Data protection

1) Information on the collection of personal data and contact details of the data controller

1.1 We are pleased that you are visiting our website and thank you for your interest. Below, we inform you about how we handle your personal data when you use our website. Personal data is any data that can be used to personally identify you.

1.2 The data controller for this website within the meaning of the General Data Protection Regulation (GDPR) is Metamorph GmbH, Alexander-Meissner-Strasse 77D, 12526 Berlin, Germany, Tel.: +49 30 4004460, Fax: +49 30 40044639, E-mail: support@maskworld.com. The data controller is the natural or legal person who, alone or jointly with others, determines the purposes and means of the processing of personal data.

1.3 The controller has appointed a data protection officer for this website, who can be contacted as follows: “Mr. Attorney Dr. Sebastian Kraska, Marienplatz 2, 80331 Munich”

1.4 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g., orders or inquiries to the data controller). You can recognize an encrypted connection by the "https://" prefix and the padlock symbol in your browser's address bar.

2) Data collection when visiting our website

When you simply use our website for informational purposes, i.e., if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you access our website, we collect the following data, which is technically necessary for us to display the website to you:

• Our visited website
• Date and time of access
• Amount of data sent in bytes
• Source/referrer from which you accessed this page
• Browser used
• Operating system used
• IP address used (possibly in anonymized form)

The processing is carried out in accordance with Article 6(1)(f) GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be disclosed or used for any other purpose. However, we reserve the right to subsequently review the server log files should there be concrete indications of unlawful use.

3) Cookies

To make your visit to our website more attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your device. Some of the cookies we use are deleted after the end of your browser session, i.e., after you close your browser (session cookies). Other cookies remain on your device and allow us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). When cookies are set, they collect and process certain user information, such as browser and location data, as well as IP addresses, to varying degrees. Persistent cookies are automatically deleted after a specified period, which can vary depending on the cookie.

Some cookies are used to simplify the ordering process by saving settings (e.g., remembering the contents of a virtual shopping cart for a later visit to the website). If any of the cookies we implement also process personal data, this processing is carried out in accordance with Article 6(1)(b) GDPR for the performance of the contract or in accordance with Article 6(1)(f) GDPR to protect our legitimate interests in ensuring the best possible website functionality and a user-friendly and effective website experience.

We may work with advertising partners who help us make our website more interesting for you. For this purpose, when you visit our website, cookies from partner companies may also be stored on your hard drive (third-party cookies). If we work with the aforementioned advertising partners, you will be informed individually and separately about the use of such cookies and the scope of the information collected in the paragraphs below.

Please note that you can configure your browser to notify you when cookies are being set, allowing you to decide whether to accept them individually, or to block cookies in certain cases or entirely. Each browser manages cookie settings differently. This is described in the help menu of each browser, which explains how to change your cookie settings. You can find this information for the respective browsers at the following links:

Internet Explorer: https://support.microsoft.com/de-de/help/17442/windows-internet-explorer-delete-manage-cookies

Firefox: https://support.mozilla.org/de/kb/cookies-erlauben-und-ablehne

Chrome: https://support.google.com/chrome/answer/95647?hl=de&hlrm=en

Safari: https://support.apple.com/kb/ph21411?locale=de_DE

Opera: http://help.opera.com/Windows/10.20/de/cookies.html

Please note that if you do not accept cookies, the functionality of our website may be limited.

More information about consent and settings options

4) Making contact

When you contact us (e.g., via contact form or email), personal data is collected. The specific data collected via a contact form is indicated on the form itself. This data is stored and used solely for the purpose of responding to your inquiry, contacting you, and for the associated technical administration. The legal basis for processing this data is our legitimate interest in responding to your inquiry, pursuant to Article 6(1)(f) GDPR. If your contact is aimed at concluding a contract, the additional legal basis for processing is Article 6(1)(b) GDPR. Your data will be deleted after your inquiry has been fully processed. This is the case when it is clear from the circumstances that the matter has been resolved and provided that no statutory retention obligations apply.

5) Data processing when opening a customer account and for contract processing

In accordance with Article 6(1)(b) GDPR, personal data will continue to be collected and processed if you provide it to us for the performance of a contract or when opening a customer account. The specific data collected is evident from the respective input forms. You can delete your customer account at any time by sending a message to the controller's address provided above. We store and use the data you provide for contract processing. After complete contract fulfillment or deletion of your customer account, your data will be blocked in accordance with tax and commercial law retention periods and deleted after these periods have expired, unless you have expressly consented to further use of your data or we have reserved the right to further use your data as permitted by law, about which we will inform you accordingly below.

6) Comment function

When you use the comment function on this website, your comment, the time it was posted, and your chosen username will be stored and published on the website. Your IP address will also be logged and stored. This IP address is stored for security reasons and in case you, as the person posting the comment, infringes the rights of third parties or posts illegal content. We need your email address to contact you if a third party objects to your published content as being unlawful. The legal basis for storing your data is Article 6(1)(b) and (f) of the GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.

7) Use of your data for direct marketing

7.1 Registration for our email newsletter

When you subscribe to our email newsletter, we will regularly send you information about our offers. The only mandatory information required to send you the newsletter is your email address. Providing any other information is voluntary and is used to personalize our communications with you. We use the double opt-in procedure for sending our newsletter. This means that we will only send you an email newsletter after you have explicitly confirmed that you consent to receiving it. We will then send you a confirmation email asking you to click on a link to confirm that you wish to receive future newsletters.

By activating the confirmation link, you give us your consent to use your personal data in accordance with Article 6 Paragraph 1 Letter a of the GDPR. When you subscribe to the newsletter, we store your IP address, which is registered by your internet service provider (ISP), as well as the date and time of registration, in order to be able to trace any potential misuse of your email address at a later date. The data we collect when you subscribe to the newsletter is used exclusively for sending you promotional material via the newsletter. You can unsubscribe from the newsletter at any time via the unsubscribe link provided in the newsletter or by sending a corresponding message to the data controller named above. After you unsubscribe, your email address will be immediately deleted from our newsletter mailing list, unless you have expressly consented to further use of your data or we reserve the right to use your data for other purposes permitted by law, about which we inform you in this privacy policy.

7.2 Sending the email newsletter to existing customers

If you provided us with your email address when purchasing goods or services, we reserve the right to regularly send you offers for similar goods or services from our product range via email. According to Section 7 Paragraph 3 of the German Unfair Competition Act (UWG), we do not need to obtain your separate consent for this. The data processing is based solely on our legitimate interest in personalized direct marketing pursuant to Article 6 Paragraph 1 Letter f of the GDPR. You have the right to object to the use of your email address for the aforementioned advertising purpose at any time with effect for the future by sending a message to the data controller named at the beginning of this document. You will only incur transmission costs at the basic rates for this. Upon receipt of your objection, the use of your email address for advertising purposes will be discontinued immediately.

