Data protection
1) Information on the collection of personal data and contact details of the controller
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data in this context includes all data that can be used to identify you personally.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Alessandro Zotz, Berliner Str. 43, 84478 Waldkraiburg, Germany, Tel.: 015901411740, E-mail: info@campiix.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.
2) Data collection when visiting our website
When using our website for purely informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no disclosure or other use of the data. However, we reserve the right to check the server log files retrospectively should concrete indications point to unlawful use.
3) Hosting
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purpose of hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services of Shopify, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. in the context of further processing on our behalf. In the event of data being transmitted to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify’s data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than the aforementioned Shopify servers takes place only within the framework communicated below.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of your web browser's cookie settings.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, processing is carried out either in accordance with Art. 6 para. 1 lit. b GDPR for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent granted, or in accordance with Art. 6 para. 1 lit. f GDPR for the protection of our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
Please note that you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contacting us
5.1 Personal data is collected when you contact us (e.g., via contact form or e-mail). The data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Data processing upon opening a customer account and for contract execution
In accordance with Art. 6 para. 1 lit. b GDPR, personal data continues to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract execution. After complete execution of the contract or deletion of your customer account, your data will be blocked in view of tax and commercial retention periods and deleted after these periods have expired, provided that you have not expressly consented to further use of your data or that we have reserved further data use permitted by law on our side.
7) Use of customer data for direct advertising
7.1 Registration for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. For the dispatch of the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to receiving the newsletter. We will then send you a confirmation e-mail asking you to confirm by clicking on a corresponding link that you wish to receive the newsletter in the future.
By activating the confirmation link, you grant us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you sign up for the newsletter, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace potential misuse of your e-mail address at a later date. The data collected by us during registration for the newsletter is used exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your e-mail address will be immediately deleted in our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
7.2 Sending of the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for goods or services similar to those already purchased from our range by e-mail. In this regard, we do not need to obtain separate consent from you pursuant to § 7 para. 3 UWG (German Act Against Unfair Competition). Data processing takes place solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your e-mail address for this purpose, no e-mail will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. For this, you will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes will be stopped immediately.
7.3 Newsletter dispatch via ActiveCampaign
Our e-mail newsletters are sent via the technical service provider ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, USA ("ActiveCampaign"), to whom we pass on the data provided by you during newsletter registration. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using a promotionally effective, secure, and user-friendly newsletter system. The data you have entered for the purpose of receiving the newsletter (e.g., e-mail address) is stored on ActiveCampaign's servers in the USA.
ActiveCampaign uses this information for sending and statistically evaluating the newsletters on our behalf. For evaluation, the sent e-mails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g., purchase of a product on our website) has taken place after clicking the link in the newsletter. Furthermore, technical information is recorded (e.g., time of access, IP address, browser type, and operating system). The data is collected exclusively in a pseudonymized form and is not linked to your other personal data; direct personal identification is excluded. This data serves solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
We have concluded a "Data Processing Agreement" with ActiveCampaign, in which we commit ActiveCampaign to protect our customers' data and not to pass it on to third parties.
You can view ActiveCampaign's privacy policy here: https://www.activecampaign.com/privacy-policy
7.4 Newsletter dispatch via Shopify Email
Our e-mail newsletters are sent via Shopify Email, a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), to whom we pass on the data provided by you during newsletter registration. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using a promotionally effective, secure, and user-friendly newsletter system. The data you have entered for the purpose of receiving the newsletter (e.g., e-mail address) is generally stored on Shopify's servers in the EU.
As part of the aforementioned services of Shopify, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. in the context of further processing on our behalf. In the event of data being transmitted to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
Shopify uses this information for sending and statistically evaluating the newsletters on our behalf. For evaluation, the sent e-mails can contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. Furthermore, technical information is recorded (e.g., time of access, IP address, browser type, and operating system). The data is collected exclusively in a pseudonymized form and is not linked to your other personal data; direct personal identification is excluded. This data serves solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, in accordance with Art. 6 para. 1 lit. f GDPR, Shopify may use this data itself based on its own legitimate interest in designing and optimizing the service according to requirements as well as for market research purposes, for example to determine which countries the recipients come from. However, Shopify does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
We have concluded a data processing agreement with Shopify, in which we commit Shopify to protect our customers' data and not to pass it on to third parties.
You can view Shopify's privacy policy here: https://www.shopify.de/legal/datenschutz
8) Data processing for order processing
8.1 For the processing of your order, we work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of contract execution, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
8.2 To fulfill our contractual obligations towards our customers, we work with external shipping partners. We pass on your name, your delivery address, and, if required for delivery, your telephone number to a shipping partner selected by us, exclusively for the purposes of delivery of goods in accordance with Art. 6 para. 1 lit. b GDPR.
8.3 Use of special service providers for order processing and fulfillment
- Oberlo
Order processing takes place via the dropshipping tool "Oberlo", a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Name, address, and, if applicable, other personal data are passed on to the respective shipping partner/supplier on our behalf via Oberlo exclusively for the purpose of goods delivery in accordance with Art. 6 para. 1 lit. b GDPR. Your data is only transferred to the extent that this is actually necessary for the processing of the order.
