Privacy policy
1) Introduction and contact details of the person responsible
1.1 We are pleased that you are visiting our website and thank you for your interest. Below we will inform you about how we handle your personal data when you use our website. Personal data is all data that can be used to identify you personally.
1.2 The controller responsible for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is WBC GmbH, Annendorfer Str. 102, 06886 Lutherstadt Wittenberg, Germany, Tel.: +49 (0) 3491 – 43 26 68, E-Mail: [email protected]. The person responsible for the processing of personal data is the natural or legal person who alone or jointly with others decides on the purposes and means of the processing of personal data.
2) Data collection when visiting our website
2.1 If you only use our website for informational purposes, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the site server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
- The website visited
- Date and time of accessing the website
- Volume of data transmitted in bytes
- Source/reference from where you accessed the website
- Browser used
- Operating system used.
- IP address used (anonymous if applicable)
The data is processed in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disseminated or used in any other way. However, we reserve the right to check the server logfiles retrospectively if there is concrete evidence of unlawful use.
2.2 For security reasons and to protect the transmission of personal data and other confidential information (e.g. orders or enquiries to the data controller), this website uses SSL and TSL encryption. An encrypted connection can be identified by the character sequence “https://” and the lock symbol in your browser title.
3) Hosting & Content Delivery Network
3.1 To host our website and display the page content, we use a provider who provides its services itself or through selected subcontractors exclusively on servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
3.2 Cloudflare
We use a content delivery network from the following provider: Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA
This service enables us to deliver large media files such as graphics, page content or scripts more quickly via a network of regionally distributed servers. The processing takes place to safeguard our legitimate interest in improving the stability and functionality of our website in accordance with Article 6 (1) (f) GDPR. We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
4) Cookies
In order to make visiting our website attractive and to enable the use of certain functions, we use cookies, i.e. small text files that are stored on your device. Some of these cookies are automatically deleted when the browser is closed (so-called "session cookies"), some of these cookies remain longer on your device and allow you to save page settings (so-called "persistent cookies"). In the latter case, you can see the storage duration in the overview of the cookie settings in your web browser.
If personal data is also processed by individual cookies we use, the processing takes place in accordance with Art. 6 Paragraph 1 lit. b GDPR either for the execution of the contract, in accordance with Art. 6 Paragraph 1 lit. According to Art. 6 Para. 1 lit.f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
You can set your browser so that you are informed about the setting of cookies and individually decide whether to accept them or to exclude the acceptance of cookies for certain cases or in general.
Please note that the functionality of our website may be restricted if you reject cookies.
5) Contacting us
5.1 Trusted Shops
For review reminders, we use the services of the following provider: Trusted Shops AG, Subbelrather Str. 15c, 50823 Cologne, Germany
We transmit your e-mail address and any other customer data to the provider solely on the basis of your express consent in accordance with Article 6 Paragraph 1 lit.
You can revoke your consent to us or the provider at any time with effect for the future.
We are jointly responsible with the provider for the processing described above in accordance with Art. 26 GDPR. The shared responsibility agreement can be viewed here: https://help.etrusted.com
5.2 Zendesk
To process customer inquiries, we use the following provider's email ticketing system: Zendesk International Ltd., 55 Charlemont Place, Saint Kevin's, Dublin D02 F985, Ireland
If you make contact requests by email via our website, these will be stored and organized in the ticket system to enable chronological processing and to improve the service experience. You can always see the current status of the processing of your request via the individually assigned ticket number.
For the organization and processing of inquiries, personal data are collected according to the scope of their provision, but in any case surname, first name and e-mail address, transmitted to the provider, stored there and read out.
The legal basis for the processing of this data is our legitimate interest in the efficient design of our customer service, in answering your request as quickly as possible and in optimizing our range of services in accordance with Article 6 (1) (f) GDPR.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
5.3 WhatsApp Business
You have the option of contacting us via the WhatsApp messaging service provided by WhatsApp Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland. For this purpose, we use the so-called “business version” of WhatsApp.
If you contact us via WhatsApp in the course of a specific business (for example, an order), we will store and use the mobile phone number you use for WhatsApp and - if provided - your first name and last name for handling and responding to your enquiry in accordance with Article 6(1)(b) GDPR. On the same legal basis we will request further data (order number, customer number, address, or email address) from you via WhatsApp if required to be able to assign your enquiry to the relevant process.
If you use our WhatsApp contact for general enquiries (e.g. regarding our range of services, availabilities, or regarding our website), we will store and use the mobile phone number you use for WhatsApp and, if provided, your first name and last name in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in the efficient and timely provision of the information requested.
Your data will always only be used for answering your enquiry by WhatsApp. They will not be passed on to third parties.
Please note that WhatsApp Business has access to the address book of the mobile device we use for this purpose and automatically transfers telephone numbers stored in the address book to a server of the parent company Meta Platforms Inc. in the USA. To operate our WhatsApp business account, we use a mobile end device whose address book only stores the WhatsApp contact data of those users who have also contacted us via WhatsApp.
This ensures that each person whose WhatsApp contact details are stored in our address book has agreed to the transmission of their WhatsApp telephone number from the address books of their Chat contacts by accepting the WhatsApp conditions of use when using the App on their device for the first time. This is in accordance with Article 6(1)(a) GDPR. This excludes transmission of data of those users that do not use WhatsApp and/or have not contacted us via WhatsApp.