7.3 Newsletter distribution via MailChimp

Our email newsletters are sent via the technical service provider The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (http://www.mailchimp.com/), to whom we transfer the data you provided when subscribing to the newsletter. This transfer is based on Art. 6 para. 1 lit. f GDPR and serves our legitimate interest in using an effective, secure, and user-friendly newsletter system. Please note that your data is generally transferred to and stored on a MailChimp server in the USA.

MailChimp uses this information to send and statistically analyze newsletters on our behalf. For this analysis, the emails we send contain web beacons or tracking pixels, which are single-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links, if any, have been clicked. Technical information is also collected (e.g., time of access, IP address, browser type, and operating system). The data is collected exclusively in pseudonymized form and is not linked to your other personal data; direct identification of individuals is therefore impossible. This data is used solely for the statistical analysis of newsletter campaigns. The results of these analyses can be used to better tailor future newsletters to the interests of our recipients.

If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.

Furthermore, MailChimp may use this data itself, in accordance with Article 6(1)(f) GDPR, based on its own legitimate interest in the needs-based design and optimization of the service, as well as for market research purposes, for example, to determine the countries of origin of the recipients. However, MailChimp does not use the data of our newsletter recipients to contact them directly or to pass it on to third parties.

To protect your data in the USA, we have concluded a data processing agreement with MailChimp based on the European Commission's standard contractual clauses to enable the transfer of your personal data to MailChimp. This data processing agreement can be viewed at the following web address: http://mailchimp.com/legal/forms/data-processing-agreement/.

MailChimp is also certified under the US-European data protection agreement "Privacy Shield" and is therefore committed to complying with EU data protection regulations.

You can view MailChimp's privacy policy here: https://mailchimp.com/legal/privacy/

7.4 Advertising by postal mail

Based on our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name, your postal address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation in accordance with Art. 6 para. 1 lit. f GDPR and to use it for sending you interesting offers and information about our products by post.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the responsible party.

7.5 Reminder emails for completed and incomplete transactions

Based on our legitimate interest in personalized direct marketing, we reserve the right to store your first and last name, your email address and – insofar as we have received this additional information from you within the framework of the contractual relationship – your title, academic degree, year of birth and your professional, industry or business designation in accordance with Art. 6 para. 1 lit. f GDPR and to use it for sending you interesting reminders, offers and information about our products based on completed or incomplete transactions via email.

You can object to the storage and use of your data for this purpose at any time by sending a corresponding message to the responsible party.

The emails are sent via the technical service provider Sendinblue SAS, 55 Rue d'Amsterdam, 75008 Paris, France ( https://www.sendinblue.com/ ), to whom we transfer your provided data for processing. Your data is stored exclusively on servers within the European Union.

Sendinblue uses this information to send and statistically analyze emails on our behalf. For this analysis, the sent emails contain web beacons or tracking pixels, which are single-pixel image files stored on tracking servers. This allows us to determine whether an email has been opened and which links, if any, have been clicked. Technical information is also collected (e.g., time of access, IP address, browser type, and operating system). The results of these analyses can be used to better tailor future processes, information, and emails to the interests of the recipients.

If you wish to object to the evaluation and analysis, you must unsubscribe from these emails.

Furthermore, Sendinblue may use this data itself, in accordance with Article 6(1)(f) GDPR, based on its own legitimate interest in the needs-based design and optimization of the service, as well as for market research purposes, to determine, for example, the countries of origin of recipients. However, Sendinblue does not use the recipients' data to contact them directly or to pass it on to third parties.

To protect your data, we have concluded a data processing agreement with Sendinblue based on the standard contractual clauses of the European Commission to enable the transfer of your personal data to Sendinblue.

You can view Sendinblue's privacy policy here: https://de.sendinblue.com/legal/privacypolicy/

8) Data processing for order processing

8.1 To process your order, we work with the following service providers, who support us in whole or in part in fulfilling concluded contracts. Certain personal data is transferred to these service providers in accordance with the following information.

The personal data we collect will be shared with the transport company commissioned with delivery as part of the contract processing, insofar as this is necessary for the delivery of the goods. We will share your payment data with the commissioned bank as part of the payment processing, insofar as this is necessary for the payment processing. If payment service providers are used, we will inform you explicitly about this below. The legal basis for the transfer of data is Art. 6 para. 1 lit. b GDPR.

8.2 Use of specialized service providers for order processing and fulfillment

– Shipcloud

Shipping is handled via the shipping portal "shipcloud" (shipcloud GmbH, Lüdmoor 35a, 22175 Hamburg). In accordance with Article 6 Paragraph 1 Letter b GDPR, we will only share your data (name, address, and any other information) with shipcloud for the purpose of processing your online order. Data will only be shared to the extent that this is actually necessary for processing your order.

Details regarding data protection at shipcloud can be viewed on the shipcloud website at "shipcloud.io".

8.3 Transfer of personal data to shipping service providers

– DHL

If the goods are delivered by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will forward your email address to DHL in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification.

– DPD

If the goods are delivered by the transport service provider DPD (DPD Deutschland GmbH, Wailandtstraße 1, 63741 Aschaffenburg), we will forward your email address and/or your telephone number to DPD before delivery of the goods in accordance with Art. 6 para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification.

– GLS

If the goods are delivered by the transport service provider GLS (General Logistics Systems Germany GmbH & Co. OHG, GLS Germany-Straße 1 – 7, 36286 Neuenstein), we will forward your email address to GLS in accordance with Art. 6 para. 1 lit. a GDPR before delivery of the goods for the purpose of coordinating a delivery date or for delivery notification.

– UPS

If the goods are delivered by the transport service provider UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will forward your email address to UPS before delivery of the goods in accordance with Art. 6 Para. 1 lit. a GDPR for the purpose of coordinating a delivery date or for delivery notification.

8.4 Use of Payment Service Providers

– Amazon Pay

When you select "Amazon Pay" as your payment method, payment processing is handled by the payment service provider Amazon Payments Europe sca, 5 Rue Plaetis, L-2338 Luxembourg (hereinafter: "Amazon Payments"), to whom we transfer the information you provided during the ordering process, along with information about your order, in accordance with Article 6 Paragraph 1 Letter b GDPR. Your data is transferred exclusively for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary for this purpose. You can find further information about Amazon Payments' privacy policy at the following web address: https://pay.amazon.com/de/help/201751600

– ConCardis

If you choose to pay by credit card through the payment service provider ConCardis, payment processing will be handled by ConCardis GmbH, Helfmann-Park 7, 65760 Eschborn, to whom we will transfer the information you provided during the ordering process, along with information about your order, in accordance with Article 6 Paragraph 1 Letter b GDPR. Your data will be transferred exclusively for the purpose of payment processing with the payment service provider ConCardis and only to the extent necessary for this purpose.

