1.1 We are pleased that you are visiting our website and thank you for your interest. On the following pages, we inform you about the handling of your personal data when using our website. Personal data is all data with which you can be personally identified.
1.2 The controller in charge of data processing on this website, within the meaning of the General Data Protection Regulation (GDPR), is Feldherr Lager- & Transportsysteme GmbH, Plauener Strasse 163-165, 13053 Berlin, Deutschland, Tel.: +49 (0)30 44328248, Fax: +49 (0)30 44328245, E-Mail: mail@feldherr.com. The controller in charge of the processing of personal data is the natural or legal person who alone or jointly with others determines the purposes and means of the processing of personal data.
1.3 This website uses SSL or TLS encryption for security reasons and to protect the transmission of personal data and other confidential content (e.g. orders or inquiries to the controller). You can recognize an encrypted connection by the character string https:// and the lock symbol in your browser line.
When using our website for information only, i.e. if you do not register or otherwise provide us with information, we only collect data that your browser transmits to our server (so-called "server log files"). When you visit our website, we collect the following data that is technically necessary for us to display the website to you:
Data processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in improving the stability and functionality of our website. The data will not be passed on or used in any other way. However, we reserve the right to check the server log files subsequently, if there are any concrete indications of illegal use.
- AWS CloudFront (Amazon)
On our website we use the content delivery network ("CDN") "AWS CloudFront" of the service provider "Amazon" (Amazon EU S.a. r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg).
A content delivery network is an online service that is used to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the Internet. The use of Amazon's Content Delivery Network helps us to optimize the loading speed of our website.
The processing is carried out in accordance with Art. 6 (1) 1 point f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
For more information, please refer to Amazon's privacy policy at https://docs.aws.amazon.com/en_en/AmazonCloudFront/latest/DeveloperGuide/data-protection-summary.html
- Cloudflare
On our website we use a content delivery network ("CDN") of the technology service provider Cloudflare Inc., 101 Townsend St. San Francisco, CA 94107, USA ("Cloudflare"). A Content Delivery Network is an online service used to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the internet. The use of Cloudflare's content delivery network helps us to optimise the loading speeds of our website.
The processing takes place in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
Cloudfare Inc., based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
For more information about Cloudfare’s privacy policy, please visit https://www.cloudflare.com/privacypolicy/
- Fastly
On our website we use a content delivery network ("CDN") of the technology service provider Fastly Inc., 475 Brannan St. #300, San Francisco, CA 94107, USA ("Fastly"). A Content Delivery Network is an online service used to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the internet. The use of Cloudflare's content delivery network helps us to optimise the loading speeds of our website.
The processing takes place in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
Cloudfare Inc., based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
For more information about Cloudfare’s privacy policy, please visit https://www.fastly.com/privacy
- KeyCDN
On our website we use a so-called Content Delivery Network ("CDN") of the technology service provider proinity GmbH, Rümikerstrasse 60, 8409 Winterthur, Switzerland ("KeyCDN"). A Content Delivery Network is an online service that is used to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected via the internet. The use of KeyCDN's Content Delivery Network helps us to optimize the loading speed of our website.
The processing takes place in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in a secure and efficient provision, as well as improvement of the stability and functionality of our website.
Further information can be found in Fastly's privacy policy at: https://www.keycdn.com/privacy
- Stackpath
On our website we use a content delivery network ("CDN") of the technology service provider StackPath, LLC, 2021 McKinney Avenue, Suite 1100 Dallas, Texas 75201, USA ("StackPath"). A content delivery network is an online service used to deliver large media files (such as graphics, page content or scripts) through a network of regionally distributed servers connected over the Internet. Using StackPath's content delivery network helps us to optimize the loading speed of our website.
The processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in the secure and efficient provision and improvement of the stability and functionality of our website.
StackPath, based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
For more information about StackPath’s privacy policy, please visit https://www.stackpath.com/legal/privacy-statement/
In order to make your visit to our website attractive and to enable the use of certain functions, we use so-called cookies on various pages. These are small text files that are stored on your end device. Some of the cookies we use are deleted after the end of the browser session, i.e. after closing your browser (so-called session cookies). Other cookies remain on your terminal and enable us or our partner companies (third-party cookies) to recognize your browser on your next visit (persistent cookies). If cookies are set, they collect and process specific user information such as browser and location data as well as IP address values according to individual requirements. Persistent cookies are automatically deleted after a specified period, which may vary depending on the cookie. You can check the duration of the respective cookie storage in the overview of the cookie settings of your web browser.
In some cases, cookies are used to simplify the ordering process by saving settings (e.g. remembering the content of a virtual shopping basket for a later visit to the website). If personal data are also processed by individual cookies set by us, the processing is carried out in accordance with Art. 6 (1) point b GDPR either for the execution of the contract or in accordance with Art. 6 (1) point f GDPR to safeguard our legitimate interests in the best possible functionality of the website and a customer-friendly and effective design of the page visit.
We work together with advertising partners who help us to make our website more interesting for you. For this purpose, cookies from partner companies are also stored on your hard drive when you visit our website (third-party cookies). You will be informed individually and separately about the use of such cookies and the scope of the information collected in each case within the following sections.
Please note that you can set your browser in such a way that you are informed about the setting of cookies and you can decide individually about their acceptance or exclude the acceptance of cookies for certain cases or generally. Each browser differs in the way it manages the cookie settings. This is described in the help menu of each browser, which explains how you can change your cookie settings. You will find these for the respective browsers under the following links:
- Internet Explorer: https://support.microsoft.com/en-us/help/17442/windows-internet-explorer-delete-manage-cookies
- Firefox: https://www.mozilla.org/en-US/privacy/websites/#cookies
- Chrome: https://support.google.com/accounts/answer/61416?co=GENIE.Platform%3DDesktop&hl=en
- Safari: https://support.apple.com/en-gb/guide/safari/manage-cookies-and-website-data-sfri11471/mac
- Opera: https://help.opera.com/en/latest/web-preferences/#cookies
Please note that the functionality of our website may be limited if cookies are not accepted.
When you contact us (e.g. via contact form or e-mail), personal data is collected. Which data is collected in the case of a contact form can be seen from the respective contact form. This data is stored and used exclusively for the purpose of responding to your request or for establishing contact and for the associated technical administration. The legal basis for processing data is our legitimate interest in responding to your request in accordance with Art. 6 (1) point f GDPR. If your contact is aimed at concluding a contract, the additional legal basis for the processing is Art. 6 (1) point b GDPR. Your data will be deleted after final processing of your enquiry; this is the case if it can be inferred from the circumstances that the facts in question have been finally clarified, provided there are no legal storage obligations to the contrary.
Pursuant to Art. 6 (1) point b GDPR, personal data will continue to be collected and processed if you provide it to us for the execution of a contract or when opening a customer account. Which data is collected can be seen from the respective input forms. It is possible to delete your customer account at any time. This can be done by sending a message to the above-mentioned address of the controller. We store and use the data provided by you for contract processing. After complete processing of the contract or deletion of your customer account, your data will be blocked in consideration of tax and commercial retention periods and deleted after expiry of these periods, unless you have expressly consented to further use of your data or a legally permitted further use of data has been reserved by our site, about which we will inform you accordingly below.
Within the scope of the commentary function on this website, in addition to your comment, information on the time of writing the comment and the name of the commentator you have chosen is stored and published on the website. Furthermore, your IP address is logged and stored. This IP address is stored for security reasons, in case the person concerned violates the rights of third parties or posts illegal content by submitting a comment. We need your e-mail address to contact you if a third party should object to your published content as unlawful. The legal basis for the storage of your data is Art. 6 (1) point b and f GDPR. We reserve the right to delete comments if they are objected to as unlawful by third parties.
As a user you can subscribe to the follow-up comments. You will receive a confirmation e-mail to ensure that you are the owner of the specified e-mail address (double opt-in procedure). The legal basis for data processing in the case of subscribing to comments is Art. 6 (1) point a GDPR. You can unsubscribe from current comment subscriptions at any time with effect for the future. Please refer to the confirmation e-mail for further information on the option for unsubscribing.
8.1 If you subscribe to our e-mail newsletter, we will send you regular information about our offers. The only mandatory information for sending the newsletter is your e-mail address. The indication of additional possible data is voluntary and is used to allow us to address you personally. We use the so-called double opt-in procedure for sending newsletters. This means that we will not send you an e-mail newsletter, unless you have expressly confirmed to us that you agree to the sending of such a newsletter. We will then send you a confirmation e-mail asking you to confirm that you wish to receive future newsletters by clicking on an appropriate link.
By activating the confirmation link, you give us your consent to the use of your personal data in accordance with Art. 6 (1) point a GDPR. When you register for the newsletter, we store your IP address entered by the Internet Service Provider (ISP) as well as the date and time of registration so that we can trace any possible misuse of your e-mail address at a later time. The data collected by us when you register for the newsletter will be used exclusively for the purpose of advertising by means of the newsletter. You can unsubscribe from the newsletter at any time via the link provided in the newsletter or by sending a message to the responsible person named above. After your cancellation, your e-mail address will immediately be deleted from our newsletter distribution list, unless you have expressly consented to further use of your data or we reserve the right to use data in excess thereof, which is permitted by law and about which we inform you in this declaration.
