DATA PROTECTION DECLARATION
1) Information on the Collection of Personal Data and Contact Details of the Controller
1.1 We are pleased that you are visiting our website and thank you for your interest. On
the following pages, we inform you about the handling of your personal data when using
our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the
General Data Protection Regulation (GDPR), is Zoeppritz GmbH, Lindwurmstr. 125, 80337
München, Germany, Phone.: +49 (0) 89 94 39 736 0, Fax: +49 (0) 89 94 39 736 36, e-mail:
info@zoeppritz.com. The controller in charge of the processing of personal data is the
natural or legal person who alone or jointly with others determines the purposes and
means of the processing of personal data.
1.1 We are pleased that you are visiting our website and thank you for your interest. On
the following pages, we inform you about the handling of your personal data when using
our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the
General Data Protection Regulation (GDPR), is Zoeppritz GmbH, Lindwurmstr. 125, 80337
München, Germany, Phone.: +49 (0) 89 94 39 736 0, Fax: +49 (0) 89 94 39 736 36, e-mail:
info@zoeppritz.com. The controller in charge of the processing of personal data is the
natural or legal person who alone or jointly with others determines the purposes and
means of the processing of personal data.
2) Data Collection When You Visit Our Website
2.1 When using our website for information only, i.e. if you do not register or otherwise
provide us with information, we only collect data that your browser transmits to our server
(so-called „server log files“). When you visit our website, we collect the following
data that is technically necessary for us to display the website to you:
– Our visited website
– Date and time at the moment of access
– Amount of data sent in bytes
– Source/reference from which you came to the page
– Browser used
– Operating system used
– IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis
of our legitimate interest in improving the stability and functionality of our website. The
data will not be passed on or used in any other way. However, we reserve the right to
check the server log files subsequently, if there are any concrete indications of illegal
use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the
transmission of personal data and other confidential content (e.g. orders or inquiries
to the controller). You can recognize an encrypted connection by the character string
https:// and the lock symbol in your browser line.
2.1 When using our website for information only, i.e. if you do not register or otherwise
provide us with information, we only collect data that your browser transmits to our server
(so-called „server log files“). When you visit our website, we collect the following
data that is technically necessary for us to display the website to you:
– Our visited website
– Date and time at the moment of access
– Amount of data sent in bytes
– Source/reference from which you came to the page
– Browser used
– Operating system used
– IP address used (if applicable: in anonymized form)
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis
of our legitimate interest in improving the stability and functionality of our website. The
data will not be passed on or used in any other way. However, we reserve the right to
check the server log files subsequently, if there are any concrete indications of illegal
use.
2.2 This website uses SSL or TLS encryption for security reasons and to protect the
transmission of personal data and other confidential content (e.g. orders or inquiries
to the controller). You can recognize an encrypted connection by the character string
https:// and the lock symbol in your browser line.
3) Hosting & Content Delivery Network
For the hosting of our website and the presentation of the page content, we use a provider
that provides its services itself or through selected subcontractors exclusively on
servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded an order processing contract with the provider, which ensures the
protection of the data of our website visitors and prohibits unauthorised disclosure to
third parties.
For the hosting of our website and the presentation of the page content, we use a provider
that provides its services itself or through selected subcontractors exclusively on
servers within the European Union.
All data collected on our website is processed on these servers.
We have concluded an order processing contract with the provider, which ensures the
protection of the data of our website visitors and prohibits unauthorised disclosure to
third parties.
4) Cookies
In order to make your visit to our website more attractive and to enable the use of certain
functions, we use cookies, i.e. small text files that are stored on your end device. In
some cases, these cookies are automatically deleted again after the browser is closed
(so-called „session cookies“), in other cases, these cookies remain on your end device
for longer and allow page settings to be saved (so-called „persistent cookies“). In the
latter case, you can find the duration of the storage in the overview of the cookie settings
of your web browser.
If personal data is also processed by individual cookies set by us, the processing is
carried out either in accordance with Art. 6 (1) point b GDPR for the performance of the
contract, in accordance with Art. 6 (1) point a GDPR in the case of consent given or in
accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best
possible functionality of the website as well as a customer-friendly and effective design
of the page visit.
You can set your browser in such a way that you are informed about the setting of cookies
and you can decide individually about their acceptance or exclude the acceptance of
cookies for certain cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.
In order to make your visit to our website more attractive and to enable the use of certain
functions, we use cookies, i.e. small text files that are stored on your end device. In
some cases, these cookies are automatically deleted again after the browser is closed
(so-called „session cookies“), in other cases, these cookies remain on your end device
for longer and allow page settings to be saved (so-called „persistent cookies“). In the
latter case, you can find the duration of the storage in the overview of the cookie settings
of your web browser.
If personal data is also processed by individual cookies set by us, the processing is
carried out either in accordance with Art. 6 (1) point b GDPR for the performance of the
contract, in accordance with Art. 6 (1) point a GDPR in the case of consent given or in
accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best
possible functionality of the website as well as a customer-friendly and effective design
of the page visit.
You can set your browser in such a way that you are informed about the setting of cookies
and you can decide individually about their acceptance or exclude the acceptance of
cookies for certain cases or in general.
Please note that the functionality of our website may be limited if cookies are not accepted.
5) Contacting Us
When you contact us (e.g. via contact form or e-mail), personal data is collected. Which
data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your
request or for establishing contact and for the associated technical administration.
The legal basis for processing data is our legitimate interest in responding to your request
in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a
contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data
will be deleted after final processing of your enquiry; this is the case if it can be inferred
from the circumstances that the facts in question have been finally clarified, provided
there are no legal storage obligations to the contrary.
When you contact us (e.g. via contact form or e-mail), personal data is collected. Which
data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your
request or for establishing contact and for the associated technical administration.
The legal basis for processing data is our legitimate interest in responding to your request
in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a
contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data
will be deleted after final processing of your enquiry; this is the case if it can be inferred
from the circumstances that the facts in question have been finally clarified, provided
there are no legal storage obligations to the contrary.
6) Data Processing When Opening a Customer Account and for Contract Processing
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed
to the extent required in each case if you provide us with this data when opening
a customer account. The data required for opening an account can be found in the input
mask of the corresponding form on our website. Deletion of your customer account is
possible at any time and can be done by sending a message to the above address of the
person responsible. After deletion of your customer account, your data will be deleted,
provided that all contracts concluded via it have been fully processed, no legal retention
periods are opposed and no legitimate interest on our part in the continued storage
exists.
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed
to the extent required in each case if you provide us with this data when opening
a customer account. The data required for opening an account can be found in the input
mask of the corresponding form on our website. Deletion of your customer account is
possible at any time and can be done by sending a message to the above address of the
person responsible. After deletion of your customer account, your data will be deleted,
provided that all contracts concluded via it have been fully processed, no legal retention
periods are opposed and no legitimate interest on our part in the continued storage
exists.
7) Use of Client Data for Direct Advertising
7.1 Subscribe to our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our
offers. The only mandatory data for sending the newsletter is your e-mail address. The
provision of further data is voluntary and will be used to address you personally. We use
the so-called double opt-in procedure for sending the newsletter. This means that we will
only send you an e-mail newsletter once you have expressly confirmed that you consent
to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm
that you wish to receive the newsletter in future by clicking on an appropriate link.
By activating the confirmation link, you give us your consent for the use of your personal
data pursuant to Art. 6 (1) point a GPPR. When you register for the newsletter, we store
your IP address entered by your Internet service provider (ISP) as well as the date and
time of registration for the purpose of tracing any possible misuse of your e-mail address
at a later date. The data collected by us when you register for the newsletter is used
exclusively for the promotional purposes by way of the newsletter. You can unsubscribe
from the newsletter at any time via the link provided for this purpose in the newsletter or
by sending a corresponding message to the responsible person named at the beginning.
After unsubscribing, your e-mail address will be deleted from our newsletter distribution
list immediately, unless you have expressly consented to further use of your data, or we
reserve the right to a more extensive use your data which is permitted by law and about
which we inform you in this declaration.
7.2 Notification by e-mail of stock availability
If our online shop provides the possibility of informing you by e-mail about the time of
availability for selected, temporarily unavailable items, you can subscribe to our e-mail
notification service for product availability. If you register for our e-mail notification service
for product availability, we will send you a one-time message by e-mail about the
availability of the article you have selected. The only mandatory information needed to
send this notification is your e-mail address. The indication of further data is voluntary
and is used if appropriate, in order to be able to address you personally. We use the
so-called double opt-in procedure when sending this notification. This means that we
will only send you a corresponding notification after you have expressly confirmed that
you agree to receive such a message. We will then send you a confirmation e-mail asking
you to click on a link to confirm that you wish to receive such notification.
By activating the confirmation link, you consent to the use of your personal data in
accordance with Art. 6 (1) point a GDPR. When you register for our e-mail notification
service for product availability, we store your IP address as registered by the internet
service provider (ISP) as well as the date and time of registration in order to be able
to track any possible misuse of your e-mail address at a later time. The data collected
by us when you register for our e-mail notification service regarding the availability of
goods is used exclusively for the purpose of informing you about the availability of a
particular item in our online shop. You can cancel the e-mail notification service for the
availability of goods at any time by sending a corresponding message to the controller
in charge of data processing named at the beginning. After you have unsubscribed, your
e-mail address will be deleted immediately from our distribution list, unless you have
expressly consented to the further use of your data or unless we reserve the right to
make further use of your data in accordance with the law about which we inform you in
this declaration.