– Payolution

If you have chosen the payment services "payolution invoice", "payolution installment purchase" or "payolution direct debit" from payolution GmbH, Am Euro Platz 2, 1120 Vienna, Austria ("payolution") as your payment option, you consent during the ordering process to the transfer of your data to payolution for the purpose of creditworthiness and account number verification. For the processing of these payment methods, personal data (first name, last name, address, email, telephone number, date of birth, IP address, gender) together with data required for transaction processing (item, invoice amount, interest, installments, due dates, total amount, invoice number, taxes, currency, order date and time) will be transmitted to payolution in accordance with Art. 6 Para. 1 lit. a GDPR.

This data is transmitted so that payolution can assess whether your chosen payment method can be granted with regard to payment and/or default risks. By transmitting the provided data, payolution obtains further information from the following credit agencies for the purpose of identity and creditworthiness verification:

– CRIF GmbH, Diefenbachgasse 35, A-1150 Vienna

– CRIF AG, Hagenholzstrasse 81, CH-8050 Zurich

– CRIF GmbH, Dessauerstraße 9, 80992 Munich

– SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden

– KSV1870 Information GmbH, Wagenseilgasse 7, A-1120 Vienna

– CRIF Bürgel GmbH, Gasstraße 18, D-22761 Hamburg

– Creditreform Boniversum GmbH, Hellersbergstr. 11, D-41460 Neuss

– infoscore Consumer Data GmbH, Rheinstraße 99, D-76532 Baden-Baden

– ProfileAddress Direktmarketing GmbH, Altmannsdorfer Strasse 311, A-1230 Vienna

– Deutsche Post Direkt GmbH, Junkersring 57, D-53844 Troisdorf

– payolution GmbH, Am Euro Platz 2, A-1120 Vienna

The credit report may contain probability values ​​(so-called score values). If score values ​​are included in the credit report, they are based on a scientifically recognized mathematical-statistical method. Address data is among the data used to calculate the score values, but is not the only factor. Your personal data will also be transmitted to Schufa (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany) for identity verification purposes, in accordance with Article 6 Paragraph 1 Letter a of the GDPR. Schufa will then inform payolution of the degree of correspondence between the personal data it holds and the data you provided, expressed as a percentage, and, if applicable, of any previous identity verification checks carried out by Schufa or another contractual partner. Based on the transmitted match rates, payolution can thus determine whether a person is registered in Schufa's database at the address you provided.

You can withdraw your consent at any time by sending a message to the data controller or to payolution. However, payolution may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

– Paypal

When paying via PayPal, credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, we forward your payment data to PayPal (Europe) Sarl et Cie, SCA, 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal") for payment processing. This transfer is carried out in accordance with Art. 6 para. 1 lit. b GDPR and only to the extent necessary for payment processing.

For the payment methods credit card via PayPal, direct debit via PayPal, or – if offered – "purchase on account" or "installment payment" via PayPal, PayPal reserves the right to conduct a credit check. For this purpose, your payment data may be transferred to credit agencies in accordance with Art. 6 Para. 1 lit. f GDPR based on PayPal's legitimate interest in determining your creditworthiness. PayPal uses the result of the credit check regarding the statistical probability of payment default to decide whether to offer the respective payment method. The credit check may include probability values ​​(so-called score values). If score values ​​are included in the result of the credit check, they are based on a scientifically recognized mathematical-statistical procedure. Address data is among the data used, but not the only data, in the calculation of the score values. For further information on data protection, including the credit agencies used, please refer to PayPal's Privacy Statement: https://www.paypal.com/de/webapps/mpp/ua/privacy-full

You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for the contractual processing of payments.

- IMMEDIATELY

When selecting the payment method "SOFORT," payment processing is handled by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we transfer the information you provided during the ordering process, along with information about your order, in accordance with Article 6 Paragraph 1 Letter b GDPR. SOFORT GmbH is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data is transferred exclusively for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary for this purpose. You can find further information about SOFORT's data protection policy at the following web address: https://www.klarna.com/sofort/datenschutz

– SIX Payment Services/Saferpay

If you choose to pay by credit card through the payment service provider SIX Payment Services, payment processing will be handled by SIX Payment Services (Europe) SA, 10, rue Gabriel Lippmann, L-5365 Munsbach, to whom we will transfer the information you provided during the ordering process, along with information about your order, in accordance with Article 6 Paragraph 1 Letter b GDPR. Your data will be transferred exclusively for the purpose of payment processing with the payment service provider SIX Payment Services and only to the extent necessary for this purpose.

9) Contacting us to send a review reminder

Review reminder by eKomi

If you have provided us with your email address when purchasing goods or services, we reserve the right to forward your email address to the eKomi rating platform of eKomi Ltd., Markgrafenstraße 11, 10969 Berlin, (www.ekomi.de), so that they can send you a rating reminder by email.

You can withdraw your consent at any time by sending a message to the data controller or to the rating platform.

Review reminder via Trusted Shops

If you have provided us with your email address when purchasing goods or services, we reserve the right to forward your email address to the review platform Trusted Shops GmbH, Subbelrather Str. 15c, 50823 Cologne (www.trustedshops.de), so that they can send you a review reminder by email.

You can withdraw your consent at any time by sending a message to the data controller or to the rating platform.

Review reminder via Trustpilot

If you have provided us with your email address when purchasing goods or services, we reserve the right to forward your email address to the Trustpilot review platform of Trustpilot A/S, Pilestræde 58, 1112 Copenhagen K, Denmark (www.trustpilot.com), so that they can send you a review reminder by email.

You can withdraw your consent at any time by sending a message to the data controller or to the rating platform.

10) Use of social media: Social plugins

10.1 Facebook as standard plugin

Our website uses social plugins (“plugins”) from the social network Facebook, operated by Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). The plugins are identified by a Facebook logo or the phrase “Facebook Social Plugin.” An overview of the Facebook plugins and their appearance can be found here: https://developers.facebook.com/docs/plugins

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Facebook's servers. The plugin's content is transmitted directly from Facebook to your browser and integrated into the page. Through this integration, Facebook receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Facebook profile or are not currently logged in to Facebook. This information (including your IP address) is transmitted directly from your browser to a Facebook server in the USA and stored there.

If you are logged into Facebook, Facebook can directly associate your visit to our website with your Facebook profile. If you interact with the plugins, for example by clicking the "Like" button or leaving a comment, this information is also transmitted directly to a Facebook server and stored there. The information is also published on your Facebook profile and displayed to your Facebook friends.

