Privacy Policy

1) Information on the Collection of Personal Data and Contact Details of the Controller

1.1 We are pleased that you are visiting our Amazon internet presentation (hereinafter “website”) and thank you for your interest. On the following, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.

1.2 The controller in charge for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is DEQORI UG (haftungsbeschränkt), DEQORI.eu, Pappelallee 78/79, 10437 Berlin, Germany, Phone: +49 (0) 30 75438844, E-Mail: support@deqori.eu. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.

1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or enquiries to the person responsible). You can recognise an encrypted connection by the string “https://” and the lock symbol in your browser line.

2) Data collection when visiting our website

During the mere informational use of our website, i.e. if you do not register or otherwise transmit information to us, we only collect data that your browser transmits to our server (so-called “server log files”). When you call up our website, we collect the following data, which is technically necessary for us to display the website to you:

Our visited website
Date and time at the time of access
Amount of data sent in bytes
Source/reference from which you reached the page
Browser
Operating system
IP address used (if applicable: in anonymised form)

The processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not passed on or used in any other way. However, we reserve the right to check the server log files retrospectively if there are concrete indications of illegal use.

3) Content-Delivery-Network

Optimole
On our website we use “Optimole”, a so-called Content Delivery Network (“CDN”) of Vertigo Studio SRL, 20 Povernei Street, 4th Floor, Flat no. 9, 010641 Bucharest, Romania (“Optimole”). A content delivery network is an online service that is used in particular to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. The use of Optimole’s Content Delivery Network helps us to optimise the loading speeds of our website.

Optimole generally does not interact with visitors to our website and does not process any personal visitor data.

Should processing nevertheless occur in individual cases, this will be carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as the improvement of the stability and functionality of our website.

For more information, please visit Optimole’s privacy policy at: https://optimole.com/privacy-policy/

4) Cookies

In order to make visiting our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your terminal device. Some of the cookies we use are deleted after the end of the browser session, i.e. after you close your browser (so-called session cookies). Other cookies remain on your end device and enable your browser to be recognised the next time you visit (so-called persistent cookies). If cookies are set, they collect and process certain user information such as browser and location data and IP address values to an individual extent. Persistent cookies are automatically deleted after a specified period of time, which may differ depending on the cookie. The duration of the respective cookie storage can be found in the overview of the cookie settings of your web browser.

In some cases, cookies are used to simplify the ordering process by storing settings (e.g. remembering the contents of a virtual shopping basket for a later visit to the website). If personal data is also processed by individual cookies used by us, the processing is carried out in accordance with Art. 6 para. 1 lit. b GDPR either for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent given or in accordance with Art. 6 para. 1 lit. f GDPR to protect our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the page visit.

Please note that you can set your browser so that you are informed about the setting of cookies and can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies

Please note that if you do not accept cookies, the functionality of our website may be limited.

5) Contacting

In the context of contacting us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. These data are stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided that there are no legal storage obligations to the contrary.

6) Data processing when opening a customer account and for contract processing

Pursuant to Art. 6 para. 1 lit. b GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. We store and use the data provided by you for the purpose of processing the contract. After complete processing of the contract or deletion of your customer account, your data will be blocked with regard to tax and commercial law retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved on our part.

7) Use of single sign-on procedures

Login With Amazon
On our website, you can log in to create a customer account or register using the “Login with Amazon” service of Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg (“Amazon”) within the framework of the so-called single sign-on technology if you have an Amazon account. You can recognise the Amazon login function on our website by the “Login with Amazon” button.

When you call up a page of our website that contains an Amazon login function, your browser establishes a direct connection to Amazon’s servers. The content of the login button is transmitted by Amazon directly to your browser and integrated into the page. Through this integration, Amazon receives the information that your browser has called up the corresponding page of our website, even if you do not have an Amazon profile or are not currently logged in to Amazon. This information (including your IP address) is transmitted by your browser directly to an Amazon server and stored there. These data processing operations are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Amazon’s legitimate interest in displaying personalised advertising based on browsing behaviour.

By using the Amazon login button on our website, you also have the option of logging in or registering on our website using your Amazon user data. Only if you give your express consent in accordance with Art. 6 Para. 1 lit. a GDPR prior to the registration process on the basis of a corresponding notice about the exchange of data with Amazon, will we receive the general and publicly accessible information stored in your profile from Amazon when you use the Amazon button, depending on your personally made data protection settings at Amazon. This information includes the user ID, name, address, email address, age and gender.

