Privacy policy

Data protection declaration

Insofar as no other information is given below, the provision of your personal data is neither required by law or contract, nor is required for a contract. You are not obliged to provide the data. A non -provision has no consequences. This only applies if the following processing processes are not made any other statements.
“Personal data” is all information that relates to an identified or identifiable natural person.

Server log files
You can visit our websites without giving information about yourself.
For every access to our website, usage data is transmitted to us or our web host / IT service provider through your internet browser and saved in log data (so-called server log files). These stored data include, for example, the name of the page called, date and time of access, the IP address, the amount of data transferred and the requesting provider.
The processing takes place on the basis of Art. 6 Para. 1 Lit. f GDPR from our predominant legitimate interest in ensuring a trouble -free operation of our website and to improve our offer. 

Your data may be transmitted and processed there in third countries outside the EU, especially Canada and the USA. For Canada there is an adequacy decision by the EU Commission. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified according to the tagpf. This data transmission takes place on the basis of contractual obligations, which are comparable to those of the standard contract clauses of the EU Commission.

contact

Responsible
Contact us on request. The person responsible for data processing is:Pietro Vetere,Am Adelsbach 3,71364 WinnendenGermany,01721234567, hello@griffin-germany.de

Initiative contact with the customer by email
If you enter into business contact with us by email, we only collect your personal data (name, email address, message text) to the extent you provide. The data processing serves to process and answer your contact request.
If the contact of the implementation of pre -contractual measures (e.g. advice on the interests of purchase, offering offer) serves or concerns a contract that has already been concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 Lit. f GDPR from our predominant legitimate interest in processing and answering your request.In this case, you have the right to contradict this processes based on personal data based on Art. 6 Para. 1 Lit. f GDPR for reasons that arise from your special situation.
We only use your email address to process your request. Your data will then be deleted, taking into account legal retention periods, unless you have agreed to the further processing and use.

Collection and processing when using the contact form
When using the contact form, we only collect your personal data (name, email address, message text) to the extent you provide. Data processing serves the purpose of contacting.
If the contact of the implementation of pre -contractual measures (e.g. advice on the interests of purchase, offering offer) serves or concerns a contract that has already been concluded between you and us, this data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.
If the contact is made for other reasons, this data processing takes place on the basis of Art. 6 Para. 1 Lit. f GDPR from our predominant legitimate interest in processing and answering your request.In this case, you have the right to contradict this processes based on personal data based on Art. 6 Para. 1 Lit. f GDPR for reasons that arise from your special situation.
We only use your email address to process your request. Your data will then be deleted, taking into account legal retention periods, unless you have agreed to the further processing and use.

Customer account orders

Customer account
When opening a customer account, we collect your personal data to the scope provided there. Data processing serves the purpose of improving your shopping experience and simplifying the order processing. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time by notification to us without the legality of the processing that is made due to the consent until the revocation. Your customer account will then be deleted.

Collection, processing and passing on of personal data for orders
When ordering, we only collect and process your personal data insofar as this is necessary to fulfill and handle your order and to process your inquiries. The provision of the data is required for the conclusion of the contract. A non -provision means that no contract can be concluded. The processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR and is necessary for the fulfillment of a contract with you.
Your data is passed on, for example, to the shipping companies and dropshipping providers, payment service providers, service providers for order processing and IT service providers. In all cases, we strictly consider the legal requirements. The scope of the data transmission is limited to a minimum. 

Your data may be transmitted and processed there in third countries outside the EU, especially Canada and the USA. For Canada there is an adequacy decision by the EU Commission. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified according to the tagpf. This data transmission takes place on the basis of contractual obligations, which are comparable to those of the standard contract clauses of the EU Commission.

ReviewsAdvertising

Data collection when a commentary or evaluation is
When commenting/evaluating an article or a contribution, we only collect your personal data (name, email address, comment text) to the extent you provide. The processing serves the purpose of enabling a comment/evaluation and displaying comments/reviews.

By sending the comment/evaluation, you agree to the processing of the transmitted data. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke the consent at any time by notification to us, without the legality of the processing that is made due to the consent until the revocation. Your personal data will then be deleted.

When publishing your comment/your assessmentOnly the name you have givenpublished.

Evaluation reminder
After your order, we would like to ask you to evaluate your purchase from us.
For this purpose, we use your personal data (name, e-mail address, information about the order) regardless of the contract processing, in order to send you an evaluation reminder by email after an order made, provided you have expressly approved this.
The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke the consent at any time using the corresponding link in the email or by notification to us, without the legality of the processing that is carried out due to the consent until the revocation. 

Use of the email address for sending newsletters
Regardless of the contract processing, we use your email address exclusively for your own advertising purposes for newsletter shipping, provided you have expressly agreed. The processing takes place on the basis of Art. 6 Para. 1 lit. a GDPR with your consent. You can revoke your consent at any time without the legality of the processing that is carried out due to the consent until the revocation. You can unsubscribe from the newsletter at any time using the corresponding link in the newsletter or by notification to us. Your email address will then be removed from the distributor.