8.2 If you have provided us with your e-mail address when purchasing products, we reserve the right to regularly send you offers for products similar to those already purchased by e-mail. Pursuant to Section 7 (3) German law against unfair competition, we do not need to obtain separate consent from you. In this respect, data processing is carried out solely on the basis of our legitimate interest in personalized direct advertising pursuant to Art. 6 (1) point f GDPR. If you have initially objected to the use of your e-mail address for this purpose, we will not send you an e-mail. You are entitled to object to the future use of your e-mail address for the aforementioned advertising purpose at any time by notifying the controller named at the beginning of this document. In this regard, you only have to pay the transmission costs according to the basic tariffs. Upon receipt of your objection, the use of your e-mail address for advertising purposes will cease immediately.
8.3 Our e-mail newsletters are sent via the technical service provider, The Rocket Science Group, LLC d/b/a MailChimp, 675 Ponce de Leon Ave NE, Suite 5000, Atlanta, GA 30308, USA (https://mailchimp.com), to whom we pass on the data you provided when registering for the newsletter. This disclosure is made in accordance with Art. 6 (1) point f GDPR and serves our legitimate interest in the use of an effective, secure and user-friendly newsletter system. Please note that your data is usually transferred to a MailChimp server in the USA and stored there.
MailChimp uses this information to send and statistically evaluate the newsletter on our behalf. For evaluation purposes, the e-mails sent contain so-called web beacons or tracking pixels, which represent single-pixel image files stored on our website. This allows us to determine whether a newsletter message has been opened and which links have been clicked on. In addition, technical information is recorded (e.g. time of retrieval, IP address, browser type and operating system). The data is raised exclusively in a pseudonymized format and is not linked with other personal data from you. A direct personal relationship is excluded. This data is used exclusively for statistical analysis of newsletter campaigns. The results of these analyses can be used to better adapt future newsletters to the interests of the recipients.
If you wish to object to the data analysis for statistical evaluation purposes, you must unsubscribe from the newsletter.
Furthermore, MailChimp can use this data according to Art. 6 (1) point f GDPR even on the basis of its own legitimate interest in the demand-oriented design and optimization of the service as well as for market research purposes, for example to determine from which countries recipients come. However, MailChimp does not use the data of our newsletter recipients to address those recipients or pass that data on to third parties.
To protect your data in the USA, we have concluded a data processing agreement ("Data-Processing-Agreement") with MailChimp on the basis of the standard contractual clauses of the European Commission to enable the transmission of your personal data to MailChimp. If you are interested in viewing this data processing agreement, you can do so at the following Internet link: https://mailchimp.com/legal/data-processing-addendum/
MailChimp is also certified under the US-European data protection agreement "Privacy Shield" and thus undertakes to comply with EU data protection regulations.
MailChimp's privacy policy can be viewed at: https://mailchimp.com/legal/privacy/
8.4 Advertising by Post
Based on our legitimate interest in personalized direct mail, we reserve the right to store your first and last name, your postal address and - if we have received this additional information from you within the framework of the contractual relationship - your title, academic degree, year of birth and your professional, industry or business name in accordance with Art. 6 (1) point f GDPR and to use this data for sending interesting offers and information on our products by letter post.
You can object to the storage and use of your data for this purpose at any time by sending an appropriate message to the controller.
9.1 The personal data collected by us will be passed on to the transport company commissioned with the delivery within the scope of contract processing, insofar as this is necessary for the delivery of the goods. We will pass on your payment data to the commissioned credit institution within the framework of payment processing, if this is necessary for payment handling. If payment service providers are used, we explicitly inform you of this below. The legal basis for the transfer of data is Art. 6 (1) point b GDPR.
9.2 Use of Special Service Providers for Order Processing and Handling
- Amazon
Orders are processed by the service provider "Amazon" (Amazon EU S.a r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg) as part of "Fulfillment by Amazon". Your personal data will be passed on to Amazon exclusively for the purpose of processing the online order. The transfer is made in accordance with Art. 6 (1) point b GDPR and only insofar as this is necessary for order processing. Details of Amazon's privacy policy and Amazon's data protection declaration can be viewed at: https://www.amazon.co.uk/gp/help/customer/display.html/ref=footer_iba?ie=UTF8&nodeId=201909150
- Plentymarkets
The order is processed by the service provider "plentymarkets" (plentymarkets GmbH, Bürgermeister-Brunner-Str. 15, 34117 Kassel). Name, address and, if applicable, other personal data will be passed on to plentymarkets exclusively for processing the online order in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on if this is necessary for processing the order. Details of plentymarket's privacy policy and its data protection declaration can be viewed at: https://www.plentymarkets.co.uk/
9.3 Passing on Personal Data to Shipping Service Providers
- Deutsche Post
If delivery of goods takes place by the transport service provider Deutsche Post (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your e-mail address to Deutsche Post in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a notice about the shipment status, only if you have given your express consent during the ordering process. Otherwise, only the name of the recipient and the delivery address will be passed on to Deutsche Post for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior agreement on the delivery date with Deutsche Post or transmission of status information for shipment delivery is not possible.
The consent can be revoked for future deliveries at any time, either with the controller or with the transport service provider Deutsche Post.
- DHL
If delivery of goods takes place by the transport service provider DHL (Deutsche Post AG, Charles-de-Gaulle-Straße 20, 53113 Bonn), we will pass on your e-mail address to DHL in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a notice about the shipment status, only if you have given your express consent during the ordering process. Otherwise, only the name of the recipient and the delivery address will be passed on to DHL for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior agreement on the delivery date with DHL or transmission of status information for shipment delivery is not possible.
The consent can be revoked for future deliveries at any time, either with the controller or with the transport service provider DHL.
- UPS
If delivery of goods takes place by the transport service UPS (United Parcel Service Deutschland Inc. & Co. OHG, Görlitzer Straße 1, 41460 Neuss), we will pass on your e-mail address to UPS in accordance with Art. 6 (1) point a GDPR, prior to delivery of the goods, for the purpose of coordinating a date of delivery or of a notice about the shipment status, if you have given your express consent during the ordering process. Otherwise, only the name of the recipient and the delivery address will be passed on to UPS for the purpose of delivery in accordance with Art. 6 (1) point b GDPR. The data will only be passed on if this is necessary for the delivery of the goods. In this case, prior agreement on the delivery date with UPS or transmission of status information for shipment delivery is not possible.
The consent can be revoked for future deliveries at any time, either with the controller or with the transport service provider UPS.
9.4 Use of Payment Service Providers
- abcfinance
When selecting the payment method "invoice purchase" via abcfinance, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we forward this data to abcfinance GmbH, Kamekestraße 2-8, 50672 Cologne ("abcfinance") for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. Based on your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), abcfinance checks whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to internal abcfinance criteria pursuant to Art. 6 (1) f GDPR, creditworthiness information from the following credit agency may also be included in the decision within the scope of the application review:
Euler Hermes Forderungsmanagement Deutschland GmbH, Friedensallee 254, 22763 Hamburg, Germany
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to abcfinance. However, abcfinance may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Adyen
If you choose a payment method of the payment service provider Adyen, payment is processed by the payment service provider Adyen, Simon Carmiggeltstraat 6 - 50, 1011 DJ Amsterdam, Netherlands, to whom we send your order information (name, address, IBAN, BIC, invoice amount, currency and transaction number) in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Adyen and only to the extent necessary.
- Amazon Pay
If you choose the "Amazon Pay" payment method, payment will be processed by the payment service provider Amazon Payments Europe s.c.a., 38 avenue John F. Kennedy, L-1855 Luxembourg (hereinafter referred to as "Amazon Payments"), to whom we will pass on the information you provided during the order process together with the information about your order in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Amazon Payments and only to the extent necessary. For more information about Amazon Payments' privacy policy, please visit https://pay.amazon.com/uk/help/201751600
- Apple Pay
If you choose the payment method "Apple Pay" of Apple Distribution International (Apple), Hollyhill Industrial Estate, Hollyhill, Cork, Ireland, the payment processing is carried out via the "Apple Pay" function of your terminal device operated with iOS, watchOS or macOS by debiting a payment card deposited with "Apple Pay". Apple Pay uses security features built into the hardware and software of your device to protect your transactions. In order to release a payment, it is therefore necessary to enter a code previously defined by you and to verify it using the "Face ID" or "Touch ID" function of your terminal.
For the purpose of payment processing, your information provided during the ordering process, along with information about your order, will be transmitted to Apple in encrypted form. Apple then encrypts this data again with a developer-specific key before the data is transmitted to the payment service provider of the payment card stored in Apple Pay for payment processing. The encryption ensures that only the website from which the purchase was made can access the payment information. After the payment is made, Apple sends your device account number and a transaction-specific dynamic security code to the originating website to confirm the payment.