The data transmitted by Amazon is stored and processed by us to create a user account with the necessary data (title, first name, surname, address data, country, email address, date of birth), if you have released it for this purpose at Amazon. Conversely, data (e.g. information on your surfing or purchasing behaviour) may be transferred from us to your Amazon profile on the basis of your consent.

The consent given can be revoked at any time by sending a message to the responsible person named at the beginning of this data protection declaration.

For the purpose and scope of the data collection and the further processing and use of the data by Amazon, as well as your rights in this regard and setting options for protecting your privacy, please refer to Amazon’s data protection information: https://www.amazon.de/gp/help/customer/display.html?nodeId=201909010

If you do not want Amazon to assign the data collected via our website directly to your Amazon profile, you must log out of Amazon before visiting our website.

8) Commenting

In the context of the comment function on this website, in addition to your comment, information on the time of the creation of the comment and the commentator name you have chosen will be stored and published on this website. Furthermore, your IP address will be logged and stored. This storage of the IP address is for security reasons and in case the person concerned infringes the rights of third parties by posting a comment or posts illegal content. We need your e-mail address in order to contact you in the event that a third party objects to your published content as being illegal. The legal basis for the storage of your data is Art. 6 para. 1 lit. b and f GDPR. We reserve the right to delete comments if they are objected to by third parties as unlawful.

You as a user can subscribe to the follow-up comments. For this purpose, you will receive a confirmation e-mail so that it can be ensured that you are the owner of the e-mail address provided (double opt-in procedure). The legal basis for data processing in the case of comment subscriptions is Art. 6 para. 1 lit. a GDPR. You can unsubscribe from ongoing comment subscriptions at any time with effect for the future; for more information on the unsubscription option, please refer to the confirmation email.

9) Use of customer data for direct marketing

9.1 Subscribe to our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our offers. Only your e-mail address is required for sending the newsletter. The provision of further data is voluntary and is used to address you personally. We use the so-called double opt-in procedure for sending the newsletter. This means that we will only send you an e-mail newsletter once you have expressly confirmed that you consent to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm that you wish to receive the newsletter in future by clicking on an appropriate link.

By activating the confirmation link, you give us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you register for the newsletter, we store your IP address entered by your internet service provider (ISP) as well as the date and time of registration in order to be able to trace any possible misuse of your email address at a later date. The data collected by us when you register for the newsletter is used exclusively for the purpose of addressing you in an advertising manner by way of the newsletter. You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a corresponding message to the responsible person named at the beginning. After unsubscribing, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use your data in a way that goes beyond this and is permitted by law and about which we inform you in this declaration.

9.2 Newsletter dispatch via MailChimp
Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA. (https://www.mailchimp.com/), to whom we pass on the data you provided when registering for the newsletter. This transfer takes place in accordance with Art. 6 Para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure and user-friendly newsletter system. Please note that your data is usually transferred to a MailChimp server in the USA and stored there.

MailChimp uses this information to send and statistically evaluate the newsletters on our behalf. For the evaluation, the emails sent contain so-called web beacons or tracking pixels, which are single-pixel image files that are stored on our website. In this way, it can be determined whether a newsletter message has been opened and which links, if any, have been clicked on. With the help of the web beacons, Mailchimp automatically creates general, non-personal statistics about the response behaviour to newsletter campaigns. However, based on our legitimate interest in the statistical evaluation of the newsletter campaigns for the optimisation of the advertising communication and the better alignment with recipient interests, the web beacons also collect and utilise data of the respective newsletter recipient (email address, time of retrieval, IP address, browser type and operating system) in accordance with Art. 6 para. 1 lit f GDPR. This data allows an individual conclusion to be drawn about the newsletter recipient and is processed by Mailchimp for the automated creation of statistics that show whether a specific recipient has opened a newsletter message.
If you wish to deactivate the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

MailChimp may also use this data itself in accordance with Art. 6 (1) lit. f GDPR on the basis of its own legitimate interest in the needs-based design and optimisation of the service as well as for market research purposes, for example to determine which countries the recipients come from. However, MailChimp does not use the data of our newsletter recipients to write to them itself or to pass them on to third parties.