Payment service provider credit information

Use of PayPal
We use the PayPal (Europe) S.à.r.l. et cie, s.c.a. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). Data processing serves the purpose of being able to offer you payment through the payment service. With the selection and use of payment via PayPal, the data required for payment processing are transmitted to PayPal in order to be able to meet the contract with the selected payment method. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.

All PayPal transactions are subject to the PayPal data protection declaration. You can find these under https://www.paypal.com/de/webapps/mpp/ua/privacy-full

Use of PayPal Plus
We use the PayPal Plus PayPal (Europe) S.à.r.l. et cie, s.c.a. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). Data processing serves the purpose of being able to offer you payment through the payment service. With the selection and use of payment via PayPal, credit card via PayPal, direct debit via PayPal, the data required for payment processing are transmitted to PayPal in order to be able to meet the contract with the selected payment method. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.
 
For individual payment methods such as credit card via PayPal, direct debit via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using information. For this purpose, PayPal transmits the personal data required for a credit check and uses the information obtained about the statistical probability of a payment failure for a weighing decision on the reason, implementation or termination of the contractual relationship. The credit information can include probability values (score values), which are calculated based on scientifically recognized mathematical-statistical methods and incorporate in the calculation of address data. Your interests worthy of protection are taken into account in accordance with the legal provisions. Data processing serves the purpose of the credit check for a contract initiation. The processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our predominant legitimate interest in protection against loss of payment if PayPal is in advance.
You have the right to contradict you at any time against this processing of personal data based on Art. 6 Para. 1 lit. f GDPR by notification to PayPal.The provision of the data is required for the conclusion of the contract with the payment method you want. A non -provision means that the contract cannot be concluded with the payment method you have chosen.
 

Use of PayPal Express
On our website we use the PayPal Express payment service of the PayPal (Europe) S.à.r.l. et cie, s.c.a. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). Data processing serves the purpose of being able to offer you payment through the PayPal Express payment service. To integrate this payment service, PayPal collects, saves and analyzes, stores and analyzes data when accessing the website (e.g. IP address, device type, operating system, browser type, location of your device). Cookies can also be used for this. The cookies enable the recognition of your browser.
The processing of your personal data is carried out on the basis of Art. 6 Para. 1 Lit. f GDPR from our predominant legitimate interest in a customer -oriented offer of different payment methods.You have the right for reasons that result from your particular situation to contradict you at any time of this processing of personal data.
With the selection and use of PayPal Express, the data required for payment processing will be transmitted to PayPal in order to be able to meet the contract with the selected payment method. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. You can find more information on data processing when using the PayPal Express payment service in the associated data protection declaration at www.paypal.com/de/webapps/mpp/ua/privacy-full?locale.x=de_de#updated_PS.

Use of PayPal check-out
We use the PayPal Check-out payment service on our website (Europe) S.à.r.l. et cie, s.c.a. (22-24 Boulevard Royal L-2449, Luxembourg; “PayPal”). Data processing serves the purpose of being able to offer you payment through the payment service. With the selection and use of payment via PayPal, credit card via PayPal, direct debit via PayPal or “Pay later” via PayPal, the data required for payment processing will be transmitted to PayPal in order to be able to fulfill the contract with the selected payment method. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.

Here, cookies can be saved that enable the recognition of your browser. The data processing taking place is based on Art. 6 Para. 1 Lit. f GDPR from our predominant legitimate interest in a customer -oriented offer of different payment methods.You have the right for reasons that result from your particular situation to contradict you at any time of this processing of personal data.

Credit card via PayPal, direct debit via PayPal & “Pay later” via PayPal
In the case of individual payment methods such as credit card via PayPal, direct debit via PayPal or “Pay later” via PayPal, PayPal reserves the right to obtain credit information on the basis of mathematical-statistical procedures using information. For this purpose, PayPal transmits the personal data required for a credit check and uses the information obtained about the statistical probability of a payment failure for a weighing decision on the reason, implementation or termination of the contractual relationship. The credit information can include probability values (score values), which are calculated based on scientifically recognized mathematical-statistical methods and incorporate in the calculation of address data. Your interests worthy of protection are taken into account in accordance with the legal provisions. Data processing serves the purpose of the credit check for a contract initiation. The processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our predominant legitimate interest in protection against loss of payment if PayPal is in advance.
You have the right to contradict you at any time against this processing of personal data based on Art. 6 Para. 1 lit. f GDPR by notification to PayPal.The provision of the data is required for the conclusion of the contract with the payment method you want. A non -provision means that the contract cannot be concluded with the payment method you have chosen.