The data processing operations described are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Facebook's legitimate interests in displaying personalized advertising, in order to inform other users of the social network about your activities on our website and for the needs-based design of the service.

If you do not want Facebook to directly associate the data collected via our website with your Facebook profile, you must log out of Facebook before visiting our website. You can also prevent the loading of Facebook plugins and thus the data processing described above in the future by using browser add-ons, such as the script blocker "NoScript" (http://noscript.net/).

Facebook Inc., based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

For information on the purpose and scope of data collection and the further processing and use of data by Facebook, as well as your related rights and privacy settings, please refer to Facebook's privacy policy:

http://www.facebook.com/policy.php

10.2 Instagram as default plugin

Our website uses social plugins (“plugins”) from the online service Instagram, operated by Instagram LLC., 1601 Willow Rd, Menlo Park, CA 94025, USA (“Instagram”). The plugins are identified by an Instagram logo, for example, in the form of an “Instagram camera.” An overview of the Instagram plugins and their appearance can be found here: http://blog.instagram.com/post/36222022872/introducing-instagram-badges.

When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Instagram's servers. The plugin's content is transmitted directly from Instagram to your browser and integrated into the page. Through this integration, Instagram receives the information that your browser has accessed the corresponding page of our website, even if you do not have an Instagram profile or are not currently logged in to Instagram. This information (including your IP address) is transmitted directly from your browser to an Instagram server in the USA and stored there.

If you are logged into Instagram, Instagram can directly associate your visit to our website with your Instagram account. If you interact with the plugins, for example by clicking the "Instagram Camera" button, this information is also transmitted directly to an Instagram server and stored there. The information is also published on your Instagram account and displayed to your contacts.

The data processing operations described are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Instagram's legitimate interests in displaying personalized advertising, in order to inform other users of the social network about your activities on our website and for the needs-based design of the service.

If you do not want Instagram to directly associate the data collected via our website with your Instagram account, you must log out of Instagram before visiting our website. You can also prevent the loading of Instagram plugins and thus the data processing described above in the future by using browser add-ons, such as the script blocker "NoScript" (http://noscript.net/).

Instagram LLC, based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

For information on the purpose and scope of data collection and the further processing and use of data by Instagram, as well as your related rights and privacy settings, please refer to Instagram's privacy policy: https://help.instagram.com/155833707900388/

10.3 Pinterest as the default plugin

The seller's website uses social plugins ("plugins") from the social network Pinterest, operated by Pinterest Inc., 808 Brannan Street, San Francisco, CA, 94103, USA ("Pinterest"). The plugins are identified by a Pinterest logo (e.g., the "Pin it" button). An overview of the Pinterest plugins and their appearance can be found here: https://developers.pinterest.com/docs/getting-started/introduction/

When you visit a seller's page containing such a plugin, your browser establishes a direct connection to Pinterest's servers. The plugin then transmits so-called log data to Pinterest's server in the USA. This log data may include your IP address, the address of the websites you visit that have Pinterest features, your browser type and settings, the date and time of your request, your use of Pinterest, and cookies. If you interact with the plugins, for example, by clicking the "Pin it" button, the corresponding information is also transmitted directly to a Pinterest server and stored there. This information is also published on Pinterest and displayed on your Pinterest account.

The data processing operations described are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Pinterest's legitimate interests in displaying personalized advertising, in order to inform other users of the social network about your activities on our website and for the needs-based design of the service.

If you do not want Pinterest to collect your data via our website and potentially combine it with your user data on Pinterest, you should log out of Pinterest before visiting our website.

You can also prevent the loading of Pinterest plugins and thus the data processing operations described above from happening in the future by using browser add-ons, e.g. with the script blocker "NoScript" (http://noscript.net/).

For information on the purpose and scope of data collection and the further processing and use of data by Pinterest, as well as your related rights and privacy settings, please refer to Pinterest's privacy policy: https://about.pinterest.com/de/privacy-policy

10.4 Twitter plugins with 2-click solution

Our website uses so-called social plugins (“plugins”) from the microblogging service Twitter, which is operated by Twitter Inc., 1355 Market St, Suite 900, San Francisco, CA 94103, USA (“Twitter”).

To enhance the protection of your data when visiting our website, the plugins are initially deactivated and integrated using a so-called "2-click" solution. You can recognize deactivated plugins by their gray background. This integration ensures that no connection to Twitter's servers is established when you access a page on our website containing such plugins. Only when you activate the plugins and thereby give your consent to the data transfer in accordance with Art. 6 Para. 1 lit. a GDPR, does your browser establish a direct connection to Twitter's servers. The content of the respective plugin is then transmitted directly to your browser and integrated into the page. The plugin then transmits data (including your IP address) to Twitter. We have no influence on the scope of the data that Twitter collects using the plugins. To the best of our knowledge, Twitter receives information about which of our websites you are currently and previously visiting. By integrating these plugins, Twitter receives information that your browser has accessed the corresponding page of our website, even if you do not have a Twitter profile or are not currently logged in. The collected information (including your IP address) is transmitted directly from your browser to a Twitter server in the USA and stored there. When you interact with the plugins, the corresponding information is also transmitted directly to a Twitter server and stored there. This information is also published on Twitter and displayed to your contacts.

You can withdraw your consent at any time by deactivating the plugin by clicking it again. However, this withdrawal does not affect data that has already been transferred to Twitter.

Twitter Inc., based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

For information on the purpose and scope of data collection and the further processing and use of data by Twitter, as well as your related rights and privacy settings, please refer to Twitter's privacy policy: https://twitter.com/privacy

11) Use of social media: Videos

11.1 Use of Vimeo videos

Our website uses plugins from the video portal Vimeo, operated by Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA. When you visit a page on our website that contains such a plugin, your browser establishes a direct connection to Vimeo's servers. The plugin's content is transmitted directly from Vimeo to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has accessed the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.

If you are logged into Vimeo, Vimeo can directly associate your visit to our website with your Vimeo account. If you interact with the plugins (such as clicking the play button on a video), this information is also transmitted directly to a Vimeo server and stored there.

The data processing operations described are carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Vimeo's legitimate interest in market research and the needs-based design of the service.

If you do not want Vimeo to directly associate the data collected via our website with your Vimeo account, you must log out of Vimeo before visiting our website.

For information on the purpose and scope of data collection and the further processing and use of data by Vimeo, as well as your related rights and privacy settings, please refer to Vimeo's privacy policy: http://vimeo.com/privacy

Videos from Vimeo embedded on our site automatically integrate the tracking tool Google Analytics. This is Vimeo's own tracking system, over which we have no access and which cannot be influenced by our site. Google Analytics uses so-called "cookies" for tracking; these are text files that are stored on your computer and enable an analysis of your website usage. The information generated by the cookie about your use of this website is generally transmitted to and stored on a Google server in the USA.

This processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of Vimeo's legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

11.2 Use of YouTube videos

This website uses the YouTube embedding function to display and play videos from the provider "YouTube", which belongs to Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google").

This uses enhanced privacy mode, which, according to the provider, only initiates the storage of user information when the video(s) are played. When embedded YouTube videos are played, the provider "YouTube" sets cookies to collect information about user behavior. According to YouTube, this information is used, among other things, to collect video statistics, improve user-friendliness, and prevent misuse. If you are logged into Google, your data will be directly associated with your account when you click on a video. If you do not want this association with your YouTube profile, you must log out before activating the button. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. This analysis is carried out, in particular, pursuant to Art. 6 Para. 1 lit. f GDPR, based on Google's legitimate interests in displaying personalized advertising, conducting market research, and/or designing its website to meet user needs. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact YouTube.

Regardless of whether the embedded videos are played, a connection to the Google network “DoubleClick” is established every time this website is accessed, which may trigger further data processing operations beyond our control.

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

Further information on data protection at “YouTube” can be found in the provider's privacy policy at: https://www.google.de/intl/de/policies/privacy

12) Online Marketing

12.1 Google AdSense

This website uses Google AdSense, a web advertising service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google AdSense uses so-called "DoubleClick DART cookies" ("cookies"). These are text files that are stored on your computer and enable an analysis of your use of the website. In addition, Google AdSense also uses so-called "web beacons" (small, invisible graphics) to collect information. These web beacons allow simple actions, such as visitor traffic on the website, to be recorded, collected, and analyzed. The information generated by the cookie and/or web beacon about your use of this website (including your IP address) is generally transmitted to and stored on a Google server in the USA.

Google uses the information obtained in this way to analyze your usage patterns with regard to AdSense ads. The IP address transmitted by your browser as part of Google AdSense is not combined with other Google data. The information collected by Google may be transferred to third parties if required by law and/or if third parties process this data on Google's behalf.

The data processing described above is carried out in accordance with Article 6(1)(f) GDPR for the purpose of targeted advertising to the user by third-party advertisers, whose advertisements are displayed on this website based on the analyzed user behavior. This processing also serves our financial interest in maximizing the economic potential of our website by displaying personalized third-party advertising content for a fee.

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

You can find further information about Google's privacy policy at the following web address: http://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by preventing them through a corresponding setting in your browser software or by downloading and installing the browser plug-in available at the following link:

http://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled the use of cookies.

12.2 Use of Google AdWords Conversion Tracking

This website uses the online advertising program "Google AdWords" and, within the framework of Google AdWords, the conversion tracking service of Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). We use Google AdWords to draw attention to our attractive offers on external websites using advertising materials (so-called Google AdWords). Based on the data from the advertising campaigns, we can determine the success of individual advertising measures. Our aim is to show you advertising that is relevant to you, to make our website more interesting for you, and to achieve a fair calculation of advertising costs.

The conversion tracking cookie is set when a user clicks on an AdWords ad served by Google. Cookies are small text files that are stored on your computer system. These cookies typically expire after 30 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Google and we can recognize that the user clicked on the ad and was redirected to this page. Each Google AdWords customer receives a different cookie. Therefore, cookies cannot be tracked across the websites of different AdWords customers. The information obtained using the conversion cookie is used to generate conversion statistics for AdWords customers who have opted for conversion tracking. These customers learn the total number of users who clicked on their ad and were redirected to a page with a conversion tracking tag. However, they do not receive any information that can personally identify users. If you do not wish to participate in tracking, you can block this by disabling the Google Conversion Tracking cookie in your browser's user settings. You will then not be included in the conversion tracking statistics. We use Google AdWords based on our legitimate interest in targeted advertising pursuant to Art. 6 para. 1 lit. f GDPR.

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

You can find further information about Google's privacy policy at the following web address: http://www.google.de/policies/privacy/

You can permanently disable cookies for ad preferences by preventing them through a corresponding setting in your browser software or by downloading and installing the browser plug-in available at the following link:

http://www.google.com/settings/ads/plugin?hl=de

Please note that certain features of this website may not be available or may be limited if you have disabled the use of cookies.

12.3 Use of Affiliate Programs

– AWIN Performance Advertising Network

We participate in the performance advertising network of AWIN AG, Eichhornstraße 3, 10785 Berlin (hereinafter "AWIN"). As part of its tracking services, AWIN stores cookies on the end devices of users who visit or use websites or other online services of its clients (e.g., register for a newsletter or place an order in an online shop) to document transactions (e.g., leads and sales). These cookies serve solely the purpose of correctly attributing the success of an advertising medium and the corresponding billing within its network.

A cookie simply stores information about when a specific advertisement was clicked on by a device. AWIN tracking cookies contain a unique, but not personally identifiable, string of numbers that documents the advertiser's partner program, the publisher, and the time of the user's action (click or view). AWIN also collects information about the device used for the transaction, such as the operating system and browser. If this information includes personal data, the processing described above is based on our legitimate financial interest in processing commission payments with AWIN, in accordance with Article 6(1)(f) of the GDPR.

If you do not wish to allow cookies to be stored in your browser, you can adjust your browser settings accordingly. You can disable cookies in your browser under Tools/Internet Options, restrict them to specific websites, or configure your browser to notify you whenever a cookie is sent. Please note, however, that in this case, you may experience a limited display of online services and restricted user navigation. You can also delete cookies at any time. In this case, the information stored in them will be removed from your device.

Further information on data usage by AWIN can be found in the company's privacy policy: https://www.awin.com/de/rechtliches

– affilinet Performance Advertising Network

We participate in the performance advertising network of affilinet GmbH, Sapporobogen 6-8, 80637 Munich, Germany (hereinafter "affilinet"). As part of its tracking services, affilinet stores cookies on the end devices of users who visit or use websites or other online services of its clients (e.g., register for a newsletter or place an order in an online shop) to document transactions (e.g., leads and sales). These cookies serve solely the purpose of correctly attributing the success of an advertising medium and the corresponding billing within its network.

A cookie simply stores information about when a specific advertisement was clicked on by a device. The affilinet tracking cookies contain a unique, but not personally identifiable, sequence of numbers that documents the advertiser's partner program, the publisher, and the time of the user's action (click or view). In this process, affilinet also collects information about the device used for the transaction, such as the operating system and browser. If this information includes personal data, the processing described above is based on our legitimate financial interest in processing commission payments with affilinet, in accordance with Article 6(1)(f) of the GDPR.