The purpose and scope of the data collection and the further processing and use of the data by WhatsApp as well as your related rights and setting options to protect your privacy can be found in WhatsApp's data protection information: https://www.whatsapp.com
We have concluded an order processing contract with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
As part of the processing mentioned above, data may be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
5.4 When contacting us (e.g. via contact form or email), personal data is processed – exclusively for the purpose of processing and answering your request and only to the extent required for this.
The legal basis for the processing of this data is our legitimate interest in answering your request in accordance with Article 6 (1) (f) GDPR. If your contact is aimed at a contract, the additional legal basis for processing is Art. 6 (1) (b) GDPR. Your data will be deleted if it can be inferred from the circumstances that the facts in question have been finally clarified and provided that there are no legal storage obligations to the contrary.
6) Data processing when opening a customer account
In accordance with Article 6 Paragraph 1 Letter b GDPR, personal data will continue to be collected and processed to the extent required in each case if you provide it to us when opening a customer account. The data required for opening an account can be found in the input mask of the corresponding form on our website.
A deletion of your customer account is possible at any time and can be done by sending a message to the above address of the person responsible. After your customer account has been deleted, your data will be deleted provided that all contracts concluded have been completed, there are no legal retention periods to the contrary and we have no legitimate interest in further storage.
7) Use of customer data for direct advertising
7.1 Registration for our e-mail newsletter
If you sign up for our email newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your email address. Providing further data is voluntary and is used to address you personally. To send the newsletter, we use the so-called double opt-in procedure, which ensures that you only receive the newsletter once you have expressly confirmed your consent to receive the newsletter by clicking on a verification link sent to the email address provided.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6 (1) (a) GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data we collect when registering for the newsletter is used strictly for the intended purpose.
You can unsubscribe from the newsletter at any time via the link provided for this purpose in the newsletter or by sending a message to the person responsible mentioned at the beginning. After you have unsubscribed, your e-mail address will be deleted from our newsletter distribution list immediately, unless you have expressly consented to further use of your data or we reserve the right to use data beyond this, which is permitted by law and about which we will inform you in this declaration.
7.2 Sending the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for goods or services from our range by e-mail that are similar to those you have already purchased. According to Section 7 (3) UWG, we do not have to obtain your separate consent for this. In this respect, data processing takes place solely on the basis of our legitimate interest in personalized direct advertising in accordance with Article 6 (1) (f) GDPR. If you initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail.
You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the person responsible named at the beginning. For this, you only incur transmission costs according to the basic tariffs. After receipt of your objection, the use of your e-mail address for advertising purposes will be stopped immediately.
7.3 Klaviyo
Our e-mail newsletter is sent via this provider: Klaviyo, Inc., 125 Summer St., Ste 600, Boston, MA 02110, USA
Based on our legitimate interest in effective and user-friendly newsletter marketing, we pass on the data you provided when registering for the newsletter to this provider in accordance with Article 6 (1) (f) GDPR so that they can send the newsletter on our behalf.
Subject to your express consent in accordance with Article 6 (1) (a) GDPR, the provider also carries out a statistical evaluation of the success of newsletter campaigns using web beacons or tracking pixels in the emails sent, the opening rates and specific interactions with the content of the newsletter can be measured. Device information (e.g. time of access, IP address, browser type and operating system) is also collected and evaluated, but not merged with other databases.
You can revoke your consent to newsletter tracking at any time with effect for the future.
We have concluded an order processing contract with the provider, which protects the data of our site visitors and prohibits disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
7.4 Goods availability notification by email
For items that are temporarily unavailable, you can sign up to receive goods availability notifications by email. We will send you a one-time email notification about the availability of the item you have selected. The only mandatory information for sending this notification is your email address. The provision of further data is voluntary and may be used in order to be able to address you personally. We use the so-called double opt-in procedure for sending e-mails, which ensures that you will only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the specified e-mail address.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6 (1) (a) GDPR. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data collected by us when registering for our email notification service for the availability of goods is used strictly for the intended purpose.
You can unsubscribe from the availability notifications at any time by sending a message to the person responsible mentioned above. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data that goes beyond this, which is permitted by law and about which we will inform you in this declaration .
7.5 Cart reminders by email
If you cancel your purchase from us before completing the order, you have the option of being reminded of the contents of your virtual shopping cart once by e-mail.
The only mandatory information for sending this reminder is your e-mail address. Providing further data is voluntary and may be used to address you personally. We use the so-called double opt-in procedure for sending e-mails, which ensures that you only receive a notification if you have expressly confirmed your consent to this by clicking on a verification link sent to the e-mail address provided.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Article 6 (1) (a) GDPR to send a shopping cart reminder. We store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace possible misuse of your e-mail address at a later point in time. The data we collect when you register for our e-mail notification service is used strictly for the intended purpose.
You can unsubscribe from the shopping cart reminders at any time by sending a message to the person named above. After you have unsubscribed, your e-mail address will be deleted immediately from our mailing list set up for this purpose, unless you have expressly consented to further use of your data or we reserve the right to use data that goes beyond this, which is permitted by law and about which we will inform you in this declaration .