Third -party provider
When paying via the payment method of a third -party provider, the data required for payment processing will be transmitted to PayPal. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. To carry out this payment method, the data may then be passed on to the respective provider by PayPal. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. Local third -party providers can be, for example:

  • Immediately (Sofort GmbH, Theresienhöhe 12, 80339 Munich, Germany)
  • Giropay (Paydirekt GmbH, Stephanstr. 14-16, 60313 Frankfurt am Main)

Invoice purchase via PayPal
When paying via the payment method of invoice purchase, the data required for payment processing will initially be transmitted to PayPal. To carry out this payment method, the data will then be transmitted to RatePay GmbH (Franklinstrasse 28-29, 10587 Berlin; “RatePay”) to be able to meet the contract with the selected payment method. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. RatePay may lead to credit information based on mathematical-statistical procedures (probability or score values) using credit agencies by the process described above. Data processing serves the purpose of the credit check for a contract initiation. The processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our predominant legitimate interest in protection against loss of payment if Ratepay is in advance. Further information on data protection and which information ratpay can be used at https://www.ratepay.com/legal-payment-dataprivacy/ and https://www.ratepay.com/legal-payment-creditagencies/

You can find more information on data processing when using PayPal in the associated data protection declaration at https://www.paypal.com/de/webapps/mpp/ua/privacy-full.

Use of Amazon Payments
We use the Amazon Payments of the Amazon Payments Europe S.C.A. (38 Avenue John F. Kennedy, L-1855 Luxembourg; “Amazon Payments”).
Data processing serves the purpose of being able to offer you payment through the Amazon Payments payment service.
To integrate this payment service, Amazon Payment collects, stores and analyzes and analyzes data when calling the website data (e.g. IP address, device type, operating system, browser type, location of your device). Cookies can also be used for this. The cookies enable the recognition of your browser.
The processing of your personal data is carried out on the basis of Art. 6 Para. 1 Lit. f GDPR from our predominant legitimate interest in a customer -oriented offer of different payment methods. You have the right for reasons that result from your particular situation to contradict you at any time of this processing of personal data.
With the selection and use of “Amazon Payments”, the data required for payment processing will be transmitted to Amazon Payments in order to be able to meet the contract with the selected payment method. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.
You can find more information on data processing when using the Amazon Payment payment service in the associated data protection declaration at:https://pay.amazon.com/de/help/201212490

Use of Klarna payment options

We use the Klarna Bank payment service on our website (Publ) (Svaväasen 46, 111 34 Stockholm, Sweden; “Klarna”). With the selection and use of payment via Klarna, the data required for payment processing will be transmitted to Klarna in order to be able to fulfill the contract with the selected payment method. This processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR.

Here, cookies can be saved that enable the recognition of your browser. The data processing taking place is based on Art. 6 Para. 1 Lit. f GDPR from our predominant legitimate interest in a customer -oriented offer of different payment methods.You have the right for reasons that result from your particular situation to contradict you at any time of this processing of personal data.

 
“Pay Later” (invoice), “Pay Now” (payment by direct debit), “Financing” (installment purchase)
In the case of individual payment methods such as Pay Later “(invoice),” Pay Now “(payment by direct debit),” Financing “(in installment purchase, Klarna reserves the right to obtain credit information on the basis of mathematical-statistical procedures using credit agencies.
For this purpose, Klarna transmits the personal data required for a credit check, such as first and last name, address, gender, email address, IP address and data that is related to the order for the purpose of the identity and credit check to an information agency And uses the information obtained about the statistical probability of a default for a weighing decision on the reason, implementation or termination of the contractual relationship. The credit information can include probability values (score values), which are calculated based on scientifically recognized mathematical-statistical methods and incorporate in the calculation of address data. Your interests worthy of protection are taken into account in accordance with the legal provisions. Data processing serves the purpose of the credit check for a contract initiation. The processing takes place on the basis of Art. 6 Para. 1 lit. f GDPR from our predominant legitimate interest in protection against default if Klarna is in advance.You have the right to contradict you at any time against this processing of personal data based on Art. 6 Para. 1 lit. f GDPR by notification to Klarna.The provision of the data is required for the conclusion of the contract with the payment method you want. A non -provision means that the contract cannot be concluded with the payment method you have chosen.
Further information, in particular to which credit agencies Klarna will pass on your personal data for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/credit_rating_agencies and for Austria under https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/credit_rating_agencies
General information about Klarna can be found for Germany at:https://www.klarna.com/de/and for Austria underhttps://www.klarna.com/at/. Your personal information will be done by Klarna in accordance with the applicable data protection regulations and in accordance with the information in Klarne’s data protection regulations for Germany at https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_de/privacyand for Austria under https://cdn.klarna.com/1.0/shared/content/legal/terms/0/de_at/privacytreated. 
Use immediately
We use the payment service provider SOCLUME GmbH, (Theresienhöhe 12, 80339 Munich, Germany; “immediately”) for payment processing on our website. Sofort GmbH is a company of the Klarna Group (Klarna Bank (publ), Sveafen 46, 11134 Stockholm, Sweden). Data processing serves the purpose of being able to offer you various payment methods by payment processing via the payment service provider immediately. If you have opted for the payment option, the data required for payment processing will be transmitted to it immediately. This data processing takes place on the basis of Art. 6 Para. 1 lit. b GDPR. You can find more information on data processing when using the payment service provider immediately https://www.sofort.com/1.0/shared/content/legal/terms/de-DE/SOFORT/ and https://www.klarna.com/sofort/