7.1 Subscribe to our e-mail newsletter
If you register for our e-mail newsletter, we will regularly send you information about our
offers. The only mandatory data for sending the newsletter is your e-mail address. The
provision of further data is voluntary and will be used to address you personally. We use
the so-called double opt-in procedure for sending the newsletter. This means that we will
only send you an e-mail newsletter once you have expressly confirmed that you consent
to receiving newsletters. We will then send you a confirmation e-mail asking you to confirm
that you wish to receive the newsletter in future by clicking on an appropriate link.
By activating the confirmation link, you give us your consent for the use of your personal
data pursuant to Art. 6 (1) point a GPPR. When you register for the newsletter, we store
your IP address entered by your Internet service provider (ISP) as well as the date and
time of registration for the purpose of tracing any possible misuse of your e-mail address
at a later date. The data collected by us when you register for the newsletter is used
exclusively for the promotional purposes by way of the newsletter. You can unsubscribe
from the newsletter at any time via the link provided for this purpose in the newsletter or
by sending a corresponding message to the responsible person named at the beginning.
After unsubscribing, your e-mail address will be deleted from our newsletter distribution
list immediately, unless you have expressly consented to further use of your data, or we
reserve the right to a more extensive use your data which is permitted by law and about
which we inform you in this declaration.
7.2 Notification by e-mail of stock availability
If our online shop provides the possibility of informing you by e-mail about the time of
availability for selected, temporarily unavailable items, you can subscribe to our e-mail
notification service for product availability. If you register for our e-mail notification service
for product availability, we will send you a one-time message by e-mail about the
availability of the article you have selected. The only mandatory information needed to
send this notification is your e-mail address. The indication of further data is voluntary
and is used if appropriate, in order to be able to address you personally. We use the
so-called double opt-in procedure when sending this notification. This means that we
will only send you a corresponding notification after you have expressly confirmed that
you agree to receive such a message. We will then send you a confirmation e-mail asking
you to click on a link to confirm that you wish to receive such notification.
By activating the confirmation link, you consent to the use of your personal data in
accordance with Art. 6 (1) point a GDPR. When you register for our e-mail notification
service for product availability, we store your IP address as registered by the internet
service provider (ISP) as well as the date and time of registration in order to be able
to track any possible misuse of your e-mail address at a later time. The data collected
by us when you register for our e-mail notification service regarding the availability of
goods is used exclusively for the purpose of informing you about the availability of a
particular item in our online shop. You can cancel the e-mail notification service for the
availability of goods at any time by sending a corresponding message to the controller
in charge of data processing named at the beginning. After you have unsubscribed, your
e-mail address will be deleted immediately from our distribution list, unless you have
expressly consented to the further use of your data or unless we reserve the right to
make further use of your data in accordance with the law about which we inform you in
this declaration.
8) Processing of Data for the Purpose of Order Handling
8.1 Insofar as necessary for the processing of the contract for delivery and payment
purposes, the personal data collected by us will be passed on to the commissioned
transport company and the commissioned credit institution in accordance with Art. 6
Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis
of a corresponding contract, we will process the contact data (name, address, e-mail
address) provided by you when placing the order in order to inform you personally by
suitable means of communication (e.g. by post or e-mail) about upcoming updates within
the legally stipulated period of time within the framework of our statutory duty to inform
pursuant to Art. 6 Para. 1 lit. c GDPR. Your contact details will be used strictly for the
purpose of informing you about updates owed by us and will only be processed by us for
this purpose to the extent that this is necessary for the respective information.
In order to process your order, we also work together with the following service provider(
s), who support us in whole or in part in the execution of concluded contracts.
Certain personal data is transferred to these service providers in accordance with the
following information.
8.2 Passing on Personal Data to Shipping Service Providers
– DHL
We use the following provider as transport service provider: Deutsche Post AG, Charlesde-
Gaulle-Straße 20, 53113 Bonn, Germany
We pass on your e-mail address and/or telephone number to the provider in accordance
with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating
a delivery date or for delivery notification, if you have given your express consent in
the ordering process. Otherwise, we will only pass on the name of the recipient and the
delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1)
point b GDPR. The transmission only takes place to the extent necessary for the delivery
of the goods. In this case, prior coordination of the delivery date with the supplier or the
delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible
person named above or vis-à-vis the provider.
– UPS
We use the following provider as transport service provider: United Parcel Service
Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany
We pass on your e-mail address and/or telephone number to the provider in accordance
with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating
a delivery date or for delivery notification, if you have given your express consent in
the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1)
point b GDPR. The transmission only takes place to the extent necessary for the delivery
of the goods. In this case, prior coordination of the delivery date with the supplier or the
delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible
person named above or vis-à-vis the provider.
8.3 Use of Payment Service Providers
– Klarna
Online payment methods from the following provider are available on this website: Klarna
Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden
If you select a payment method of the provider for which you make an advance payment
(e.g. credit card payment), your payment data provided during the ordering process (including
name, address, bank and payment card information, currency and transaction
number) as well as information about the content of your order will be passed on to the
provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be
passed on for the purpose of processing payment with the provider and only to the extent
necessary for this purpose.
When selecting a payment method of the provider with which the provider makes advance
payments (such as invoice purchase or instalment purchase or direct debit), you will
also be asked to provide certain personal data (first name and surname, street, house
number, postcode, city, date of birth, e-mail address, telephone number, if applicable
data on alternative means of payment) during the ordering process.
In order to safeguard our legitimate interest in determining the solvency of our customers,
this data is passed on to the provider by us for the purpose of a credit check in
accordance with Art. 6 (1) point f GDPR. On the basis of the personal data provided by
you as well as further data (such as shopping cart, invoice total, order history, payment
history), the provider checks whether the payment option selected by you can be granted
with regard to payment and/or bad debt risks.
In addition to internal provider criteria, identity and creditworthiness information from
the following credit agencies may also be included in the decision-making process as
part of the application review in accordance with Art. 6 (1) point f GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). Insofar as score
values are included in the result of the credit report, they have their basis in a scientifically
recognised mathematical-statistical procedure. The calculation of the score values
includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or
to the provider. However, the provider may still be entitled to process your personal data
if this is necessary for the contractual processing of payments.
– PAYONE
Online payment methods from the following provider are available on this website: PAYONE
GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, Germany
If you select a payment method of the provider for which you make an advance payment
(e.g. credit card payment), your payment data provided during the ordering process (including
name, address, bank and payment card information, currency and transaction
number) as well as information about the content of your order will be passed on to the
provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be
passed on for the purpose of processing payment with the provider and only to the extent
necessary for this purpose.
– Paypal
Online payment methods from the following provider are available on this website: Pay-
Pal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method of the provider for which you make an advance payment,
your payment data provided during the ordering process (including name, address, bank
and payment card information, currency and transaction number) as well as information
about the content of your order will be passed on to the provider in accordance with
Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the purpose of
processing payment with the provider and only to the extent necessary for this purpose.
When selecting a payment method of the provider with which the provider makes advance
payments, you will also be asked to provide certain personal data (first name and
surname, street, house number, postcode, city, date of birth, e-mail address, telephone
number, if applicable data on alternative means of payment) during the ordering process.
In order to safeguard our legitimate interest in determining the solvency of our customers,
this data is passed on to the provider by us for the purpose of a credit check in
accordance with Art. 6 (1) point f GDPR. On the basis of the personal data provided by
you as well as further data (such as shopping cart, invoice total, order history, payment
history), the provider checks whether the payment option selected by you can be granted
with regard to payment and/or bad debt risks.
The credit report may contain probability values (so-called score values). Insofar as score
values are included in the result of the credit report, they have their basis in a scientifically
recognised mathematical-statistical procedure. The calculation of the score values
includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or
to the provider. However, the provider may still be entitled to process your personal data
if this is necessary for the contractual processing of payments.
8.4 Electronic Right of Withdrawal Function for Distance Contracts
Consumers who conclude contracts on this website for which a statutory right of withdrawal
exists have the option to declare their withdrawal via an electronic withdrawal
function, in accordance with the applicable withdrawal provisions.
To provide this electronic withdrawal function, we utilize a solution provided by the following
service provider: MarketPress GmbH, Karcherallee 13, 01277, Dresden, Deutschland.
When using the withdrawal function, in addition to details identifying the specific contract
being withdrawn from, other personal information—such as the consumer‘s first
name, last name, and email address—must be provided or confirmed.
This information is initially collected by the service provider—based on our legitimate
interest in providing a user-friendly, stable, and process-optimized solution pursuant to
Art. 6 (1) point f GDPR—and is subsequently used to confirm receipt of the withdrawal
declaration on our behalf via email, before finally being transmitted to us. We subsequently
process the transmitted information for the proper handling of the withdrawal
pursuant to Art. 6 (1) point b GDPR and Art. 6 (1) point c GDPR, based on our statutory
obligation to provide an electronic withdrawal function for remunerated distance contracts
with consumers.