8) Data processing for order processing
8.1 Insofar as it is necessary for the execution of the contract for delivery and payment purposes, the personal data collected by us will be passed on to the commissioned transport company and the commissioned credit institution in accordance with Article 6 (1) (b) GDPR.
If we owe you updates for goods with digital elements or for digital products based on a corresponding contract, we will process the contact information you provided when placing your order in order to inform you personally within the scope of our statutory information obligations pursuant to Art. 6 (1) (c) GDPR. Your contact information will be used strictly for the purpose of notifying you of updates owed by us and will only be processed by us to the extent necessary for the respective information.
In order to process your order, we also work together with the following service provider (s) who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
8.2 Forwarding of personal data to shipping service providers
- DHL
As a transport service provider, we use the following provider: DHL Paket GmbH, Sträßchensweg 10, 53113 Bonn, Germany
We will pass on your e-mail address and/or telephone number to the provider in accordance with Article 6 (1) (a) GDPR before the goods are delivered for the purpose of coordinating a delivery date or for delivery notification, provided that you have given your express consent to do so during the ordering process have given consent. Otherwise, we will only pass on the name of the recipient and the delivery address to the provider for the purpose of delivery in accordance with Article 6 (1) (b) GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior coordination of the delivery date with the provider or the delivery notification is not possible.
The consent can be revoked at any time with effect for the future to the above-mentioned person responsible or to the provider.
8.3 Use of payment service providers (payment services)
- Amazon Pay
One or more online payment methods from the following provider are available on this website: Amazon Payments Europe sca, 38 avenue JF Kennedy, L-1855 Luxembourg
If you select a payment method from the provider where you pay in advance (e.g. credit card payment), the payment details you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be sent to them passed on in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent that it is necessary for this.
- Paypal
One or more online payment methods from the following provider are available on this website: PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method from the provider where you pay in advance, the payment details you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) as well as information about the content of your order in accordance with Art. 6 Paragraph 1 lit. b GDPR passed on. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent that it is necessary for this.
If you select a payment method for which we pay in advance, you will also be asked to provide certain personal data (first and last name, street, house number, postal code, city, date of birth, e-mail address, telephone number, data if applicable) during the ordering process an alternative means of payment).
In order to safeguard our legitimate interest in determining your solvency in such cases, we will forward this data to the provider for the purpose of a credit check in accordance with Article 6 (1) (f) GDPR. Based on the personal data you provide and other data (e.g. shopping cart, invoice amount, order history, payment history), the provider checks whether the payment option you have selected can be granted with regard to payment and/or bad debt risks.
The credit report can contain probability values (so-called score values). As far as score values are included in the result of the credit report, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or to the provider. However, the provider may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Instant bank transfer
This website offers one or more online payment methods from the following provider: Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden
If you select a payment method from the provider where you pay in advance (e.g. credit card payment), the payment details you provided during the ordering process (including name, address, bank and payment card information, currency and transaction number) and information about the content of your order will be sent to them passed on in accordance with Art. 6 Para. 1 lit. b GDPR. In this case, your data will only be passed on for the purpose of payment processing with the provider and only to the extent that it is necessary for this.
9) web analytics services
9.1 Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”), which enables an analysis of your use of our website.
By default, when you visit the website, Google (Universal) Analytics sets cookies, which are stored as small text modules on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude direct personal reference.
The information is transmitted to Google servers and processed there. Transmissions to Google LLC based in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google (Universal) Analytics is stored for a period of two months and then deleted.
All of the processing described above, in particular the setting of cookies on the end device used, only takes place if you have given us your express consent in accordance with Article 6 (1) (a) GDPR.
Without your consent, Google (Universal) Analytics will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.
We have concluded an order processing contract with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
Further legal information on Google (Universal) Analytics can be found at https://business.safety.google
Demographics
Google (Universal) Analytics uses the special "demographic characteristics" function and can use this to create statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be assigned to a specific person and will be deleted after being stored for a period of two months.
Google signals
As an extension to Google (Universal) Analytics, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and have linked your devices to your Google account, Google can analyze your usage behavior across devices and create database models, including for cross-device conversions, subject to your consent to use Google Analytics in accordance with Art. 6 Para. 1 lit. a GDPR. We do not receive any personal data from Google, only statistics. If you want to stop cross-device analysis, you can deactivate the "Personalized Advertising" function in the settings of your Google account. To do so, follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google (Universal) Analytics, the "UserIDs" function can be used on this website. If you have consented to the use of Google (Universal) Analytics in accordance with Art. 6 Para. 1 lit. a GDPR, have set up an account on this website and log in with this account on various devices, your activities, including conversions, can be analyzed across devices.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
9.2 google analytics 4
This website uses Google Analytics 4, a web analysis service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), which enables an analysis of your use of our website.
By default, when you visit the website, Google Analytics sets 4 cookies, which are stored as small text modules on your end device and collect certain information. The scope of this information also includes your IP address, which, however, is shortened by Google by the last digits in order to exclude direct personal reference.
The information is transmitted to Google servers and processed there. Transmissions to Google LLC based in the USA are also possible.