Cookies

Our website uses cookies. Cookies are small text files that are stored in the internet browser or from the Internet browser on the computer system of a user. If a user calls a website, a cookie can be saved on the user’s operating system. This cookie contains a characteristic string that enables clear identification of the browser when calling the website again.

 
Cookies are saved on your computer. Therefore, you have full control over the use of cookies. By selecting appropriate technical settings in your internet browser, you can be notified before setting cookies and decide individually by accepting and preventing the cookies and transmission of the data it contains. Cookies that have already been stored can be deleted at any time. However, we would like to point out that you may not be able to fully use all functions of this website.
 
Under the links below, you can find out how you can manage the cookies from the most important browsers (including deactivating):
 
Technically necessary cookies
Insofar as no other information is given in the data protection declaration, we only use these technically necessary cookies for the purpose of making our offer more user -friendly, more effective and safer. Furthermore, cookies enable our systems to recognize their browser after changing sides and offer them services. Some functions of our website cannot be offered without the use of cookies. For this it is necessary that the browser is recognized even after a change of sides.
 
The use of cookies or comparable technologies is based on Section 25 (2) TDDDG. Your personal data is processed on the basis of Art. 6 Para. 1 Lit. f GDPR from our predominant legitimate interest in ensuring the optimal functionality of the website and a user -friendly and effective design of our offer.
You have the right for reasons that result from your particular situation to contradict you at any time of this processing of personal data. 

Analysis advertising covering

Use of Google Analytics 4
We use the Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
Data processing serves the purpose of analyzing this website and its visitors as well as for marketing and advertising purposes. For this purpose, Google will use the information obtained on behalf of the operator of this website to evaluate your use of the website, to compile reports on website activities and to provide other services associated with the use of websites and internet use.
The following information can be collected: IP address, date and time of the page call, click path, information about the browser you use and the device used by you, visited pages, referrer URL (website, about which you have ours Have called up), location data, purchase activities.Your data can be linked from Google with other data, such as your search history, your personal accounts, your usage data of other devices and all other data that Google has for you.

Your IP address will be shortened by us on our own servers beforehand. Google only receives pseudonymized data.

Google uses technologies such as cookies, web storage in the browser and tracking pixels, which enable an analysis of the use of the website.The use of cookies or comparable technologies is carried out with your consent based on Section 25 (1) sentence 1 TDDDDG in conjunction with Art. 6 Para. 1 lit. a GDPR.

Your personal data is processed with your consent based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without the legality of the processing that is carried out due to the consent until the revocation.

We also use Google Signals in this context. Google Signals enables a cross device tracking. Your data can therefore be analyzed across devices if you have activated the “personalized advertising” in your account settings and your end devices are linked to your Google account. This makes it possible to recognize which device you are looking for for products and return later in order to complete purchases on another device such as a tablet.
 
The cross -device reports created in this context contain exclusively aggregated data. We only receive statistics created on the basis of Google Signals. In order to prevent the data acquisition and storage through Google Signals across devices, you can deactivate the “Personalized Ads” function in the settings of your Google account. You can find more information about this athttps://support.google.com/ads/answer/2662922?hl=de
You can find more information on data processing and data protection on Google Signals athttps://support.google.com/analytics/answer/7532985?hl=de.  

We use the extended implementation of the consent mode (Advanced Consent Mode). User data is also transmitted to Google in the form of “pings” even if the consent is not granted. These pings can include the following information: IP address for deriving the IP country (a logging of the IP address does not take place), date and time of the page call, URL of the pages visited, user agent, referrer URL (website, about which our website was called) or information about the triggering of website events such as a conversion. On the basis of this information, Google is making a modeling of user data in order to be able to make a comprehensive usage analysis despite the refusal to consent.

The information generated by this is usually transferred to a Google server in the USA and stored there. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF).Google has certified according to the tapf and obliged to comply with European data protection principles.Both Google and state US authorities have access to their data.

You can find more information on terms of use and data protection athttps://policies.google.com/technologies/partner-sitesand underhttps://policies.google.com/privacy?hl=de&gl=de.