The information collected by the service provider is routinely deleted following the final
processing of a withdrawal, provided that no statutory retention obligations preclude
such deletion.
We have concluded an order processing agreement with the service provider; this agreement
safeguards the data processed within the scope
8.1 Insofar as necessary for the processing of the contract for delivery and payment
purposes, the personal data collected by us will be passed on to the commissioned
transport company and the commissioned credit institution in accordance with Art. 6
Para. 1 lit. b GDPR.
If we owe you updates for goods with digital elements or for digital products on the basis
of a corresponding contract, we will process the contact data (name, address, e-mail
address) provided by you when placing the order in order to inform you personally by
suitable means of communication (e.g. by post or e-mail) about upcoming updates within
the legally stipulated period of time within the framework of our statutory duty to inform
pursuant to Art. 6 Para. 1 lit. c GDPR. Your contact details will be used strictly for the
purpose of informing you about updates owed by us and will only be processed by us for
this purpose to the extent that this is necessary for the respective information.
In order to process your order, we also work together with the following service provider(
s), who support us in whole or in part in the execution of concluded contracts.
Certain personal data is transferred to these service providers in accordance with the
following information.
8.2 Passing on Personal Data to Shipping Service Providers
– DHL
We use the following provider as transport service provider: Deutsche Post AG, Charlesde-
Gaulle-Straße 20, 53113 Bonn, Germany
We pass on your e-mail address and/or telephone number to the provider in accordance
with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating
a delivery date or for delivery notification, if you have given your express consent in
the ordering process. Otherwise, we will only pass on the name of the recipient and the
delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1)
point b GDPR. The transmission only takes place to the extent necessary for the delivery
of the goods. In this case, prior coordination of the delivery date with the supplier or the
delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible
person named above or vis-à-vis the provider.
– UPS
We use the following provider as transport service provider: United Parcel Service
Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss, Germany
We pass on your e-mail address and/or telephone number to the provider in accordance
with Art. 6 (1) point a GDPR prior to delivery of the goods for the purpose of coordinating
a delivery date or for delivery notification, if you have given your express consent in
the ordering process. Otherwise, we will only pass on the name of the recipient and the delivery address to the supplier for the purpose of delivery in accordance with Art. 6 (1)
point b GDPR. The transmission only takes place to the extent necessary for the delivery
of the goods. In this case, prior coordination of the delivery date with the supplier or the
delivery announcement is not possible.
The consent can be revoked at any time with effect for the future vis-à-vis the responsible
person named above or vis-à-vis the provider.
8.3 Use of Payment Service Providers
– Klarna
Online payment methods from the following provider are available on this website: Klarna
Bank AB, Sveavägen 46, 111 34 Stockholm, Sweden
If you select a payment method of the provider for which you make an advance payment
(e.g. credit card payment), your payment data provided during the ordering process (including
name, address, bank and payment card information, currency and transaction
number) as well as information about the content of your order will be passed on to the
provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be
passed on for the purpose of processing payment with the provider and only to the extent
necessary for this purpose.
When selecting a payment method of the provider with which the provider makes advance
payments (such as invoice purchase or instalment purchase or direct debit), you will
also be asked to provide certain personal data (first name and surname, street, house
number, postcode, city, date of birth, e-mail address, telephone number, if applicable
data on alternative means of payment) during the ordering process.
In order to safeguard our legitimate interest in determining the solvency of our customers,
this data is passed on to the provider by us for the purpose of a credit check in
accordance with Art. 6 (1) point f GDPR. On the basis of the personal data provided by
you as well as further data (such as shopping cart, invoice total, order history, payment
history), the provider checks whether the payment option selected by you can be granted
with regard to payment and/or bad debt risks.
In addition to internal provider criteria, identity and creditworthiness information from
the following credit agencies may also be included in the decision-making process as
part of the application review in accordance with Art. 6 (1) point f GDPR:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report may contain probability values (so-called score values). Insofar as score
values are included in the result of the credit report, they have their basis in a scientifically
recognised mathematical-statistical procedure. The calculation of the score values
includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or
to the provider. However, the provider may still be entitled to process your personal data
if this is necessary for the contractual processing of payments.
– PAYONE
Online payment methods from the following provider are available on this website: PAYONE
GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, Germany
If you select a payment method of the provider for which you make an advance payment
(e.g. credit card payment), your payment data provided during the ordering process (including
name, address, bank and payment card information, currency and transaction
number) as well as information about the content of your order will be passed on to the
provider in accordance with Art. 6 (1) point b GDPR. In this case, your data will only be
passed on for the purpose of processing payment with the provider and only to the extent
necessary for this purpose.
– Paypal
Online payment methods from the following provider are available on this website: Pay-
Pal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg
If you select a payment method of the provider for which you make an advance payment,
your payment data provided during the ordering process (including name, address, bank
and payment card information, currency and transaction number) as well as information
about the content of your order will be passed on to the provider in accordance with
Art. 6 (1) point b GDPR. In this case, your data will only be passed on for the purpose of
processing payment with the provider and only to the extent necessary for this purpose.
When selecting a payment method of the provider with which the provider makes advance
payments, you will also be asked to provide certain personal data (first name and
surname, street, house number, postcode, city, date of birth, e-mail address, telephone
number, if applicable data on alternative means of payment) during the ordering process.
In order to safeguard our legitimate interest in determining the solvency of our customers,
this data is passed on to the provider by us for the purpose of a credit check in
accordance with Art. 6 (1) point f GDPR. On the basis of the personal data provided by
you as well as further data (such as shopping cart, invoice total, order history, payment
history), the provider checks whether the payment option selected by you can be granted
with regard to payment and/or bad debt risks.
The credit report may contain probability values (so-called score values). Insofar as score
values are included in the result of the credit report, they have their basis in a scientifically
recognised mathematical-statistical procedure. The calculation of the score values
includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to us or
to the provider. However, the provider may still be entitled to process your personal data
if this is necessary for the contractual processing of payments.
8.4 Electronic Right of Withdrawal Function for Distance Contracts
Consumers who conclude contracts on this website for which a statutory right of withdrawal
exists have the option to declare their withdrawal via an electronic withdrawal
function, in accordance with the applicable withdrawal provisions.
To provide this electronic withdrawal function, we utilize a solution provided by the following
service provider: MarketPress GmbH, Karcherallee 13, 01277, Dresden, Deutschland.
When using the withdrawal function, in addition to details identifying the specific contract
being withdrawn from, other personal information—such as the consumer‘s first
name, last name, and email address—must be provided or confirmed.
This information is initially collected by the service provider—based on our legitimate
interest in providing a user-friendly, stable, and process-optimized solution pursuant to
Art. 6 (1) point f GDPR—and is subsequently used to confirm receipt of the withdrawal
declaration on our behalf via email, before finally being transmitted to us. We subsequently
process the transmitted information for the proper handling of the withdrawal
pursuant to Art. 6 (1) point b GDPR and Art. 6 (1) point c GDPR, based on our statutory
obligation to provide an electronic withdrawal function for remunerated distance contracts
with consumers.
The information collected by the service provider is routinely deleted following the final
processing of a withdrawal, provided that no statutory retention obligations preclude
such deletion.
We have concluded an order processing agreement with the service provider; this agreement
safeguards the data processed within the scope
9) Online Marketing
9.1 Data Feed Watch
This website uses the software-based marketing service of the following provider for the
provision and synchronisation of various customer management services: WordWatch,
Inc.,1195 Chess Drive Suite 201 Foster City, CA 94404, USA
This service enables the automated processing of feed activities, the control of advertising in the marketing channels used and the analysis of the success of marketing measures,
as well as central e-mail marketing and contact management.
To fulfil the various functions, cookies are used, i.e. small text files that are stored locally
in the cache of your web browser on your end device and that enable an analysis of your
use of the website by us. In doing so, the cookies collect certain information, such as the
IP address, the location, the time of the page access.
All of the processing described above, in particular the setting of cookies to read information
from the end device used, will only be carried out if you have given us your
express consent to this in accordance with Art. 6 (1) point a GDPR. You can revoke your
consent at any time with effect for the future by deactivating this service in the „cookie
consent tool“ provided on the website.
Other legal bases for data processing that apply in the context of specific service functions
(such as the requirement for express consent in accordance with Art. 6 (1) point a
GDPR when sending newsletters) remain unaffected by this.
We have concluded an order processing agreement with the provider, which ensures the
protection of our website visitors‘ data and prohibits unauthorised disclosure to third
parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses
of the European Commission, which are meant to ensure compliance with the European
level of data protection.
9.2 AWIN Performance Advertising Network
We participate in the affiliate programme of the following provider: AWIN AG, Eichhornstraße
3, 10785 Berlin, Germany
In this context, we have placed links on our website that lead to offers on websites of the
provider or third parties („affiliate sites“).
In order to measure the success of an affiliate link, the analysis of orders generated via
such a link and the corresponding settlement of commission payments, the provider
uses cookies and/or similar technologies which are generally set on the affiliate sites
and for which we are not responsible in this respect under data protection law. In doing
so, the provider also regularly processes the IP address and, if applicable, further end
device information.