We have concluded a data processing agreement with Oberlo, in which we commit Oberlo to protect our customers' data and not to pass it on to third parties. This contract can be viewed upon request at the following website address: https://www.oberlo.de/oberlo-data-processing-addendum
8.4 Use of payment service providers
- Klarna
When selecting a Klarna payment service, payment processing is handled by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable the processing of the payment, your personal data (first and last name, street, house number, zip code, city, gender, e-mail address, telephone number, and IP address) as well as data related to the order (e.g., invoice amount, items, delivery method) are passed on to Klarna for the purpose of identity and credit assessment, provided you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR during the ordering process. You can view which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report can contain probability values (so-called score values).To the extent that score values are included in the credit assessment result, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. Klarna uses the information obtained about the statistical probability of a payment default for a balanced decision on the establishment, implementation, or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal data will be treated in accordance with applicable data protection regulations and the information provided in Klarna's data protection provisions for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
.
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing. The transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). To the extent that score values are included in the credit assessment result, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. Further information on data protection, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered through the payment service provider Shopify Payments, payment processing is carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process along with information about your order (name, address, account number, bank code, if applicable credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) (b) GDPR. Your data is transferred exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Shopify Payments' data protection can be found at the following internet address: https://www.shopify.com/legal/privacy.
Data protection information regarding Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
- SOFORT
When selecting the payment method "SOFORT", payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we pass on the information provided during the ordering process along with information about your order in accordance with Art. 6 (1) (b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can obtain further information about SOFORT's data protection provisions at the following internet address: https://www.klarna.com/sofort/datenschutz.
1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about the handling of your personal data when using our website. Personal data in this context includes all data that can be used to identify you personally.
1.2 The controller for data processing on this website within the meaning of the General Data Protection Regulation (GDPR) is Alessandro Zotz, Berliner Str. 43, 84478 Waldkraiburg, Germany, Tel.: 015901411740, E-mail: info@campiix.de. The controller responsible for the processing of personal data is the natural or legal person who, alone or jointly with others, decides on the purposes and means of processing personal data.
1.3 For security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the controller), this website uses SSL or TLS encryption. You can recognize an encrypted connection by the string “https://” and the lock symbol in your browser bar.
2) Data collection when visiting our website
When using our website for purely informational purposes, i.e., if you do not register or otherwise transmit information to us, we only collect the data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:
- Our visited website
- Date and time at the time of access
- Amount of data sent in bytes
- Source/reference from which you reached the page
- Browser used
- Operating system used
- IP address used (if applicable: in anonymized form)
Processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR based on our legitimate interest in improving the stability and functionality of our website. There is no disclosure or other use of the data. However, we reserve the right to check the server log files retrospectively should concrete indications point to unlawful use.
3) Hosting
Hosting by Shopify
We use the shop system of the service provider Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify") for the purpose of hosting and displaying the online shop based on processing on our behalf. All data collected on our website is processed on Shopify's servers. As part of the aforementioned services of Shopify, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. in the context of further processing on our behalf. In the event of data being transmitted to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission. Further information on Shopify’s data protection can be found on the following website: https://www.shopify.de/legal/datenschutz
Further processing on servers other than the aforementioned Shopify servers takes place only within the framework communicated below.
4) Cookies
To make visiting our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of the browser session, i.e., after closing your browser (so-called session cookies). Other cookies remain on your device and enable us to recognize your browser on your next visit (so-called persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values to an individual extent. Persistent cookies are automatically deleted after a specified duration, which may vary depending on the cookie. You can find the duration of the respective cookie storage in the overview of your web browser's cookie settings.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If personal data is also processed by individual cookies used by us, processing is carried out either in accordance with Art. 6 para. 1 lit. b GDPR for the performance of the contract, in accordance with Art. 6 para. 1 lit. a GDPR in the case of consent granted, or in accordance with Art. 6 para. 1 lit. f GDPR for the protection of our legitimate interests in the best possible functionality of the website as well as a customer-friendly and effective design of the site visit.
Please note that you can set your browser so that you are informed about the setting of cookies and decide individually about their acceptance or exclude the acceptance of cookies for certain cases or in general. Each browser differs in how it manages cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You can find these for the respective browsers under the following links:
Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies
Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehnen
Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en
Safari: https://support.apple.com/de-de/guide/safari/sfri11471/mac
Opera: https://help.opera.com/de/latest/web-preferences/#cookies
Please note that if you do not accept cookies, the functionality of our website may be limited.
5) Contacting us
5.1 Personal data is collected when you contact us (e.g., via contact form or e-mail). The data collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of answering your request or for establishing contact and the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your request in accordance with Art. 6 para. 1 lit. f GDPR. If your contact is aimed at concluding a contract, an additional legal basis for processing is Art. 6 para. 1 lit. b GDPR. Your data will be deleted after final processing of your request. This is the case if it can be inferred from the circumstances that the matter in question has been conclusively clarified and provided that there are no statutory retention obligations to the contrary.