Use of the Shopify statistics
We use the statistics and analysis functions of the Shopify International Ltd. (Victoria Buildings,2nd floor,1-2 Haddington Road, Dublin 4, D04 XN32, Ireland; “Shopify”) as part of order processing. Shopify is a company associated with the Shopify Inc. (151 O’Connor Street, Ground Floor, Ottawa, Ontario, K2P 2L8, Canada).
Data processing serves the purpose of analyzing this website and its visitors. For this purpose, data is saved for marketing and optimization purposes and provided in reports, analyzes and statistics. The following device information is collected and processed: Information on the web browser, the IP address, the time zone and some of the cookies installed on your device. If you navigate on the website, information on accessed websites or products, the referrer URL (website by which you have accessed our website) as well as information on how to interact with the website is recorded. For this purpose, technologies such as cookies as well as web biacons, tags and pixels (electronic files to collect information are used for how to navigate on the website).
Your data may be transmitted and processed there in third countries outside the EU, especially Canada and the USA. For Canada there is an adequacy decision by the EU Commission. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Shopify is not certified according to the tagpf. This data transmission takes place on the basis of contractual obligations, which are comparable to those of the standard contract clauses of the EU Commission.
The use of cookies or comparable technologies is carried out with your consent based on Section 25 (1) sentence 1 TDDDDG in conjunction with Art. 6 Para. 1 lit. a GDPR. Your personal data is processed with your consent based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without the legality of the processing that is carried out due to the consent until the revocation.
You can find more information on data protection at Shopify athttps://www.shopify.com/de/legal/datenschutz, Information on the order processing contract athttps://www.shopify.com/de/legal/dpaas well as information about the cookies usedhttps://www.shopify.com/de/legal/cookies.

Use of the meta pixel
On our website we use the meta pixel of the Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland; “Meta”).
Meta and we are jointly responsible for the collection of your data and transmission of this data to META when the service is integrated. The basis for this is an agreement between us and meta on the joint processing of personal data in which the respective responsibilities are determined. The agreement is underhttps://de-de.facebook.com/legal/terms/businesstoolscallable. According to this, we are in particular responsible for the fulfillment of the information obligations in accordance with Art. 13, 14 GDPR, for compliance with the safety requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service as well as for compliance with the obligations in accordance with Art. 33 , 34 GDPR, insofar as a violation of the protection of personal data concerns our obligations in accordance with the agreement on the joint processing. META is responsible for ensuring that the rights of concerns in accordance with Art. 15 – 20 GDPR be able to comply with the safety requirements of Art. 32 GDPR with regard to the safety of the service and the obligations according to Art. 33, 34 GDPR, insofar as a violation of protection Personal data concerns META’s obligations in accordance with the agreement on the joint processing.
The purpose serves the purpose of addressing visitors to the website in a targeted manner with interest -related advertising on social networks Facebook and Instagram. For this purpose, Meta’s remarketing day was implemented on the website. A direct connection to the meta-servers is established over this day when visiting the website. As a result, the META server is transferred to which of our pages you have visited. META assigns this information to your personal Facebook and/or Instagram user account. If you visit the social networks Facebook or Instagram, you will then be shown personalized, interest -related ADS.
The application also serves the purpose of creating conversion statistics. Here we learn the total number of users who have clicked on one of our ads and have been forwarded to a page with a conversion tracking day and which actions are carried out on this website after forwarding. However, we do not receive any information with which users can be identified personally.
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Meta has certified according to the tapf and obliged to comply with European data protection principles.
Your personal data is processed with your consent based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without the legality of the processing that is carried out due to the consent until the revocation.
You can deactivate the remarketing function “Custom Audiences” here. You can find more information on the collection and use of the data by META, about your rights and possibilities for protecting your privacy in the data protection information from METAhttps://www.facebook.com/about/privacy/.
Use of Google Ads Conversion Tracking
We use the online advertising program “Google Ads” on our website and in this context conversion tracking (visiting action evaluation). Google Conversion Tracking is an analysis service of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; Google).
If you click on a display connected by Google, a cookie for conversion tracking is stored on your computer. These cookies have a limited validity, do not contain any personal data and therefore do not serve personal identification. If you visit certain pages of our website and the cookie has not yet expired, Google and we can see that you have clicked on the ad and have been forwarded to this page. Every Google Ads customer receives a different cookie. There is therefore no possibility that cookies can be tracked on the websites of ADS customers.
The information that is obtained with the help of the conversion cookie serves to create conversion statistics to the purpose. Here we learn the total number of users who have clicked on one of our ads and were forwarded to a page with a conversion tracking day. However, we do not receive any information with which users can be identified personally.
We use the extended implementation of the consent mode (Advanced Consent Mode). User data is also transmitted to Google in the form of “pings” even if the consent is not granted. These pings can include the following information: IP address for deriving the IP country (a logging of the IP address does not take place), date and time of the page call, URL of the pages visited, user agent, referrer URL (website, about which our website was called) or information about the triggering of website events such as a conversion. On the basis of this information, Google is making a modeling of user data in order to be able to make a comprehensive usage analysis despite the refusal to consent.
Your data may be transmitted to the Google LLC servers to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Googlehas certified according to the tapf and obliged to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent based on Section 25 (1) sentence 1 TDDDDG in conjunction with Art. 6 Para. 1 lit. a GDPR. Your personal data is processed with your consent based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without the legality of the processing that is carried out due to the consent until the revocation.
You can find more information as well as Google’s data protection declaration at:https://www.google.de/policies/privacy/ 
Use of the remarketing or “similar target groups” function of Google Inc.
We use the remarketing or “similar target groups”- function of Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
The application serves the purpose of analyzing visitor behavior and visitor interests. Google Cookies uses to carry out the analysis of the usage of the website, which forms the basis for the creation of interest-related advertisements. The visits to the website and anonymized data on the use of the website are collected via the cookies. There is no storage of personal data from visitors to the website. Visit another website in the Google Display network below will be displayed for advertisements that are very likely to take into account previously accessed product and information areas.
Your data may be transmitted to the Google LLC server to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Googlehas certified according to the tapf and obliged to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent based on Section 25 (1) sentence 1 TDDDDG in conjunction with Art. 6 Para. 1 lit. a GDPR. Your personal data is processed with your consent based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without the legality of the processing that is carried out due to the consent until the revocation.
You can find more information on Google Remarketing and the associated data protection declaration at:https://www.google.com/privacy/ads/ 