If personal data is processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 Para. 1 lit. b GDPR.
Apple retains anonymised transaction data, including the approximate amount of the purchase, the approximate date and time and whether the transaction was completed successfully. Anonymisation completely excludes any personal reference. Apple uses the anonymised data to improve Apple Pay and other Apple products and services.
When you use Apple Pay on iPhone or the Apple Watch to complete a purchase made through Safari on Mac, the Mac and the authorization device communicate through an encrypted channel on Apple's servers. Apple does not process or store this information in any format that can identify you personally. You can disable the ability to use Apple Pay on your Mac in your iPhone preferences. Go to "Wallet & Apple Pay" and disable "Allow payments on Mac".
For more information about Apple Pay privacy, please visit the following web address: https://support.apple.com/en-gb/HT203027
- Cash Payment via Cash Payment Solutions GmbH
When selecting the payment method "cash payments", we provide your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and possibly telephone number) for the purpose of payment processing in accordance with Art. 6 (1) point b GDPR to the payment service provider Cash Payment Solutions GmbH, Dircksenstr. 40, 10178 Berlin, so that Cash Payment Solutions GmbH can provide you with an individually generated payment or barcode (so-called "payment slip") for the respective transaction. The data will only be passed on if this is necessary for the processing of the payment method "cash payments". With the help of the payment form, it is possible for you to settle the respective transaction costs by cash payment in the business premises of partner companies of Cash Payment Solutions GmbH. The cash payment partner sends the payment confirmation in real time, after which the shipping process can be immediately started, should the goods be available immediately.
Cash Payment Solutions GmbH uses the credit institution NordFinanz Bank Aktiengesellschaft, Martinistraße 48, 28195 Bremen (hereinafter "NordFinanz") to process the payment method "cash payments" and passes your payment data on to that institution in accordance with Art. 6 (1) point b GDPR, to the extent required for the execution of the cash payment.
Both Cash Payment Solutions GmbH and NordFinanz use your personal data exclusively for the purposes of implementing the payment method "cash payments" and for compliance with money laundering regulations.
- Billpay
When selecting the payment methods "direct debit (direct debit)" and/or "delivery on account" and/or "hire purchase" via Billpay, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number and, in the case of direct debit, the specified account details) during the order process.
In order to safeguard our legitimate interest in determining the solvency of our customers, we will forward this data to Billpay GmbH, Zinnowitzer Str. 1, 10115 Berlin ("Billpay") for the purpose of a credit assessment in accordance with Art. (1) point f GDPR. Billpay uses your personal data and other data (such as shopping cart, invoice amount, order history, payment experience) to check whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to Billpay-internal criteria pursuant to Art. 6 (1) point f GDPR, identity and creditworthiness information from the following credit agencies may also be included in the decision within the framework of the application review:
- CRIF GmbH, Dessauerstraße 9, 80992 München, Tel.: +49 (0)721/ 255 11 0, Fax: - 22
- Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557
- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, Tel.: +49 (0)7221-5040-1000, Fax: -1001
- CRIF Bürgel GmbH -Niederlassung Hamburg-, Friesenweg 4, Haus 12
22763 Hamburg Tel.: +49 (0)40-89803-0, Fax: -419
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Tel.: +49 (0)611-9278-0, Fax: -109
- Regis24 GmbH, Zehdenicker Str. 21, D-10119 Berlin, Tel.: +49 (0)30-44350240
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data.
For the purpose of identity verification, your personal data will be transmitted to one of the above credit agencies in accordance with Art. 6 (1) point f GDPR. The credit agency will then inform you about the degree (in percentage) to which the personal data stored by that agency matches the data you have provided and, if applicable, will provide a reference to an identification check carried out by that agency in the past. Billpay can thus recognize whether a person is stored in the credit agency's database at the address you have given us.
For more information about Billpay's privacy policy, please visit: https://www.billpay.de/en/privacy-de/
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to Billpay. However, Billpay may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.
- BillSAFE
If you select the "invoice purchase" payment method via BillSAFE, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth and e-mail address) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we forward those data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg) for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. On the basis of your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), Paypal (Europe) checks whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to PayPal-internal criteria pursuant to Art. 6 (1) point f GDPR, identity and creditworthiness information from the following credit agencies may also be included in the decision within the framework of the application review:
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Tel.: +49 (0)611-9278-0, Fax: -109
- CRIF GmbH, Dessauerstraße 9, 80992 München, Tel.: +49 (0)721/ 255 11 0, Fax: - 22
- accumio finance services GmbH Customer Care Service Center, Postfach 110254, 30099 Hannover
- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, Tel.: +49 (0)7221-5040-1000, Fax: -1001
- CRIF Bürgel GmbH -Niederlassung Hamburg-, Friesenweg 4, Haus 12
22763 Hamburg Tel.: +49 (0)40-89803-0, Fax: -419
- Tesch mediafinanz GmbH, Weiße Breite 5, 49084 Osnabrück, Tel.: +49 (0)541- 2029-0, Fax: -101
- Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data.
For the purpose of identity verification, your personal data will be transmitted to one of the above credit agencies in accordance with Art. 6 (1) point f GDPR. The credit agency will then inform you of the degree (in percentage) to which the personal data stored by that agency matches the data you have provided and, if applicable, will provide a reference to an identification check carried out by that agency in the past. PayPal can thus recognize from the transmitted match rates whether a person is stored in the database of the credit agency at the address you have given us. For more information about PayPal's BillSAFE privacy policy, please visit https://www.billsafe.de/privacy-policy/buyer
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to BillSAFE. However, BillSAFE may still be entitled to process your personal data if this is necessary for processing payments in accordance with the contract.
- BS PAYONE
If you decide on a payment method of the payment service provider BS PAYONE, payment is processed by the payment service provider BS PAYONE GmbH, Lyoner Straße 9, 60528 Frankfurt/Main, to whom we pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider PAYONE and only to the extent necessary.
- ConCardis
If you decide to pay by credit card from the payment service provider ConCardis, payment is processed by the payment service provider ConCardis GmbH, Helfmann-Park 7, 65760 Eschborn, to whom we pass on your information provided during the order process, together with the information about your order, in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of processing payments with the payment service provider ConCardis and only to the extent necessary.
- Easycredit Ratenkauf
If you choose the payment method "Installment purchase by easycredit", payment will be processed with the provider of installment purchase, TeamBank AG, Beuthener Str. 25, 90471 Nuremberg (hereinafter referred to as TeamBank AG). In this case, TeamBank AG reserves the right to carry out a credit assessment if you have expressly consented to the credit assessment within the scope of the order process pursuant to Art. 6 (1) point a GDPRDS. Your personal data, address data, account data and data concerning your current and past orders are included in this credit check. Teambank AG uses the result of the credit assessment with regard to the statistical probability of non-payment for the purpose of deciding on the establishment, execution or termination of a contractual relationship. TeamBank AG receives the credit information from the following credit agencies:
Creditreform Boniversum GmbH, Hellersbergstr. 11, 41460 Neuss, Germany
SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden, Germany
InfoCore Consumer Data GmbH, Rheinstr. 99, 76532 Baden-Baden, Germany
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. Among other things, address data will be included in the calculation of the score values. You can revoke your consent to a credit check with TeamBank AG at any time with future effect. For more information about TeamBank AG's data protection policy, please visit https://www.easycredit.de/International.htm
You can revoke your consent at any time by sending a message to the controller responsible for data processing or to TeamBank AG. However, TeamBank AG may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Finepay
When selecting the payment methods "Purchase by direct debit" and/or "Purchase on account" via finepay, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, telephone number and, when purchasing by direct debit, the specified account details) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we pass this data on to the payment service provider fine trade GmbH, Neuburgstraße 6a, 6840 Götzis/Austria ("Finepay") for the purpose of an identity and credit assessment in accordance with Art. 6 (1) point f GDPR.
On the basis of your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), Finepay checks whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to internal finepay criteria pursuant to Art. 6 (1) point f GDPR, identity and creditworthiness information from the following credit agencies may be included in the decision within the scope of the application review:
infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, Phone: +49 (0)7221-5040-1000, Fax: -1001
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. You can find further information about finepay's data protection regulations at: http://www.fine-trade.org/download/AGB.pdf
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to finepay. However, finepay may still be entitled to process your personal data if this is necessary for contractual payment processing.
