1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our website and thank you for your interest. In the following, we inform you about the handling of your personal data when using our website. Personal data includes all data that can personally identify you.

1.2 The controller responsible for data processing on this website in accordance with the General Data Protection Regulation (GDPR) is FROMM German Oil & Lubricant Technology JSC, Lot 34, Map No. 47, Phuoc Khanh, Nhon Trach, Dong Nai, Vietnam.
Vietnam Office: 30L, Tinh Lo 768B, KP3, Phuong Trang Dai, Bien Hoa City, Dong Nai. Phone: +84 78780 3388.
Germany Office: Weissenburgerstrasse 18, 76887 Bad Bergzabern. Phone: +49 (0) 6343 951 1400, Email: info@frommoil.com.
The controller for processing personal data is the natural or legal person who alone or jointly with others determines the purposes and means of processing personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries sent to the controller). You can recognize an encrypted connection by the character sequence „https://“ and the lock symbol in your browser’s address bar.

2) Data Collection When Visiting Our Website

When using our website for informational purposes only, meaning you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called „server log files“). When you visit our website, we collect the following data, which is technically necessary to display the website:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/referring website from which you accessed our site
• Browser used
• Operating system used
• IP address used (if applicable: anonymized)

 

Processing is carried out in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in improving the stability and functionality of our website. The data is neither shared nor used for other purposes. However, we reserve the right to review server log files retrospectively if there are concrete indications of unlawful use.

3) Cookies

To make our website more attractive and enable certain functions, we use cookies on various pages. These are small text files stored on your device. Some of the cookies we use are deleted after your browser session ends (so-called session cookies). Other cookies remain on your device and allow us to recognize your browser on your next visit (so-called persistent cookies). When cookies are set, they collect and process specific user information such as browser and location data as well as IP addresses. Persistent cookies are automatically deleted after a specified period, which varies depending on the cookie. You can find the storage duration of each cookie in your browser’s cookie settings.

Some cookies help simplify the ordering process by storing settings (e.g., remembering the contents of a virtual shopping cart for a later visit). If cookies process personal data, processing is carried out either under Art. 6(1)(b) GDPR to fulfill a contract, under Art. 6(1)(a) GDPR if consent has been given, or under Art. 6(1)(f) GDPR to protect our legitimate interests in the optimal functionality of the website and a user-friendly browsing experience.

Please note that you can configure your browser to inform you about the setting of cookies, allow cookies on a case-by-case basis, exclude cookies for certain cases or in general, or automatically delete cookies when closing the browser. Each browser differs in how it manages cookie settings. The help menu of each browser provides information on how to change your cookie settings. Below are links to the respective instructions for common browsers:

Internet Explorer
Firefox
Chrome
Safari
Opera

Please note that disabling cookies may limit the functionality of our website.

4) Contacting Us

4.1 When you contact us (e.g., via the contact form or email), personal data is collected. The specific data collected when using a contact form can be seen from the respective form. This data is stored and used exclusively for the purpose of responding to your inquiry or for contacting you and handling the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry in accordance with Art. 6(1)(f) GDPR. If your inquiry is aimed at concluding a contract, the additional legal basis for processing is Art. 6(1)(b) GDPR. Your data will be deleted once your inquiry has been fully processed. This is the case when it can be inferred from the circumstances that the matter has been conclusively resolved and provided that there are no statutory retention obligations to the contrary.

4.2 WhatsApp Business

We offer visitors to our website the option to contact us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the „Business Version“ of WhatsApp.

If you contact us via WhatsApp in connection with a specific business transaction (e.g., an order placed), we will store and use the mobile phone number you use on WhatsApp and—if provided—your first and last name in accordance with Art. 6(1)(b) GDPR to process and respond to your inquiry. Based on the same legal basis, we may ask you to provide further information (such as order number, customer number, address, or email address) via WhatsApp in order to associate your inquiry with a specific transaction.

If you use our WhatsApp contact option for general inquiries (e.g., about our service offerings, availability, or our website), we store and use the mobile phone number you use on WhatsApp and—if provided—your first and last name in accordance with Art. 6(1)(f) GDPR based on our legitimate interest in efficiently and promptly providing the requested information.

Your data will only be used to respond to your inquiry via WhatsApp. It will not be shared with third parties.

Please note that WhatsApp Business gains access to the address book of the mobile device we use for this service and automatically transfers stored phone numbers to a server of its parent company, Facebook Inc., in the USA. To operate our WhatsApp Business account, we use a mobile device that only stores WhatsApp contact details of users who have also contacted us via WhatsApp.

This ensures that every person whose WhatsApp contact details are stored in our address book has already consented to the transmission of their WhatsApp phone number from the address books of their chat contacts by accepting WhatsApp’s terms of use when they first used the app on their device, in accordance with Art. 6(1)(a) GDPR. The transfer of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For more details about the purpose and scope of data collection, further processing and use of data by WhatsApp, and your related rights and privacy settings, please refer to WhatsApp’s Privacy Policy: WhatsApp Privacy Policy.

5) Data Processing for Customer Account Registration and Contract Execution

In accordance with Art. 6(1)(b) GDPR, personal data is also collected and processed when you provide it to us for the execution of a contract or the creation of a customer account. The specific data collected is evident from the respective input forms. You may delete your customer account at any time by sending a request to the contact address mentioned above. We store and use the data you provide for contract execution.

After full completion of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial retention periods and deleted after these periods expire, unless you have expressly consented to further use of your data or we are legally permitted to continue using it.

6) Use of Single Sign-On Authentication

6.1 Facebook Connect

On our website, you can create a customer account or register using the social plugin „Facebook Connect“ from the Facebook social network, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“), as part of the so-called Single Sign-On (SSO) technology, provided you have a Facebook profile. The „Facebook Connect“ social plugins on our website can be recognized by the blue button featuring the Facebook logo and the text „Log in with Facebook“ or „Sign in with Facebook.“

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection with Facebook’s servers. The content of the plugin is transmitted directly from Facebook to your browser and integrated into the page. This integration enables Facebook to receive the information that your browser has accessed the respective page of our website, even if you do not have a Facebook profile or are not logged into Facebook at that time. This information (including your IP address) is transmitted directly from your browser to a Facebook Inc. server in the USA and stored there. These data processing activities are carried out in accordance with Art. 6(1)(f) GDPR based on Facebook’s legitimate interest in displaying personalized advertisements based on browsing behavior.

By using the „Facebook Connect“ button on our website, you also have the option to log in or register using your Facebook user credentials. Only if you have given your explicit consent before the registration process, based on a corresponding notice about the exchange of data with Facebook, in accordance with Art. 6(1)(a) GDPR, will we receive general and publicly accessible information from your Facebook profile. The information we receive depends on your personal privacy settings on Facebook and may include your user ID, name, profile picture, age, and gender.