Google uses the information collected on our behalf to evaluate your use of the website, to compile reports on website activity for us and to provide other services related to website activity and internet usage. The shortened IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data. The data collected as part of the use of Google Analytics 4 is stored for a period of two months and then deleted.
All of the processing described above, in particular the setting of cookies on the end device used, only takes place if you have given us your express consent in accordance with Article 6 (1) (a) GDPR.
Without your consent, Google Analytics 4 will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your right of withdrawal, please deactivate this service using the "Cookie Consent Tool" provided on the website.
We have concluded an order processing contract with Google, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
Further legal information on Google Analytics 4 can be found at https://business.safety.google
Demographics
Google Analytics 4 uses the special "demographic characteristics" function and can use this to create statistics that make statements about the age, gender and interests of site visitors. This is done by analyzing advertising and information from third parties. This allows target groups to be identified for marketing activities. However, the collected data cannot be assigned to a specific person and will be deleted after being stored for a period of two months.
Google signals
As an extension to Google Analytics 4, Google Signals can be used on this website to create cross-device reports. If you have activated personalized ads and linked your devices to your Google account, Google can analyze your usage behavior across devices and database models, including cross-devices, subject to your consent to the use of Google Analytics in accordance with Article 6(1)(a) GDPR conversions, create. We do not receive any personal data from Google, only statistics. If you want to stop the cross-device analysis, you can disable the "Personalized advertising" function in your Google account settings. To do this, follow the instructions on this page: https://support.google.com
UserIDs
As an extension to Google Analytics 4, the “UserIDs” function can be used on this website. If you have consented to the use of Google Analytics 4 in accordance with Article 6(1)(a) GDPR, have set up an account on this website and log in to this account on different devices, your activities, including conversions, can be analyzed across devices become.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
9.3 Google Tag Manager
This website uses the "Google Tag Manager", a service of the following provider: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland (hereinafter: "Google").
The Google Tag Manager provides a technical basis for bundling various web applications, including tracking and analysis services, and being able to calibrate, control and attach conditions via a uniform user interface. The Google Tag Manager itself does not store or read any information on user devices. The service also does not carry out any independent data analyses. However, the Google Tag Manager transmits your IP address to Google when the page is accessed and may store it there. Also a transmission to servers of Google LLC. In the US it is possible.
This processing will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. Without this consent, Google Tag Manager will not be used during your visit to the site. You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
Further legal information on Google Tag Manager can be found at https://business.safety.google
9.4 Matomo
This website uses a web analysis service from the following provider: InnoCraft Ltd., 150 Willis St, 6011 Wellington, New Zealand, (“Matomo”)
To protect site visitors, Matomo uses a so-called "config_id" to enable various analyses of site usage within a short time window of up to 24 hours. The "config_id" is a randomly generated, time-limited hash of a limited set of visitor settings and attributes. The config_id, or config hash, is a character string calculated for a visitor based on their operating system, browser, browser plug-ins, IP address, and browser language. Matomo does not use device fingerprinting and uses an anonymized IP address of the site visitor to create the "config_id."
If the information processed in this way includes personal user data, the processing takes place in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes. In order to object to data processing of your visitor data in the future, we provide you with a separate option to object on our website.
Data is only transferred to the provider if the service is not hosted on our servers. In the case of self-hosting, data collected via the service is not transferred to the provider.
If the service is not hosted on our own servers, we have entered into a data processing agreement with the provider, which ensures the protection of our site visitors' data and prohibits unauthorized disclosure to third parties.
In this case, an adequacy decision of the EU Commission applies to data transfers to New Zealand, which attests to compliance with European data protection standards for international data transfers.
9.5 PayPal Marketing Solutions
This website uses the web analysis service of the following provider: PayPal (Europe) S.à r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
With the help of cookies and/or comparable technologies (tracking pixels, web beacons, algorithms for reading end device and browser information), the service collects and stores pseudonymised visitor data, including information on the end device used, such as the IP address and browser information, in order to be able to use it for to evaluate statistical analyzes of usage behavior on our website and to create pseudonymised usage profiles. Among other things, it is possible to evaluate movement patterns (so-called heat maps), which show the duration of page visits and interactions with page content (e.g. text input, scrolling, clicks and mouse-overs). Pseudonymization basically excludes a direct personal reference. A combination with other clear data collected about you does not take place.
All of the processing described above, in particular the reading out or saving of information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the “Cookie Consent Tool” provided on the website.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
10) Retargeting/ remarketing and conversion tracking
10.1 Meta Pixels
Within our online offering we use the “Meta Pixel” service of the following provider: Meta Platforms Ireland Limited, 4 Grand Canal Quare, Dublin 2, Ireland (“Meta”)
If a user clicks on an ad we have placed on Facebook and/or Instagram, a parameter is added to the URL of our linked page using "Meta Pixel". This URL parameter is then entered into the user's browser after forwarding via a cookie that our linked page itself sets.
This enables Meta to determine the visitors to our online offering as a target group for the display of advertisements (so-called “ads”). Accordingly, we use the service to only display the Facebook and/or Instagram ads placed by us to users who have also shown an interest in our online offering or who have certain characteristics (e.g. interests in certain topics or products determined based on the websites visited) which we transmit to Meta (so-called “custom audiences”).
On the other hand, the “meta pixel” can be used to track whether users were redirected to our website after clicking on an advertisement and what actions they took there (so-called “conversion tracking”).