- FlexiPay® by UNIVERSUM Payment Solution GmbH
When selecting the payment methods "direct debit" and/or "delivery on account" and/or "hire purchase" via FlexiPay® by UNIVERSUM Payment Solution GmbH, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number and, in the case of direct debit, the specified account details) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, this data will be forwarded by us to UNIVERSUM Payment Solution GmbH, Hanauer Landstraße 164, 60314 Frankfurt am Main ("UNIVERSUM") for the purpose of a credit assessment and for checking the issuance of a payment guarantee to the merchant in accordance with Art. 6 (1) point f GDPR. Based on your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), UNIVERSUM checks whether the payment option you have selected can be granted with regard to statistical payment and/or default risks. In addition to internal UNIVERSUM criteria pursuant to Art. 6 (1) point f GDPRD, identity and creditworthiness information from the following credit agencies may also be included in the decision within the scope of the application review:
- UNIVERSUM Business GmbH, Hanauer Landstraße 164, 60314 Frankfurt
- CRIF BÜRGEL GmbH, Radlkoferstraße 2, 81373 München
- Schufa Holding AG, Postfach 56 40, 30056 Hannover
- Infoscore Consumer Data GmbH, Carl-Bertelsmann-Straße 270, 33311 Gütersloh
- REGIS24 GmbH, Wallstraße 58, 10179 Berlin
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. Among other things, address data will be included in the calculation of the score values.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to UNIVERSUM. However, UNIVERSUM may still be entitled to process your personal data if this is necessary for contractual payment processing.
- GambioPay
If you choose a payment method of the payment service provider GambioPay, payment is processed via the checkout portal of Wirecard UK & Ireland Ltd, 1st Floor Ulysses House, Foley Street Dublin 1, Ireland, to which we pass on the information provided during the order process together with the information about your order in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider GambioPay and only to the extent necessary.
- Google Pay
If you choose the payment method "Google Pay" of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"), the payment processing is carried out via the "Google Pay" application of your mobile device running at least Android 4.4 ("KitKat") and having an NFC function by charging a payment card deposited at Google Pay or a payment system verified there (e.g. PayPal). For the release of a payment via Google Pay in the amount of more than 25,- € the prior unlocking of your mobile device by the respective verification measure (e.g. face recognition, password, fingerprint or pattern) is required.
For the purpose of payment processing, your information provided during the ordering process, together with the information about your order, will be forwarded to Google. Google then transmits your payment information stored in Google Pay in the form of a unique transaction number to the source website, which is used to verify a payment. This transaction number does not contain any information about the real payment data of your means of payment deposited with Google Pay, but is created and transmitted as a uniquely valid numeric token. For all transactions via Google Pay, Google acts merely as an intermediary to process the payment transaction. The transaction is carried out exclusively in the relationship between the user and the source website by debiting the means of payment deposited with Google Pay.
If personal data are processed in the described transmissions, the processing is carried out exclusively for the purpose of payment processing in accordance with Art. 6 para. 1 lit. b GDPR.
Google reserves the right to collect, store and evaluate certain transaction-specific information for each transaction made via Google Pay. This includes the date, time and amount of the transaction, the merchant's location and description, a description provided by the merchant of the goods or services purchased, photos that you have attached to the transaction, the name and email address of the seller and buyer or the sender and recipient, the payment method used, your description of the reason for the transaction and, if applicable, the offer associated with the transaction.
According to Google, this processing is carried out exclusively in accordance with Art. 6 para. 1 lit. f GDPR on the basis of the legitimate interest in proper accounting, verification of transaction data and optimisation and maintenance of the functionality of the Google Pay service.
Google also reserves the right to combine the processed transaction data with other information which is collected and stored by Google when using other Google services.
The terms of use of Google Pay can be found here:
https://payments.google.com/payments/apis-secure/u/0/get_legal_document?ldo=0&ldt=googlepaytos&ldl=en
Further information on data protection at Google Pay can be found at the following Internet address:
https://payments.google.com/payments/apis-secure/get_legal_document?ldo=0&ldt=privacynotice&ldl=en
- Heidelpay
When paying by credit card via Heidelpay, payment is processed by the payment service provider Heidelberger Payment GmbH, Vangerowstraße 18, 69115 Heidelberg (hereinafter "Heidelpay"), to whom we pass on your data provided during the ordering process exclusively for the purpose of payment processing in accordance with Art. 6 (1) point b GDPR. The data will only be passed on if it is necessary for payment processing. To the extent necessary, Heidelpay will then transmit your data to HUELLEMANN & STRAUSS ONLINESERVICES S.A., 1, Place du Marché, 6755 Grevenmacher, Luxembourg, in accordance with Art. 6 (1) point b GDPR.
If you choose the payment method "Purchase invoice via Heidelpay" or "Direct debit via Heidelplay", you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we will forward this data to Heidelberger Payment GmbH, Vangerowstr. 18, 69115 Heidelberg (hereinafter "Heidelpay") for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. Based on your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), Heidelpay will check whether the payment option you have selected can be granted with regard to payment and/or default risks. In order to decide on the establishment or implementation of a contractual relationship, identity or creditworthiness, information from the following credit agencies may also be included pursuant to Article 6 (1) point f GDPR:
- SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
- CRIF Bürgel GmbH -Niederlassung Hamburg-, Friesenweg 4, Haus 12
22763 Hamburg
- Arvato Infoscore GmbH, Rheinstraße 99, 76532 Baden-Baden
- Deltavista GmbH, Kaiserstraße 217, 76133 Karlsruhe
- UNIVERSUM Business GmbH, Hugo-Junkers-Straße 3, 60386 Frankfurt am Main
- Bisnode International Group, Robert-Bosch-Straße 11, 64293 Darmstadt
- Regis24 GmbH, Wallstraße 58, 10179 Berlin
- Creditreform AG, Hellersbergstraße 12, 41460 Neuss
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to Heidelpay. However, Heidelpay may still be entitled to process your personal data if this is necessary for contractual payment processing.
- iClear
If you select the "iclear invoice" payment method, you will be asked to enter your personal data (first and last name, street, house number, postcode, city) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we forward this data to iclear GmbH, M2 17, 68161 Mannheim ("iclear") for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. On the basis of your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), iclear will check whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to internal iclear criteria pursuant to Art. 6 (1) point f GDPR, identity and creditworthiness information from the following credit agenciy may also be included in the decision within the scope of the application review:
Domnowski Inkasso GmbH, Am Powverschoppen 17, 59071 Hamm, Germany
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. For more information about iclear's privacy policy, please visit: https://www.iclear.de/?id=32
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to iclear. However, iclear may still be entitled to process your personal data if this is necessary for contractual payment processing.
- ipayment
If the payment method(s) "direct debit via ipayment" and/or "credit card via ipayment" is/are offered, we pass your personal data on to 1&1 Internet AG, Elgendorfer Str. 57, 56410 Montabaur (hereinafter "1&1") for payment processing purposes in accordance with Art. 6 (1) point b GDPR, insofar as this is required for payment processing. Further information on 1&1's handling of personal data can be found in 1&1's data protection declaration at http://www.1und1.de/Datenschutz
- Klarna
If the payment method "Klarna Rechnungskauf" or (if offered) the payment method "Klarna Installment Purchase" is selected, payment is processed by Klarna AB (publ )[https://www.klarna.com/de], Sveavägen 46, 111 34 Stockholm, Sweden (hereinafter "Klarna"). To enable payment to be processed, your personal data (first and last name, street, house number, postcode, city, gender, e-mail address, telephone number and IP address) as well as data related to the order (e.g. B. Invoice amount, article, delivery type) is forwarded to Klarna for the purpose of identity and creditworthiness check, provided you have expressly consented to this in accordance with Art. 6 (1) point a GDPR within the ordering process. You can view to which credit agencies your data may be forwarded at: http://cdn.klarna.com/1.0/shared/content/legal/terms/Klarna/en_gb/checkout.
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. Klarna uses the information received on the statistical probability of non-payment for a balanced decision on the establishment, implementation or termination of the contractual relationship.
You can revoke your consent at any time by sending a message to the controller responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.
Your personal data will be treated in accordance with the applicable data protection regulations and in accordance with Klarna's privacy policy regarding data subjects located in Germany https://cdn.klarna.com/1.0/shared/content/policy/data/de_en/data_protection.pdf
or regarding data subjects located in Austria https://cdn.klarna.com/1.0/shared/content/policy/data/de_at/data_protection.pdf
- Komfortkasse
If you decide on a prepayment payment method of the payment service provider Komfortkasse, payment is processed by LTC Information Services GmbH, Business Tower, Seligenstädter Str. 107, 63073 Offenbach am Main, to whom we pass on the information provided during the order process together with the information about your order in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Komfortkasse and only to the extent necessary. Komfortkasse's privacy policy can be viewed at: https://komfortkasse.eu/datenschutz .