To protect your data in the USA, we have concluded a data processing agreement (“Data Processing Agreement”) with MailChimp based on the standard contractual clauses of the European Commission to enable the transfer of your personal data to MailChimp. This data processing agreement can be viewed at the following internet address: https://mailchimp.com/legal/data-processing-addendum/

You can view MailChimp’s privacy policy here:
https://mailchimp.com/legal/privacy/

10) Data processing for order handling

10.1 Transmission of image files for order processing via upload function
On our website, we offer customers the possibility to order the personalisation of products by transmitting image files via an upload function. The submitted image motif is used as a template for the personalisation of the selected product.

Using the upload form on the website, the customer can transmit one or more image files from the memory of the end device used directly to us via automated, encrypted data transmission. We then record, store and use the transmitted files exclusively for the production of the personalised product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed of this in the following paragraphs. Any further forwarding will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned are carried out exclusively for the purpose of processing your online order in accordance with Art. 6 para. 1 lit. b GDPR. After final processing of the order, the transmitted image files are automatically and completely deleted.

Transmission of image files for order processing by e-mail
On our website, we offer customers the opportunity to order the personalisation of products by submitting image files by e-mail. The submitted image motif is used as a template for the personalisation of the selected product.

Using the e-mail address provided on the website, the customer can send us one or more image files from the memory of the end device used. We then collect, store and use the files transmitted in this way exclusively for the production of the personalised product as defined in the respective service description on our website. If the transmitted image files are passed on to special service providers for the production and processing of the order, you will be explicitly informed of this in the following paragraphs. Any further transfer will not take place. If the transmitted files or the digital motifs contain personal data (in particular images of identifiable persons), all the processing operations just mentioned will be carried out exclusively for the purpose of processing your online order in accordance with Art. 6 para. 1 lit. b GDPR. After final processing of the order, the transmitted image files will be automatically and completely deleted.

10.2 Insofar as necessary for the processing of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Art. 6 para. 1 lit. b GDPR.

If we owe you updates for goods with digital elements or for digital products on the basis of a corresponding contract, we will process the contact data (name, address, email address) provided by you when placing the order in order to inform you personally about upcoming updates within the legally stipulated period within the scope of our statutory duty to inform pursuant to Art. 6 (1) lit. c GDPR by suitable means of communication (e.g. by post or email). Your contact details will be used strictly for the purpose of informing you about updates owed by us and will only be processed by us for this purpose to the extent necessary for the respective information.

In order to process your order, we also work together with the following service provider(s), who support us in whole or in part in the performance of concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

10.3 To fulfil our contractual obligations to our customers, we work together with external shipping partners. We pass on your name as well as your delivery address and, if necessary for the delivery, your telephone number to a shipping partner selected by us exclusively for the purposes of the delivery of goods Art. 6 para. 1 lit. b GDPR.

10.4 Use of special service providers for order processing and handling

Billbee

Order processing is carried out via the service provider “Billbee” (Billbee Gesellschaft mit beschränkter Haftung, Arolser Str. 10, 34477 Twistetal). Name, address and, if applicable, other personal data will be passed on to Billbee in accordance with Art. 6 Para. 1 lit. b GDPR exclusively for the purpose of processing the online order. Your data will only be passed on insofar as this is actually necessary for the processing of the order. Details of Billbee’s data protection and its privacy policy can be viewed on Billbee’s website at “Billbee.io”.

10.5 Transfer of personal data to shipping service providers

DHL
If the goods are delivered by the transport service provider DHL (DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany), we will pass on your e-mail address to DHL in accordance with Art. 6 Para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent for this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to DHL for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. This information will only be passed on if it is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with DHL or notification of delivery is not possible.

Consent may be revoked at any time with effect for the future vis-à-vis the responsible person named above or vis-à-vis the transport service provider DHL.

GLS
If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein, Germany), we will pass on your e-mail address to GLS in accordance with Art. 6 Para. 1 lit. a GDPR prior to delivery of the goods for the purpose of coordinating a delivery date or for delivery notification, provided you have given your express consent to this in the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to GLS for the purpose of delivery in accordance with Art. 6 Para. 1 lit. b GDPR. This information will only be passed on if it is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with GLS or the transmission of status information of the shipment delivery is not possible.