The data collected is anonymous to us, so it does not allow us to draw any conclusions about the identity of the user. However, the data is stored and processed by Meta so that a connection to the respective user profile is possible and Meta can use the data for its own advertising purposes.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
We have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
The information generated by Meta is usually transferred to a Meta server and stored there; In this context, there may also be a transfer to Meta Platforms Inc. servers in the USA.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
10.2 idealo performance tracking
We use tracking technology from Ingenious Technologies AG, Franze Straße 48, 10117 Berlin, to establish the connection between a user click on an advertising medium or a display of an advertising medium (touch point) and an action by you (e.g. a Purchase in the online shop or a newsletter registration). At each touch point, your browser sends an HTTP request to the Ingenious server, which transmits certain information.
This information includes the URL of the website on which advertising material is placed (referrer URL), the browser identifier (user agent) of the end device (including information about the device type and operating system), and the IP address of the end device (this IP address is anonymized by Ingenious before storage), HTTP header (data packet with various technical information automatically transmitted by your browser), the time of the request and, if previously stored on the device, the cookie with its entire content .
A cookie is a small data packet that is exchanged between your browser and the server. The information relevant to the web application can be stored and transmitted in this data package, for example the contents of a virtual shopping cart.
The tracking technology stores cookies on your device to document actions. The cookie stores information about the last touch points (i.e. when a specific advertising medium was displayed or clicked on by a device). A cookie ID generated by Ingenious is also stored in the cookie. With this cookie ID, Ingenious stores data about the touch points that have occurred and information about your actions. The saved touch points can, if necessary, be put together to form a sequence chain (user journey).
In the case of a promotional request, the order number and shopping cart value of your order are usually also transmitted and stored by Ingenious. In addition, the following values can be transmitted and stored: your customer number, new customer characteristics, your age and gender as well as the information you provided in a customer survey.
The information transmitted to Ingenious and the cookies serve the sole purpose of correctly assigning the success of an advertising medium and the corresponding billing.
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
Alternatively, the collection and processing of tracking data can also be deactivated by visiting the tracking opt-out page named below:
https://marketing.net.idealo-partner.com
When you access the tracking opt-out page, a special cookie is written, which deactivates tracking in the end device's current web browser. However, tracking will be activated again as soon as you delete the tracking opt-out cookie.
We will inform you below which cookies are used by our tracking technology:
The cookie called “tsv” is written when an advertisement is displayed. This cookie contains a cookie ID and a list of data about the last view - touch points, consisting of time, referrer URL and Admedia code (unique identification of an advertising medium, the information about sales channel, publisher, publisher's website and includes advertising material).
The cookie called “tsc” is written when an advertising material is clicked. This cookie contains a cookie ID, a list with the data about the last click touch points, consisting of time, referrer URL, ID of the page in the customer's shop system and Admedia code (unique identification of an advertising medium, information about the sales channel , publisher, publisher's website and advertising materials).
The cookie called “trackingoptout” is written when the opt-out link is clicked to deactivate tracking for the current web browser of this device.
10.3 Google Ads Remarketing
This website uses retargeting technology from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
For this purpose, Google sets a cookie in the browser of your end device, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you visit. Any further data processing will only take place if you have given your consent to Google linking your Internet and app browser history to your Google account and using information from your Google account to personalize ads that you view on the web . In this case, if you are logged in to Google while visiting our website, Google will use your data together with Google Analytics data to create and define target group lists for cross-device remarketing. To do this, Google will temporarily link your personal data to Google Analytics data in order to form target groups. As part of the use of Google Ads Remarketing, personal data may also be transmitted to the servers of Google LLC. come in the US.
All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
Details on the processing initiated by Google and how Google handles data from websites can be found here: https://policies.google.com
Further information on Google’s privacy policy can be found here: https://business.safety.google
10.4 Microsoft Advertising
This website uses retargeting technology from the following provider: Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA
This makes it possible to target visitors to our website who are already interested in our shop and our products with personalized, interest-based advertising. The advertising material is displayed on the basis of a cookie-based analysis of previous and current usage behavior, but no personal data is stored. In the case of retargeting technology, a cookie is stored on your computer or mobile device in order to collect pseudonymised data about your interests and thus adapt the advertising individually to the stored information. These cookies are small text files that are stored on your computer or mobile device. You will be shown advertising that is highly likely to match your product and information interests.
All of the processing described above, in particular the setting of cookies for reading information on the end device used, will only be carried out if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. Without this consent, retargeting technology will not be used during your visit to the site.
You can revoke your consent at any time with effect for the future. To exercise your revocation, please deactivate this service in the "Cookie Consent Tool" provided on the website.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
10.5 Google Ads conversion tracking
This website uses the online advertising program "Google Ads" and, as part of Google Ads, conversion tracking by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). We use Google Ads to draw attention to our attractive offers with the help of advertising material (so-called Google Adwords) on external websites. In relation to the data of the advertising campaigns, we can determine how successful the individual advertising measures are. We are pursuing the goal of showing you advertising that is of interest to you, making our website more interesting for you and achieving a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an Ads ad placed by Google. Cookies are small text files that are stored on your device. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits certain pages on this website and the cookie has not yet expired, we and Google can see that the user clicked on the ad and was redirected to this page. Each Google Ads customer receives a different cookie. This means that cookies cannot be tracked via the websites of Google Ads customers. The information obtained using the conversion cookie is used to generate conversion statistics for Google Ads customers who have opted for conversion tracking. The customers find out the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information with which users can be personally identified. When using Google Ads, personal data may also be transmitted to the servers of Google LLC. come in the US.