All of the processing described above, in particular the reading or saving of information
on the end device used by you, will only be carried out if you have given your express
consent to this in accordance with Art. 6 (1) point a GDPR. You can revoke your consent
at any time with effect for the future by using the cookie consent management options
on the affiliate sites.
9.1 Data Feed Watch
This website uses the software-based marketing service of the following provider for the
provision and synchronisation of various customer management services: WordWatch,
Inc.,1195 Chess Drive Suite 201 Foster City, CA 94404, USA
This service enables the automated processing of feed activities, the control of advertising in the marketing channels used and the analysis of the success of marketing measures,
as well as central e-mail marketing and contact management.
To fulfil the various functions, cookies are used, i.e. small text files that are stored locally
in the cache of your web browser on your end device and that enable an analysis of your
use of the website by us. In doing so, the cookies collect certain information, such as the
IP address, the location, the time of the page access.
All of the processing described above, in particular the setting of cookies to read information
from the end device used, will only be carried out if you have given us your
express consent to this in accordance with Art. 6 (1) point a GDPR. You can revoke your
consent at any time with effect for the future by deactivating this service in the „cookie
consent tool“ provided on the website.
Other legal bases for data processing that apply in the context of specific service functions
(such as the requirement for express consent in accordance with Art. 6 (1) point a
GDPR when sending newsletters) remain unaffected by this.
We have concluded an order processing agreement with the provider, which ensures the
protection of our website visitors‘ data and prohibits unauthorised disclosure to third
parties.
For the transfer of data to the USA, the provider relies on standard contractual clauses
of the European Commission, which are meant to ensure compliance with the European
level of data protection.
9.2 AWIN Performance Advertising Network
We participate in the affiliate programme of the following provider: AWIN AG, Eichhornstraße
3, 10785 Berlin, Germany
In this context, we have placed links on our website that lead to offers on websites of the
provider or third parties („affiliate sites“).
In order to measure the success of an affiliate link, the analysis of orders generated via
such a link and the corresponding settlement of commission payments, the provider
uses cookies and/or similar technologies which are generally set on the affiliate sites
and for which we are not responsible in this respect under data protection law. In doing
so, the provider also regularly processes the IP address and, if applicable, further end
device information.
All of the processing described above, in particular the reading or saving of information
on the end device used by you, will only be carried out if you have given your express
consent to this in accordance with Art. 6 (1) point a GDPR. You can revoke your consent
at any time with effect for the future by using the cookie consent management options
on the affiliate sites.
10) Web Analysis Services
Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited,
Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“), which can be used to
analyze the use of websites.
When using Google Analytics 4, so-called „cookies“ are used as standard. Cookies are
text files that are stored on your terminal device and enable an analysis of your use of a
website. The information collected by cookies about your use of the website (including
the IP address transmitted by your terminal device, shortened by the last digits, see below)
is usually transmitted to a Google server and stored and processed there. This may
also result in the transmission of information to the servers of Google LLC, a company
based in the USA, where the information is further processed.
When using Google Analytics 4, the IP address transmitted by your terminal device when
you use the website is always collected and processed by default and automatically only
in an anonymized manner, so that a direct personal reference of the collected information
is excluded. This automatic anonymization is carried out by shortening the IP address
transmitted by your terminal device by Google within member states of the European
Union (EU) or other contracting states of the Agreement on the European Economic Area
(EEA) by the last digits.
On our behalf, Google uses this and other information to evaluate your use of the website,
to compile reports (reports) on your website activities or your usage behavior and to
provide us with other services related to your website usage and internet usage. In this
context, the IP address transmitted and shortened by your terminal device within the
scope of Google Analytics 4 will not be merged with other data from Google. The data
collected in the context of the use of Google Analytics 4 will be retained for 2 months
and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about age,
gender and interests of website users on the basis of an evaluation of interest-based
advertising and with the involvement of third-party information via a special function, the
so-called „demographic characteristics“. This makes it possible to determine and distinguish
between groups of website users for the purpose of targeting marketing measures.
However, data collected via the „demographic characteristics“ cannot be assigned to a
specific person and thus not to you personally. This data collected via the „demographic
characteristics“ function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for
the storage and reading of information on the terminal device used by you for the use
of the website, will only take place if you have given us your express consent for this in
accordance with Art. 6 para. 1 letter a GDPR. Without your consent, Google Analytics 4
will not be used during your use of the website.
You can revoke your consent once given at any time with effect for the future. To exercise
your revocation, please deactivate this service via the „Cookie Consent Tool“ provided
on the website.
Google Signals
On this website, the „Google Signals“ service can also be used as an extension of Google
Analytics 4. With Google Signals, cross-device reports can be created by Google
(so-called „cross-device tracking“). If you have activated „personalised ads“ in your
Google account settings and you have linked your internet-enabled devices to your Google
account, Google can analyse user behaviour across devices and create database models
based on this, provided you have given your consent to the use of Google Analytics
in accordance with Art. 6 para. 1 letter a GDPR (see above). The logins and device types
of all page visitors who were logged into a Google account and performed a conversion
are taken into account. The data shows, among other things, on which device you first
clicked on an ad and on which device the associated conversion took place. Insofar as
Google Signals is used, we do not receive any personal data from Google, but only statistics
compiled on the basis of Google Signals. You have the option of deactivating the
„personalised ads“ function in the settings of your Google account and thus turning
off the cross-device analysis. To do this, follow the instructions on this page: https://
support.google.com/ads/answer/2662922?hl=de
Further information can be found here: https://support.google.com/analytics/answer/
7532985?hl=de
User IDs
As an extension of Google Analytics 4, the „UserIDs“ function can also be used on this
website. By assigning individual UserIDs, we can have Google create cross-device reports
(so-called „cross-device tracking“). This means that your usage behaviour can
also be analysed across devices if you have given your corresponding consent to the
use of Google Analytics in accordance with Art. 6 para. 1 letter a GDPR, if you have set
up a personal account by registering on this website and are logged into your personal
account on different end devices with your relevant login data. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first
time and on which end device the relevant conversion took place.
We have concluded a so-called data processing agreement with Google for our use of
Google Analytics 4, by which Google is obliged to protect the data of our website users
and not to pass it on to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
Further legal information on Google Analytics 4 can be found here: https://policies.google.
com/privacy?hl=en and https://business.safety.google/privacy/
Details on the processing triggered by Google Analytics 4 and Google‘s handling of data
from websites can be found here: https://policies.google.com/technologies/partner-sites
Google Analytics 4
This website uses Google Analytics 4, a service provided by Google Ireland Limited,
Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland („Google“), which can be used to
analyze the use of websites.
When using Google Analytics 4, so-called „cookies“ are used as standard. Cookies are
text files that are stored on your terminal device and enable an analysis of your use of a
website. The information collected by cookies about your use of the website (including
the IP address transmitted by your terminal device, shortened by the last digits, see below)
is usually transmitted to a Google server and stored and processed there. This may
also result in the transmission of information to the servers of Google LLC, a company
based in the USA, where the information is further processed.
When using Google Analytics 4, the IP address transmitted by your terminal device when
you use the website is always collected and processed by default and automatically only
in an anonymized manner, so that a direct personal reference of the collected information
is excluded. This automatic anonymization is carried out by shortening the IP address
transmitted by your terminal device by Google within member states of the European
Union (EU) or other contracting states of the Agreement on the European Economic Area
(EEA) by the last digits.
On our behalf, Google uses this and other information to evaluate your use of the website,
to compile reports (reports) on your website activities or your usage behavior and to
provide us with other services related to your website usage and internet usage. In this
context, the IP address transmitted and shortened by your terminal device within the
scope of Google Analytics 4 will not be merged with other data from Google. The data
collected in the context of the use of Google Analytics 4 will be retained for 2 months
and then deleted.
Google Analytics 4 also enables the creation of statistics with statements about age,
gender and interests of website users on the basis of an evaluation of interest-based
advertising and with the involvement of third-party information via a special function, the
so-called „demographic characteristics“. This makes it possible to determine and distinguish
between groups of website users for the purpose of targeting marketing measures.
However, data collected via the „demographic characteristics“ cannot be assigned to a
specific person and thus not to you personally. This data collected via the „demographic
characteristics“ function is retained for two months and then deleted.
All processing described above, in particular the setting of Google Analytics cookies for
the storage and reading of information on the terminal device used by you for the use
of the website, will only take place if you have given us your express consent for this in
accordance with Art. 6 para. 1 letter a GDPR. Without your consent, Google Analytics 4
will not be used during your use of the website.
You can revoke your consent once given at any time with effect for the future. To exercise
your revocation, please deactivate this service via the „Cookie Consent Tool“ provided
on the website.