The consent can be revoked at any time with effect for the future vis-à-vis the above-mentioned responsible person or vis-à-vis the transport service provider GLS.

10.6 Use of payment service providers (payment services)

Amazon Pay
If you select the payment method “Amazon Pay”, the payment will be processed via the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: “Amazon Payments”), to whom we will pass on the information you provided during the ordering process, together with information about your order, in accordance with Art. 6 (1) lit. b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Amazon Payments and only insofar as it is necessary for this purpose. If cookies, i.e. small text files that are stored on the end device, are set when using Amazon Pay, this is done exclusively on the basis of your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. This consent can be revoked at any time via the “cookie consent tool” implemented on the website. You can obtain further information about the data protection provisions of Amazon Payments at the following Internet address: https://pay.amazon.com/de/help/201751600

Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal, we pass on your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter “PayPal”) as part of the payment processing. The transfer takes place in accordance with Art. 6 Para. 1 lit. b GDPR and only insofar as this is necessary for the payment processing.

PayPal reserves the right to carry out a credit check for the payment methods credit card via PayPal, direct debit via PayPal or – if offered – “purchase on account” or “payment by instalments” via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of PayPal’s legitimate interest in determining your solvency. PayPal uses the result of the credit check in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The creditworthiness information may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they have their basis in a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including information on the credit agencies used, please refer to PayPal’s privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

Stripe
If you choose a payment method from the payment service provider Stripe, the payment will be processed via the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process together with information about your order (name, address, account number, bank sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) lit. b GDPR. You can find more information about Stripe’s data protection at the URL https://stripe.com/de/privacy#translation.

Stripe reserves the right to carry out a credit check on the basis of mathematical-statistical procedures in order to safeguard the legitimate interest in determining the user’s ability to pay. The personal data necessary for a credit check and obtained in the course of payment processing may be transmitted by Stripe to selected credit agencies, which Stripe will disclose to users upon request. The credit report may contain probability values (so-called score values). Insofar as score values are included in the result of the credit report, they are based on a scientifically recognised mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data. Stripe uses the result of the credit check with regard to the statistical probability of non-payment for the purpose of deciding on the authorisation to use the selected payment method.
You can object to this processing of your data at any time by sending a message to Stripe or the appointed credit agencies.

However, Stripe may still be entitled to process your personal data if this is necessary for the processing of payments in accordance with the contract.

Klarna
This website offers one or more online payment methods provided by Klarna Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden.

When you choose a Klarna payment method where you make an advance payment (such as credit card), your payment information (including name, address, bank and card details, currency, and transaction number) shared during the checkout process, along with details about your order, will be transferred to Klarna according to Article 6(1)(b) of the GDPR. This data transfer is solely for processing your payment and only as necessary.

If you choose a payment method where Klarna takes on the risk (such as invoice, installment, or direct debit), you will be asked to provide additional personal data (such as name, street address, postal code, city, birth date, email address, and phone number, and possibly information about an alternative payment method) during the checkout process.

To protect our legitimate interest in assessing our customers’ ability to pay, we transfer this data to Klarna for a credit check in accordance with Article 6(1)(f) of the GDPR. Klarna will evaluate your personal details along with other information (such as your shopping cart, total amount, order history, and previous payment experiences) to determine whether the selected payment option can be offered, considering potential risks of payment or default.

To make this decision, Klarna may, in addition to its internal criteria, access identity and credit information from the following credit agencies, as allowed by Article 6(1)(f) of the GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies.

The credit check may include probability values (known as score values), which are calculated based on a scientifically recognized mathematical-statistical method. This calculation may involve, but is not limited to, address data.

You can object to the processing of your data at any time by sending us or Klarna a message. However, Klarna may still process your personal data if it is necessary for the proper handling of payments according to the agreement.

11) Use of social media: Videos

Youtube videos
This website uses the Youtube embedding function to display and play videos from the provider “Youtube”, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”).

The extended data protection mode is used here, which, according to the provider, only triggers the storage of user information when the video(s) is/are played. If the playback of embedded Youtube videos is started, the provider “Youtube” uses cookies to collect information about user behaviour. According to information from “Youtube”, these are used, among other things, to collect video statistics, to improve user-friendliness and to prevent abusive behaviour. If you are logged in to Google, your data will be directly assigned to your account when you click on a video. If you do not wish to have your data associated with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation is carried out in particular in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Google’s legitimate interests in the display of personalised advertising, market research and/or needs-based design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.