- Masterpayment
When selecting the payment methods "direct debit (direct debit)" and/or "delivery on account" and/or "hire purchase" via masterpayment, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number and, in the case of direct debit, the specified account details) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we forward this data to Masterpayment LTD, 483 Green Lanes, London, N13 4BS, Great Britain ("Masterpayment") for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. Based on your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), Masterpayment will check whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to masterpayment-internal criteria pursuant to Art. 6 (1) point f GDPR, identity and creditworthiness information from the following credit agencies may also be included in the decision within the framework of the application review:
Creditreform Boniversum GmbH, Hellersbergstrasse 11, D-41460 Neuss, Phone: +49 (0)2131-109-501, Fax: -557
CRIF Bürgel GmbH -Niederlassung Hamburg-, Friesenweg 4, Haus 12
22763 Hamburg Tel.: +49 (0)40-89803-0, Fax: -419
SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Phone: +49 (0)611-9278-0, Fax: -109
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to Masterpayment. However, Masterpayment may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Mollie
When a payment method offered via the payment service "mollie" is selected, the payment will be processed via the payment service provider Mollie B.V., Keizersgracht 313, 1016 EE Amsterdam, Netherlands (hereinafter referred to as "mollie"). The individual payment methods offered by mollie are communicated to the Client in the Seller's online shop. For the processing of payments, mollie may make use of other payment services, for which special terms of payment may apply. The Client will be referred to those terms of payment separetely. Further information on "mollie" can be found on the Internet at https://www.mollie.com/en/
- mPay 24
If you decide on a payment method of the payment service provider mPAY 24 GmbH, Annagasse 5, 1010 Vienna, Austria, payment will be processed by this payment service provider to whom we send your information provided during the order process together with the information about your order (name, address, account number, bank code, if applicable, bank code, credit card number if necessary, invoice amount, currency and transaction number) in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider mPAY24 GmbH and only to the extent necessary.
- Novalnet
When selecting the payment method "invoice purchase" or "direct debit" via Novalnet, you will be asked to provide your personal data (name, surname, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the order process. In order to protect our legitimate interest in determining the solvency of our customers and to protect us from payment defaults, this data will initially be transmitted in accordance with Art. 6 Para. 1 lit. f GDPR initially to Novalnet AG, Gutenbergstr. 2, 85737 Ismaning ("Novalnet"). Novalnet will then forward this data to Financial Management Solutions GmbH (under the brand InfinitePay), Haifa-Allee 28, 55128 Mainz, Germany, for the purpose of carrying out a credit assessment within the scope of an assignment of claims in accordance with Art. 6 para. 1 lit. f GDPR. InfinitePay checks on the basis of the personal data provided by you as well as other data (such as shopping cart, invoice amount, order history, payment experiences) whether the payment option you have chosen can be granted with regard to payment and/or bad debt risks.
In addition to internal criteria, identity and creditworthiness information from the following credit agencies may also be included in the decision within the scope of the application review in accordance with Art. 6 Para. 1 lit. f GDPR:
- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, Germany, Tel.: +49 (0)7221-5040-1000, Fax: -1001
- atriga GmbH, Pittlerstr. 47, 63225 Langen
- informa solution GmbH, Rheinstrasse 99, 76532 Baden-Baden
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to Novalnet. However, Novalnet may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Paydirekt
If you choose the payment method paydirekt, payment is made via the payment service provider paydirekt GmbH, Hamburger Allee 26-28, 60486 Frankfurt am Main. Your payment data (e.g. payment amount, details of the payee) and your confirmation that the payment data are correct will be collected, processed and transmitted to your bank by paydirekt GmbH for the execution of the paydirekt payment in accordance with Art. 6 (1) point b GDPR. Such processing shall only be carried out to the extent necessary for the execution of the payment. Paydirekt GmbH then will authenticate the payment using the authentication procedure stored for you with your bank. Further information about the transfer and processing of your data can be found in the paydirekt data protection declaration, which can be viewed: https://www.paydirekt.de/agb/index.html
- Payever
If you decide on a payment method of the payment service provider payever, payment is processed by the payment service provider payever GmbH, Simon-von-Utrecht Straße 1, 20359 Hamburg, to whom we pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider payever and only to the extent necessary.
You can find further information on payever's handling of personal data in payever's privacy policy: https://www.payever.de/schufa/datenschutz /
- Paymill
When selecting the payment methods "credit card payment via Paymill" or "direct debit payment via Paymill", payment is processed by the technical service provider Paymill GmbH, St.-Cajetan-Straße 43, 81669 Munich, to whom we pass on your billing data (name, address, credit card number, invoice amount, currency and transaction number) for the purpose of payment processing in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing and only to the extent necessary.
Paymill GmbH will then forward your billing data to the acquirer Lufthansa AirPlus Servicekarten GmbH, Dornhofstr. 10, 63263 Neu-Isenburg or Wirecard Bank AG, Einsteinring 35, 85609 Aschheim, Germany, for payment. This transfer takes place only for the purpose of processing the payment and only to the extent necessary. For more information on Paymill's handling of personal data, please refer to Paymill's privacy policy at https://www.paymill.com/en/privacy.
- Paymorrow
When selecting the payment method "direct debit" or "invoice purchase" or "instalment payment" via Paymorrow, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address and telephone number) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we forward this data to InterCard AG, Alstertor 9, 20095 Hamburg ("paymorrow") for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. On the basis of your personal data and other data (such as shopping cart, invoice amount, order history, payment experience) Paymorrow will check whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to internal paymorrow criteria pursuant to Art. 6 (1) point f GDPR, identity and creditworthiness information from the following credit agencies may also be included in the decision within the framework of the application review:
- CRIF Bürgel GmbH, Radlkoferstraße 2, D-81373 München,
Tel.: +49 (0) 40 - 89 80 3 – 0, Fax: -777
- Creditreform Boniversum GmbH, Hellersbergstr. 11, D-41460 Neuss, Tel.: +49 (0)2131-109501, Fax: -557
- infoscore Consumer Data GmbH, Abteilung Datenschutz, Rheinstraße 99, D-76532 Baden-Baden, Fax: +49 (7221) 5040-3201
- "Real" Inform GmbH, Normannenweg 32, 20537 Hamburg, Fax: +49 40 23 88 14-59
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. Your personal data will be transmitted to Schufa (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden) for the purpose of identity verification in accordance with art. 6 (1) point f GDPR. Schufa will then inform paymorrow about the degree of conformity (in percentage) of the personal data stored with Schufa with the data given by you, as well as, if necessary, a reference to an identity-based legitimation check carried out by Schufa or another contracting party in the past. Paymorrow can thus recognize whether a person is stored in the Schufa database at the address you have given us. Under the following internet address, you receive further information about the data security regulations of paymorrow:
http://www.paymorrow.de/049f989be70dff101.php
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to paymorrow. However, paymorrow may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Payolution
If you have decided, as payment option, on the payment services "payolution invoice", "payolution instalment purchase" or "payolution direct debit" of payolution GmbH, Am Euro Platz 2, 1120 Vienna, Austria ("payolution"), you agree to the transmission of your data to payolution during the order process for the purpose of the creditworthiness and account number check. For the processing of these payment methods, personal data (first name, surname, address, e-mail, telephone number, date of birth, IP address, gender) together with data required for the transaction processing (article, invoice amount, interest, instalments, due dates, total amount, invoice number, taxes, currency, order date and order time) are transmitted to payolution according to art. 6 (1) point a GDPR.
This data is transmitted so that payolution can assess whether the payment option selected by you can be granted with regard to payment and/or bad debt risks. Payolution will obtain further information by transmitting the data provided to the following credit agencies for the purpose of identity and credit assessment:
- CRIF GmbH, Diefenbachgasse 35, A-1150 Wien
- CRIF AG, Hagenholzstrasse 81, CH-8050 Zürich
- CRIF GmbH, Dessauerstraße 9, 80992 München
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden
- KSV1870 Information GmbH, Wagenseilgasse 7, A-1120 Wien
- CRIF Bürgel GmbH -Niederlassung Hamburg-, Friesenweg 4, Haus 12
22763 Hamburg
- Creditreform Boniversum GmbH, Hellersbergstr. 11, D-41460 Neuss
- infoscore Consumer Data GmbH, Rheinstraße 99, D-76532 Baden-Baden
- ProfileAddress Direktmarketing GmbH, Altmannsdorfer Strasse 311, A-1230 Wien
- Deutsche Post Direkt GmbH, Junkersring 57, D-53844 Troisdorf
- payolution GmbH, Am Euro Platz 2, A-1120 Wien
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. Your personal data will also be transmitted to Schufa (SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden) for the purpose of identity verification in accordance with Art. 6 (1) point 1 a GDPR. Schufa will then inform payolution about the degree of conformity (in percentage) of the personal data stored with Schufa with the data provided by you, as well as, if applicable, a reference to an identification-supported legitimation check carried out by Schufa or another contractual partner. Payolution can thus recognize whether a person is stored in the data stock of Schufa under the address you have given on the basis of the transmitted agreement rates.
You can revoke your consent at any time by sending a message to the controller responsible for data processing or to payolution. However, payolution may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Paypal
When you pay via PayPal, credit card via PayPal, direct debit via PayPal or - if offered - "purchase on account" or "payment by instalments" via PayPal, we transmit your payment data to PayPal (Europe) S.a.r.l. et Cie, S.C.A., 22-24 Boulevard Royal, L-2449 Luxembourg (hereinafter "PayPal"). The transfer takes place in accordance with Art. 6 (1) point b GDPR and only insofar as this is necessary for payment processing.