Please note that after changes to Facebook’s privacy and usage policies, granting consent may also lead to the transfer of your profile pictures, the user IDs of your friends, and your friend list, provided that this information has been marked as „public“ in your privacy settings on Facebook. The data transmitted by Facebook will be stored and processed by us to create a user account with the necessary information (title, first name, last name, address, country, email address, date of birth) if you have shared this data with Facebook. Conversely, based on your consent, data (e.g., information about your browsing or purchasing behavior) may be transferred from us to your Facebook profile.

The consent given can be revoked at any time by sending a message to the responsible contact person mentioned at the beginning of this privacy policy.

For details on the purpose and scope of data collection, further processing, and the use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook’s privacy policy: Facebook Privacy Policy.

If you do not want Facebook to directly associate the data collected through our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also completely prevent Facebook plugins from loading using browser add-ons, such as „Adblock Plus“ (https://adblockplus.org/).

6.2 Google Sign-In

On our website, you can create a customer account or register using the „Google Sign-In“ service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“), as part of the Single Sign-On (SSO) technology, provided you have a Google profile. You can recognize the Google login function on our website by the buttons labeled „Sign in with Google“ or „Login with Google Account.“

When you visit a page on our website that contains a Google login function, your browser establishes a direct connection with Google’s servers. The content of the login button is transmitted directly from Google to your browser and integrated into the page. This integration enables Google to receive the information that your browser has accessed the respective page of our website, even if you do not have a Google profile or are not logged into Google at that time. This information (including your IP address) is transmitted directly from your browser to a Google server and stored there. This may also involve transmission to Google LLC servers in the USA. These data processing activities are carried out in accordance with Art. 6(1)(f) GDPR based on Google’s legitimate interest in displaying personalized advertisements based on browsing behavior.

By using the Google login button on our website, you also have the option to log in or register using your Google user credentials. Only if you have given your explicit consent before the registration process, based on a corresponding notice about the exchange of data with Google, in accordance with Art. 6(1)(a) GDPR, will we receive general and publicly accessible information from your Google profile. The information we receive depends on your personal privacy settings on Google and may include your user ID, name, profile picture, age, and gender.

Please note that after changes to Google’s privacy and usage policies, granting consent may also lead to the transfer of your profile pictures, the user IDs of your friends, and your friend list, provided that this information has been marked as „public“ in your privacy settings on Google. The data transmitted by Google will be stored and processed by us to create a user account with the necessary information (title, first name, last name, address, country, email address, date of birth) if you have shared this data with Google. Conversely, based on your consent, data (e.g., information about your browsing or purchasing behavior) may be transferred from us to your Google profile.

The consent given can be revoked at any time by sending a message to the responsible contact person mentioned at the beginning of this privacy policy.

For details on the purpose and scope of data collection, further processing, and the use of data by Google, as well as your related rights and privacy settings, please refer to Google’s privacy policy: Google Privacy Policy.

The terms of use for „Google Sign-In“ can be found here: Google Terms of Use.

If you do not want Google to directly associate the data collected through our website with your Google profile, you must log out of Google before visiting our website. You can also completely prevent Google plugins from loading using browser add-ons, such as „Adblock Plus“ (https://adblockplus.org/).

7) Comment Function

As part of the comment function on this website, in addition to your comment, details of the time of the comment’s creation and the username you have chosen will be stored and published on the website. Additionally, your IP address will be recorded and stored. This IP address storage is done for security reasons in case a comment violates third-party rights or contains unlawful content. We need your email address to contact you if a third party objects to your published content as being unlawful. The legal basis for storing your data is Art. 6(1)(b) and (f) GDPR.

We reserve the right to delete comments if they are deemed unlawful by third parties.

8) Use of Customer Data for Direct Marketing

8.1 Subscription to Our Email Newsletter

If you sign up for our email newsletter, we will send you regular information about our offers. The only mandatory information required to send the newsletter is your email address. Providing additional data is voluntary and is used to address you personally.

We use the so-called double opt-in procedure for sending newsletters. This means that we will only send you an email newsletter if you have explicitly confirmed that you consent to receiving the newsletter. We will then send you a confirmation email asking you to confirm your subscription by clicking on a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR. When you register for the newsletter, we store the IP address registered by your internet service provider (ISP) as well as the date and time of registration to track any possible misuse of your email address at a later time.

The data collected when signing up for the newsletter is used exclusively for promotional communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by notifying the responsible party mentioned at the beginning of this privacy policy. After unsubscribing, your email address will be deleted from our mailing list immediately, unless you have expressly consented to further use of your data or we reserve the right to use it beyond this, which is legally permitted and about which we inform you in this privacy policy.

8.2 Sending the Email Newsletter to Existing Customers

If you have provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our range via email. In accordance with § 7(3) UWG (German Unfair Competition Act), we do not need to obtain separate consent from you for this purpose.

Data processing is carried out solely on the basis of our legitimate interest in personalized direct marketing in accordance with Art. 6(1)(f) GDPR. If you initially objected to the use of your email address for this purpose, we will not send you any emails.

You have the right to object to the use of your email address for this advertising purpose at any time with future effect by notifying the responsible party mentioned at the beginning of this privacy policy. The only costs incurred for this are those of your standard communication rates. Once we receive your objection, the use of your email address for advertising purposes will immediately cease.

8.3 Newsletter Delivery via MailChimp

Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we transmit the data you provided when signing up for the newsletter. This transfer is carried out in accordance with Art. 6(1)(f) GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system.

Please note that your data is typically transferred to a MailChimp server in the USA and stored there.

MailChimp uses this information to send and statistically evaluate the newsletters on our behalf. For analysis purposes, the emails sent contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter has been opened and which links were clicked. Using the web beacons, MailChimp automatically generates general, non-personalized statistics on user behavior in response to newsletter campaigns.

Based on our legitimate interest in statistical analysis to optimize our marketing communications and better tailor our messages to recipient interests, MailChimp also collects and analyzes recipient-specific data (such as email address, time of access, IP address, browser type, and operating system) in accordance with Art. 6(1)(f) GDPR. This data allows MailChimp to generate automated statistics indicating whether a particular recipient has opened a newsletter.

If you want to disable data analysis for statistical purposes, you must unsubscribe from the newsletter.

MailChimp may also use this data for its own legitimate interests in tailoring and optimizing its services, as well as for market research purposes, such as determining where recipients are located. However, MailChimp does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties.

To protect your data in the USA, we have entered into a data processing agreement („Data Processing Agreement“) with MailChimp based on the standard contractual clauses of the European Commission, enabling the transfer of your personal data to MailChimp. This data processing agreement can be reviewed at the following link: MailChimp Data Processing Agreement.

MailChimp’s privacy policy can be found here: MailChimp Privacy Policy.

8.4 WhatsApp Newsletter

If you sign up for our WhatsApp newsletter, we will send you regular updates about our offers via WhatsApp. The only mandatory information required to send the newsletter is your mobile phone number.

To subscribe, you must save our mobile phone number in your contacts and send us the message „Start“ via WhatsApp. By sending this WhatsApp message, you consent to the use of your personal data in accordance with Art. 6(1)(a) GDPR for the purpose of sending the newsletter. We will then add you to our newsletter list.