If you do not wish to allow cookies to be stored in your browser, you can adjust your browser settings accordingly. You can disable cookies in your browser under Tools/Internet Options, restrict them to specific websites, or configure your browser to notify you whenever a cookie is sent. Please note, however, that in this case, you may experience a limited display of online services and restricted user navigation. You can also delete cookies at any time. In this case, the information stored in them will be removed from your device.

Further information on data usage by affilinet can be found in the company's privacy policy: https://www.affili.net/de/footeritem/datenschutz

12.4 Use of voucher marketing service providers

– Sovendus Sales

To select a voucher offer that is currently of interest to you, we transmit the pseudonymized and encrypted hash value of your email address and your IP address to Sovendus GmbH, Moltkestr. 11, 76133 Karlsruhe (Sovendus) (Art. 6 para. 1 f GDPR). The pseudonymized hash value of the email address is used to take into account any objection you may have to receiving advertising from Sovendus (Art. 21 para. 3, Art. 6 para. 1 c GDPR). Sovendus uses the IP address exclusively for data security purposes and, as a rule, anonymizes it after seven days (Art. 6 para. 1 f GDPR). Furthermore, for billing purposes, we transmit the pseudonymized order number, order value with currency, session ID, coupon code, and timestamp to Sovendus (Art. 6 para. 1 f GDPR). If you are interested in a voucher offer from Sovendus, there is no objection to advertising on your email address, and you click on the voucher banner displayed only in this case, we will transmit your title, name and email address to Sovendus in encrypted form for the purpose of preparing the voucher (Art. 6 para. 1 b, f GDPR).

For further information on how Sovendus processes your data, please refer to the online privacy policy at www.sovendus.de/datenschutz

13) Web analytics services

13.1 Google (Universal) Analytics

– Google Universal Analytics

This website uses Google Analytics, a web analytics service provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). Google Analytics uses "cookies," which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website (including your truncated IP address) will generally be transmitted to and stored by Google on servers in the United States.

This website uses Google Analytics exclusively with the extension "_anonymizeIp()", which ensures anonymization of the IP address by shortening it and prevents direct identification of individuals. With this extension, your IP address is shortened by Google within member states of the European Union or in other contracting states of the Agreement on the European Economic Area before being transmitted. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, this processing is carried out in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.

On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity, and to provide us with other services relating to website activity and internet usage. The IP address transmitted by your browser as part of Google Analytics will not be merged with other Google data.

You can prevent the storage of cookies by adjusting your browser settings; however, please note that in this case you may not be able to fully utilize all the functions of this website. Furthermore, you can prevent Google from collecting and processing data generated by the cookie and related to your use of the website (including your IP address) by downloading and installing the browser plugin available at the following link:

http://tools.google.com/dlpage/gaoptout?hl=de

As an alternative to the browser plugin, or when using browsers on mobile devices, please click the following link to set an opt-out cookie that will prevent Google Analytics from collecting data on this website in the future (this opt-out cookie only works in this browser and only for this domain; if you delete your cookies in this browser, you will need to click this link again): Disable Google Analytics

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

This website also uses Google Analytics for cross-device analysis of visitor traffic, which is carried out using a user ID. You can deactivate cross-device analysis of your usage in your customer account under "My Data", "Personal Data".

For more information on how Google Analytics handles user data, please see Google's privacy policy: https://support.google.com/analytics/answer/6004245?hl=de

13.2 Jetpack (formerly WordPress.com Stats)

This website uses the web analytics service Jetpack (formerly WordPress.com Stats), operated by Automattic Inc., 60 29th Street #343, San Francisco, CA 94110-4929, USA, employing tracking technology from Quantcast Inc., 201 3rd St, Floor 2, San Francisco, CA 94103-3153, USA. Based on our legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes, in accordance with Art. 6 Para. 1 lit. f GDPR, Jetpack collects, analyzes, and stores pseudonymized visitor data. Pseudonymized user profiles can be created and analyzed from this data for the same purpose. Jetpack uses cookies, which are small text files stored locally in the cache of the website visitor's internet browser. These cookies serve, among other things, to recognize the browser and thus enable more accurate statistical data collection. The user's IP address is included in the collected information, but is pseudonymized immediately after collection and before storage to prevent it from being linked to a specific individual.

The information generated by the cookie about your use of this website (including the pseudonymized IP address) will be transferred to and stored on a server in the USA to protect the aforementioned interests.

Automattic Inc., based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

To opt out of future data collection and storage of your visitor data, you can obtain an opt-out cookie from Quantcast via the following link, which will prevent Jetpack from collecting and storing any future visitor data from your browser: http://www.quantcast.com/opt-out

The opt-out cookie is set by Quantcast.

14) Retargeting/ Remarketing/ Referral Advertising

Bing Ads (Microsoft Corporation)

This website uses the conversion tracking technology "Bing Ads" from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads places a cookie on your computer if you have reached our website via a Microsoft Bing ad. Cookies are small text files that are stored on your computer system. These cookies expire after 180 days and are not used for personal identification. If the user visits certain pages of this website and the cookie has not yet expired, Microsoft and we can recognize that the user clicked on the ad and was redirected to this page (conversion page). If personal data is processed in this context, this is done in accordance with Article 6 Paragraph 1 Letter f GDPR based on our legitimate interest in effective marketing.

The information collected using the conversion cookie is used to generate conversion statistics, i.e., to record how many users reach a conversion page after clicking on an ad. This tells us the total number of users who clicked on our ad and were redirected to a page with a conversion tracking tag. However, we do not receive any information that can personally identify users.

Microsoft Corporation, headquartered in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

If you do not wish to participate in tracking, you can easily opt out by disabling the Bing Ads conversion tracking cookie in your browser's user settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the EU consumer opt-out page http://www.youronlinechoices.com/uk/your-ad-choices/ to check whether advertising cookies from Microsoft are set in your browser and disable them.

You can find further information about Microsoft Bing Ads' privacy policy at the following web address: https://privacy.microsoft.com/de-de/privacystatement

Criteo (Criteo SA)

This website uses technology from Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo"), to collect, store, and analyze information about website visitors' browsing behavior using "cookie" text files. This is based on our legitimate interest in displaying personalized advertising in accordance with Art. 6 para. 1 lit. f GDPR. Criteo uses an algorithm to analyze browsing behavior and can then display targeted product recommendations as personalized advertising banners on other websites (so-called publishers). Under no circumstances can the collected data be used to personally identify visitors to this website. The data will not be used for any other purpose or shared with third parties.