PayPal reserves the right to carry out credit checks for the payment methods credit card via PayPal, direct debit via PayPal or, if offered, "purchase on account" or "payment by installments" via PayPal. For this purpose, your payment data may be passed on to credit agencies on the basis of PayPal's legitimate interest in determining your solvency pursuant to Art. 6 (1) point f GDPR. PayPal uses the result of the credit assessment in relation to the statistical probability of non-payment for the purpose of deciding on the provision of the respective payment method. The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. For further information on data protection law, including the credit agencies used, please refer to PayPal's data protection declaration at: https://www.paypal.com/uk/webapps/mpp/ua/privacy-full.
You can object to this processing of your data at any time by sending a message to PayPal. However, PayPal may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Rakuten Checkout
If you have opted for the payment methods "invoice purchase" or "direct debit" via payment service provider Rakuten Checkout during the ordering process, you have consented to a credit check.
The personal data necessary for processing the payment method of purchase on account and a credit check is collected on the basis of your consent pursuant to Art. 6 (1) point a GDPR and transmitted to Klarna AB, Sveavägen 46, 111 34 Stockholm, Sweden (https://www.klarna.com/uk/).
For the processing of the payment method direct debit, your personal data will be collected on the basis of your consent given during the ordering process pursuant to Art. 6 (1) point a GDPR from Rakuten Checkout for the purpose of credit assessment. This data is transmitted in compliance with the applicable data protection laws and taking into account your interests worthy of protection. For the purpose of deciding on the establishment, execution or termination of a contractual relationship, the above data may be transferred to one or more of the following credit agencies on the basis of your consent:
- Creditreform Boniversum GmbH, Hellersbergstraße 11 41460 Neuss
- CRIF GmbH, Dessauerstraße 9, 80992 München
- Arvato Infoscore Consumer Data GmbH
- Infoscore Consumer Data GmbH, Rheinstraße 99, 76532 Baden-Baden
- SCHUFA Holding AG, Kormoranweg 5, 65201 Wiesbaden
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. If this calculation shows that your creditworthiness is not assured, we will inform you immediately. For more information about Rakuten Checkout's privacy policy, please visit https://www.rakuten.com/legal?l-id=footer-legal.
You can revoke your consent at any time by sending a message to the controllern responsible for data processing or to Klarna. However, Klarna may still be entitled to process your personal data if this is necessary to process payments in accordance with the contract.
- RatePay
If you have opted for the payment service RatePay Invoice or RatePay SEPA Direct Debit or RatePay Installment Purchase as a payment option, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number and, in the case of SEPA Direct Debit, the specified account details) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we will forward this data to RatePay GmbH, Franklinstraße 28-29,10587 Berlin ("RatePay") for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. Based on your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), RatePay will check whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to RatePay internal criteria and in accordance with Art. 6 (1) point f GDPR, identity and creditworthiness information from the following credit agencies may also be included in the decision within the scope of the application review:
- Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557
- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, Tel.: +49 (0)7221-5040-1000, Fax: -1001
- CRIF Bürgel GmbH -Niederlassung Hamburg-, Friesenweg 4, Haus 12
22763 Hamburg Tel.: +49 (0)40-89803-0, Fax: -419
- SCHUFA Holding AG, Kormoranweg 5, D-65201 Wiesbaden, Tel.: +49 (0)611-9278-0, Fax: -109
- CRIF GmbH, Dessauerstraße 9, 80992 München, Tel.: +49 (0)721/ 255 11 0, Fax: - 22
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data. For more information about RatePay's privacy policy, please visit https://www.ratepay.com/en/.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to RatePay. However, RatePay may still be entitled to process your personal data if this is necessary for contractual payment processing.
- Secupay
If you decide to pay by credit card through the payment service provider secupay AG, Goethestraße 6, 01896 Pulsnitz, payment is handled by secupay, to whom we pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider secupay and only to the extent necessary.
When selecting the payment methods "invoice purchase" via secupay or "direct debit” via secupay, you will be asked to enter your personal data (first and last name, street, house number, postcode, city, date of birth, e-mail address, telephone number, bank code and account number) during the order process. In order to safeguard our legitimate interest in determining the solvency of our customers, we transmit this data to secupay AG, Goethestr. 6, 01896 Pulsnitz ("secupay") for the purpose of a credit assessment in accordance with Art. 6 (1) point f GDPR. On the basis of your personal data and other data (such as shopping cart, invoice amount, order history, payment experience), secupay will check whether the payment option you have selected can be granted with regard to payment and/or default risks. In addition to internal secupay criteria pursuant to Art. 6 (1) point f GDPR, identity and creditworthiness information from the following credit agencies may also be included in the decision within the scope of the application review:
- infoscore Consumer Data GmbH (arvato), Rheinstraße 99, D-76532 Baden-Baden, Tel.: +49 (0)7221-5040-1000, Fax: -1001
- Creditreform Boniversum GmbH, Hellersbergstraße 11, D-41460 Neuss, Tel.: +49 (0)2131-109-501, Fax: -557
- EOS Payment Solutions GmbH, Steindamm 80, 200 Hamburg
The credit report can contain probability values (so-called score values). If score values are included in the result of the credit report, they are based on recognized scientific, mathematical-statistical methods. The calculation of the score values includes, but is not limited to, address data.
You can object to this processing of your data at any time by sending a message to the controller responsible for data processing or to secupay. However, secupay may still be entitled to process your personal data if this is necessary for the contractual payment processing.
- Shopify Payments
We use the payment service provider "Shopify Payments", 3rd Floor, Europe House, Harcourt Building, Harcourt Street, Dublin 2. If you choose a payment method offered by the payment service provider Shopify Payments, the payment is processed by the technical service provider Stripe Payments Europe Ltd, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we will forward the information you have provided in connection with your order (name, address, account number, sort code, credit card number if applicable, invoice amount, currency and transaction number) in accordance with Art. 6 (1) point f GDPR. Your data will only be passed on for the purpose of payment processing with Stripe Payments Europe Ltd. and only to the extent necessary. You can view Shopify Payments' privacy policy at: https://www.shopify.com/legal/privacy.
You can view more information about the privacy policy of Stripe Payments Europe Ltd. at: https://stripe.com/en-de/privacy.
- SOFORT
If you select the "SOFORT" payment method, payment will be processed by the payment service provider SOFORT GmbH, Theresienhöhe 12, 80339 Munich, Germany (hereinafter "SOFORT"), to whom we will pass on your information provided during the order process together with the information about your order in accordance with Art. 6 (1) point b GDPR. SOFORT is part of the Klarna Group (Klarna Bank AB (publ), Sveavägen 46, 11134 Stockholm, Sweden). Your data will only be passed on for the purpose of payment processing with the payment service provider SOFORT and only to the extent necessary. SOFORT's privacy policy can be viewed at: https://www.klarna.com/uk/privacy-policy/.
- Skrill
If you choose the Skrill payment method, payment is processed by the payment service provider Skrill Ltd, Floor 27, 25 Canada Square, London, E14 5LQ, England, to whom we pass on your information provided during the order process together with the information about your order (name, address, account number, bank code, possibly credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Skrill Ltd. and only to the extent necessary.
- Stripe
If you choose a Stripe payment method, payment is processed by the payment service provider Stripe Payments Europe Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland, to whom we pass on your information provided during the order process together with the information about your order (name, address, account number, bank code, bank code if applicable, credit card number, invoice amount, currency and transaction number) in accordance with Art. 6 (1) point b GDPR. Your data will only be passed on for the purpose of payment processing with the payment service provider Stripe Payments Europe Ltd. and only to the extent necessary. For more information about Stripe's privacy policy, please visit: https://stripe.com/gb/privacy
- Wirecard
If you choose one of the payment methods offered by the payment service provider checkoutportal by wirecard, payment is processed via the payment service provider checkoutportal by wirecard, Wirecard UK & Ireland Ltd, 1st Floor Ulysses House, Foley Street Dublin 1, Ireland, to whom we pass on your information provided during the order process together with the information about your order (name, address, if applicable IBAN, possibly BIC, invoice amount, currency and possibly transaction number). Your data will only be passed on to the payment service provider checkoutportal by wirecard for the purpose of payment processing in accordance with Art. 6 (1) point b GDPR and only to the extent necessary.
- Wix Payments
If you choose the payment method Wix Payments, the payment will be processed via the payment system of Wix HQ, 6350671, Nemal Tel Aviv St 40, Tel Aviv-Yafo, Israel (hereinafter referred to as "Wix "). Wix Payments enables payments via all major credit card formats and, depending on the region, via additional payment methods. The individual payment methods offered by Wix Payments will be communicated to you on our website.
In the case of payments via Wix Payments, your payment data (e.g. payment amount, information on the means of payment used, details of the payee) as well as your confirmation that the payment data is correct will be collected, processed and transferred by Wix to the credit institution commissioned with the payment in accordance with Art. 6 (1) point b GDPR. This processing will only take place to the extent necessary for the execution of the payment. Wix will then authenticate the payment using the authentication procedure provided for you at your bank.