Use of Tikkok Pixel
We use the TIKTOK Pixel of Tikok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland; “Tiktok Ireland”) and the TIKTOK Information Technologies UK Limited (6th Floor, One London Wall, London, EC2Y 5EB, United on our website Kingdom; Both companies are those responsible for data processing (hereinafter “TikTok”).
Data processing serves the purpose of identifying and analyzing the website access of our customers as well as for better customer approach by switching targeted advertisements and evaluating the effectiveness of advertisements on TikTok. TikKOT uses technologies such as cookies and pixels that enable your browser recognition. The following information can be collected and transmitted to Tikok: Date and time of the visit, information about the browser you used and device type, screen resolution, IP address. TIIKTOK can assign this information to your personal Tikok user account. Usage profiles can be created from the data collected in this way using pseudonyms. However, this is not possible to identify users’ personal identification.
Your data may be sent to third countries, such as the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Tiktok is not certified after the tapf. Data transmission to the USA and to third countries without adequacy resolution, among other things, takes place on the basis of standard contract clauses as suitable guarantees for the protection of personal data, visible at:https://commission.europa.eu/law/law-topic/data-protection/international-dimension-data-protection/standard-contractual-clauses-scc_de.   
The use of cookies or comparable technologies is carried out with your consent based on Section 25 (1) sentence 1 TDDDDG in conjunction with Art. 6 Para. 1 lit. a GDPR. Your personal data is processed with your consent based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without the legality of the processing that is carried out due to the consent until the revocation.
You can find more information on data protection athttps://www.tiktok.com/legal/page/eea/privacy-policy/deandhttps://ads.tiktok.com/i18n/official/policy/controller-to-controller.

Plug-ins and other

Use of Google Tag Manager
We use Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”) on our website.
This application manages JavaScript tags and HTML tags, which are used for implementation in particular of tracking and analysis tools. Data processing serves the purpose of designing and optimizing our website.
The Google Tag Manager itself does not store cookies nor are there any personal data. However, it enables the triggering of other tags that can collect and process personal data.
You can find more information on terms of use and data protectionhere

Use of social plug-ins
We use plug-ins social networks on our website. The integration of social plug-ins and the data processing taking place serves the purpose of optimizing advertising for our products.
When integrating social plug-ins, a link between your computer and the servers of the providers of the social network is established and the plug-in is presented by notification to your browser on the page, provided you have expressly approved this. Here, both your IP address and the information you have visited are transmitted to the provider servers. This applies regardless of whether they are registered or logged in to the social network. A transmission also takes place in the case of non -registered or non -logged -in users. If you are connected to one or more of your social network accounts at the same time, the information collected can also be assigned to your corresponding profiles. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account. You can prevent this assignment from logging out of your social media accounts before visiting our website and before activating the buttons.
The use of cookies or comparable technologies is carried out with your consent based on Section 25 (1) sentence 1 TDDDDG in conjunction with Art. 6 Para. 1 lit. a GDPR. Your personal data is processed with your consent based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without the legality of the processing that is carried out due to the consent until the revocation.
The social networks named below are integrated on our website using social plug-in. You can find more information on the scope and purpose of collecting and using the data as well as your rights and options for protecting your privacy in the linked data protection information from the providers.