Independently of a playback of the embedded videos, a connection to the Google network is established each time this website is called up, which may trigger further data processing operations without our influence.

For further information on data protection at “Youtube”, please refer to the Youtube terms of use at https://www.youtube.com/static?template=terms and in Google’s privacy policy at https://www.google.de/intl/de/policies/privacy

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, deactivate this service in the “Cookie Consent Tool” provided on the website.

12) Web analytics services

Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which can be used to analyse the use of websites.

When using Google Analytics 4, so-called “cookies” are used by default. Cookies are text files that are stored on your terminal device and enable an analysis of your use of a website. The information collected by cookies about your use of the website (including the IP address transmitted by your terminal device, shortened by the last few digits, see below) is usually transmitted to a Google server and stored and processed there. This may also result in the transmission of information to the servers of Google LLC, which is based in the USA, and further processing of the information there.

When using Google Analytics 4, the IP address transmitted by your end device when you use the website is always collected and processed anonymously by default and automatically, so that the information collected cannot be directly related to a person. This automatic anonymisation is carried out by Google shortening the IP address transmitted by your terminal device within member states of the European Union (EU) or other contracting states of the Agreement on the European Economic Area (EEA) by the last digits.
Google uses this and other information on our behalf to evaluate your use of the website, to compile reports about your website activities and usage behaviour and to provide us with other services related to your website and internet usage. In this context, the IP address transmitted and shortened by your terminal device within the scope of Google Analytics 4 will not be merged with other data from Google. The data collected in the context of the use of Google Analytics 4 will be stored for 2 months and then deleted.

Google Analytics 4 also enables the creation of statistics with statements about the age, gender and interests of website users on the basis of an evaluation of interest-based advertising and with the involvement of third-party information via a special function, the so-called “demographic characteristics”. This makes it possible to determine and distinguish user groups of the website for the purpose of targeting marketing measures. However, data collected via the “demographic characteristics” cannot be assigned to a specific person and thus also not to you personally. This data collected via the “demographic characteristics” function is kept for two months and then deleted.

All processing described above, in particular the setting of Google Analytics cookies for the storage and reading of information on the end device used by you for the use of the website, will only take place if you have given us your express consent for this in accordance with Art. 6 (1) lit. a GDPR. Without your consent, Google Analytics 4 will not be used during your use of the website. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service via the “Cookie Consent Tool” provided on the website.

In connection with this website, the “UserIDs” function is also used as an extension of Google Analytics 4. By assigning individual UserIDs, we can have Google generate cross-device reports (so-called “cross-device tracking”). This means that your usage behaviour can also be analysed across devices if you have given your corresponding consent to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR, if you have set up a personal account by registering on this website and are logged into your personal account on different end devices with your relevant login data. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first time and on which end device the relevant conversion took place.

In connection with this website, the Google Signals service is also used as an extension of Google Analytics 4. With Google Signals, we can have Google create cross-device reports (so-called “cross-device tracking”). If you have activated “personalised ads” in your Google account settings and linked your internet-enabled end devices to your Google account, Google can analyse usage behaviour across devices and create database models based on this if you have given your consent to the use of Google Analytics 4 in accordance with Art. 6 (1) lit. a GDPR. This takes into account the logins and device types of all website users who were logged into a Google account and performed a conversion. The data shows, among other things, on which device you clicked on an ad for the first time and on which device the relevant conversion took place. We do not receive any personal data from Google, but only statistics compiled on the basis of Google Signals. You have the option of deactivating the “personalised ads” function in the settings of your Google account and thus turning off the cross-device analysis in connection with Google Signals. To do this, follow the instructions on this page: https://support.google.com/ads/answer/2662922?hl=de
Further information on Google Signals can be found under the following link: https://support.google.com/analytics/answer/7532985?hl=de

We have concluded a so-called order processing agreement with Google for our use of Google Analytics 4, which obliges Google to protect the data of our website users and not to pass it on to third parties.

To ensure compliance with the European level of data protection also in the event of any transfer of data from the EU or EEA to the USA and possible further processing there, Google refers to the so-called standard contractual clauses of the European Commission, which we have contractually agreed with Google.