Google Signals
On this website, the „Google Signals“ service can also be used as an extension of Google
Analytics 4. With Google Signals, cross-device reports can be created by Google
(so-called „cross-device tracking“). If you have activated „personalised ads“ in your
Google account settings and you have linked your internet-enabled devices to your Google
account, Google can analyse user behaviour across devices and create database models
based on this, provided you have given your consent to the use of Google Analytics
in accordance with Art. 6 para. 1 letter a GDPR (see above). The logins and device types
of all page visitors who were logged into a Google account and performed a conversion
are taken into account. The data shows, among other things, on which device you first
clicked on an ad and on which device the associated conversion took place. Insofar as
Google Signals is used, we do not receive any personal data from Google, but only statistics
compiled on the basis of Google Signals. You have the option of deactivating the
„personalised ads“ function in the settings of your Google account and thus turning
off the cross-device analysis. To do this, follow the instructions on this page: https://
support.google.com/ads/answer/2662922?hl=de
Further information can be found here: https://support.google.com/analytics/answer/
7532985?hl=de
User IDs
As an extension of Google Analytics 4, the „UserIDs“ function can also be used on this
website. By assigning individual UserIDs, we can have Google create cross-device reports
(so-called „cross-device tracking“). This means that your usage behaviour can
also be analysed across devices if you have given your corresponding consent to the
use of Google Analytics in accordance with Art. 6 para. 1 letter a GDPR, if you have set
up a personal account by registering on this website and are logged into your personal
account on different end devices with your relevant login data. The data collected in this way shows, among other things, on which end device you clicked on an ad for the first
time and on which end device the relevant conversion took place.
We have concluded a so-called data processing agreement with Google for our use of
Google Analytics 4, by which Google is obliged to protect the data of our website users
and not to pass it on to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
Further legal information on Google Analytics 4 can be found here: https://policies.google.
com/privacy?hl=en and https://business.safety.google/privacy/
Details on the processing triggered by Google Analytics 4 and Google‘s handling of data
from websites can be found here: https://policies.google.com/technologies/partner-sites
11) Retargeting/Remarketing/ Referral Advertising
11.1 Meta Pixel with extended data synchronisation
Within our online offering, we use the „Meta Pixel“ service of the following provider in
extended data synchronisation mode: Meta Platforms Ireland Limited, 4 Grand Canal
Square, Dublin 2, Ireland („Meta“)
If a user clicks on an advert placed by us on Facebook or Instagram, „Meta Pixel“ is used
to add a parameter to the URL of our linked page. This URL parameter is then entered in
the user‘s browser after redirection by a cookie that our linked page sets itself. In addition,
this cookie collects specific customer data, such as the email address, which we
collect on our website linked to the Facebook or Instagram ad during processes such as
purchase transactions, account logins or registrations (extended data synchronisation).
The cookie is then read and enables the data, including specific customer data, to be
transmitted to Meta.
We use „Meta Pixel“ with extended data matching to make our adverts (so-called „Ads“)
on Facebook and/or Instagram more effective and to ensure that they correspond to
the interests of users or have certain characteristics (e.g. interests in certain topics or
products determined on the basis of the websites visited), which we transmit to Meta
(so-called „Custom Audiences“).
In addition, we analyse the effectiveness of our advertisements by tracking whether
users were redirected to our website after clicking on an advertisement (conversion).
Compared to the standard version of „Meta Pixel“, the extended data synchronisation
function helps us to better measure the effectiveness of our advertising campaigns by
recording more associated conversions.
All transmitted data is stored and processed by Meta so that an assignment to the
respective user profile is possible and Meta can use the data for its own advertising
purposes in accordance with Meta‘s data usage guidelines (https://www.facebook.com/
about/privacy/). The data may enable Meta and its partners to place adverts on and off
Facebook.
All processing described above, in particular the setting of cookies for reading information
on the terminal device used, will only be carried out if you have given us your express
consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your
consent at any time with effect for the future by deactivating this service in the „cookie
consent tool“ provided on the website.
We have concluded an order processing contract with the provider, which ensures the
protection of the data of our website visitors and prohibits unauthorised disclosure to
third parties.
The information generated by Meta is usually transferred to a Meta server and stored there;
in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
11.2 Google Ads Conversion-Tracking
This website uses the online advertising program „Google Ads“ and, within the framework
of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House,
4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). We use Google Ads to draw attention
to our attractive offers on external websites with the help of advertising media (so-called
Google Adwords). We can determine how successful the individual advertising measures
are in relation to the data of the advertising campaigns. Our aim is to show you advertising
that is of interest to you, to make our website more interesting for you and to
achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google.
Cookies are small text files that are stored on your end device. These cookies usually
lose their validity after 30 days and are not used for personal identification. If the user visits
certain pages of this website and the cookie has not yet expired, Google and we can
recognize that the user clicked on the ad and was redirected to this page. Each Google
Ads customer receives a different cookie. Cookies cannot therefore be tracked across
Google Ads clients‘ websites. The information obtained using the conversion cookie is
used to create conversion statistics for Google Ads customers who have opted in to conversion
tracking. Clients learn the total number of users who clicked on their ad and were
redirected to a page tagged with a conversion tracking tag. However, they do not receive
any information that can be used to personally identify users. The use of Google Ads may
also result in the transmission of personal data to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and on Google‘s
handling of data from websites can be found here: https://policies.google.com/technologies/
partner-sites.
All of the processing described above, in particular the setting of cookies for reading
out information on the end device used, will only be carried out if you have given us
your express consent to do so in accordance with Art. 6 (1) a GDPR. You can revoke your
consent at any time with effect for the future by deactivating this service in the „Cookie
Consent Tool“ provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion
tracking by downloading and installing the Google browser plug-in available at the following
link:
https://www.google.com/settings/ads/plugin?hl=en
Please note that certain functions of this website may not be available or may be restricted
if you have deactivated the use of cookies.
Further information on Google‘s privacy standards can be found here: https://policies.
google.com/privacy and https://business.safety.google/privacy/
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
11.3 shopping24 Conversion Tracking
This website uses the conversion tracking technology of the following provider: shopping24
Gesellschaft für multimediale Anwendungen mbH, Poßmoorweg 2
22301 Hamburg, Germany
If you have accessed our website from an advertisement on the provider‘s domain, the
success of the advertisement can be tracked with the help of cookies and/or comparable
technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain end device and browser information, including your IP address
if applicable, is read via the tracking technology in order to record and evaluate user
actions predefined by us (e.g., completed transactions, leads, search queries on the website,
calls to product pages). This enables us to compile statistics on user behavior on
our website after forwarding from an advertisement, which we use to optimize our offer.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your
express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your
consent at any time with future effect by deactivating this service in the „cookie consent
tool“ provided on the website.
We have concluded an order processing agreement with the provider, which ensures
the protection of our site visitors‘ data and prohibits unauthorized disclosure to third
parties.
11.4 WooCommerce Order Attribution Tracking
This website uses the conversion tracking technology of the following provider: Automattic
Inc., 60 29 th Street #343, San Francisco, CA 94110, USA
If you have accessed our website from an advertisement on the provider‘s domain, the
success of the advertisement can be tracked with the help of cookies and/or comparable
technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain end device and browser information, including your IP address
if applicable, is read via the tracking technology in order to record and evaluate user
actions predefined by us (e.g., completed transactions, leads, search queries on the website,
calls to product pages). This enables us to compile statistics on user behavior on
our website after forwarding from an advertisement, which we use to optimize our offer.
All processing described above, in particular the setting of cookies for the reading of
information on the end device used, will only be carried out if you have given us your
express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your
consent at any time with future effect by deactivating this service in the „cookie consent
tool“ provided on the website.
We have concluded an order processing agreement with the provider, which ensures
the protection of our site visitors‘ data and prohibits unauthorized disclosure to third
parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
11.1 Meta Pixel with extended data synchronisation
Within our online offering, we use the „Meta Pixel“ service of the following provider in
extended data synchronisation mode: Meta Platforms Ireland Limited, 4 Grand Canal
Square, Dublin 2, Ireland („Meta“)
If a user clicks on an advert placed by us on Facebook or Instagram, „Meta Pixel“ is used
to add a parameter to the URL of our linked page. This URL parameter is then entered in
the user‘s browser after redirection by a cookie that our linked page sets itself. In addition,
this cookie collects specific customer data, such as the email address, which we
collect on our website linked to the Facebook or Instagram ad during processes such as
purchase transactions, account logins or registrations (extended data synchronisation).
The cookie is then read and enables the data, including specific customer data, to be
transmitted to Meta.
We use „Meta Pixel“ with extended data matching to make our adverts (so-called „Ads“)
on Facebook and/or Instagram more effective and to ensure that they correspond to
the interests of users or have certain characteristics (e.g. interests in certain topics or
products determined on the basis of the websites visited), which we transmit to Meta
(so-called „Custom Audiences“).
In addition, we analyse the effectiveness of our advertisements by tracking whether
users were redirected to our website after clicking on an advertisement (conversion).
Compared to the standard version of „Meta Pixel“, the extended data synchronisation
function helps us to better measure the effectiveness of our advertising campaigns by
recording more associated conversions.
All transmitted data is stored and processed by Meta so that an assignment to the
respective user profile is possible and Meta can use the data for its own advertising
purposes in accordance with Meta‘s data usage guidelines (https://www.facebook.com/
about/privacy/). The data may enable Meta and its partners to place adverts on and off
Facebook.
All processing described above, in particular the setting of cookies for reading information
on the terminal device used, will only be carried out if you have given us your express
consent to do so in accordance with Art. 6 para. 1 lit. a GDPR. You can revoke your
consent at any time with effect for the future by deactivating this service in the „cookie
consent tool“ provided on the website.