The data collected when signing up for the WhatsApp newsletter is used exclusively for promotional communication. You can unsubscribe at any time by sending us the message „Stop“ via WhatsApp. After unsubscribing, your mobile phone number will be deleted from our newsletter list immediately, unless you have expressly consented to further use of your data or we reserve the right to use it beyond this, which is legally permitted and about which we inform you in this privacy policy.

Please note that WhatsApp has access to the address book of the mobile device used for sending newsletters and automatically transfers stored phone numbers to a Facebook server in the USA.

For this reason, we use a mobile device that only stores WhatsApp contact details of users who have subscribed to our WhatsApp newsletter. This ensures that every person whose WhatsApp contact details are stored has already consented to the transmission of their WhatsApp phone number from their chat contacts‘ address books by accepting WhatsApp’s terms of use upon first use of the app, in accordance with Art. 6(1)(a) GDPR. The transmission of data from users who do not use WhatsApp and/or have not contacted us via WhatsApp is therefore excluded.

For details on the purpose and scope of data collection, further processing, and the use of data by WhatsApp, as well as your related rights and privacy settings, please refer to WhatsApp’s privacy policy: WhatsApp Privacy Policy.

8.5 Advertising by Postal Mail

Based on our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name, postal address, and—if provided during the contractual relationship—your title, academic degree, year of birth, and profession, industry, or business designation in accordance with Art. 6(1)(f) GDPR. This data may be used to send interesting offers and information about our products via postal mail.

You can object to the storage and use of your data for this purpose at any time by notifying the responsible party.

8.6 CleverPush

You can subscribe to receive our push notifications. To send our push notifications, we use the delivery service „CleverPush,“ operated by CleverPush UG (haftungsbeschränkt), Tondernstr. 1, 22049 Hamburg, Germany („CleverPush“). Through our push notifications, you will regularly receive information about our offered products.

To subscribe, you must confirm your browser’s request to receive notifications. This process is documented and stored by CleverPush, including the storage of the registration time, your browser ID, and your device ID. This data collection is necessary to track any misuse and serves as a legal safeguard. To display push notifications, CleverPush collects and processes your browser ID and, in the case of mobile access, your device ID on our behalf.

By subscribing to our push notifications, you agree to receive them. The legal basis for processing your data after signing up for push notifications is your consent, in accordance with Art. 6(1)(a) GDPR.

CleverPush also statistically evaluates our push notifications. It can determine whether and when push notifications are displayed and whether you clicked on them.

You can revoke your consent to store and use your personal data for receiving our push notifications and statistical evaluation at any time with effect for the future. To withdraw your consent, you can change the relevant settings in your browser to stop receiving push notifications. If you are using our push notifications on a Windows desktop PC, you can also disable them by right-clicking on the push notification and adjusting the settings accordingly.

Your data will be deleted as soon as it is no longer needed for the purpose for which it was collected. Your data will be stored as long as your subscription to our push notifications remains active. The unsubscribe process is detailed at the following link: CleverPush FAQ.

WonderPush

You can subscribe to receive our push notifications. To send our push notifications, we use the delivery service „WonderPush,“ operated by WonderPush, 19 avenue d’Italie, 75013 Paris, France („WonderPush“). Through our push notifications, you will regularly receive information about our offered products.

To subscribe, you must confirm your browser’s request to receive notifications. This process is documented and stored by WonderPush, including the storage of the registration time, your browser ID, and your device ID. This data collection is necessary to track any misuse and serves as a legal safeguard. To display push notifications, WonderPush collects and processes your browser ID and, in the case of mobile access, your device ID on our behalf.

By subscribing to our push notifications, you agree to receive them. The legal basis for processing your data after signing up for push notifications is your consent, in accordance with Art. 6(1)(a) GDPR.

WonderPush also statistically evaluates our push notifications. It can determine whether and when push notifications are displayed and whether you clicked on them.

You can revoke your consent to store and use your personal data for receiving our push notifications and statistical evaluation at any time with effect for the future. To withdraw your consent, you can change the relevant settings in your browser to stop receiving push notifications. If you are using our push notifications on a Windows desktop PC, you can also disable them by right-clicking on the push notification and adjusting the settings accordingly.

Your data will be deleted as soon as it is no longer needed for the purpose for which it was collected. Your data will be stored as long as your subscription to our push notifications remains active. The unsubscribe process is detailed at the following link: WonderPush Privacy Policy.

8.7 Product Availability Notification via Email

If we offer the option in our online shop to notify you via email when selected temporarily unavailable products become available again, you can sign up for our email product availability notification service.

If you sign up, we will send you a one-time email notification about the availability of the selected item. The only mandatory information required for this notification is your email address. Additional data is voluntary and may be used to address you personally.

We use the double opt-in procedure for sending these notifications, meaning we will only send a notification if you have explicitly confirmed that you wish to receive such an email. We will send you a confirmation email asking you to confirm your subscription by clicking a corresponding link.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Art. 6(1)(a) GDPR.

When registering for our email availability notification service, we store the IP address provided by your internet service provider (ISP), as well as the date and time of registration, to track any possible misuse of your email address. The data collected when signing up for the availability notification service is used exclusively to inform you about the availability of a specific product in our online shop.

You can unsubscribe from this service at any time by notifying the responsible contact person mentioned at the beginning of this privacy policy. After unsubscribing, your email address will be deleted from our product availability notification list immediately, unless you have expressly consented to further use of your data or we reserve the right to use it beyond this, which is legally permitted and about which we inform you in this privacy policy.

9) Data Processing for Order Handling

9.1 Cooperation with Service Providers for Order Processing

To process your order, we work with the service providers listed below, who support us wholly or partially in fulfilling contracts. Certain personal data is transferred to these service providers as required under the following conditions.

The personal data collected by us will be shared with the shipping company responsible for delivering the goods to the extent necessary for delivery. Your payment details will be shared with the financial institution handling the payment process, provided this is necessary for payment processing. If we use third-party payment service providers, we will explicitly inform you about this below. The legal basis for sharing this data is Art. 6(1)(b) GDPR.

---

9.2 Transfer of Personal Data to Shipping Service Providers

• DHL
  If the goods are delivered by the shipping service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we will forward your email address to DHL before the delivery, based on your explicit consent given during the ordering process, in accordance with Art. 6(1)(a) GDPR. This is done to coordinate the delivery date or notify you about the shipment.

If you have not given your consent, we will only provide DHL with the recipient’s name and delivery address for the purpose of delivery, in accordance with Art. 6(1)(b) GDPR. The transfer of data is strictly limited to what is necessary for delivering the goods. In this case, advance coordination of the delivery date or shipment notification by DHL is not possible.

You can revoke your consent at any time with future effect by notifying the responsible party mentioned above or by contacting DHL directly.