Further legal information on Google Analytics 4, including a copy of the aforementioned standard contractual clauses, can be found at the following link: https://policies.google.com/privacy?hl=de&gl=de
Details on the processing triggered by Google Analytics 4 and Google’s handling of data from websites can be found here: https://policies.google.com/technologies/partner-sites

13) Use of a live chat system

Zendesk (formerly Zopim)
This website uses technology provided by Zendesk International Ltd, 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland (“Zendesk”) to collect and store pseudonymised data for the purposes of web analytics and to operate the live chat system used to respond to live support requests. From this pseudonymised data, usage profiles can be created under a pseudonym. Cookies can be used for this purpose. Cookies are small text files that are stored locally in the cache of the site visitor’s internet browser. Among other things, the cookies enable the recognition of the internet browser. If the information collected in this way has a personal reference, the processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in effective customer service and the statistical analysis of user behaviour for optimisation purposes.

The data collected with Zendesk technologies will not be used to personally identify the visitor to this website without the separately granted consent of the person concerned and will not be merged with personal data about the bearer of the pseudonym. In order to avoid the storage of Zendesk cookies, you can set your internet browser so that no cookies can be placed on your computer in the future or so that cookies that have already been placed are deleted. However, switching off all cookies may mean that some functions on our Internet pages can no longer be carried out. You can deactivate the collection and storage of data for the purpose of creating a pseudonymised user profile at any time with effect for the future by sending us your objection informally by e-mail to the e-mail address given in the imprint.
We have entered into an order processing agreement with Zendesk, by which we oblige Zendesk to protect our customers’ data and not to pass it on to third parties.

Personal data may be transferred to Zendesk Inc. servers in the USA. For such data transfers, Zendesk follows binding internal data protection rules (Binding Corporate Rules – BCR), which have been recognised by the Irish Data Protection Authority as providing appropriate safeguards for compliance with European data protection standards.

For more information about Zendesk’s privacy policy, please visit https://www.zendesk.de/company/customers-partners/privacy-policy/.

14) Use of an email ticketing system

Zendesk
We use the Zendesk email ticketing system, a customer service platform provided by Zendesk International Ltd, 55 Charlemont Place, Saint Kevin’s, Dublin D02 F985, Ireland (“Zendesk”), to process customer enquiries. If users of our website send contact requests by email, these are stored and organised in the ticket system to enable chronological processing and to improve the service experience. Users can always view the current status of the processing of their request via the individually assigned ticket number.

Only for the organisation of the requests and their processing, personal data is collected as provided in the request, but in any case name, first name and email address, transmitted to Zendesk, stored there and read out.

The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, in responding to your request as quickly as possible and in optimising our service offering in accordance with Art. 6 (1) lit. f GDPR.
We have entered into an order processing agreement with Zendesk under which we oblige Zendesk to protect our customers’ data and not to disclose it to third parties.

Personal data may be transferred to servers of Zendesk Inc. in the USA. For such data transfers, Zendesk follows binding internal data protection rules (Binding Corporate Rules – BCR), which have been recognised by the Irish Data Protection Authority as providing appropriate safeguards for compliance with European data protection standards.

Your data will be deleted once we have completed processing your request. This is the case when the circumstances indicate that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.

For more information on Zendesk’s data protection, please contact https://www.zendesk.de/company/customers-partners/privacy-policy/.

15) Tools and miscellaneous

15.1 Borlabs
This website uses the cookie consent tool Borlabs of the provider Mr. Benjamin A. Bornschein, Georg-Wilhelm-Str. 17, 21107 Hamburg (“Borlabs”), which sets two technically necessary cookies (“borlabsCookie” and “borlabsCookieUnblockContent”) to store your cookie preference. The aforementioned processing is carried out pursuant to Art. 6 (1) lit. f GDPR on the basis of our legitimate interest in providing cookie preference management for website visitors.
The “borlabs cookie” does not process any personal data. The “borlabsCookie” cookie stores your chosen preference that you selected when you entered the website. The cookie “borlabsCookieUnblockContent” stores which (external) media/content you always want to have automatically unblocked. If you want to revoke these settings, simply delete the cookies in your browser. When you re-enter/reload the website, you will be asked again for your cookie preference.