We have concluded an order processing contract with the provider, which ensures the
protection of the data of our website visitors and prohibits unauthorised disclosure to
third parties.
The information generated by Meta is usually transferred to a Meta server and stored there;
in this context, it may also be transferred to servers of Meta Platforms Inc. in the USA.
For data transfers to the USA, the provider has joined the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
11.2 Google Ads Conversion-Tracking
This website uses the online advertising program „Google Ads“ and, within the framework
of Google Ads, the conversion tracking of Google Ireland Limited, Gordon House,
4 Barrow St, Dublin, D04 E5W5, Ireland („Google“). We use Google Ads to draw attention
to our attractive offers on external websites with the help of advertising media (so-called
Google Adwords). We can determine how successful the individual advertising measures
are in relation to the data of the advertising campaigns. Our aim is to show you advertising
that is of interest to you, to make our website more interesting for you and to
achieve a fair calculation of the advertising costs incurred.
The conversion tracking cookie is set when a user clicks on an ad placed by Google.
Cookies are small text files that are stored on your end device. These cookies usually
lose their validity after 30 days and are not used for personal identification. If the user visits
certain pages of this website and the cookie has not yet expired, Google and we can
recognize that the user clicked on the ad and was redirected to this page. Each Google
Ads customer receives a different cookie. Cookies cannot therefore be tracked across
Google Ads clients‘ websites. The information obtained using the conversion cookie is
used to create conversion statistics for Google Ads customers who have opted in to conversion
tracking. Clients learn the total number of users who clicked on their ad and were
redirected to a page tagged with a conversion tracking tag. However, they do not receive
any information that can be used to personally identify users. The use of Google Ads may
also result in the transmission of personal data to the servers of Google LLC. in the USA.
Details on the processing triggered by Google Ads Conversion Tracking and on Google‘s
handling of data from websites can be found here: https://policies.google.com/technologies/
partner-sites.
All of the processing described above, in particular the setting of cookies for reading
out information on the end device used, will only be carried out if you have given us
your express consent to do so in accordance with Art. 6 (1) a GDPR. You can revoke your
consent at any time with effect for the future by deactivating this service in the „Cookie
Consent Tool“ provided on the website.
You can also permanently object to the setting of cookies by Google Ads conversion
tracking by downloading and installing the Google browser plug-in available at the following
link:
https://www.google.com/settings/ads/plugin?hl=en
Please note that certain functions of this website may not be available or may be restricted
if you have deactivated the use of cookies.
Further information on Google‘s privacy standards can be found here: https://policies.
google.com/privacy and https://business.safety.google/privacy/
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
11.3 shopping24 Conversion Tracking
This website uses the conversion tracking technology of the following provider: shopping24
Gesellschaft für multimediale Anwendungen mbH, Poßmoorweg 2
22301 Hamburg, Germany
If you have accessed our website from an advertisement on the provider‘s domain, the
success of the advertisement can be tracked with the help of cookies and/or comparable
technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain end device and browser information, including your IP address
if applicable, is read via the tracking technology in order to record and evaluate user
actions predefined by us (e.g., completed transactions, leads, search queries on the website,
calls to product pages). This enables us to compile statistics on user behavior on
our website after forwarding from an advertisement, which we use to optimize our offer.
All processing described above, in particular the setting of cookies for the reading of information on the end device used, will only be carried out if you have given us your
express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your
consent at any time with future effect by deactivating this service in the „cookie consent
tool“ provided on the website.
We have concluded an order processing agreement with the provider, which ensures
the protection of our site visitors‘ data and prohibits unauthorized disclosure to third
parties.
11.4 WooCommerce Order Attribution Tracking
This website uses the conversion tracking technology of the following provider: Automattic
Inc., 60 29 th Street #343, San Francisco, CA 94110, USA
If you have accessed our website from an advertisement on the provider‘s domain, the
success of the advertisement can be tracked with the help of cookies and/or comparable
technologies (tracking pixels, web beacons, pings, or HTTP requests).
For this purpose, certain end device and browser information, including your IP address
if applicable, is read via the tracking technology in order to record and evaluate user
actions predefined by us (e.g., completed transactions, leads, search queries on the website,
calls to product pages). This enables us to compile statistics on user behavior on
our website after forwarding from an advertisement, which we use to optimize our offer.
All processing described above, in particular the setting of cookies for the reading of
information on the end device used, will only be carried out if you have given us your
express consent to do so in accordance with Art. 6 (1) point a GDPR. You can revoke your
consent at any time with future effect by deactivating this service in the „cookie consent
tool“ provided on the website.
We have concluded an order processing agreement with the provider, which ensures
the protection of our site visitors‘ data and prohibits unauthorized disclosure to third
parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
12) Site Functionalities
12.1 Vimeo
This website uses plugins to display and play videos from the following provider: Vimeo.
com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA
When you call up a page of our website that contains such a plugin, your browser establishes
a direct connection to the provider‘s servers to load the plugin. This involves
certain information, including your IP address, being transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses
cookies to collect information about user behavior, to create playback statistics and to
prevent abusive behavior.
If you are logged into a user account maintained by the provider during your visit to the
site, your data will be directly assigned to your account when you click on a video. If you
do not wish to have your data assigned to your account, you must log out before clicking
on the play button.
All the above-mentioned processing, in particular the setting of cookies for reading out
information on the end device used, only takes place if you have given us your express
consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any
time with effect for the future by deactivating this service via the „cookie consent tool“
provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
12.2 Google Maps
Our website uses Google Maps (AP’I) of Google Ireland Limited, Gordon House, 4 Barrow
St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying
interactive (country) maps in order to display geographical information visually. Using
this service will show you our location and will make it easier for you to find us.
When you access the sub-pages that contain the Google Maps map, information about
your use of our website (such as your IP address) is transmitted to and stored by Google
on servers. When using Google Maps, personal data may also be transmitted to the
servers of Google LLC. in the USA. This is regardless of whether Google provides a user
account that you are logged in with or whether no user account exists. If you are logged
in to Google, your information will be directly associated with your account. If you do not
wish to be associated with your profile on Google, you must log out before activating the
button. Google saves your data (even for users who are not logged in) as usage profiles
and evaluates them. Such an evaluation takes place according to Art. 6 (1) point f GDPR,
on the basis of the legitimate interests of Google in the insertion of personalized advertising,
market research and/or demand-oriented design of its website. You have the right
to object to the creation of these user profiles. If you want to do so, you must contact
Google to exercise this right.
If you do not agree to the future transmission of your data to Google in the context of
using Google Maps, you may completely deactivate the Google Maps web service by
switching off the JavaScript application in your browser. In this case, Google Maps as
well as the map display on this website cannot be used.
The Google terms of use can be found at: https://policies.google.com/terms?hl=en. The
additional terms of use can be found at: https://www.google.com/intl/en-US_US/help/
terms_maps.html.
You can find detailed information on data protection in connection with the use of Google
Maps on Google‘s website („Google Privacy Policy“) at: https://policies.google.com/
privacy?hl=en.
To the extent required by law, we have obtained your consent to the processing of your
data as described above in accordance with Art. 6 (1) point a GDPR. You can revoke your
consent at any time with effect for the future. In order to exercise your revocation, please
follow the procedure described above for submitting an objection.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
Further information on Google‘s privacy standards can be found here: https://business.
safety.google/privacy/
12.3 – Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland
Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA
window, the provider uses „Google Fonts“, i.e., fonts loaded from the Internet by Google.
No further information is processed except that mentioned above, which is already transmitted
to Google via the functionality of ReCaptcha.
The service checks whether an input is made by a natural person or abusively by machine
and automated processing with the aim of blocking spam, DDoS attacks and similar
automated malicious attacks. To ensure whether an action is performed by a human
being and not by an automated bot, the provider collects the IP address of the end device
used, the recognition data of the browser, the operating system type and the date and
duration of the visit and transmits these data to the provider‘s servers to be evaluated.
This may involve the use of cookies, i.e. small text files that are stored in the browser of
the end device.
If the processing described above is carried out on the basis of cookies, these will only
be set if you have given us your express consent to do so in accordance with Art. 6 para.
1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating
this service in the ‘cookie consent tool’ provided on the website. If the processing described above is carried out without the use of cookies, the legal
basis is our legitimate interest in determining individual responsibility on the Internet
and avoiding misuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded an order processing contract with the provider, ensuring the protection
of our site visitors‘ data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
12.4 Applications for job advertisements
On our website, we advertise current vacancies in a separate section, for which interested
parties can apply by e-mail using the contact address provided.
If applicants want to be included in the application process, they must provide us with all
personal details required for a well-founded and informed assessment and selection in
conjunction with their application by e-mail.
The required data should include general personal information (name, address, telephone
or electronic contact) as well as performance-specific evidence showing the qualifications
required for the advertised position. In addition, health-related information may
be required, which in the interest of social protection must be given special attention to
regarding the applicant‘s person according to labor and social law.
The components an application must contain to be considered and the form in which these
components must be sent by e-mail can be found in the respective job advertisement.