• DPD
  If the goods are delivered by the shipping service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg, Germany), we will forward your email address and phone number to DPD before the delivery, based on your explicit consent given during the ordering process, in accordance with Art. 6(1)(a) GDPR. This is done to coordinate the delivery date or notify you about the shipment.

If you have not given your consent, we will only provide DPD with the recipient’s name and delivery address for the purpose of delivery, in accordance with Art. 6(1)(b) GDPR. The transfer of data is strictly limited to what is necessary for delivering the goods. In this case, advance coordination of the delivery date or shipment notification by DPD is not possible.

You can revoke your consent at any time with future effect by notifying the responsible party mentioned above or by contacting DPD directly.

• GLS
  If the goods are delivered by the shipping service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany), we will forward your email address to GLS before the delivery, based on your explicit consent given during the ordering process, in accordance with Art. 6(1)(a) GDPR. This is done to coordinate the delivery date or notify you about the shipment.

If you have not given your consent, we will only provide GLS with the recipient’s name and delivery address for the purpose of delivery, in accordance with Art. 6(1)(b) GDPR. The transfer of data is strictly limited to what is necessary for delivering the goods. In this case, advance coordination of the delivery date or shipment notification by GLS is not possible.

You can revoke your consent at any time with future effect by notifying the responsible party mentioned above or by contacting GLS directly.

• Hermes
  If the goods are delivered by the shipping service provider Hermes (Hermes Logistik Gruppe Deutschland GmbH, Essener Straße 89, 22419 Hamburg, Germany), we will forward your email address to Hermes before the delivery, based on your explicit consent given during the ordering process, in accordance with Art. 6(1)(a) GDPR. This is done to coordinate the delivery date or notify you about the shipment.

If you have not given your consent, we will only provide Hermes with the recipient’s name and delivery address for the purpose of delivery, in accordance with Art. 6(1)(b) GDPR. The transfer of data is strictly limited to what is necessary for delivering the goods. In this case, advance coordination of the delivery date or shipment notification by Hermes is not possible.

You can revoke your consent at any time with future effect by notifying the responsible party mentioned above or by contacting Hermes directly.

• UPS
  If the goods are delivered by the shipping service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany), we will forward your email address to UPS before the delivery, based on your explicit consent given during the ordering process, in accordance with Art. 6(1)(a) GDPR. This is done to coordinate the delivery date or notify you about the shipment.

If you have not given your consent, we will only provide UPS with the recipient’s name and delivery address for the purpose of delivery, in accordance with Art. 6(1)(b) GDPR. The transfer of data is strictly limited to what is necessary for delivering the goods. In this case, advance coordination of the delivery date or shipment notification by UPS is not possible.

You can revoke your consent at any time with future effect by notifying the responsible party mentioned above or by contacting UPS directly.

9.3 Use of Payment Service Providers (Payment Services)

• Klarna
  If you choose a payment service provided by Klarna, the payment processing will be handled by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter referred to as „Klarna“).

To enable the payment transaction, your personal data (first name, last name, street, house number, postal code, city, gender, email address, telephone number, and IP address), as well as order-related data (e.g., invoice amount, items, delivery method), will be transmitted to Klarna for identity and creditworthiness checks, provided you have expressly consented to this during the ordering process in accordance with Art. 6(1)(a) GDPR. The credit agencies to which your data may be transferred can be found here: Klarna Credit Agencies.

The creditworthiness check may include probability values (so-called score values). If score values are included in the credit check result, they are based on a scientifically recognized mathematical-statistical method. Address data, among other factors, is included in the score calculation. Klarna uses the obtained information about the statistical probability of payment default to make a balanced decision on establishing, executing, or terminating the contractual relationship.

You can revoke your consent at any time by sending a message to the data controller or Klarna. However, Klarna may still be entitled to process your personal data if necessary for contractual payment processing.

Your personal data will be handled in accordance with the applicable data protection regulations and Klarna’s privacy policies for customers residing in Germany (Klarna Privacy Policy Germany) or for those residing in Austria (Klarna Privacy Policy Austria).

• PayPal
  When paying via PayPal, credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account“ or „installment payment“ via PayPal, your payment data will be transmitted to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter „PayPal“) as part of the payment process. The data transfer is based on Art. 6(1)(b) GDPR and is strictly limited to what is necessary for payment processing.

PayPal reserves the right to conduct a credit check for payment methods such as credit card via PayPal, direct debit via PayPal, or—if offered—“purchase on account“ or „installment payment“ via PayPal. For this purpose, your payment data may be transferred to credit agencies based on PayPal’s legitimate interest in determining your ability to pay, in accordance with Art. 6(1)(f) GDPR. The result of the credit check concerning the statistical probability of non-payment is used by PayPal to decide whether to provide the respective payment method.

The credit check may include probability values (so-called score values). If score values are used in the credit check result, they are based on a scientifically recognized mathematical-statistical method. Address data, among other factors, is included in the score calculation.

For further data protection information, including the credit agencies PayPal collaborates with, please refer to PayPal’s Privacy Policy: PayPal Privacy Policy.

You can object to this data processing at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if necessary for contractual payment processing.

• SOFORT
  If you choose the payment method „SOFORT,“ the payment processing will be carried out by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter „SOFORT“), to whom we transmit the information provided during the ordering process, along with order-related data, in accordance with Art. 6(1)(b) GDPR.

SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with SOFORT and only to the extent necessary. Further information on SOFORT’s privacy policy can be found at: SOFORT Privacy Policy.

10) Contact for Review Reminders

Own Review Reminder (Not Sent via a Customer Review System)

We use your email address to send a one-time reminder to submit a review for your order within the review system we use, provided you have expressly consented to this during or after your order in accordance with Art. 6(1)(a) GDPR.

You can revoke your consent at any time by sending a message to the data controller.

Review Reminder via ShopVote

If you have given us your explicit consent in accordance with Art. 6(1)(a) GDPR during or after your order, we will transmit your email address to the review platform ShopVote, operated by Blickreif GmbH, Alter Messeplatz 2, 80339 Munich, Germany (www.shopvote.de), so that they can send you a review reminder via email.

You can revoke your consent at any time by sending a message to the data controller or directly to the review platform.

11) Use of Review and Certification Seals

ShopVote Graphics

To display our ShopVote seal and the reviews collected and/or aggregated through ShopVote, we have integrated ShopVote graphics on this website.

This serves to protect our overriding legitimate interests in optimally marketing our offerings, in accordance with Art. 6(1)(f) GDPR. The ShopVote graphics and associated services are provided by Blickreif GmbH, Alter Messeplatz 2, 80339 Munich, Germany.

When accessing the ShopVote graphics, the web server automatically stores a so-called server log file, which contains details such as your IP address, date and time of access, the amount of data transferred, and the source of the request (referrer). This log is used to document the request. These access data are not analyzed and are automatically deleted no later than seven days after your visit. No other personal data is collected or stored through the ShopVote graphics.

12) Use of Social Media: Social Plugins

Facebook Plugins with a 2-Click Solution

Our website uses social plugins („Plugins“) from the social network Facebook, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland („Facebook“).