6) Data processing upon opening a customer account and for contract execution
In accordance with Art. 6 para. 1 lit. b GDPR, personal data continues to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The data collected can be seen from the respective input forms. Deletion of your customer account is possible at any time and can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract execution. After complete execution of the contract or deletion of your customer account, your data will be blocked in view of tax and commercial retention periods and deleted after these periods have expired, provided that you have not expressly consented to further use of your data or that we have reserved further data use permitted by law on our side.
7) Use of customer data for direct advertising
7.1 Registration for our e-mail newsletter
If you subscribe to our e-mail newsletter, we will regularly send you information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The provision of further data is voluntary and is used to address you personally. For the dispatch of the newsletter, we use the so-called double opt-in procedure. This means that we will only send you an e-mail newsletter if you have expressly confirmed to us that you consent to receiving the newsletter. We will then send you a confirmation e-mail asking you to confirm by clicking on a corresponding link that you wish to receive the newsletter in the future.
By activating the confirmation link, you grant us your consent for the use of your personal data in accordance with Art. 6 para. 1 lit. a GDPR. When you sign up for the newsletter, we store your IP address registered by the Internet Service Provider (ISP) as well as the date and time of registration in order to be able to trace potential misuse of your e-mail address at a later date. The data collected by us during registration for the newsletter is used exclusively for the purpose of promotional communication via the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a corresponding message to the controller mentioned at the beginning. After unsubscribing, your e-mail address will be immediately deleted in our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to further data use that is legally permitted and about which we inform you in this statement.
7.2 Sending of the e-mail newsletter to existing customers
If you have provided us with your e-mail address when purchasing goods or services, we reserve the right to regularly send you offers for goods or services similar to those already purchased from our range by e-mail. In this regard, we do not need to obtain separate consent from you pursuant to § 7 para. 3 UWG (German Act Against Unfair Competition). Data processing takes place solely on the basis of our legitimate interest in personalized direct advertising in accordance with Art. 6 para. 1 lit. f GDPR. If you initially objected to the use of your e-mail address for this purpose, no e-mail will be sent by us. You are entitled to object to the use of your e-mail address for the aforementioned advertising purpose at any time with effect for the future by notifying the controller mentioned at the beginning. For this, you will only incur transmission costs according to the basic rates. Upon receipt of your objection, the use of your e-mail address for advertising purposes will be stopped immediately.
7.3 Newsletter dispatch via ActiveCampaign
Our e-mail newsletters are sent via the technical service provider ActiveCampaign, LLC, 150 N. Michigan Ave Suite 1230, Chicago, IL, USA ("ActiveCampaign"), to whom we pass on the data provided by you during newsletter registration. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using a promotionally effective, secure, and user-friendly newsletter system. The data you have entered for the purpose of receiving the newsletter (e.g., e-mail address) is stored on ActiveCampaign's servers in the USA.
ActiveCampaign uses this information for sending and statistically evaluating the newsletters on our behalf. For evaluation, the sent e-mails contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. With the help of so-called conversion tracking, it can also be analyzed whether a predefined action (e.g., purchase of a product on our website) has taken place after clicking the link in the newsletter. Furthermore, technical information is recorded (e.g., time of access, IP address, browser type, and operating system). The data is collected exclusively in a pseudonymized form and is not linked to your other personal data; direct personal identification is excluded. This data serves solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
We have concluded a "Data Processing Agreement" with ActiveCampaign, in which we commit ActiveCampaign to protect our customers' data and not to pass it on to third parties.
You can view ActiveCampaign's privacy policy here: https://www.activecampaign.com/privacy-policy
7.4 Newsletter dispatch via Shopify Email
Our e-mail newsletters are sent via Shopify Email, a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland ("Shopify"), to whom we pass on the data provided by you during newsletter registration. This transfer takes place in accordance with Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using a promotionally effective, secure, and user-friendly newsletter system. The data you have entered for the purpose of receiving the newsletter (e.g., e-mail address) is generally stored on Shopify's servers in the EU.
As part of the aforementioned services of Shopify, data may also be transmitted to Shopify Inc., 150 Elgin St, Ottawa, ON K2P 1L4, Canada, Shopify Data Processing (USA) Inc., Shopify Payments (USA) Inc., or Shopify (USA) Inc. in the context of further processing on our behalf. In the event of data being transmitted to Shopify Inc. in Canada, an adequate level of data protection is ensured by an adequacy decision of the European Commission.
Shopify uses this information for sending and statistically evaluating the newsletters on our behalf. For evaluation, the sent e-mails can contain so-called web beacons or tracking pixels, which are one-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. Furthermore, technical information is recorded (e.g., time of access, IP address, browser type, and operating system). The data is collected exclusively in a pseudonymized form and is not linked to your other personal data; direct personal identification is excluded. This data serves solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients. If you wish to object to data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, in accordance with Art. 6 para. 1 lit. f GDPR, Shopify may use this data itself based on its own legitimate interest in designing and optimizing the service according to requirements as well as for market research purposes, for example to determine which countries the recipients come from. However, Shopify does not use the data of our newsletter recipients to write to them itself or to pass the data on to third parties.