After receipt of the application sent using the e-mail contact address supplied, the applicant
data will be stored by us and evaluated exclusively for the purpose of processing the
application. In the event of queries arising in the course of processing the application,
we will use either the e-mail address supplied by the applicant with his application or a
telephone number supplied, at our discretion.
The legal basis for such processing, including the contacting of applicants for queries,
is basically Art. 6 (1) point b GDPR in conjunction with Art. 26 (1) Federal Data Protection
Act. According to these provisions, the completion of the application procedure is
deemed to be the initiation of an employment contract.
If special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health
data such as information on severely disabled status) are requested from applicants as
part of the application procedure, processing will take place in accordance with Art. 9
(2) point b GDPR, so as to enable us to exercise the rights arising from labor law, social
security and social protection law and to fulfil our obligations in this regard.
The processing of special categories of data may also be based cumulatively or alternatively
on Art. 9 (1) point h GDPR if it is used for the purposes of health care or occupational
medicine, for the assessment of the applicant‘s ability to work, for medical diagnostics,
health or social care or for the management of systems and services in the health or
social sector.
If, in the course of the evaluation described above, the applicant is not selected or if an
applicant withdraws his application prematurely, his data transmitted by e-mail as well
as all electronic correspondence including the original application e-mail will be deleted
at the latest after 6 months following a corresponding notification. This period shall be
determined on the basis of our legitimate interest in being able to answer any follow-up
questions regarding the application and, if necessary, to comply with our obligation to
provide evidence under the regulations governing the equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis
of Art. 6 (1) point b GDPR in conjunction with Art. 26 (2) Federal Data Protection Act for
the purposes of implementing the employment relationship.
12.1 Vimeo
This website uses plugins to display and play videos from the following provider: Vimeo.
com, Inc., 330 West 34th Street, 10th Floor, New York, NY 10001, USA
When you call up a page of our website that contains such a plugin, your browser establishes
a direct connection to the provider‘s servers to load the plugin. This involves
certain information, including your IP address, being transmitted to the provider.
If the playback of embedded videos is started via the plugin, the provider also uses
cookies to collect information about user behavior, to create playback statistics and to
prevent abusive behavior.
If you are logged into a user account maintained by the provider during your visit to the
site, your data will be directly assigned to your account when you click on a video. If you
do not wish to have your data assigned to your account, you must log out before clicking
on the play button.
All the above-mentioned processing, in particular the setting of cookies for reading out
information on the end device used, only takes place if you have given us your express
consent in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any
time with effect for the future by deactivating this service via the „cookie consent tool“
provided on the website.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
12.2 Google Maps
Our website uses Google Maps (AP’I) of Google Ireland Limited, Gordon House, 4 Barrow
St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying
interactive (country) maps in order to display geographical information visually. Using
this service will show you our location and will make it easier for you to find us.
When you access the sub-pages that contain the Google Maps map, information about
your use of our website (such as your IP address) is transmitted to and stored by Google
on servers. When using Google Maps, personal data may also be transmitted to the
servers of Google LLC. in the USA. This is regardless of whether Google provides a user
account that you are logged in with or whether no user account exists. If you are logged
in to Google, your information will be directly associated with your account. If you do not
wish to be associated with your profile on Google, you must log out before activating the
button. Google saves your data (even for users who are not logged in) as usage profiles
and evaluates them. Such an evaluation takes place according to Art. 6 (1) point f GDPR,
on the basis of the legitimate interests of Google in the insertion of personalized advertising,
market research and/or demand-oriented design of its website. You have the right
to object to the creation of these user profiles. If you want to do so, you must contact
Google to exercise this right.
If you do not agree to the future transmission of your data to Google in the context of
using Google Maps, you may completely deactivate the Google Maps web service by
switching off the JavaScript application in your browser. In this case, Google Maps as
well as the map display on this website cannot be used.
The Google terms of use can be found at: https://policies.google.com/terms?hl=en. The
additional terms of use can be found at: https://www.google.com/intl/en-US_US/help/
terms_maps.html.
You can find detailed information on data protection in connection with the use of Google
Maps on Google‘s website („Google Privacy Policy“) at: https://policies.google.com/
privacy?hl=en.
To the extent required by law, we have obtained your consent to the processing of your
data as described above in accordance with Art. 6 (1) point a GDPR. You can revoke your
consent at any time with effect for the future. In order to exercise your revocation, please
follow the procedure described above for submitting an objection.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
Further information on Google‘s privacy standards can be found here: https://business.
safety.google/privacy/
12.3 – Google reCAPTCHA
On this website, we use the CAPTCHA service of the following provider: Google Ireland
Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland
Data may also be transmitted to: Google LLC, USA. For the visual design of the CAPTCHA
window, the provider uses „Google Fonts“, i.e., fonts loaded from the Internet by Google.
No further information is processed except that mentioned above, which is already transmitted
to Google via the functionality of ReCaptcha.
The service checks whether an input is made by a natural person or abusively by machine
and automated processing with the aim of blocking spam, DDoS attacks and similar
automated malicious attacks. To ensure whether an action is performed by a human
being and not by an automated bot, the provider collects the IP address of the end device
used, the recognition data of the browser, the operating system type and the date and
duration of the visit and transmits these data to the provider‘s servers to be evaluated.
This may involve the use of cookies, i.e. small text files that are stored in the browser of
the end device.
If the processing described above is carried out on the basis of cookies, these will only
be set if you have given us your express consent to do so in accordance with Art. 6 para.
1 lit. a GDPR. You can revoke your consent at any time with effect for the future by deactivating
this service in the ‘cookie consent tool’ provided on the website. If the processing described above is carried out without the use of cookies, the legal
basis is our legitimate interest in determining individual responsibility on the Internet
and avoiding misuse and spam in accordance with Art. 6 para. 1 lit. f GDPR.
We have concluded an order processing contract with the provider, ensuring the protection
of our site visitors‘ data and prohibiting unauthorized disclosure to third parties.
For data transfers to the USA, the provider participates in the EU-US Data Privacy Framework,
which ensures compliance with the European level of data protection on the basis
of an adequacy decision by the European Commission.
12.4 Applications for job advertisements
On our website, we advertise current vacancies in a separate section, for which interested
parties can apply by e-mail using the contact address provided.
If applicants want to be included in the application process, they must provide us with all
personal details required for a well-founded and informed assessment and selection in
conjunction with their application by e-mail.
The required data should include general personal information (name, address, telephone
or electronic contact) as well as performance-specific evidence showing the qualifications
required for the advertised position. In addition, health-related information may
be required, which in the interest of social protection must be given special attention to
regarding the applicant‘s person according to labor and social law.
The components an application must contain to be considered and the form in which these
components must be sent by e-mail can be found in the respective job advertisement.
After receipt of the application sent using the e-mail contact address supplied, the applicant
data will be stored by us and evaluated exclusively for the purpose of processing the
application. In the event of queries arising in the course of processing the application,
we will use either the e-mail address supplied by the applicant with his application or a
telephone number supplied, at our discretion.
The legal basis for such processing, including the contacting of applicants for queries,
is basically Art. 6 (1) point b GDPR in conjunction with Art. 26 (1) Federal Data Protection
Act. According to these provisions, the completion of the application procedure is
deemed to be the initiation of an employment contract.
If special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health
data such as information on severely disabled status) are requested from applicants as
part of the application procedure, processing will take place in accordance with Art. 9
(2) point b GDPR, so as to enable us to exercise the rights arising from labor law, social
security and social protection law and to fulfil our obligations in this regard.
The processing of special categories of data may also be based cumulatively or alternatively
on Art. 9 (1) point h GDPR if it is used for the purposes of health care or occupational
medicine, for the assessment of the applicant‘s ability to work, for medical diagnostics,
health or social care or for the management of systems and services in the health or
social sector.
If, in the course of the evaluation described above, the applicant is not selected or if an
applicant withdraws his application prematurely, his data transmitted by e-mail as well
as all electronic correspondence including the original application e-mail will be deleted
at the latest after 6 months following a corresponding notification. This period shall be
determined on the basis of our legitimate interest in being able to answer any follow-up
questions regarding the application and, if necessary, to comply with our obligation to
provide evidence under the regulations governing the equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis
of Art. 6 (1) point b GDPR in conjunction with Art. 26 (2) Federal Data Protection Act for
the purposes of implementing the employment relationship.
13) Tools and Miscellaneous
13.1 This website uses a so-called „cookie consent tool“ to obtain effective user consent
for cookies and cookie-based applications that require consent. The „cookie consent
tool“ is displayed to users in the form of an interactive user interface when they access
the page, on which consent for certain cookies and/or cookie-based applications can be
given by ticking the appropriate box.
Using the tool, all cookies/services requiring consent are only loaded if the respective
user provides the corresponding consent by ticking the corresponding box. This ensures
that such cookies are only set on the respective end device of the user if consent
has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal
user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose
of storing, assigning or logging cookie settings, this is done in accordance with Art. 6
(1) point f GDPR based on our legitimate interest in legally compliant, user-specific and
user-friendly consent management for cookies and thus in a legally compliant design
of our website.
Further legal basis for the processing is Art. 6 (1) point c GDPR. As the responsible party,
we are subject to the legal obligation to make the use of technically unnecessary cookies
dependent on the respective user consent.