To enhance the protection of your data when visiting our website, the plugins are initially deactivated and integrated into the page using a so-called „2-click“ solution. Deactivated plugins can be identified by their gray appearance. This integration ensures that when a page of our website containing such plugins is accessed, no connection is established with Facebook’s servers.

Only when you activate the plugins and thereby give your consent to data transmission in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection to Facebook’s servers. The content of the respective plugin is then transmitted directly to your browser and embedded into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence over the scope of the data collected by Facebook through the plugins. According to our knowledge, Facebook at least receives information about which of our websites you have accessed currently and previously.

By integrating the plugins, Facebook also receives information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not logged into Facebook. The collected information (including your IP address) is transmitted directly from your browser to a Facebook Inc. server in the USA and stored there. If you interact with the plugins, this information is also transmitted directly to a Facebook server and stored there. Additionally, the information is published on Facebook and displayed to your contacts.

You can revoke your consent at any time by clicking on the activated plugin again to deactivate it. However, the revocation does not affect data that has already been transmitted to Facebook.

For details on the purpose and scope of data collection, further processing, and use of data by Facebook, as well as your rights and privacy settings, please refer to Facebook’s privacy policy: Facebook Privacy Policy.

13) Use of Social Media: Videos

Use of YouTube Videos

This website uses the YouTube embedding function to display and play videos from „YouTube,“ which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“).

The extended data protection mode is used in this process, which, according to the provider, only initiates the storage of user information when the video(s) are played. When an embedded YouTube video is played, YouTube sets cookies to collect information about user behavior. According to YouTube, these cookies are used, among other things, to collect video statistics, improve user-friendliness, and prevent abusive behavior.

If you are logged into Google, your data will be directly associated with your account when you click on a video. If you do not want this association with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. This evaluation takes place particularly in accordance with Art. 6(1)(f) GDPR based on Google’s legitimate interest in displaying personalized advertising, conducting market research, and/or tailoring its website to meet user needs. You have the right to object to the creation of these user profiles, but you must contact YouTube to exercise this right.

In the course of using YouTube, personal data may also be transmitted to Google LLC servers in the USA.

Regardless of whether an embedded video is played, a connection to the Google network is established each time this website is accessed, which may trigger further data processing operations beyond our control.

For more information about YouTube’s privacy policy, please visit: Google Privacy Policy.

Where legally required, we have obtained your consent for the aforementioned data processing in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect. To exercise your revocation, disable this service in the „Cookie-Consent-Tool“ provided on the website.

14) Online Marketing

14.1 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“).

Google AdSense uses cookies, which are text files stored on your computer that enable an analysis of your use of the website. Additionally, Google AdSense uses so-called „web beacons“ (small invisible graphics) to collect information. These web beacons can be used to record, collect, and evaluate visitor traffic on the website.

The information generated by cookies and/or web beacons (including your IP address) about your use of this website is typically transmitted to and stored on a Google server. This may also involve a transfer to Google LLC servers in the USA.

Google uses this information to analyze your usage behavior regarding AdSense advertisements. The IP address transmitted by your browser as part of Google AdSense will not be merged with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on Google’s behalf.

The described data processing occurs in accordance with Art. 6(1)(f) GDPR to provide targeted advertising to users by third-party advertisers whose ads are displayed based on the evaluated user behavior on this website. This processing also serves our financial interest in maximizing the economic potential of our website through the paid display of personalized third-party advertising.

For more information about Google’s privacy policy, please visit: Google Privacy Policy.

You can permanently disable cookies for ad preferences by configuring your browser settings accordingly or by downloading and installing the browser plugin available at the following link: Google Plugin.

Please note that some functions of this website may not be fully available if you disable cookies.

Where legally required, we have obtained your consent for the aforementioned data processing in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with future effect. To exercise your revocation, follow the opt-out procedure described above.

14.2 Use of Google Ads Conversion Tracking

This website uses the online advertising program Google Ads and, within the framework of Google Ads, the conversion tracking service of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“).

We use Google Ads to promote our attractive offers on external websites using advertising materials (so-called Google Ads). We can determine the success of individual advertising measures in relation to campaign data. Our goal is to show you advertisements that interest you, make our website more appealing, and ensure a fair calculation of advertising costs.

A conversion tracking cookie is placed when a user clicks on a Google Ads advertisement. Cookies are small text files that are stored on your device. These cookies typically expire after 30 days and do not serve for personal identification. If the user visits certain pages on this website while the cookie is still valid, Google and we can recognize that the user clicked on the ad and was redirected to this page.

Each Google Ads customer receives a different cookie, meaning cookies cannot be tracked across multiple Google Ads customers‘ websites. The information collected using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. Google Ads customers receive information about the total number of users who clicked on their advertisement and were redirected to a conversion-tracked page. However, they do not receive any information that can personally identify users.

If you do not wish to participate in tracking, you can opt-out by disabling the Google conversion tracking cookie via your browser settings under “User Preferences.” In this case, you will not be included in the conversion tracking statistics.

We use Google Ads based on our legitimate interest in targeted advertising, in accordance with Art. 6(1)(f) GDPR.

As part of using Google Ads, personal data may also be transmitted to Google LLC servers in the USA.

For more information about Google’s privacy policy, visit: Google Privacy Policy

You can permanently disable cookies for advertising preferences by adjusting your browser settings or downloading and installing the following browser plugin: Google Plugin

Note: If you disable cookies, certain features of this website may be limited or unavailable.

Where legally required, we have obtained your consent for the aforementioned data processing in accordance with Art. 6(1)(a) GDPR.

You may revoke your consent at any time with future effect by disabling this service in the Cookie-Consent Tool provided on the website or by following the opt-out procedure described above.

14.3 Google Marketing Platform

This website uses the Google Marketing Platform (GMP), an online marketing tool provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“).

GMP uses cookies to display relevant ads, improve campaign performance reports, or prevent a user from seeing the same ad multiple times. Google uses cookie IDs to track which ads have been displayed in which browser, helping to avoid duplicate ad displays.

The processing is based on our legitimate interest in optimizing the marketing of our website in accordance with Art. 6(1)(f) GDPR.

Additionally, GMP can track conversions related to ad requests using cookie IDs. For example, a conversion occurs when a user sees a GMP ad, later visits the advertiser’s website using the same browser, and makes a purchase. According to Google, GMP cookies do not contain personal data.

Due to the marketing tools used, your browser automatically establishes a direct connection with Google’s server. We have no control over the extent and further use of data collected by Google through this tool. According to our knowledge, Google receives information that you have visited a specific part of our website or clicked on one of our ads.

If you are registered with a Google service, Google can associate your visit with your Google account. Even if you are not registered or logged in, Google may still obtain and store your IP address.

As part of using GMP, personal data may also be transmitted to Google LLC servers in the USA.

How to Opt-Out of Google Marketing Platform Tracking

If you do not wish to participate in this tracking, you can disable cookies for conversion tracking by configuring your browser to block cookies from www.googleadservices.com (see: Google Ad Settings)
Note: This setting will be deleted if you clear your cookies.