We have concluded a data processing agreement with Shopify, in which we commit Shopify to protect our customers' data and not to pass it on to third parties.
You can view Shopify's privacy policy here: https://www.shopify.de/legal/datenschutz
8) Data processing for order processing
8.1 For the processing of your order, we work with the following service provider(s), who support us in whole or in part in the execution of concluded contracts. Certain personal data is transmitted to these service providers in accordance with the following information.
The personal data collected by us will be passed on to the transport company commissioned with the delivery as part of contract execution, insofar as this is necessary for the delivery of the goods. We pass on your payment data to the commissioned credit institution as part of payment processing, insofar as this is necessary for payment processing. If payment service providers are used, we will explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.
8.2 To fulfill our contractual obligations towards our customers, we work with external shipping partners. We pass on your name, your delivery address, and, if required for delivery, your telephone number to a shipping partner selected by us, exclusively for the purposes of delivery of goods in accordance with Art. 6 para. 1 lit. b GDPR.
8.3 Use of special service providers for order processing and fulfillment
- Oberlo
Order processing takes place via the dropshipping tool "Oberlo", a service of Shopify International Limited, Victoria Buildings, 2nd Floor, 1-2 Haddington Road, Dublin 4, D04 XN32, Ireland. Name, address, and, if applicable, other personal data are passed on to the respective shipping partner/supplier on our behalf via Oberlo exclusively for the purpose of goods delivery in accordance with Art. 6 para. 1 lit. b GDPR. Your data is only transferred to the extent that this is actually necessary for the processing of the order.
We have concluded a data processing agreement with Oberlo, in which we commit Oberlo to protect our customers' data and not to pass it on to third parties. This contract can be viewed upon request at the following website address: https://www.oberlo.de/oberlo-data-processing-addendum
8.4 Use of payment service providers
- Klarna
When selecting a Klarna payment service, payment processing is handled by Klarna Bank AB (publ) [https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable the processing of the payment, your personal data (first and last name, street, house number, zip code, city, gender, e-mail address, telephone number, and IP address) as well as data related to the order (e.g., invoice amount, items, delivery method) are passed on to Klarna for the purpose of identity and credit assessment, provided you have expressly consented to this in accordance with Art. 6 para. 1 lit. a GDPR during the ordering process. You can view which credit agencies your data may be forwarded to here:
https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies
The credit report can contain probability values (so-called score values).To the extent that score values are included in the credit assessment result, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. Klarna uses the information obtained about the statistical probability of a payment default for a balanced decision on the establishment, implementation, or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the data controller or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary for contractual payment processing.
Your personal data will be treated in accordance with applicable data protection regulations and the information provided in Klarna's data protection provisions for data subjects based in Germany https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacy
or for data subjects based in Austria https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacy
.
- Paypal
When paying via PayPal, credit card via PayPal, direct debit via PayPal or – if offered – "purchase on account" or "installment payment" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"), as part of the payment processing. The transfer takes place in accordance with Art. 6 (1) (b) GDPR and only to the extent necessary for payment processing.
PayPal reserves the right to conduct a credit check for the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal. For this purpose, your payment data may be passed on to credit agencies in accordance with Art. 6 (1) (f) GDPR on the basis of PayPal's legitimate interest in determining your solvency. PayPal uses the result of the credit check with regard to the statistical probability of default for the purpose of deciding on the provision of the respective payment method. The credit report may contain probability values (so-called score values). To the extent that score values are included in the credit assessment result, they are based on a scientifically recognized mathematical-statistical procedure. The calculation of the score values includes, among other things, but not exclusively, address data. Further information on data protection, including information on the credit agencies used, can be found in PayPal's privacy policy: https://www.paypal.com/de/webapps/mpp/ua/privacy-full
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europa House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered through the payment service provider Shopify Payments, payment processing is carried out by the technical service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on the information you provided during the ordering process along with information about your order (name, address, account number, bank code, if applicable credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) (b) GDPR. Your data is transferred exclusively for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary for this purpose. Further information on Shopify Payments' data protection can be found at the following internet address: https://www.shopify.com/legal/privacy.
Data protection information regarding Stripe Payments Europe Ltd. can be found here: https://stripe.com/de/privacy
- SOFORT
When selecting the payment method "SOFORT", payment processing is carried out via the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we pass on the information provided during the ordering process along with information about your order in accordance with Art. 6 (1) (b) GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can obtain further information about SOFORT's data protection provisions at the following internet address: https://www.klarna.com/sofort/datenschutz.
- Amazon Pay
When selecting the payment method "Amazon Pay", the payment processing is carried out by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we transmit your information provided during the ordering process, together with information about your order, in accordance with Art. 6(1)(b) GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. Further information regarding the data protection provisions of Amazon Payments can be found at the following internet address: https://pay.amazon.com/de/help/201751600
9) Contacting for review reminders
Review reminder by Trusted Shops
Provided that you have given us your express consent to this during or after your order in accordance with Art. 6(1)(a) GDPR, we will transmit your email address to the review platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you an email review reminder.