15.2 Google Web Fonts
This site uses so-called web fonts provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”) for the uniform display of fonts. When you call up a page, your browser loads the required web fonts into its browser cache in order to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google’s servers. This may also result in the transmission of personal data to the servers of Google LLC. in the USA. In this way, Google learns that our website was accessed via your IP address. Google Web Fonts are used in the interest of a uniform and appealing presentation of our online offers. This represents a legitimate interest within the meaning of Art. 6 Para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

Further information on Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google’s privacy policy: https://www.google.com/policies/privacy/

15.3 Google reCAPTCHA
On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). This function is primarily used to distinguish whether an entry is made by a natural person or is abused by machine and automated processing. The service includes the sending of the IP address and, if applicable, further data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in determining individual personal responsibility on the Internet and the prevention of abuse and spam. The use of Google reCAPTCHA may also involve the transmission of personal data to the servers of Google LLC. in the USA.
Further information on Google reCAPTCHA and Google’s privacy policy can be found at: https://www.google.com/intl/de/policies/privacy/

Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the option described above for making an objection.

15.4 Google Maps
On our website we use Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (land) maps in order to visually present geographical information. By using this service, you will be shown our location and it will be easier for you to find us.

Information about your use of our website (such as your IP address) is transmitted to Google servers and stored there when you call up those sub-pages in which the Google Maps map is integrated; this information may also be transmitted to Google LLC servers in the USA. This occurs regardless of whether Google provides a user account via which you are logged in or whether a user account exists. If you are logged in to Google, your data will be directly assigned to your account. If you do not want your data to be associated with your Google profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and evaluates them. The collection, storage and evaluation are carried out in accordance with Art. 6 Para. 1 lit. f GDPR on the basis of Google’s legitimate interest in displaying personalised advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, and you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google in the context of the use of Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website can then not be used.

You can read Google’s terms of use at https://www.google.de/intl/de/policies/terms/regional.html view, the additional terms of use for Google Maps can be found at https://www.google.com/intl/de_US/help/terms_maps.html
Detailed information on data protection in connection with the use of Google Maps can be found on the Google website („Google Privacy Policy“): https://www.google.de/intl/de/policies/privacy/
Insofar as legally required, we have obtained your consent for the processing of your data as described above in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the aforementioned option for making an objection.

16) Rights of the data subject

16.1 The applicable data protection law grants you the following data subject rights (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective prerequisites for exercising these rights:

Right to information pursuant to Art. 15 GDPR;
Right to rectification pursuant to Art. 16 GDPR;
Right to erasure pursuant to Art. 17 GDPR;
Right to restriction of processing pursuant to Art. 18 GDPR;
Right to information pursuant to Art. 19 of the GDPR;
Right to data portability pursuant to Art. 20 GDPR;
Right to revoke consent granted pursuant to Art. 7 (3) GDPR;
Right to lodge a complaint pursuant to Art. 77 GDPR.

16.2 RIGHT TO OBJECT

IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.

IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.

IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.

17) Duration of the storage of personal data

The duration of the storage of personal data is determined on the basis of the respective legal basis, the purpose of processing and – if relevant – additionally on the basis of the respective statutory retention period (e.g. retention periods under commercial and tax law).
When processing personal data on the basis of explicit consent pursuant to Art. 6 para. 1 lit. a GDPR, this data will be stored until the person concerned revokes his or her consent.

If there are statutory retention periods for data that are processed within the scope of legal or quasi-legal obligations on the basis of Art. 6 para. 1 lit. b GDPR, this data will be routinely deleted after expiry of the retention periods, provided that it is no longer required for the fulfilment or initiation of the contract and/or there is no legitimate interest on our part in continuing to store it.

When personal data is processed on the basis of Art. 6 para. 1 lit. f GDPR, this data will be stored until the data subject exercises his or her right to object pursuant to Art. 21 (1) GDPR, unless we can demonstrate compelling legitimate grounds for the processing which override the interests, rights and freedoms of the data subject, or the processing serves the purpose of asserting, exercising or defending legal claims.

When processing personal data for the purpose of direct marketing based on Art. 6 (1) lit. f GDPR, this data is stored until the data subject exercises his/her right to object pursuant to Art. 21 (2) GDPR.

In addition, unless otherwise stated in the other information in this statement on specific processing situations, stored personal data is deleted when it is no longer necessary for the purposes for which it was collected or otherwise processed.