Alternatively, you can visit the Digital Advertising Alliance website to manage cookie settings: www.aboutads.info

You can also adjust your browser settings to be notified about cookies and decide individually whether to accept them or disable cookies for specific cases or in general.

Please note that disabling cookies may limit the functionality of our website.

For more information about Google Marketing Platform’s privacy policy, visit:
Google Privacy Policy

Where legally required, we have obtained your consent for the aforementioned data processing in accordance with Art. 6(1)(a) GDPR.

You may revoke your consent at any time with future effect by following the opt-out procedure described above.

14.4 HubSpot

This website uses services provided by HubSpot, a software-based marketing service from HubSpot Ireland Ltd., 2nd Floor, 30 North Wall Quay, Dublin 1, Ireland.

With HubSpot, various customer service and customer management functions can be digitally synchronized and executed through a central user interface. HubSpot enables lead generation, email & newsletter marketing, contact management (via CRM-based user segmentation), and contact form management.

To perform these functions, HubSpot uses cookies—small text files stored locally in your browser’s cache—to analyze your website usage. These cookies collect certain information, such as:
IP address
Location
Time of page access

Data collected by HubSpot is stored on HubSpot servers and analyzed on our behalf.

If personal data is processed, it is done so for statistical analysis of user behavior for optimization and marketing purposes in accordance with Art. 6(1)(f) GDPR. Other legal bases (such as explicit consent under Art. 6(1)(a) GDPR for newsletter sign-ups) remain unaffected.

We have signed a data processing agreement with HubSpot, obligating them to protect our customers‘ data and not share it with third parties.

How to Opt-Out of HubSpot Tracking

You can opt-out of HubSpot tracking by disabling cookies in your browser settings.

For more information about HubSpot’s privacy policy, visit: HubSpot Privacy Policy

Where legally required, we have obtained your consent for the aforementioned data processing in accordance with Art. 6(1)(a) GDPR.

You may revoke your consent at any time with future effect by following the opt-out procedure described above.

15) Web Analytics Services

15.1 Google (Universal) Analytics with Google Signals

This website uses Google (Universal) Analytics, a web analytics service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“).

Google (Universal) Analytics uses cookies, which are text files stored on your device to analyze your usage of the website. The information generated by the cookie about your use of this website (including the truncated IP address) is usually transmitted to and stored on a Google server. This may also involve transmission to Google LLC servers in the USA.

This website exclusively uses Google (Universal) Analytics with the extension „_anonymizeIp()“, which ensures IP anonymization by truncating the IP address and excluding direct personal references. With this extension, your IP address is shortened by Google within the European Union (EU) or other contracting states of the European Economic Area (EEA) before transmission. In exceptional cases, the full IP address may be transmitted to a Google LLC server in the USA and shortened there.

On our behalf, Google uses this information to analyze your website usage, compile reports on website activity, and provide other services related to website and internet usage. The IP address transmitted by your browser via Google (Universal) Analytics is not merged with other Google data.

All the above-described processing, especially setting Google Analytics cookies to retrieve information from your device, will only occur if you have given your explicit consent according to Art. 6(1)(a) GDPR. Without your consent, Google Analytics will not be used during your visit.

You can revoke your consent at any time with future effect. To do so, disable this service in the cookie consent tool provided on the website.

We have signed a data processing agreement with Google, ensuring that Google protects the data of our website visitors and does not share it with third parties. For EU-to-USA data transfers, Google relies on the Standard Contractual Clauses (SCCs) of the European Commission, which aim to maintain the European level of data protection in the USA.

Further details on Google (Universal) Analytics can be found here: Google Privacy Policy

This website also uses Google Signals as an extension of Google Analytics.
Google Signals allows us to generate cross-device reports via Google („Cross Device Tracking“).

If you have enabled personalized ads in your Google account settings and linked your internet-enabled devices to your Google account, Google can analyze your user behavior across devices if you have consented to Google Analytics processing according to Art. 6(1)(a) GDPR.

Google Signals collects data on:
Logins
Device types of website visitors
Conversion tracking across devices

The data shows, for example, on which device you first clicked on an ad and on which device the corresponding conversion took place.

We do not receive personal data from Google—only statistics generated based on Google Signals.

How to Disable Google Signals

You can disable personalized ads in your Google account settings, thereby preventing cross-device tracking: Google Support – Personalized Ads

More information about Google Signals can be found here: Google Support – Google Signals

15.2 Hotjar (Hotjar Ltd.)

This website uses the Hotjar web analytics service, provided by Hotjar Ltd., a European company based in Malta:
Hotjar Ltd, Level 2, St Julians Business Centre, 3, Elia Zammit Street, St Julians STJ 1000, Malta
Tel: +1 (855) 464-6788

With Hotjar, we can track user movements on our website, such as heatmaps, showing how far users scroll and which buttons they click. Additionally, Hotjar allows us to collect direct feedback from website visitors, providing valuable insights to improve our website’s user experience and speed.

This analysis is based on our legitimate interest in optimization and marketing purposes and in user-friendly website design, as per Art. 6(1)(f) GDPR.

We prioritize the protection of your personal data. Hotjar does not record personal data—it only tracks user interactions such as button clicks and scroll depth. Sections of the website where personal data is displayed are automatically hidden by Hotjar and cannot be tracked.

How to Opt-Out of Hotjar Tracking

Hotjar allows users to prevent tracking by enabling the “Do Not Track” header in their browser.

To enable „Do Not Track“ in your browser:

1. Adjust your browser settings to disable tracking
2. Follow the instructions here:
   Hotjar Opt-Out Guide

More information about Hotjar and its privacy policy can be found here:
Hotjar Website
Hotjar Privacy Policy

Where legally required, we have obtained your explicit consent for the data processing described above, in accordance with Art. 6(1)(a) GDPR.

You may revoke your consent at any time with future effect by following the opt-out procedure described above.

16) Retargeting/ Remarketing/ Referral Advertising

Bing Ads (Microsoft Corporation)

This website uses the conversion tracking technology „Bing Ads“ from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). A cookie is placed on your computer by Microsoft Bing Ads if you have reached our website via a Microsoft Bing advertisement. Cookies are small text files that are stored on your device. These cookies expire after 180 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, Microsoft and we can recognize that the user has clicked on the ad and was redirected to this page (conversion page). If personal data is processed in this context, it is done so in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in effective marketing.

The information collected using the conversion cookie is used to create conversion statistics, i.e., to determine how many users land on a conversion page after clicking on an ad. This allows us to see the total number of users who have clicked on our advertisement and were redirected to a page tagged with a conversion tracking tag. However, we do not receive any information that can personally identify users.

If you do not wish to participate in tracking, you can opt out by disabling the Bing Ads conversion tracking cookie in your browser settings. You will then not be included in the conversion tracking statistics. Alternatively, you can check whether Microsoft advertising cookies have been set in your browser and disable them using the EU consumer opt-out page (preference management).