Facebook of the Meta Platforms Ireland Limited (4 Grand Canal Square, Grand Canal Harbor, Dublin 2, Ireland)
Meta Platforms Ireland and we are jointly responsible for the collection of your data and transmission of this data to Facebook when the service is integrated. The basis for this is an agreement between us and Meta Platforms Ireland on the joint processing of personal data in which the respective responsibilities are determined. The agreement is underhttps://www.facebook.com/legal/controller_addendumcallable. According to this, we are in particular responsible for the fulfillment of the information obligations in accordance with Art. 13, 14 GDPR, for compliance with the safety requirements of Art. 32 GDPR with regard to the correct technical implementation and configuration of the service as well as for compliance with the obligations in accordance with Art. 33 , 34 GDPR, insofar as a violation of the protection of personal data concerns our obligations in accordance with the agreement on the joint processing. Meta Platforms Ireland is responsible for enabling the rights of affected rights according to Art. 15 – 20 GDPR to comply with the safety requirements of Art. 32 GDPR with regard to the safety of the service and the obligations according to Art. 33, 34 GDPR, insofar as an injury of the protection of personal data concerns the obligations of Meta Platform Ireland in accordance with the agreement on joint processing.
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Metahas certified according to the tapf and obliged to comply with European data protection principles.
You can find more information on the collection and use of the data by Facebook, about your rights and possibilities for protecting your privacy in the data protection information from Facebook athttps://www.facebook.com/about/privacy/.

 
Instagram of the Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://help.instagram.com/155833707900388
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Metahas certified according to the tapf and obliged to comply with European data protection principles.

LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). LinkedInhas certified according to the tapf and obliged to comply with European data protection principles.

Pinterest der Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)
https://policy.pinterest.com/de/privacy-policy
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified according to the tagpf.

X, formerly called Twitter, (X Corp., 1355 Market Street, Suite 900 San Francisco, CA 94103, USA)
https://twitter.com/privacy
https://twitter.com/personalization
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). X has certified according to the tapf and obliged to comply with European data protection principles. 

Use of social plug-ins by means of “Shariff”
We use plug-ins social networks on our website. So that you keep control of your data, we use the data protection-safe “Shariff” buttons.
Without your express consent, no links to the servers of social networks will be established and consequently no data will be transmitted.
“Shariff” is a development of the specialists of the computer magazine c’t. It enables more privacy online and replaces the usual “Share” buttons of social networks. You can find more information about the Shariff project herehttps://www.heise.de/ct/artikel/Shariff-Social-Media-Buttons-mit-Datenschutz-2467514.html.
When you click on the buttons, a pop-up window appears in which you can log in to the respective provider with your data. Only after this active login by you is a direct connection to social networks established.
By logging in, you provide your consent to transfer your data to the respective social media provider. Here, among other things, both your IP address and the information you have visited are sent. If you are connected to one or more of your social network accounts at the same time, the information collected will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your social media accounts before visiting our website and before activating the buttons. The social networks named below are integrated using the “Shariff” function.
You can find more information on the scope and purpose of collecting and using the data as well as your rights and options for protecting your privacy in the linked data protection information from the providers.

Facebook of the Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://www.facebook.com/policy.php
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Metahas certified according to the tapf and obliged to comply with European data protection principles.

Instagram of the Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland)https://help.instagram.com/155833707900388.
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Metahas certified according to the tapf and obliged to comply with European data protection principles.

LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland)
https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). LinkedInhas certified according to the tapf and obliged to comply with European data protection principles.

Pinterest der Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA)
https://policy.pinterest.com/de/privacy-policy
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified according to the tagpf.

Use of social plug-ins by means of the “2-click solution”
We use plug-ins social networks using the “2-click solution” on our website. Without their express consent, no connections to the servers of social networks are established and consequently no data will be transmitted.
In the standard integration of plug-ins, when calling the pages of our website that contains such a plug-in, a link between your computer and the servers of the provider of the social network is established and the plug-in is established by notification to your browser shown on the page. Here, both your IP address and the information you have visited are transmitted to the provider servers. This applies regardless of whether they are registered or logged in to the social network. A transmission also takes place in the case of non -registered or non -logged -in users. If you are also logged in on the social network Facebook, this information is assigned to your personal user account. When using the plug-in functions (e.g. by pressing the button), this information is also assigned to your user account, which you can only prevent by logging out before using the plug-in. So that you keep control of your data, we decided to first deactivate the corresponding button. You can recognize this from the scattered button. Without your express consent – in the form of activating the button – no link to the server of the social network is established and no data is conveyed.
Only when you activate the button will the button be actively (covered in color) and a direct connection to the server of the social network is established.
By activating you give your consent to transfer your data to the respective provider of the social network. Here, among other things, both your IP address and the information you have visited are sent. If you are connected to one or more of your social network accounts at the same time, the information collected will also be assigned to your corresponding profiles. You can only prevent this assignment by logging out of your user accounts before visiting our website and before activating the buttons from your user accounts.
The social networks named below are integrated using the “2-click function”. You can find more information on the scope and purpose of collecting and using the data as well as your rights and options for protecting your privacy in the linked data protection information from the providers.

