version applies to your visit.

Last update of this privacy policy: June 10, 2022