You can revoke your consent at any time by sending a message to the controller responsible for data processing or directly to the review platform.
10) Use of review and trust seal graphics
Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops trust seal and to offer Trusted Shops membership to buyers after an order.
This serves to protect our legitimate interests in optimally marketing our offer, which are overriding in the context of a balancing of interests, Art. 6(1)(f) GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the retrieval, amount of data transferred, and the requesting provider (access data) and documents the retrieval. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your page visit.
Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for their use. In this case, the contractual agreement made between you and Trusted Shops applies.
11) Use of social media: Social plugins
11.1 Facebook plugins with 2-click solution
So-called social plugins ("plugins") from the social network Facebook are used on our website, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
To increase the protection of your data when visiting our website, the plugins are integrated into the page using a so-called "2-click" solution, which keeps them initially deactivated. Deactivated plugins can be recognized by being grayed out. This integration ensures that when you access a page on our website that contains such plugins, no connection is yet established with the Facebook servers. Only when you activate the plugins and thereby grant your consent for data transmission in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection to the Facebook servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of the data that Facebook collects with the help of the plugins. According to our current knowledge, Facebook at least receives information about which of our websites you are currently visiting and have previously visited. Through the integration of the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile on Facebook or are not currently logged in. The collected information (including your IP address) is transmitted by your browser directly to a Facebook Inc. server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your contacts there.
You can revoke your consent at any time by deactivating the activated plugin again by clicking on it. However, the revocation has no effect on data that has already been transmitted to Facebook.
For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of Facebook: https://www.facebook.com/policy.php
11.2 Facebook plugins with Shariff solution
So-called social plugins ("plugins") from the social network Facebook are used on our website, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
To increase the protection of your data when visiting our website, these buttons are not integrated into the page as unrestricted plugins, but only using an HTML link. This type of integration ensures that when you access a page on our website that contains such buttons, no connection is yet established with the Facebook servers. When you click the button, a new browser window opens and calls up the Facebook page, where you can interact with the plugins there (possibly after entering your login data).
For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of Facebook: https://www.facebook.com/policy.php
11.3 Instagram as a standard plugin
So-called social plugins ("plugins") from the online service Instagram are used on our website, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins are marked with an Instagram logo, for example, in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly to your browser by Instagram and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to a Facebook Inc. server in the USA and stored there.
If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the "Instagram Camera" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.
The described data processing operations are carried out in accordance with Art. 6(1)(f) GDPR based on the legitimate interests of Instagram in displaying personalized advertising to inform other users of the social network about your activities on our website and to design the Instagram service according to requirements.
If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also object to the loading of Instagram plugins and thus the data processing operations described above for the future with add-ons for your browser, e.g., with the script blocker "NoScript" (http://noscript.net/).
For the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of Instagram: https://help.instagram.com/155833707900388/
11.4 Instagram plugin as Shariff solution
So-called social plugins ("plugins") from the online service Instagram are used on our website, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
To increase the protection of your data when visiting our website, these buttons are not integrated into the page as unrestricted plugins, but only using an HTML link. This type of integration ensures that when you access a page on our website that contains such buttons, no connection is yet established with the Instagram servers. When you click the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins there (possibly after entering your login data).
For the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of Instagram: https://help.instagram.com/155833707900388/
12) Online marketing
12.1 Facebook Pixel for creating Custom Audiences with advanced data matching (with cookie consent tool)
Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used in advanced data matching mode, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
Based on your express consent, when a user clicks on an advertisement placed by us and displayed on Facebook, an extension is added to the URL of our linked page by the Facebook Pixel. This URL parameter is then saved via a cookie in the user's browser, which our linked page sets itself. In addition, this cookie collects specific customer data such as email addresses that we collect on our website linked to the Facebook ad during processes such as purchases, account logins, or registrations (advanced data matching). The cookie is then read by the Facebook Pixel and enables the transmission of data, including specific customer data, to Facebook.
With the help of the Facebook Pixel with advanced data matching, Facebook is able to precisely determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel with advanced data matching to display our Facebook Ads only to those Facebook users who have shown an interest in our online offer or who have certain characteristics (e.g., interests in certain topics or products determined based on the visited websites) which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel with advanced data matching, we also want to ensure that our Facebook Ads correspond to the potential interest of the users and are not perceived as annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of the Facebook Pixel, the advanced data matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Facebook, so a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display advertisements on and off Facebook.
These processing operations are carried out exclusively when express consent is given in accordance with Art. 6(1)(a) GDPR.
Consent to the use of the Facebook Pixel may only be given by users who are older than 16 years. If you are younger, we ask you to ask your legal guardians for permission.
The information generated by Facebook is generally transmitted to a Facebook server and stored there; this may also involve a transfer to the servers of Facebook Inc. in the USA. You can revoke your consent at any time with effect for the future. To exercise your revocation, uncheck the box next to the "Facebook Pixel" setting in the "Cookie Consent Tool" integrated into the website.
12.2 Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called "cookies", which are text files stored on your computer that allow an analysis of your use of the website. In addition, Google AdSense uses so-called "web beacons" (small invisible graphics) to collect information; through their use, simple actions such as visitor traffic on the website can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to a Google server and stored there. This may also involve a transfer to the servers of Google LLC in the USA.