In this context, data may also be transferred to Wix Inc., 500 Terry A. Francois Boulevard, San Francisco, California 94158, USA, for further processing on behalf of Wix Inc.
If data is transferred to Wix in Israel, the appropriate level of data protection is guaranteed by the European Commission's adequacy decision. In the event that data is transferred to Wix in the USA, Wix Inc., based in the USA, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
You can find further information about Wix's data protection at the following website: https://www.wix.com/about/privacy
Our Own Evaluation Reminder (No Dispatch by a Customer Evaluation System)
We use your e-mail address as a one-off reminder for submitting an evaluation of your order using our own evaluation system, provided you have given us your express consent during or after placing your order in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time by sending a message to the controller responsible for data processing.
11.1 Use of YouTube Videos
This website uses the YouTube embedding function for display and playback of videos offered by the provider YouTube, which belongs to Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland ("Google").
To this end, the extended data protection mode is used to ensure, according to provider information, that user information will only be stored once the playback function of the video is started. When the playback of embedded YouTube videos is started, the provider sets "YouTube" cookies in order to collect information about user behavior. According to indications from YouTube, the use of those cookies is intended, among other things, to record video statistics, to improve user-friendliness and to avoid improper actions. If you are logged in to Google, your information will be directly associated with your account when you click on a video. If you do not wish to be associated with your profile on YouTube, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place in particular according to Art. 6 (1) point f GDPR, on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles, whereby you must contact YouTube to exercise this right. When using YouTube, personal data may also be transmitted to the servers of Google LLC. in the USA.
Regardless of whether the embedded video is played back, a connection to the Google network "double click" is established when visiting this website. This may trigger further data processing beyond our control.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list.
Further information on YouTube's privacy policy can be found in the provider's data protection declaration at: www.google.com/policies/privacy/.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
11.2 Use of Vimeo Videos
On our website, plugins of the video portal Vimeo of Vimeo, LLC, 555 West 18th Street, New York, New York 10011, USA are embedded. When you access a page of our website that contains such a plugin, your browser establishes a direct connection to Vimeo's servers. The content of the plugin is transmitted by Vimeo directly to your browser and integrated into the page. Through this integration, Vimeo receives the information that your browser has called up the corresponding page of our website, even if you do not have a Vimeo account or are not currently logged in to Vimeo. This information (including your IP address) is transmitted directly from your browser to a Vimeo server in the USA and stored there.
If you are logged in to Vimeo, Vimeo can immediately assign your visit of our website to your Vimeo account. If you interact with the plugins (e.g. pressing the start button of a video), this information is also transmitted directly to a Vimeo server and stored there.
The data processing operations described are carried out in accordance with Art. 6 (1) point f GDPR, on the basis of Vimeo's legitimate interest in market research and the need-based design of the service.
If you do not want Vimeo to assign the data collected via our website directly to your Vimeo account, you must log out of Vimeo before visiting our website.
The purpose and scope of the data collection and the further processing and use of the data by Vimeo as well as your related rights and privacy settings can be found in Vimeo's privacy policy: https://vimeo.com/privacy
Vimeo, Inc. based in the USA is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list.
For videos from Vimeo that are embedded on our site, the tracking tool Google Analytics of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland, is automatically integrated. This relates to Vimeo's own tracking which we do not have access to and which cannot be influenced by our site. Google Analytics uses "cookies", which are text files placed on your computer, to help the website analyze how users use the site. The information generated by the cookie about your use of the website will generally be transmitted to and stored by Google on servers in the United States, where it may also be transmitted to servers of Google LLC.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list.
This processing is carried out in accordance with Art. 6 (1) point f GDPR on the basis of Vimeo's legitimate interest in the statistical analysis of user behavior for optimization and marketing purposes.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
12.1 Google Marketing Platform (formerly Doubleclick)
This website uses the online marketing tool Google Marketing Platform of the operator Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland ("GMP").
GMP uses cookies to serve ads relevant to users, improve campaign performance reports, or to prevent a user from seeing the same ads more than once. Google uses a cookie ID to track which ads are displayed in which browser and to prevent them from being displayed more than once. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. (1) point f GDPR.
In addition, GMP may use cookie IDs to collect conversions related to ad requests. This is the case, for example, when a user sees a GMP ad and later visits the advertiser's website with the same browser and buys something there. According to Google, GMP cookies do not contain any personal information.
Due to the marketing tools used, your browser automatically establishes a direct connection to the Google server. We have no influence on the extent and the further use of the data collected by Google when using this tool and we therefore inform you according to our level of knowledge. By integrating GMP, Google receives the information that you have accessed the corresponding part of our internet presence or clicked on an advertisement from us. If you are registered with a Google service, Google may associate your visit with your account. Even if you are not registered with Google or have not logged in, it is possible that the provider may obtain and store your IP address. When using GMP, personal data may also be transmitted to the servers of Google LLC. in the USA.
If you do not wish to participate in this tracking process, you can disable cookies for conversion tracking by setting your browser to block cookies from the www.googleadservices.com domain, https://support.google.com/ads/answer/2662856?hl=en-GB, which will be deleted if you delete your cookies. Alternatively, you can contact the Digital Advertising Alliance at www.aboutads.info to find out how to set cookies and to make the relevant settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them or to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list..
For more information about Google's privacy policy relevant to GMP, please visit https://policies.google.com/privacy?hl=en
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
12.2 Facebook pixels for creating custom audiences
Within our online offer, the so-called "Facebook pixel" of the social network Facebook is applied. It is operated by Facebook Ireland Limited, 4 Grand Canal Quay, Square, Dublin 2, Ireland (hereinafter "Facebook").
If a user clicks on an advertisement placed by us, which is displayed on Facebook, an addition is added to the URL of our linked page by Facebook pixels. If our page allows data to be shared with Facebook via pixels, this URL parameter is written into the user's browser via a cookie, which is set by the linked page itself. This cookie is then read by Facebook Pixel and enables the data to be forwarded to Facebook.
With the help of the Facebook pixel, Facebook is able to determine visitors of our online offer as a target group for the presentation of ads (so-called "Facebook ads"). Accordingly, the Facebook pixel to display Facebook ads placed by us will be presented only to Facebook users who have shown an interest in our online offer or who demonstrate certain characteristics (e.g. interest in certain topics or products determined by means of the websites visited) which we will transmit to Facebook (so-called "custom audiences"). When using Facebook pixels, we also want to ensure that our Facebook ads match the potential interest of users and are not annoying. This allows us to evaluate the effectiveness of Facebook ads for statistical and market research purposes by tracking whether users were forwarded to our website after clicking on a Facebook ad ("conversion").
The collected data is anonymous and does not provide us with any information about the user’s identity. However, the data is stored and processed by Facebook to enable a connection to the respective user profile and to allow Facebook to use the data for its own advertising purposes in accordance with the Facebook Data Usage Guidelines (https://www.facebook.com/about/privacy/). The data may enable Facebook and its partners to serve advertisements on and off Facebook.
The data processing associated with the use of the Facebook pixel is based on our predominantly legitimate interest in the evaluation, optimization and economic operation of our online offer and our advertising measures in accordance with Art. 6 (1) point f GDPR.
The information generated by Facebook is usually transferred to a Facebook server and stored there. This may also result in transmission to the servers of Facebook Inc. in the USA. Facebook Inc. based in the USA is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
If you want to object to the collection by Facebook pixels and the use of your data for presenting Facebook ads, you can set an opt-out cookie by clicking on the following link, which deactivates Facebook pixel tracking:
disable Facebook pixels
This opt-out cookie only works in this browser and only for this domain. If you delete your cookies in this browser, you must click on the above link again.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
12.3 Google Ads Conversion Tracking
This website uses the online advertising program "Google Ads" and the conversion tracking within the framework of Google Ads, operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland ("Google"). We use the program of Google Ads to draw attention to our attractive offers with the help of advertising materials (so-called Google Adwords) on external websites. We can determine, in relation to the advertising campaigns data, how successful the individual advertising measures are. We are interested in showing you advertisements that are of interest to you. We want to make our website more interesting for you and to achieve a fair calculation of advertising costs.
The conversion tracking cookie is set on a user’s browser, if he clicks on an ad delivered by Google. Cookies are small text files that are stored on your computer system. These cookies usually lose their validity after 30 days and are not used for personal identification. If the user visits a certain page of this website and if the cookie has not yet expired, Google and we will be able to recognize that the user clicked on the ad and was forwarded to this page. Each Google Ads customer gets a different cookie. Thus, cookies cannot be traced via the website of Google Ads customers. The information collected by the conversion cookies is used to provide aggregate conversion statistics to Google Ads customers who have opted-in for conversion tracking. Customers are informed about the total number of users who clicked on the ad and were forwarded to a conversion tracking tag page. However, they do not get any information enabling them to identify users personally. If you do not want to participate in the tracking program, you can refuse the use of this program by deactivating the Google Conversion Tracking cookie via your Internet browser through the user settings. In this case, you will not be included in the conversion tracking statistics. We use Google Ads on the basis of our legitimate interest in targeted advertising in accordance with Art. 6 (1) point f GDPR. When using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list..