To object to the collection of data and the creation of pseudonymized user profiles in the future, you can obtain the following so-called opt-out cookie:

Criteo Privacy Policy (http://www.criteo.com/de/privacy/)

Further information about Criteo's technology can be found in the Criteo Privacy Policy:

http://www.criteo.com/de/privacy/

Facebook Custom Audience via the pixel method

This website uses the “Facebook Pixel” from Facebook Inc., 1 Hacker Way, Menlo Park, CA 94025, USA (“Facebook”). With your explicit consent, this allows us to track user behavior after they have seen or clicked on a Facebook ad. This process is used to evaluate the effectiveness of Facebook ads for statistical and market research purposes and can help optimize future advertising campaigns.

The data collected is anonymous to us, meaning we cannot draw any conclusions about the identity of the users. However, the data is stored and processed by Facebook, so a connection to the respective user profile is possible, and Facebook can use the data for its own advertising purposes in accordance with the Facebook Data Policy (https://www.facebook.com/about/privacy/). You can allow Facebook and its partners to display advertisements on and off Facebook. A cookie may also be stored on your computer for these purposes. This processing only takes place with your explicit consent in accordance with Article 6 Paragraph 1 Letter a GDPR.

Consent to the use of the Facebook pixel may only be given by users who are older than 13 years of age. If you are younger, please ask your parent or guardian for permission.

Facebook Inc., based in the USA, is certified under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

To disable the use of cookies on your computer, you can configure your internet browser to prevent cookies from being stored on your computer in the future or to delete cookies that have already been stored. However, disabling all cookies may prevent some functions on our website from working properly. You can also disable the use of cookies by third-party providers such as Facebook on the following website of the Digital Advertising Alliance: http://www.aboutads.info/choices/

Google AdWords Remarketing

Our website uses the functions of Google AdWords Remarketing to advertise this website in Google search results and on third-party websites. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). For this purpose, Google places a cookie in your browser, which automatically enables interest-based advertising using a pseudonymous cookie ID and based on the pages you have visited. This processing is based on our legitimate interest in the optimal marketing of our website pursuant to Art. 6 para. 1 lit. f GDPR.

Further data processing only takes place if you have consented to Google linking your internet and app browsing history to your Google account and using information from your Google account to personalize ads you see on the web. If you are logged into Google during your visit to our website, Google will use your data together with Google Analytics data to create and define target audience lists for cross-device remarketing. For this purpose, your personal data is temporarily linked by Google with Google Analytics data to create target audiences.

You can permanently disable the setting of cookies for ad preferences by downloading and installing the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/

Alternatively, you can find information about cookies and adjust your settings at the Digital Advertising Alliance website: www.aboutads.info. Finally, you can configure your browser to notify you when cookies are being set, allowing you to decide whether to accept them individually, or to block cookies entirely or for specific websites. Please note that disabling cookies may limit the functionality of our website.

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

Further information and the privacy policy regarding advertising and Google can be found here:

http://www.google.com/policies/technologies/ads/

15) Tools and other items

15.1 Google Customer Reviews (formerly Google Certified Shops)

We work with Google LLC as part of the "Google Customer Reviews" program. The provider is Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google"). This program allows us to collect customer reviews from users of our website. After making a purchase on our website, you will be asked if you would like to participate in an email survey from Google. If you give your consent in accordance with Art. 6 para. 1 lit. a GDPR, we will transmit your email address to Google. You will receive an email from Google Customer Reviews asking you to rate your shopping experience on our website. Your rating will then be aggregated with our other ratings and displayed in our Google Customer Reviews logo and in our Merchant Center dashboard. It will also be used for Google Seller Ratings.

You can withdraw your consent at any time by sending a message to the data controller or to Google.

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

Further information on Google's data protection practices in connection with the Google Customer Reviews program can be found at the following link: https://support.google.com/merchants/answer/7188525?hl=de

Further information on Google Seller Ratings privacy policy can be found at this link: https://support.google.com/adwords/answer/2375474

15.2 Google Maps

On our website, we use Google Maps (API) from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”). Google Maps is a web service for displaying interactive maps to visually represent geographic information. Using this service allows us to show you our location and makes it easier for you to find directions.

When you access any page on our website that includes a Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored on Google servers in the USA. This occurs regardless of whether you have a Google account and are logged in. If you are logged into Google, your data will be directly associated with your account. If you do not want this data to be associated with your Google profile, you must log out before activating the map. Google stores your data (even for users who are not logged in) as usage profiles and analyzes them. This analysis is carried out, in particular, in accordance with Article 6 Paragraph 1 Letter f of the GDPR, based on Google's legitimate interests in displaying personalized advertising, conducting market research, and/or designing its website to meet user needs. You have the right to object to the creation of these user profiles, and to exercise this right, you must contact Google.

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

If you do not agree to the future transfer of your data to Google in connection with the use of Google Maps, you can also completely deactivate the Google Maps web service by disabling JavaScript in your browser. Google Maps, and therefore the map display on this website, will then be unavailable.

You can view Google's terms of service at http://www.google.de/intl/de/policies/terms/regional.html, and the additional terms of service for Google Maps at https://www.google.com/intl/de_US/help/terms_maps.html

Detailed information on data protection in connection with the use of Google Maps can be found on Google's website ("Google Privacy Policy"): http://www.google.de/intl/de/policies/privacy/

15.3 Google Web Fonts

This website uses web fonts provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA ("Google") for the consistent display of fonts. When you access a page, your browser loads the required web fonts into its browser cache to display texts and fonts correctly.

For this purpose, the browser you are using must connect to Google's servers. This allows Google to know that our website was accessed via your IP address. The use of Google Web Fonts is in the interest of a consistent and appealing presentation of our online content. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support web fonts, a standard font from your computer will be used.

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

Further information about Google Web Fonts can be found at https://developers.google.com/fonts/faq and in Google's privacy policy: https://www.google.com/policies/privacy/

15.4 Trusted Shops Trustbadge

To display our Trusted Shops seal of approval and to offer Trusted Shops membership to buyers after an order, the Trusted Shops Trustbadge is integrated on this website.

This serves to protect our overriding legitimate interests in the optimal marketing of our products and services, Art. 6 para. 1 lit. f GDPR. The Trustbadge and the services advertised with it are offered by Trusted Shops GmbH, Subbelrather Str. 15C, 50823 Cologne, Germany.

When the Trustbadge is accessed, the web server automatically saves a server log file containing information such as your IP address, the date and time of access, the amount of data transferred, and the requesting provider (access data), thus documenting the access. This access data is not analyzed and is automatically overwritten no later than seven days after your visit to the website.

Further personal data will only be transferred to Trusted Shops if you decide to use Trusted Shops products after completing an order or if you have already registered to use them. In this case, the contractual agreement between you and Trusted Shops applies.