Google uses the information received in this way to perform an evaluation of your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser within the scope of Google AdSense will not be merged with other data by Google. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.
The described processing of data is carried out in accordance with Art. 6(1)(f) GDPR for the purpose of targeted advertising to the user by third-party advertisers whose ads are displayed on this website based on the evaluated user behavior. This processing also serves our financial interest in exhausting the economic potential of our website through the paid display of personalized third-party advertising content.
Further information regarding the data protection provisions of Google can be found at the following internet address: https://www.google.de/policies/privacy/
You can permanently deactivate cookies for ad preferences by preventing them through the corresponding setting of your browser software, or you can download and install the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be usable or may only be usable to a limited extent if you have deactivated the use of cookies.
Insofar as legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the possibility for objection described above.
13) Data subject rights
13.1 Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, which we inform you about below:
- Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the involved logic and the scope and intended effects of such processing for you, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR regarding the transfer of your data to third countries;
- Right to rectification pursuant to Art. 16 GDPR: You have the right to the immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored by us;
- Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17(1) GDPR are met.
However, this right does not exist in particular if the processing is necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise or defense of legal claims;When selecting the payment method "Amazon Pay", the payment processing is carried out by the payment service provider Amazon Payments Europe s.c.a., 38 avenue J.F. Kennedy, L-1855 Luxembourg (hereinafter: "Amazon Payments"), to whom we transmit your information provided during the ordering process, together with information about your order, in accordance with Art. 6(1)(b) GDPR. Your data is passed on exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. Further information regarding the data protection provisions of Amazon Payments can be found at the following internet address: https://pay.amazon.com/de/help/201751600
9) Contacting for review reminders
Review reminder by Trusted Shops
Provided that you have given us your express consent to this during or after your order in accordance with Art. 6(1)(a) GDPR, we will transmit your email address to the review platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you an email review reminder.
You can revoke your consent at any time by sending a message to the controller responsible for data processing or directly to the review platform.
10) Use of review and trust seal graphics
Trusted Shops Trustbadge
The Trusted Shops Trustbadge is integrated into this website to display our Trusted Shops trust seal and to offer Trusted Shops membership to buyers after an order.
This serves to protect our legitimate interests in optimally marketing our offer, which are overriding in the context of a balancing of interests, Art. 6(1)(f) GDPR. The Trustbadge and the services advertised with it are an offer from Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne.
When the Trustbadge is called up, the web server automatically saves a so-called server log file, which contains, for example, your IP address, date and time of the retrieval, amount of data transferred, and the requesting provider (access data) and documents the retrieval. This access data is not evaluated and is automatically overwritten no later than seven days after the end of your page visit.
Further personal data is only transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or have already registered for their use. In this case, the contractual agreement made between you and Trusted Shops applies.
11) Use of social media: Social plugins
11.1 Facebook plugins with 2-click solution
So-called social plugins ("plugins") from the social network Facebook are used on our website, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
To increase the protection of your data when visiting our website, the plugins are integrated into the page using a so-called "2-click" solution, which keeps them initially deactivated. Deactivated plugins can be recognized by being grayed out. This integration ensures that when you access a page on our website that contains such plugins, no connection is yet established with the Facebook servers. Only when you activate the plugins and thereby grant your consent for data transmission in accordance with Art. 6(1)(a) GDPR does your browser establish a direct connection to the Facebook servers. The content of the respective plugin is transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Facebook. We have no influence on the scope of the data that Facebook collects with the help of the plugins. According to our current knowledge, Facebook at least receives information about which of our websites you are currently visiting and have previously visited. Through the integration of the plugins, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a profile on Facebook or are not currently logged in. The collected information (including your IP address) is transmitted by your browser directly to a Facebook Inc. server in the USA and stored there. If you interact with the plugins, the corresponding information is also transmitted directly to a Facebook server and stored there. The information is also published on Facebook and displayed to your contacts there.
You can revoke your consent at any time by deactivating the activated plugin again by clicking on it. However, the revocation has no effect on data that has already been transmitted to Facebook.
For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of Facebook: https://www.facebook.com/policy.php
11.2 Facebook plugins with Shariff solution
So-called social plugins ("plugins") from the social network Facebook are used on our website, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
To increase the protection of your data when visiting our website, these buttons are not integrated into the page as unrestricted plugins, but only using an HTML link. This type of integration ensures that when you access a page on our website that contains such buttons, no connection is yet established with the Facebook servers. When you click the button, a new browser window opens and calls up the Facebook page, where you can interact with the plugins there (possibly after entering your login data).
For the purpose and scope of data collection and the further processing and use of the data by Facebook, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of Facebook: https://www.facebook.com/policy.php
11.3 Instagram as a standard plugin
So-called social plugins ("plugins") from the online service Instagram are used on our website, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook"). The plugins are marked with an Instagram logo, for example, in the form of an "Instagram camera". An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.