For more information about Microsoft’s privacy policy regarding Bing Ads, please visit: Microsoft Privacy Policy

Where legally required, we have obtained your consent for the aforementioned processing of your data in accordance with Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the described procedure for opting out.

Bing Ads (Microsoft Corporation) Universal Event Tracking

This website uses Universal Event Tracking as part of the conversion tracking technology „Bing Ads“ from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA).

For the use of Universal Event Tracking, a tag is implemented on each page of our website, which interacts with the conversion cookie set by Microsoft Bing Ads. This interaction allows user behavior on our website to be tracked and sends the collected information to Microsoft Bing Ads. The purpose of this is to statistically analyze and evaluate predefined goals such as purchases or leads to better tailor our offers and content to user interests. The tags do not serve to personally identify users at any time.

If the transmission of user behavior data to Microsoft Bing Ads involves personal data, this is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in the statistical analysis of the success of product advertisements in Microsoft Bing Ads and user purchasing behavior, thereby optimizing our online offerings.

If you do not wish to participate in tracking, you can opt out by disabling the Bing Ads conversion tracking cookie in your browser settings. You will then not be included in the conversion tracking statistics. Alternatively, you can check whether Microsoft advertising cookies have been set in your browser and disable them using the EU consumer opt-out page (preference management).

For more information about Microsoft’s privacy policy regarding Bing Ads, please visit: Microsoft Privacy Policy

Where legally required, we have obtained your consent for the aforementioned processing of your data in accordance with Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the described procedure for opting out.

Google Ads Remarketing

Our website uses the Google Ads Remarketing feature, which enables us to advertise this website in Google search results as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

For this purpose, Google places a cookie in your device’s browser, which automatically enables interest-based advertising using a pseudonymous cookie ID based on the pages you have visited. This processing is carried out in accordance with our legitimate interest in optimally marketing our website pursuant to Art. 6 (1) (f) GDPR.

Further data processing occurs only if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account for ad personalization across the web. If you are logged into Google during your website visit, Google will use your data together with Google Analytics data to create and define audience lists for cross-device remarketing. In this process, your personal data is temporarily linked by Google with Google Analytics data to form target audiences.

As part of Google Ads Remarketing, personal data may also be transmitted to Google LLC’s servers in the USA.

You can permanently opt out of Google Ads Remarketing by downloading and installing the browser plug-in available at the following link: Google Plugin

For more information about Google’s privacy policy regarding advertising, please visit: Google Privacy Policy

Where legally required, we have obtained your consent for the aforementioned processing of your data in accordance with Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your revocation, deactivate this service via the „Cookie Consent Tool“ provided on the website or follow the opt-out procedure described above.

17) Use of a Live Chat System

Own Live Chat System

On this website, data such as the chat name you provide and the content of your chat messages are collected and stored for the duration of the chat to operate a live chat system that serves to respond to live inquiries. The chat and the chat name you provide are stored exclusively in RAM (Random-Access Memory) and are deleted immediately as soon as the chat conversation is terminated by either us or you, but no later than two hours after the last message in the chat history.

Cookies are used to operate the chat function. Cookies are small text files stored locally in the cache of the visitor’s internet browser. These cookies enable the recognition of the visitor’s browser to distinguish individual users of the chat function on our website.

If the collected information contains personal data, processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in effective customer service and statistical analysis of user behavior for optimization purposes.

To prevent the storage of cookies, you can adjust your internet browser settings so that no cookies are stored on your computer in the future or that already stored cookies are deleted. However, disabling all cookies may result in the chat function no longer being usable on our website.

LiveZilla (LiveZilla GmbH)

This website uses technologies from LiveZilla GmbH, Ekkehardstraße 10, 78224 Singen (www.livezilla.net/home/en/) to collect and store anonymized data for web analysis and for operating the live chat system, which serves to respond to live support inquiries. Pseudonymized usage profiles can be created from this anonymized data. Cookies may be used for this purpose.

Cookies are small text files stored locally in the cache of the visitor’s internet browser. These cookies enable the recognition of the visitor’s browser. If the collected information contains personal data, processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in effective customer service and statistical analysis of user behavior for optimization purposes.

The data collected using LiveZilla technologies will not be used to personally identify visitors to this website without the separately granted consent of the affected individual and will not be merged with personal data related to the bearer of the pseudonym.

To prevent the storage of LiveZilla cookies, you can adjust your internet browser settings so that no cookies are stored on your computer in the future or that already stored cookies are deleted. However, disabling all cookies may result in certain functions of our website no longer being available.

You can object to the collection and storage of data for the creation of a pseudonymized usage profile at any time with effect for the future by sending an informal email stating your objection to the email address provided in the legal notice.

18) Tools and Other Services

18.1 Google reCAPTCHA

This website also uses the reCAPTCHA function from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). This function primarily serves to determine whether an input is made by a natural person or is being misused through automated and machine-based processing.

The service involves the transmission of the IP address and any additional data required by Google for the reCAPTCHA service to Google. This processing is carried out in accordance with Art. 6 (1) (f) GDPR based on our legitimate interest in determining individual responsibility on the internet and preventing misuse and spam.

As part of the use of Google reCAPTCHA, personal data may also be transmitted to the servers of Google LLC in the USA.

Further information about Google reCAPTCHA and Google’s privacy policy can be found here: Google Privacy Policy

Where legally required, we have obtained your consent for the aforementioned processing of your data in accordance with Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the described opt-out procedure.

18.2 Google Customer Reviews (formerly Google Certified Shops Program)

We cooperate with Google under the „Google Customer Reviews“ program. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This program allows us to collect customer reviews from users of our website.

After making a purchase on our website, you may be asked whether you would like to participate in a Google email survey. If you provide your consent pursuant to Art. 6 (1) (a) GDPR, we will transmit your email address to Google. You will then receive an email from Google Customer Reviews asking you to evaluate your shopping experience on our website. Your submitted review will then be aggregated with other reviews and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. Additionally, your review may be used for Google Seller Ratings.

As part of using Google Customer Reviews, personal data may also be transferred to the servers of Google LLC in the USA.

You can withdraw your consent at any time by sending a message to the data controller or by contacting Google directly.

For further information on Google’s privacy policy regarding the Google Customer Reviews program, please visit: Google Support

For more details on Google Seller Ratings and privacy policies, visit: Google Support

18.3 Online Applications via a Form

On our website, we offer job seekers the opportunity to apply online using a dedicated form. Participation in the application process requires applicants to provide all necessary personal data through the form for an informed assessment and selection.

Required details include general personal information (name, address, a telephone or electronic contact option) as well as proof of qualifications required for the job. Additionally, health-related information may be necessary to ensure compliance with labor and social security regulations.

By submitting the form, applicant data is encrypted in accordance with current technology standards, stored, and evaluated exclusively for the purpose of processing the application.

The legal basis for this processing is generally Art. 6 (1) (b) GDPR (for processing in Germany in conjunction with § 26 (1) BDSG), whereby participation in the application process is considered as contract initiation.