Details on the processing initiated by Google Ads Conversion Tracking and how Google handles data from websites can be found here: https://policies.google.com
All processing described above, in particular the setting of cookies for reading information on the device used, will only be carried out if you have given us your express consent in accordance with Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating this service in the "Cookie Consent Tool" provided on the website.
You can also permanently object to the setting of cookies by Google Ads Conversion Tracking by downloading and installing the browser plug-in from Google available under the following link:
https://www.google.com
Please note that certain functions of this website may not be used or may only be of limited use if you have deactivated the use of cookies.
Google's privacy policy can be viewed here: https://business.safety.google
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
11) Page functionalities
11.1 Youtube
This website uses plugins to display and play videos from the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data can also be transmitted to: Google LLC., USA
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the provider's servers at the time of video playback to load the content. Certain information, including your IP address, is transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses cookies to collect information about user behavior, create playback statistics and prevent abusive behavior.
If you are logged into a user account with the provider when you visit the site, your data will be assigned directly to your account when you click on a video. If you do not want this to be assigned to your account, you must log out before pressing the play button.
All of the aforementioned processing, in particular the setting of cookies for reading information on the end device used, only takes place if you have given us your express consent in accordance with Article 6 (1) (a) GDPR. You can revoke your consent at any time with effect for the future by deactivating this service using the “Cookie Consent Tool” provided on the website.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
11.2 Trusted Shops Trust Badge
Graphic elements from the following provider are integrated on our website to display external customer ratings and/or an externally awarded quality mark: Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany
If you call up a page on our website that contains such graphic elements, your browser establishes a direct connection to the provider's servers in order to load the elements properly. Certain browser information, including your IP address, is transmitted to the provider.
If personal data is also processed, this is done in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in the optimal marketing of our offer and the attractive design of our website.
If you order from us online, further processing may take place.
Depending on your express consent in accordance with Art. 6 (1) (a) GDPR, after completing an order, your order information (order total, order number, product purchased if applicable) and your email address will be transmitted in encrypted form to the provider via the Trustbadge in order to check an existing registration for the provider's services (in particular "buyer protection") and, if necessary, to enable a new registration.
In the event of an established existing registration or in the event of a new registration with the provider for its services (in particular buyer protection), your order information (order total, order number, purchased product) and your email address will be processed based on the contractual agreement with the provider in accordance with Art. 6 Paragraph 1 lit. b GDPR is transmitted to them and further processed by them in order to provide the services (in particular buyer protection).
We are jointly responsible with the provider for the processing described above in accordance with Art. 26 GDPR. The shared responsibility agreement can be viewed here: https://help.etrusted.com
11.3 Google Maps
This website uses an online map service from the following provider: Google Maps (API) from Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google").
Google Maps is a web service for displaying interactive (land) maps to visually display geographic information. Using this service will show you our location and make it easier to get there.
As soon as you call up those sub-pages in which the Google Maps map is integrated, information about your use of our website (such as your IP address) is transmitted to Google's servers and stored there. This can also result in transmission to the servers of Google LLC. come in the US. This occurs regardless of whether Google provides a user account through which you are logged in or whether a user account exists. If you are logged in to Google, your data will be assigned directly to your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them.
The collection, storage and evaluation are carried out in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of Google's legitimate interest in the display of personalized advertising, market research and/or the needs-based design of Google websites. You have the right to object to the creation of these user profiles, although you must contact Google to exercise this right. If you do not agree to the future transmission of your data to Google when using Google Maps, you also have the option of completely deactivating the Google Maps web service by switching off the JavaScript application in your browser. Google Maps and thus also the map display on this website cannot then be used.
As far as is legally required, we have obtained your consent to your data being processed as described above in accordance with Article 6(1)(a) GDPR. You can withdraw your consent at any time with future effect. To exercise the withdrawal of your consent, please refer to the option for exercising an objection as detailed above.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found here: https://business.safety.google
11.4 Google Maps API
In order to enable the checking of certain entries in the address form of our web shop's ordering process for input errors in real time, we use the services of the following provider: Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data can also be transmitted to: Google LLC., USA
The provider validates the address entered, verifies the spelling and completes any missing data. In the case of ambiguous addresses, correct alternative suggestions are displayed. For this purpose, the address data you enter is transmitted to the provider, where it is stored and evaluated.
This processing is carried out in accordance with Article 6 Paragraph 1 Letter f GDPR on the basis of our legitimate interest in the proper recording of the correct address data of the customer in order to conscientiously fulfill our contractual delivery obligations and to prevent problems in the execution of the contract.
The provider processes the data concerned separately and does not merge them with other databases, and deletes them as soon as their status or correctness has been confirmed, but no later than 30 days.
For data transfers to the USA, the provider has joined the EU-US data protection framework (EU-US Data Privacy Framework), which ensures compliance with the European data protection level on the basis of an adequacy decision by the European Commission.