When you access a page on our website that contains such a plugin, your browser establishes a direct connection to the Instagram servers. The content of the plugin is transmitted directly to your browser by Instagram and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted by your browser directly to a Facebook Inc. server in the USA and stored there.
If you are logged in to Instagram, Instagram can directly assign your visit to our website to your Instagram account. If you interact with the plugins, for example by pressing the "Instagram Camera" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts there.
The described data processing operations are carried out in accordance with Art. 6(1)(f) GDPR based on the legitimate interests of Instagram in displaying personalized advertising to inform other users of the social network about your activities on our website and to design the Instagram service according to requirements.
If you do not want Instagram to assign the data collected via our website directly to your Instagram account, you must log out of Instagram before visiting our website. You can also object to the loading of Instagram plugins and thus the data processing operations described above for the future with add-ons for your browser, e.g., with the script blocker "NoScript" (http://noscript.net/).
For the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of Instagram: https://help.instagram.com/155833707900388/
11.4 Instagram plugin as Shariff solution
So-called social plugins ("plugins") from the online service Instagram are used on our website, operated by Facebook Ireland Ltd., 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland ("Facebook").
To increase the protection of your data when visiting our website, these buttons are not integrated into the page as unrestricted plugins, but only using an HTML link. This type of integration ensures that when you access a page on our website that contains such buttons, no connection is yet established with the Instagram servers. When you click the button, a new browser window opens and calls up the Instagram page, where you can interact with the plugins there (possibly after entering your login data).
For the purpose and scope of data collection and the further processing and use of the data by Instagram, as well as your related rights and setting options for protecting your privacy, please refer to the privacy policy of Instagram: https://help.instagram.com/155833707900388/
12) Online marketing
12.1 Facebook Pixel for creating Custom Audiences with advanced data matching (with cookie consent tool)
Within our online offer, the so-called "Facebook Pixel" of the social network Facebook is used in advanced data matching mode, operated by Facebook Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland ("Facebook").
Based on your express consent, when a user clicks on an advertisement placed by us and displayed on Facebook, an extension is added to the URL of our linked page by the Facebook Pixel. This URL parameter is then saved via a cookie in the user's browser, which our linked page sets itself. In addition, this cookie collects specific customer data such as email addresses that we collect on our website linked to the Facebook ad during processes such as purchases, account logins, or registrations (advanced data matching). The cookie is then read by the Facebook Pixel and enables the transmission of data, including specific customer data, to Facebook.
With the help of the Facebook Pixel with advanced data matching, Facebook is able to precisely determine the visitors to our online offer as a target group for the display of advertisements (so-called "Facebook Ads"). Accordingly, we use the Facebook Pixel with advanced data matching to display our Facebook Ads only to those Facebook users who have shown an interest in our online offer or who have certain characteristics (e.g., interests in certain topics or products determined based on the visited websites) which we transmit to Facebook (so-called "Custom Audiences"). With the help of the Facebook Pixel with advanced data matching, we also want to ensure that our Facebook Ads correspond to the potential interest of the users and are not perceived as annoying. This allows us to further evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were redirected to our website after clicking on a Facebook ad (so-called "conversion"). Compared to the standard version of the Facebook Pixel, the advanced data matching function helps us better measure the effectiveness of our advertising campaigns by capturing more attributed conversions.
All transmitted data is stored and processed by Facebook, so a connection to the respective user profile is possible and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Use Policy (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to display advertisements on and off Facebook.
These processing operations are carried out exclusively when express consent is given in accordance with Art. 6(1)(a) GDPR.
Consent to the use of the Facebook Pixel may only be given by users who are older than 16 years. If you are younger, we ask you to ask your legal guardians for permission.
The information generated by Facebook is generally transmitted to a Facebook server and stored there; this may also involve a transfer to the servers of Facebook Inc. in the USA. You can revoke your consent at any time with effect for the future. To exercise your revocation, uncheck the box next to the "Facebook Pixel" setting in the "Cookie Consent Tool" integrated into the website.
12.2 Google AdSense
This website uses Google AdSense, a web advertising service provided by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). Google AdSense uses so-called "cookies", which are text files stored on your computer that allow an analysis of your use of the website. In addition, Google AdSense uses so-called "web beacons" (small invisible graphics) to collect information; through their use, simple actions such as visitor traffic on the website can be recorded, collected, and evaluated. The information generated by the cookie and/or web beacon (including your IP address) about your use of this website is generally transmitted to a Google server and stored there. This may also involve a transfer to the servers of Google LLC in the USA.
Google uses the information received in this way to perform an evaluation of your usage behavior with regard to the AdSense ads. The IP address transmitted by your browser within the scope of Google AdSense will not be merged with other data by Google. The information collected by Google may be transferred to third parties if this is required by law and/or if third parties process this data on behalf of Google.
The described processing of data is carried out in accordance with Art. 6(1)(f) GDPR for the purpose of targeted advertising to the user by third-party advertisers whose ads are displayed on this website based on the evaluated user behavior. This processing also serves our financial interest in exhausting the economic potential of our website through the paid display of personalized third-party advertising content.