15.5 Tawk.to Chat Widget

This page uses a so-called chat widget for live communication with visitors, which is provided by tawk.to Inc., 187 East Warm Springs Rd, SB298, Las Vegas, Nevada, 89119, USA (“Tawk.to”).

For this purpose, the browser you are using must connect to the servers of Tawk.to. This allows Tawk.to to know that our website was accessed via your IP address. The use of Tawk.to is in the interest of simple and direct communication with visitors to our online services. This constitutes a legitimate interest within the meaning of Article 6(1)(f) GDPR.

Tawk.to Inc., based in the USA, operates under the US-European data protection agreement "Privacy Shield", which ensures compliance with the level of data protection applicable in the EU.

Further information about Tawk.to can be found at https://www.tawk.to/legal/ and in Google's privacy policy: https://www.tawk.to/privacy-policy/

15.6 Google recaptcha

This website uses so-called CAPTCHAs, specifically “Google reCAPTCHA,” provided by Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA (“Google”), to prevent spam. When you access a page, your browser loads the necessary CAPTCHAs to check the submitted content for spam content.

For this purpose, the browser you are using must connect to Google's servers. This allows Google to know that our website was accessed via your IP address. The use of Google reCAPTCHA is in the interest of securing our online services. This constitutes a legitimate interest within the meaning of Art. 6 para. 1 lit. f GDPR. If your browser does not support CAPTCHAs, your use of the website may be limited.

Google LLC, based in the USA, is certified under the US-European data protection agreement “Privacy Shield”, which ensures compliance with the level of data protection applicable in the EU.

Further information on Google's privacy policy: https://www.google.com/policies/privacy/

16) Rights of the data subject

16.1 The applicable data protection law grants you comprehensive rights as a data subject (rights of access and intervention) vis-à-vis the controller with regard to the processing of your personal data, about which we inform you below:

• Right of access pursuant to Article 15 GDPR: You have, in particular, the right to information about your personal data processed by us, the purposes of the processing, the categories of personal data processed, the recipients or categories of recipients to whom your data have been or will be disclosed, the planned storage period or the criteria for determining the storage period, the existence of a right to rectification, erasure, restriction of processing, objection to processing, lodging a complaint with a supervisory authority, the origin of your data if they were not collected from you by us, the existence of automated decision-making, including profiling, and, where applicable, meaningful information about the logic involved and the significance and the envisaged consequences of such processing for you, as well as your right to be informed of the safeguards pursuant to Article 46 GDPR relating to the transfer of your data to third countries;
• Right to rectification pursuant to Art. 16 GDPR: You have the right to immediate rectification of inaccurate data concerning you and/or completion of incomplete data stored with us;
• Right to erasure pursuant to Article 17 GDPR: You have the right to request the erasure of your personal data if the conditions of Article 17(1) GDPR are met. However, this right does not exist, in particular, if the processing is necessary for exercising the right of freedom of expression and information, for compliance with a legal obligation, for reasons of public interest, or for the establishment, exercise, or defense of legal claims.
• Right to restriction of processing pursuant to Article 18 GDPR: You have the right to request the restriction of the processing of your personal data as long as the accuracy of your data, which you have contested, is being verified; if you object to the erasure of your data due to unlawful data processing and instead request the restriction of the processing of your data; if you need your data for the establishment, exercise or defence of legal claims after we no longer need this data for the purposes for which it was collected; or if you have objected to processing on grounds relating to your particular situation, pending the verification whether our legitimate grounds override yours.
• Right to information pursuant to Article 19 GDPR: If you have asserted your right to rectification, erasure, or restriction of processing against the controller, the controller is obligated to inform all recipients to whom your personal data has been disclosed of this rectification, erasure, or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about these recipients.
• Right to data portability pursuant to Art. 20 GDPR: You have the right to receive your personal data which you have provided to us in a structured, commonly used and machine-readable format or to request its transmission to another controller, insofar as this is technically feasible;
• Right to withdraw consent pursuant to Article 7(3) GDPR: You have the right to withdraw your consent to the processing of your data at any time with effect for the future. In the event of withdrawal, we will delete the data concerned immediately, unless further processing is permitted by another legal basis that does not require consent. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.
• Right to lodge a complaint pursuant to Article 77 GDPR: If you believe that the processing of your personal data infringes the GDPR, you have the right – without prejudice to any other administrative or judicial remedy – to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, your place of work or the place of the alleged infringement.

16.2 Right of objection

If we process your personal data based on our overriding legitimate interest as part of a balancing of interests, you have the right to object to this processing at any time, on grounds relating to your particular situation, with effect for the future.

If you exercise your right to object, we will cease processing the data in question. However, further processing remains possible if we can demonstrate compelling legitimate grounds for the processing which override your interests, fundamental rights and freedoms, or if the processing serves the purpose of establishing, exercising or defending legal claims.

If we process your personal data for direct marketing purposes, you have the right to object at any time to the processing of your personal data for such marketing. You can exercise your right to object as described above.

If you exercise your right to object, we will cease processing the data in question for direct marketing purposes.

17) Duration of storage of personal data

The duration for which personal data is stored is determined by the respective statutory retention period (e.g., commercial and tax law retention periods). After this period expires, the corresponding data is routinely deleted, unless it is still required for contract fulfillment or initiation and/or we have a legitimate interest in its continued storage.

18) Data protection information for our application process

Data protection information for our job postings

We process the data of applicants for job postings and unsolicited applications only for the purpose and within the scope of the application process and in accordance with legal requirements. In doing so, we process the data to fulfill our legal and contractual (including pre-contractual) obligations. The relevant framework for this is defined by Article 6, paragraph 1 of the GDPR.

By submitting your application to us, you consent to our processing of your data for the purposes of the application process. The required data is specified in the respective job description. This typically includes information from your CV, email and postal addresses, educational certificates, and similar documents, but often also additional information that you may voluntarily provide.

Should the data provided voluntarily or requested by us constitute special categories of personal data within the meaning of the GDPR (e.g. data such as ethnic origin or health data), we will process this data additionally in accordance with the provisions of Article 9 paragraph 2.

The data we receive during the application process is deleted after four months for unsuccessful applications – firstly, to be able to clarify any questions regarding the application process, and secondly, to comply with legal retention periods. For successful applications, we continue to process the data for the employment relationship.

Inclusion in our applicant database

In some cases, we also offer the option, with your consent, to be included in our applicant database independently of the actual job posting, in order to be considered for later job postings.

In this case, we retain the data for this purpose for 3 years and delete it after this period unless consent has been given for longer storage. This data will be used exclusively for consideration in job postings or recruitment and only for contacting applicants within this context.

Inclusion in our applicant database is voluntary; there is no entitlement to be included in our applicant database for future job postings, and of course, inclusion or willingness to be included in the applicant database has no influence on the current tendering process.