Facebook of the Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
https://www.facebook.com/policy.php
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Metahas certified according to the tapf and obliged to comply with European data protection principles.

Instagram of the Meta Platforms Ireland Limited (4 Grand Canal Square, Dublin 2, Ireland):
http://instagram.com/legal/privacy/
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Metahas certified according to the tapf and obliged to comply with European data protection principles.

LinkedIn (LinkedIn Ireland Unlimited Company, Wilton Place, Dublin 2, Ireland):
https://www.linkedin.com/legal/privacy-policy?trk=uno-reg-guest-home-privacy-policy
https://www.linkedin.com/psettings/guest-controls/retargeting-opt-out
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). LinkedInhas certified according to the tapf and obliged to comply with European data protection principles.

Pinterest der Pinterest Inc. (635 High Street, Palo Alto, CA, 94301, USA):
https://policy.pinterest.com/de/privacy-policy
https://help.pinterest.com/de/articles/personalization-and-data
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Pinterest is not certified according to the tagpf.

X, formerly called Twitter, (X Corp., 1355 Market Street, Suite 900 San Francisco, CA 94103, USA)
https://twitter.com/privacy
https://twitter.com/personalization
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF).X has certified according to the tapf and obliged to comply with European data protection principles.
Use of Google Recaptcha
We use the Recaptcha of theGoogle Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland; “Google”).The query serves the purpose of distinguishing the input by a person or by automated, mechanical processing. For this purpose, your input is transmitted to Google and continued there. In addition, the IP address and, if necessary, other data required by Google for the Recaptcha service will be transferred to Google.Google processes this data within the European Union and, if necessary, transmitted to the Google LLC server to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Googlehas certified according to the tapf and obliged to comply with European data protection principles.
The use of cookies or comparable technologies is carried out with your consent based on Section 25 (1) sentence 1 TDDDDG in conjunction with Art. 6 Para. 1 lit. a GDPR. Your personal data is processed with your consent based on Art. 6 Para. 1 lit. a GDPR. You can revoke your consent at any time without the legality of the processing that is carried out due to the consent until the revocation.
You can find more information about Google Recaptcha and the associated data protection declaration at: https://www.google.com/recaptcha/intro/android.htmlas well as https://www.google.com/privacy

Use of Cloudflare
On our website we use the Content Delivery Network Cloudflare CDN of the Cloudflare Inc. (101 Townsend ST, San Francisco, CA 94107, USA; “Cloudflare”). This is a national network of servers in different data centers with which our web server is connected and are delivered via the specific content of our website.
Data processing serves the purpose of optimizing the loading times of our website and making our offer more user -friendly.
Among other things, the following information can be collected: IP address, system configuration information, information about the traffic of and to customer websites (so-called server log files).
Your data may be transmitted to the USA. There is an appropriateness of the EU Commission for the United States, the Trans-Atlantic Data Privacy Framework (TADPF). Cloudflarehas certified according to the tapf and obliged to comply with European data protection principles.
The processing of your personal data is carried out on the basis of Art. 6 Para. 1 Lit. f GDPR from our predominant intereston the needs -based and targeted design of the website.You have the right to contradict you at any time of your special situation that is based on Art. 6 Para. 1 lit. f GDPR.
You can find more information on data protection when using Cloudflare at https://www.cloudflare.com/de-de/privacypolicy/.

Affected rights and memory duration

Duration of storage
After completing the contract, the data is initially stored for the duration of the warranty period, then taking into account legal, in particular tax and commercial law retention periods and then deleted after the deadline if they have not approved the further processing and use.

Rights of the data subject
If the legal requirements are met, the following rights according to Art. 15 to 20 GDPR are entitled to: Right to information, to correction, to deletion, to restrict processing, to data portability.
In addition, according to Art. 21 Para. 1 GDPR, you have a right to object to the processing, which are based on Art. 6 Para. 1 F GDPR, as well as the processing for the purpose of direct advertising.

Law of complaint with the supervisory authority
According to Art. 77 GDPR, you have the right to complain to the supervisory authority if you believe that the processing of your personal data is not legally.

You can file a complaint with the supervisory authority responsible for us, which you can achieve under the following contact details:

State representative for data protection and freedom of information Baden-Württemberg
Königstrasse 10 a
70173 Stuttgart
Tel.: +49 711 6155410
Fax: +49 711 61554115
Email: poststelle@lfdi.bwl.de

Right of contradictions
If the personal data processing listed here based on our legitimate interest in accordance with Art. 6 Para. 1 Lit. f GDPR, you have the right to object to these processing at any time with effect for the future.
After the objection, the processing of the data concerned is ended, unless we can demonstrate compelling legitimate grounds for the processing that outweigh your interests, rights and freedoms, or if the processing of assertion, exercise or defend legal claims.

Last update: 29.11.2023