Further information regarding the data protection provisions of Google can be found at the following internet address: https://www.google.de/policies/privacy/
You can permanently deactivate cookies for ad preferences by preventing them through the corresponding setting of your browser software, or you can download and install the browser plug-in available at the following link:
https://www.google.com/settings/ads/plugin?hl=de
Please note that certain functions of this website may not be usable or may only be usable to a limited extent if you have deactivated the use of cookies.
Insofar as legally required, we have obtained your consent for the processing of your data described above in accordance with Art. 6(1)(a) GDPR. You can revoke your consent at any time with effect for the future. To exercise your revocation, please follow the possibility for objection described above.
13) Data subject rights
13.1 Applicable data protection law grants you comprehensive data subject rights (rights of access and intervention) vis-à-vis the controller regarding the processing of your personal data, which we inform you about below:
- Right of access pursuant to Art. 15 GDPR: In particular, you have the right to obtain information about your personal data processed by us, the purposes of processing, the categories of personal data processed, the recipients or categories of recipients to whom your data has been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, the right to lodge a complaint with a supervisory authority, the source of your data if not collected from you by us, the existence of automated decision-making including profiling and, if applicable, meaningful information about the involved logic and the scope and intended effects of such processing for you, as well as your right to be informed of the safeguards pursuant to Art. 46 GDPR regarding the transfer of your data to third countries;
- Right to rectification pursuant to Art. 16 GDPR: You have the right to the immediate rectification of inaccurate data concerning you and/or completion of your incomplete data stored by us;
- Right to erasure pursuant to Art. 17 GDPR: You have the right to request the erasure of your personal data if the requirements of Art. 17(1) GDPR are met.
- Right to restriction of processing in accordance with Art. 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you dispute, is being verified, if you refuse the erasure of your data due to unlawful data processing and request the restriction of the processing of your data instead, if you need your data for the establishment, exercise or defense of legal claims after we no longer require this data after the purpose has been achieved, or if you have lodged an objection on grounds of your particular situation, as long as it has not yet been determined whether our legitimate grounds override yours;
- Right to notification in accordance with Art. 19 GDPR: If you have asserted the right to rectification, erasure or restriction of processing against the controller, the controller is obliged to communicate this rectification or erasure of data or restriction of processing to each recipient to whom the personal data concerning you have been disclosed, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
- Right to data portability in accordance with Art. 20 GDPR: You have the right to receive your personal data, which you have provided to us, in a structured, commonly used and machine-readable format or to request transmission to another controller, as far as this is technically feasible;
- Right to withdraw consent granted in accordance with Art. 7 (3) GDPR: You have the right to withdraw your once granted consent to the processing of data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, provided that further processing cannot be based on a legal basis for processing without consent. The withdrawal of consent does not affect the lawfulness of the processing based on consent before its withdrawal;
- Right to lodge a complaint in accordance with Art. 77 GDPR: If you are of the opinion that the processing of the personal data concerning you infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement.
13.2 RIGHT TO OBJECT
IF WE PROCESS YOUR PERSONAL DATA WITHIN THE FRAMEWORK OF A BALANCING OF INTERESTS ON THE BASIS OF OUR OVERRIDING LEGITIMATE INTEREST, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON GROUNDS RELATING TO YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED. HOWEVER, FURTHER PROCESSING REMAINS RESERVED IF WE CAN PROVE COMPELLING LEGITIMATE GROUNDS FOR THE PROCESSING WHICH OVERRIDE YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES THE ESTABLISHMENT, EXERCISE OR DEFENSE OF LEGAL CLAIMS.
IF YOUR PERSONAL DATA ARE PROCESSED BY US FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF PERSONAL DATA CONCERNING YOU FOR THE PURPOSE OF SUCH ADVERTISING. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL CEASE PROCESSING THE DATA CONCERNED FOR DIRECT MARKETING PURPOSES.
14) Duration of storage of personal data
The duration of the storage of personal data is determined by the respective legal basis, the purpose of processing and – if applicable – additionally by the respective statutory retention period (e.g. commercial and tax law retention periods).
When processing personal data on the basis of explicit consent pursuant to Art. 6 (1) (a) GDPR, these data are stored until the data subject withdraws his/her consent.
If there are statutory retention periods for data that are processed within the framework of legal or quasi-legal obligations on the basis of Art. 6 (1) (b) GDPR, these data will be routinely deleted after the expiry of the retention periods, provided that they are no longer required for the fulfillment of the contract or the initiation of a contract and/or we have no legitimate interest in their further storage.
When processing personal data on the basis of Art. 6 (1) (f) GDPR, these data are stored until the data subject exercises his/her right to object pursuant to Art. 21 (1) GDPR, unless we can prove compelling legitimate grounds for the processing that override the interests, rights and freedoms of the data subject, or the processing serves the establishment, exercise or defense of legal claims.
When processing personal data for the purpose of direct marketing on the basis of Art. 6 (1) (f) GDPR, these data are stored until the data subject exercises his/her right to object pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the other information in this declaration regarding specific processing situations, stored personal data will otherwise be deleted when they are no longer necessary for the purposes for which they were collected or otherwise processed.