Further information on Google’s privacy policy can be found here: https://business.safety.google
11.5 Applications for job advertisements by email
On our website, we are currently advertising vacancies in a separate section, to which interested parties can apply by e-mail to the contact address provided.
Applicants must provide all personal data necessary for an informed assessment, including general information such as name, address and contact details, as well as proof of performance and, where appropriate, health-related information. Details on the application can be found in the job advertisement.
After receipt of the application by e-mail, the data will be stored and evaluated exclusively for the purpose of processing the application. If we have any questions, we use either the e-mail address or telephone number of the applicant. The processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR (or Section 26 Para. 1 BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Article 9 (1) GDPR (e.g. health data such as information on the severely disabled) are requested from applicants, processing takes place in accordance with Article 9 (2) lit. b. GDPR, so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of the special data categories may also be based on Art. 9 para. 1 lit. h DSGVO if it is used for health or occupational health purposes, for assessing the applicant's ability to work, for medical diagnosis, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector he follows.
If the applicant is not selected or if an applicant withdraws his application prematurely, his transmitted data and all electronic correspondence including the application e-mail will be deleted after 6 months at the latest after notification. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to meet our obligations to provide evidence from the regulations on the equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Article 6 (1) (b) GDPR (when processed in Germany in conjunction with Section 26 (1) BDSG) for the purpose of carrying out the employment relationship.
11.6 Online applications using a form
On our website, we advertise current vacancies in a separate section, for which interested parties can apply using the appropriate form.
Applicants must provide all personal data necessary for an informed assessment, including general information such as name, address and contact details, as well as proof of performance and, where appropriate, health-related information. Details on the application can be found in the job advertisement.
In the course of sending the form, the applicant data is transmitted to us in encrypted form in accordance with the state of the art, stored by us and evaluated exclusively for the purpose of processing the application. The processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR (or Section 26 Para. 1 BDSG), in the sense of which going through the application process is considered to be the initiation of an employment contract.
Insofar as special categories of personal data within the meaning of Article 9 (1) GDPR (e.g. health data such as information on the severely disabled) are requested from applicants, processing takes place in accordance with Article 9 (2) lit. b. GDPR, so that we can exercise the rights arising from labor law and social security and social protection law and fulfill our obligations in this regard.
Cumulatively or alternatively, the processing of the special data categories may also be based on Art. 9 para. 1 lit. h DSGVO if it is used for health or occupational health purposes, for assessing the applicant's ability to work, for medical diagnosis, care or treatment in the health or social sector or for the administration of systems and services in the health or social sector he follows.
If the applicant is not selected or if an applicant withdraws his application prematurely, his data submitted in the form and all electronic correspondence, including the application email, will be deleted after 6 months at the latest after notification. This period is based on our legitimate interest in answering any follow-up questions about the application and, if necessary, in being able to meet our obligations to provide evidence from the regulations on the equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Article 6 (1) (b) GDPR (when processed in Germany in conjunction with Section 26 (1) BDSG) for the purpose of carrying out the employment relationship.
12) Data collection when visiting our app
12.1 When you use our app for purely informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to the website server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- The website visited
- Date and time of accessing the website
- Volume of data transmitted in bytes
- Source/reference from where you accessed the website
- Browser used
- Operating system used.
- IP address used (anonymous if applicable)
The data is processed in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data is not disseminated or used in any other way. However, we reserve the right to check the server logfiles retrospectively if there is concrete evidence of unlawful use.
12.2 For security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the data controller), our mobile app uses SSL or TLS encryption.
12.3 If you use the location function ("My Location" / "My State") in the app, or allow it automatically, the app will process your approximate or precise location in the foreground to display location-based content (e.g., weather, sunrise/sunset times, geo-based hunting times). Sharing this information is voluntary. You can disable location sharing at any time in your device's system settings.
12.4 If you enable push notifications in the app, we use Google's Firebase Cloud Messaging (FCM) to deliver messages to you (e.g., offers, app news). For this purpose, a device-specific registration token is generated and processed by Google to address push notifications to your device.
Provider: Google Ireland Limited (for EU), Google LLC (USA).
Revocation/Opt-Out: Push notifications can be deactivated at any time in the app or in the device's system settings; the token will then no longer be used.
12.5 To display weather, sun and moon data, our server calls (wärmebild24.comThe app uses external interfaces (e.g., MET Norway Weather API/Sunrise). For this purpose, the app transmits coordinates and date to our server; the external query is performed server-side (your IP address is not shared with the third-party provider).
Storage duration: Weather, sun and moon data are only cached temporarily for technical reasons, then automatically deleted.
12.6 The app stores information locally on the device, such as the last selected location and the last selected federal state (hunting seasons). This data does not leave your device unless you initiate a request (e.g., location search). Legal basis: Art. 6 para. 1 lit. f GDPR (legitimate interest in a user-friendly app).
12.7 We do not use cross-app tracking via advertising IDFA (Intended Advertising Identifier) and do not request App Tracking Transparency (ATT) consent for advertising purposes. Should we integrate analytics or advertising services in the future, we will obtain your consent beforehand and update this privacy policy accordingly.