If special categories of personal data as per Art. 9 (1) GDPR (e.g., health-related data such as disability status) are required, processing is carried out in accordance with Art. 9 (2) (b) GDPR to exercise our rights under labor and social security laws.

Alternatively, processing may also be based on Art. 9 (1) (h) GDPR if it is necessary for health care, occupational medicine, assessing the applicant’s work capability, medical diagnostics, or health/social service management.

If no selection is made following the assessment or the applicant withdraws their application, the data submitted via the form will be deleted no later than six months after notification. This period is based on our legitimate interest in responding to follow-up inquiries and complying with evidence obligations under equal treatment laws.

If an application is successful, the provided data will be further processed on the basis of Art. 6 (1) (b) GDPR (for processing in Germany in conjunction with § 26 (1) BDSG) for employment purposes.

18.4 – Google Maps

Our website uses Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). Google Maps is a web service that provides interactive (land) maps to visually display geographical information. By using this service, our location is displayed to you, and any directions to our site are facilitated.

When you access subpages in which Google Maps is embedded, information about your use of our website (such as your IP address) is transmitted to Google’s servers and stored there. This may also involve data transmission to the servers of Google LLC in the USA. This occurs regardless of whether Google provides a user account through which you are logged in or whether no user account exists. If you are logged into Google, your data will be directly linked to your account. If you do not want this association with your Google profile, you must log out before activating the button.

Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage, and evaluation of data are carried out in accordance with Art. 6 (1) (f) GDPR based on Google’s legitimate interest in displaying personalized advertising, conducting market research, and optimizing the design of its websites to suit user needs. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google directly.

If you do not agree with the future transmission of your data to Google in connection with the use of Google Maps, you can also completely disable the Google Maps web service by deactivating JavaScript in your browser. Google Maps, including the map display on this website, will then no longer function.

You can view Google’s terms of use at: Google Privacy Policy
Additional terms of use for Google Maps can be found at: Google Maps

Comprehensive information on data protection in connection with the use of Google Maps is available on Google’s website: Google Privacy Policy

Where legally required, we have obtained your consent for the aforementioned processing of your data in accordance with Art. 6 (1) (a) GDPR. You may withdraw your consent at any time with effect for the future. To exercise your revocation, please follow the described procedure for opting out.

19) Data Subject Rights

19.1 Rights of the Data Subject

Under applicable data protection laws, you have comprehensive rights regarding the processing of your personal data by the data controller. Below, we inform you of these rights (access and intervention rights):

• Right of access pursuant to Art. 15 GDPR: You have the right to obtain information about your personal data that we process, including processing purposes, categories of processed personal data, recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or criteria for determining the storage period, the existence of a right to rectification, deletion, restriction of processing, objection to processing, complaint with a supervisory authority, the origin of your data if it was not collected by us, the existence of automated decision-making including profiling, and, where applicable, meaningful information about the logic involved as well as the impact and intended effects of such processing. You also have the right to be informed about the guarantees pursuant to Art. 46 GDPR in case your data is transferred to third countries.

• Right to rectification pursuant to Art. 16 GDPR: You have the right to request the immediate correction of inaccurate data concerning you and/or the completion of incomplete data stored by us.

• Right to erasure pursuant to Art. 17 GDPR: You have the right to request the deletion of your personal data under the conditions outlined in Art. 17 (1) GDPR. However, this right does not apply if processing is necessary to exercise the right to freedom of expression and information, to fulfill a legal obligation, for reasons of public interest, or to assert, exercise, or defend legal claims.

• Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to request the restriction of processing of your personal data if the accuracy of your data is disputed and needs to be verified, if you reject the deletion of your data due to unlawful data processing and instead request the restriction of processing, if we no longer need your data for its original purpose but you require it to assert, exercise, or defend legal claims, or if you have objected to processing for reasons related to your particular situation and it is not yet determined whether our legitimate reasons outweigh yours.

• Right to notification pursuant to Art. 19 GDPR: If you have asserted your right to rectification, deletion, or restriction of processing against the data controller, the controller is obliged to inform all recipients to whom your personal data has been disclosed about the rectification, deletion, or restriction of processing, unless this proves impossible or involves disproportionate effort. You also have the right to be informed about these recipients.

• Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used, and machine-readable format or to request its transfer to another data controller, where technically feasible.

• Right to withdraw consent pursuant to Art. 7 (3) GDPR: You have the right to withdraw any consent given for data processing at any time with effect for the future. In the event of withdrawal, we will delete the affected data immediately unless further processing can be based on a legal basis that does not require consent. Withdrawal of consent does not affect the lawfulness of processing carried out based on consent before its withdrawal.

• Right to lodge a complaint pursuant to Art. 77 GDPR: If you believe that the processing of your personal data violates the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, particularly in the Member State of your residence, your workplace, or the location of the alleged violation.

19.2 Right to Object

IF WE PROCESS YOUR PERSONAL DATA BASED ON OUR OVERRIDING LEGITIMATE INTEREST AS PART OF A BALANCING OF INTERESTS, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME FOR REASONS ARISING FROM YOUR PARTICULAR SITUATION, WITH EFFECT FOR THE FUTURE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN DEMONSTRATE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS, AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENSE OF LEGAL CLAIMS.

IF YOUR PERSONAL DATA IS PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH MARKETING AT ANY TIME. YOU CAN EXERCISE YOUR RIGHT TO OBJECT AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE AFFECTED DATA FOR DIRECT MARKETING PURPOSES.

20) Duration of Storage of Personal Data

The duration of the storage of personal data depends on the respective legal basis, the processing purpose, and—if applicable—any relevant statutory retention periods (e.g., commercial and tax retention periods).

• If personal data is processed based on explicit consent in accordance with Art. 6 (1) (a) GDPR, the data will be stored until the data subject withdraws their consent.

• If statutory retention periods exist for data processed in connection with legal or quasi-legal obligations based on Art. 6 (1) (b) GDPR, this data will be routinely deleted upon expiration of the retention periods, provided that it is no longer required for contract fulfillment or contract initiation and/or no legitimate interest exists on our part in continuing the storage.

• If personal data is processed based on Art. 6 (1) (f) GDPR, this data will be stored until the data subject exercises their right to object under Art. 21 (1) GDPR unless we can demonstrate compelling legitimate grounds for the processing that override the interests, rights, and freedoms of the data subject, or the processing serves the establishment, exercise, or defense of legal claims.

• If personal data is processed for direct marketing purposes based on Art. 6 (1) (f) GDPR, the data will be stored until the data subject exercises their right to object under Art. 21 (2) GDPR.

Unless otherwise specified in this privacy policy regarding specific processing situations, stored personal data will generally be deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.

© This privacy policy was created by the specialist attorneys of IT-Recht Kanzlei and is protected by copyright (www.it-recht-kanzlei.de).

DOCID: ##ITK-d4f2f4ac458466e75a025acc9ea1f215##

Version: 202009050140