Further information on the operator and the setting options of the cookie consent tool
can be found directly in the corresponding user interface on our website.
13.2 Wordfence
For security purposes, this website uses the service of the following provider: Defiant
Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA
The provider protects the website and the associated IT infrastructure from unauthorised
third-party access, cyber attacks and viruses and malware. The provider collects
the IP addresses of users and, if necessary, further data on their behaviour on our website
(in particular URLs accessed and header information) in order to detect and defend
against illegitimate page accesses and dangers. In doing so, the collected IP address
is compared with a list of known attackers. If the captured IP address is identified as a
security risk, the provider can automatically block it from accessing the website. The information
collected in this way is transferred to a server of the provider and stored there.
The described data processing is carried out in accordance with Art. 6 (1) point f GDPR
on the basis of our legitimate interests in protecting the website from harmful cyber
attacks and in maintaining structural and data integrity and security.
If visitors to the website have login rights, the provider also sets cookies (= small text files)
on the respective end device used by the visitor. With the help of the cookies, certain
location and device information can be read, which makes it possible to assess whether
the login-authorised access originates from an authorised person. At the same time, access
rights can be evaluated via the cookies and released via a website-internal firewall
according to the authorisation level. Finally, the cookies are used to register irregular
access by website administrators from new devices or new locations and to notify other
administrators of this. These cookies are only set if a user has login rights. The provider
does not set cookies for website visitors without login authorisation. Insofar as personal
data is processed via the cookies, the processing is carried out in accordance with Art.
6 (1) point f GDPR on the basis of our legitimate interest in preventing illegitimate access
to the website administration and in the defence against unauthorised administrator access.
We have concluded an order processing agreement with the provider, which ensures the
protection of our website visitors‘ data and prohibits unauthorised disclosure to third
parties. For the transfer of data to the USA, the provider invokes standard contractual clauses of
the European Commission, which are intended to ensure compliance with the European
level of data protection.
13.3 FiboSearch
This website uses the search technology service of the following provider: Damian Góra
Web Development, Dr. Adama Bilika 2/28, 42-500 Będzin, Poland
For the provision of the search function for items via the search field and for navigation
and filters, the provider collects and stores certain user information (such as the user or
session ID) in anonymised form.
Insofar as personal data is also processed in this context, the processing is carried out
in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in providing
an error-tolerant search for items and thus in the optimal marketing of our offering.
13.1 This website uses a so-called „cookie consent tool“ to obtain effective user consent
for cookies and cookie-based applications that require consent. The „cookie consent
tool“ is displayed to users in the form of an interactive user interface when they access
the page, on which consent for certain cookies and/or cookie-based applications can be
given by ticking the appropriate box.
Using the tool, all cookies/services requiring consent are only loaded if the respective
user provides the corresponding consent by ticking the corresponding box. This ensures
that such cookies are only set on the respective end device of the user if consent
has been granted.
The tool sets technically necessary cookies to save your cookie preferences. Personal
user data is generally not processed.
If, in individual cases, personal data (such as the IP address) is processed for the purpose
of storing, assigning or logging cookie settings, this is done in accordance with Art. 6
(1) point f GDPR based on our legitimate interest in legally compliant, user-specific and
user-friendly consent management for cookies and thus in a legally compliant design
of our website.
Further legal basis for the processing is Art. 6 (1) point c GDPR. As the responsible party,
we are subject to the legal obligation to make the use of technically unnecessary cookies
dependent on the respective user consent.
Further information on the operator and the setting options of the cookie consent tool
can be found directly in the corresponding user interface on our website.
13.2 Wordfence
For security purposes, this website uses the service of the following provider: Defiant
Inc, 800 5th Ave Ste 4100, Seattle, WA 98104, USA
The provider protects the website and the associated IT infrastructure from unauthorised
third-party access, cyber attacks and viruses and malware. The provider collects
the IP addresses of users and, if necessary, further data on their behaviour on our website
(in particular URLs accessed and header information) in order to detect and defend
against illegitimate page accesses and dangers. In doing so, the collected IP address
is compared with a list of known attackers. If the captured IP address is identified as a
security risk, the provider can automatically block it from accessing the website. The information
collected in this way is transferred to a server of the provider and stored there.
The described data processing is carried out in accordance with Art. 6 (1) point f GDPR
on the basis of our legitimate interests in protecting the website from harmful cyber
attacks and in maintaining structural and data integrity and security.
If visitors to the website have login rights, the provider also sets cookies (= small text files)
on the respective end device used by the visitor. With the help of the cookies, certain
location and device information can be read, which makes it possible to assess whether
the login-authorised access originates from an authorised person. At the same time, access
rights can be evaluated via the cookies and released via a website-internal firewall
according to the authorisation level. Finally, the cookies are used to register irregular
access by website administrators from new devices or new locations and to notify other
administrators of this. These cookies are only set if a user has login rights. The provider
does not set cookies for website visitors without login authorisation. Insofar as personal
data is processed via the cookies, the processing is carried out in accordance with Art.
6 (1) point f GDPR on the basis of our legitimate interest in preventing illegitimate access
to the website administration and in the defence against unauthorised administrator access.
We have concluded an order processing agreement with the provider, which ensures the
protection of our website visitors‘ data and prohibits unauthorised disclosure to third
parties. For the transfer of data to the USA, the provider invokes standard contractual clauses of
the European Commission, which are intended to ensure compliance with the European
level of data protection.
13.3 FiboSearch
This website uses the search technology service of the following provider: Damian Góra
Web Development, Dr. Adama Bilika 2/28, 42-500 Będzin, Poland
For the provision of the search function for items via the search field and for navigation
and filters, the provider collects and stores certain user information (such as the user or
session ID) in anonymised form.
Insofar as personal data is also processed in this context, the processing is carried out
in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in providing
an error-tolerant search for items and thus in the optimal marketing of our offering.
14) Rights of the Data Subject
14.1 The applicable data protection law grants you the following comprehensive rights
of data subjects (rights of information and intervention) vis-à-vis the data controller with
regard to the processing of your personal data:
– Right of access by the data subject pursuant to Art. 15 GDPR;
– Right to rectification pursuant to Art. 16 GDPR;
– Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
– Right to restriction of processing pursuant to Art. 18 GDPR;
– Right to be informed pursuant to Art. 19 GDPR;
– Right to data portability pursuant to Art. 20 GDPR;
– Right to withdraw a given consent pursuant to Art. 7 (3) GDPR;
– Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS
YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST,
YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT
FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA
CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE
CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING
WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF
THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU
HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL
DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE
THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA
CONCERNED FOR DIRECT ADVERTISING PURPOSES.
15) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the respective legal basis, the
purpose of processing and – if relevant – on the respective legal retention period (e.g.
commercial and tax retention periods).
If personal data is processed on the basis of express consent pursuant to Art. 6 (1) point
a GDPR, this data is stored until the data subject revokes his consent.
If there are legal storage periods for data that is processed within the framework of legal
or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely
deleted after expiry of the storage periods if it is no longer necessary for the fulfillment
of the contract or the initiation of the contract and/or if we no longer have a justified
interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored
until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR,
unless we can provide compelling grounds for processing worthy of protection which
outweigh the interests, rights and freedoms of the data subject, or the processing serves
to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing based on Art. 6 (1) point
f GDPR, this data is stored until the data subject exercises his right of objection pursuant
to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific
processing situations, stored personal data will be deleted if it is no longer
necessary for the purposes for which it was collected or otherwise processed.
14.1 The applicable data protection law grants you the following comprehensive rights
of data subjects (rights of information and intervention) vis-à-vis the data controller with
regard to the processing of your personal data:
– Right of access by the data subject pursuant to Art. 15 GDPR;
– Right to rectification pursuant to Art. 16 GDPR;
– Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR;
– Right to restriction of processing pursuant to Art. 18 GDPR;
– Right to be informed pursuant to Art. 19 GDPR;
– Right to data portability pursuant to Art. 20 GDPR;
– Right to withdraw a given consent pursuant to Art. 7 (3) GDPR;
– Right to lodge a complaint pursuant to Art. 77 GDPR.
14.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS
YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST,
YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT
FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA
CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE
CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING
WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF
THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU
HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL
DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE
THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA
CONCERNED FOR DIRECT ADVERTISING PURPOSES.
15) Duration of Storage of Personal Data
The duration of the storage of personal data is based on the respective legal basis, the
purpose of processing and – if relevant – on the respective legal retention period (e.g.
commercial and tax retention periods).
If personal data is processed on the basis of express consent pursuant to Art. 6 (1) point
a GDPR, this data is stored until the data subject revokes his consent.
If there are legal storage periods for data that is processed within the framework of legal
or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely
deleted after expiry of the storage periods if it is no longer necessary for the fulfillment
of the contract or the initiation of the contract and/or if we no longer have a justified
interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored
until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR,
unless we can provide compelling grounds for processing worthy of protection which
outweigh the interests, rights and freedoms of the data subject, or the processing serves
to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing based on Art. 6 (1) point
f GDPR, this data is stored until the data subject exercises his right of objection pursuant
to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific
processing situations, stored personal data will be deleted if it is no longer
necessary for the purposes for which it was collected or otherwise processed.