13) Tools and miscellaneous
13.1 – Lexware Office
We use the cloud-based accounting software service from the following provider to do the accounting: Haufe-Lexware GmbH & Co. KG, Munzinger Straße 9, 79111 Freiburg, Germany
The provider processes incoming and outgoing invoices and, if necessary, the bank transactions of our company in order to automatically record invoices, match them to the transactions and create the financial accounting from them in a partially automated process.
If personal data is also processed, the processing is based on our legitimate interest in the efficient organization and documentation of our business transactions in accordance with Art. 6 (1) (f) GDPR.
13.2 Cookie Consent Tool
This website uses a so-called “cookie consent tool” to obtain effective user consent for cookies and cookie-based applications that require consent. The “cookie consent tool” is displayed to users when they access the page in the form of an interactive user interface on which consent can be given for certain cookies and/or cookie-based applications by checking a box. By using the tool, all cookies/services requiring consent are only loaded if the respective user gives their consent by checking the box. This ensures that such cookies are only set on the user's device if consent has been given.
The tool sets technically necessary cookies in order to save your cookie preferences. Personal user data are generally not processed here.
If, in individual cases, personal data (such as the IP address) is processed for the purpose of storing, assigning or logging cookie settings, this is done in accordance with Art. 6 Para. 1 lit.f GDPR on the basis of our legitimate interest in a Legally compliant, user-specific and user-friendly consent management for cookies and therefore a legally compliant design of our website.
Another legal basis for processing is Article 6 (1) (c) GDPR. As the person responsible, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user consent.
If necessary, we have concluded an order processing contract with the provider, which ensures the protection of the data of our site visitors and prohibits unauthorized disclosure to third parties.
Further information on the operator and the setting options for the cookie consent tool can be found directly in the corresponding user interface on our website.
13.3 Doofinder
This website uses the search technology service of the following provider: DooFinder SL, Madrid 28037, Rufino González 23 bis, 1º 1, Spain
To provide the search function for articles via the search field and for navigation and filters, the provider collects and stores certain user information (e.g. the user or session ID) in an anonymous form.
If personal data is also processed here, the processing is carried out in accordance with Article 6 (1) (f) GDPR on the basis of our legitimate interest in providing an error-tolerant search for articles and therefore in optimal marketing of our offer.
14) Rights of the data subject
14.1 The applicable data protection law grants you the following rights of data subjects (information and intervention rights) vis-à-vis the person responsible with regard to the processing of your personal data, whereby reference is made to the stated legal basis for the respective exercise requirements:
- Right to information in accordance with Art. 15 GDPR;
- Right to rectification in accordance with Art. 16 GDPR;
- Right to deletion in accordance with Art. 17 GDPR;
- Right to restriction of processing in accordance with Art. 18 GDPR;
- Right to information in accordance with Art. 19 GDPR;
- Right to data portability in accordance with Art. 20 GDPR;
- Right to revoke consent given in accordance with Art. 7 Para. 3 GDPR;
- Right to lodge a complaint in accordance with Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA WITHIN A BALANCING OF INTERESTS AND BASED ON OUR OVERRIDING LEGITIAMTE INTEREST, YOU HAVE THE RIGHT TO OBJECT TO THIS PROCESSING AT ANY TIME WITH FUTURE EFFECT FOR REASONS EMANATING FROM YOUR SPECIFIC SITUATION.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA. WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING PRIVILEGED REASONS FOR PROCESSING THAT OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE, OR DEFENCE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT ADVERTISING, YOU HAVE THE RIGHT TO OBJECT TO THE PROCESSING OF YOUR PERSONAL DATA FOR SUCH ADVERTISING PURPOSES AT ANY TIME. YOU CAN EXERCISE YOUR OBJECTION AS DESCRIBED ABOVE.
IF YOU MAKE USE OF YOUR RIGHT TO OBJECT WE WILL TERMINATE PROCESSING THE RELEVANT DATA FOR DIRECT ADVERTISING PURPOSES.
15) Storage period of personal data
The storage duration of personal data is determined by the respective legal framework, the processing purpose, and - where appropriate - additionally by the respective legal retention period (e.g. retention periods pertaining to commercial or tax legislation).
When processing personal data on the basis of an express consent in accordance with Article 6 Paragraph 1 lit. a GDPR, the data concerned will be stored until you revoke your consent.
If legal retention periods exist for data that have been processed within transactional or transactional-similar obligations on the basis on Article 6(1)(b) GDPR, these data will be routinely erased after expiry of the retention period provided they are no longer required for the fulfilment or initiation of a contract and/or no legitimate interest on continued storage continues from our side.
When processing personal data on the basis of Article 6 Paragraph 1 Letter f GDPR, this data will be stored until you exercise your right of objection in accordance with Article 21 Paragraph 1 GDPR, unless we can provide compelling reasons worthy of protection prove the processing that outweighs your interests, rights and freedoms, or the processing serves to assert, exercise or defend legal claims.
When processing personal data for the purpose of direct advertising on the basis of Article 6 (1) (f) GDPR, this data will be stored until you exercise your right of objection under Article 21 (2) GDPR.
If any other information of this declaration about specific processing situations does not result in any other outcomes, stored personal data will be erased when they are no longer required for the purposes for which they were collected or processed in any other way.