For more information about Google's privacy policy, please visit: https://privacy.google.com/intl/en-GB/take-control.html?categories_activeEl=sign-in
You can permanently deactivate cookies for advertising preferences by blocking them via a respective setting of your browser software or by downloading and installing the browser plug-in, available under the following link:
https://support.google.com/ads/answer/7395996
Please note that certain functions of this website may not be used, or may be used only to a limited extent, if you have deactivated the use of cookies.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Google (Universal) Analytics
Google (Universal) Analytics
This website uses Google (Universal) Analytics, a web analysis service operated by Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 ESW5, Ireland ("Google"). Google (Universal) Analytics uses so-called cookies, which are text files stored on your computer, to help the website analyse how users use the site. The information generated by the cookies about your use of this website (including the shortened IP address) is generally transmitted to a Google server and stored there. When using Google (Universal) Analytics, personal data may also be transmitted to the servers of Google LLC. in the USA.
This website uses Google (Universal) Analytics exclusively with the extension "_anonymizeIp()", which ensures an anonymization of the IP address by shortening it and excludes a direct personal relationship. As a result of the extension, your IP address will previously be shortened by Google within member states of the European Union or in other signatory states to the Agreement on the European Economic Area. Only in exceptional cases will the full IP address be transmitted to a Google server in the USA and shortened there. In these exceptional cases, processing is carried out in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in the statistical analysis of user behaviour for optimization and marketing purposes.
On our behalf, Google will use this information to evaluate your use of the website, to compile reports on website activity and to provide us with other services relating to website and internet use. The IP address transmitted by your browser in the context of Google (Universal) Analytics is not merged with other Google data.
You may refuse the use of cookies by selecting the appropriate settings on your browser. However, we should point out that in that case you might not be able to use the full functionality of this website. You may permanently prevent Google from collecting data generated by cookies regarding the use of the website (including your IP address) and to process them. You can download and install the browser plugin available under the following link: https://tools.google.com/dlpage/gaoptout?hl=en.
As an alternative to the browser plug-in or for browsers on mobile devices, please click on the following link in order to set an opt-out cookie which disables Google Analytics to collect data on this website in the future (This opt-out cookie only functions for this browser and this domain. If you delete your cookies on this browser, you must click again on this link):
Disable Google Analytics
Further information about Google (Universal) Analytics can be found here: https://policies.google.com/privacy?hl=en&gl=de
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Bing Ads (Microsoft Corporation)
This website uses the conversion tracking technology "Bing Ads" from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA). Microsoft Bing Ads will place a cookie on your computer if you access our website via a Microsoft Bing ad. Cookies are small text files that are stored on your computer system. These cookies lose their validity after 180 days. They are not meant for personal identification. If the user visits certain pages of this website and if the cookie has not yet expired, we and Microsoft are able to recognize that the user has clicked the ad and has been forwarded to this page (conversion page). If personal data are processed in this context, this is done in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in effective marketing.
The information collected via the conversion cookie is meant to compile conversion statistics, i.e. to register how many users have arrived at a conversion page after clicking the ad. We hereby learn the total number of users who clicked our ad and were forwarded to a conversion tracking tag page. However, we do not obtain any information by which users can be personally identified.
Microsoft Corporation, based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
If you do not wish to participate in tracking, you may object to this usage by easily deactivating the Bing Ads conversion tracking cookie via your internet browser and your user settings. In this case, you will not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for consumers from the EU http://www.youronlinechoices.com/uk/your-ad-choices/
to check whether Microsoft advertising cookies are set in your browser and, if so, to deactivate them.
For more information about Microsoft Bing Ads' privacy policy, please visit: https://privacy.microsoft.com/en-US/
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Bing Ads (Microsoft Corporation) Universal Event Tracking
This website uses the universal event conversion tracking technology "Bing Ads" from Microsoft (Microsoft Corporation, One Microsoft Way, Redmond, WA 98052-6399, USA).
For the use of universal event tracking, each page of our website contains a tag that interacts with the conversion cookie set by Microsoft Bing Ads. This interaction helps to track user behavior on our website and to send the information collected to Microsoft Bing Ads. The use of this information is meant to statistically record and evaluate certain predefined goals, such as purchases or leads, in order to ensure that the orientation and content of our offers are more in line with the interests of our clients. The tags are never used to personally identify users.
If the transmission of information on user behavior to Microsoft Bing Ads includes personal user data, this is done in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in the statistical evaluation of the success of product advertisements placed on Microsoft Bing Ads and the user’s purchasing behavior, thus optimizing our online offering.
Microsoft Corporation, based in the United States, is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU.
If you do not wish to participate in tracking, you may object to this usage by deactivating the Bing Ads conversion tracking cookie via your internet browser and your user settings. In this case, you will not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for consumers from the EU at: http://www.youronlinechoices.com/uk/your-ad-choices/
to check whether Microsoft advertising cookies are set in your browser and, if so, to deactivate them.
For more information about Microsoft Bing Ads' privacy policy, please visit: https://privacy.microsoft.com/en-US/
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Criteo (Criteo SA)
This website uses the technology of Criteo SA, 32 Rue Blanche, 75009 Paris, France ("Criteo"), to collect, store and evaluate information about the surfing behavior of website visitors in pseudonymized form using cookie text files. This is done on the basis of our legitimate interest in the insertion of personalized advertising pursuant to Art. 6 (1) point f GDPR. Criteo analyses the navigation behavior with the help of algorithms and is subsequently able to display product recommendations in form of personalized advertising banners on other websites (so-called publishers). Under no circumstances will those data be used to personally identify the visitor to this website. No other use or disclosure to third parties is envisaged.
If you want to object to the collection of data and the creation of pseudonymized user profiles for the future, you can obtain the following so-called opt-out cookie: Criteo Exercise (https://www.criteo.com/fr/privacy/)
For more information about Criteo's technology, please view Criteo's Privacy Policy at: https://www.criteo.com/privacy/
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Epoq (epoq Internet Services GmbH)
This website uses software technology from epoq internet services GmbH, Am Rüppurer Schloß 1, 76199 Karlsruhe ("epoq"). This epoq software technology allows us to display targeted individual product recommendations across the entire order procedure (home page, product detail page, shopping cart page or categories page). The display of product recommendations results from a cookie-based analysis of previous and current click-and-buy behavior without storing any personal data. In those cases, a cookie is stored on your computer or mobile device in order to collect pseudonymized data regarding your interests and customizes advertisement according to the stored information. Cookies are small text files, which are stored on your computer or mobile device. Thus, the advertisement shown to you will most likely correspond to your product and information interests. If the information collected is personal, it is processed in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in the insertion of personalized advertising and market research.
You can permanently refuse the setting of cookies for advertising purposes by configuring your internet browser so that in the future, cookies can no longer be stored on your computer and cookies already stored will be deleted. However, when disabling all cookies, some functions of our internet pages may no longer be able to be executed.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Google Ads Remarketing
Our website uses the functions of Google Ads Remarketing, which enable us to advertise our website in Google search results, as well as on third-party websites. The provider is Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). To this end, Google places a cookie in the browser of your terminal device, which automatically uses a pseudonymous cookie ID on the basis of pages you visited to allow interest-based advertising. Processing is based on our legitimate interest in the optimal marketing of our website in accordance with Art. 6 (1) point f GDPR.
Any additional processing will only take place if you have agreed with Google that your Google Internet and app browsing history will be linked to your Google Account and information from your Google Account will be used for personalized ads you view on the web. If you are logged in to Google while visiting our website, Google will use your data in connection with Google Analytics data to create and define target group lists for cross-device remarketing. To this end, Google temporarily links your personal data with Google Analytics data to create target groups. When using Google Ads, personal data may also be transmitted to the servers of Google LLC. in the USA.
You can permanently disable the setting of cookies for advertising preferences. You may download and install the browser plug-in available at the following link: https://www.google.com/settings/ads/onweb/
Alternatively, you can contact the Digital Advertising Alliance at www.aboutads.info to find out how to set cookies and to make the relevant settings. Finally, you can set your browser so that you are informed about the setting of cookies and decide individually whether to accept them, or whether to exclude the acceptance of cookies for certain cases or in general. If cookies are not accepted, the functionality of our website may be limited.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list.
Further information and Google's privacy policy regarding advertising can be viewed at:
http://www.google.com/policies/technologies/ads/
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Nosto (Nosto Solutions Ltd.)
This website uses retargeting technology from Nosto Solutions Ltd, Schützenstr. 6, 10117 Berlin ("Nosto"). This technology allows us to provide visitors to our internet pages with targeted, individual, interest-based advertising - specifically, visitors who have already shown interest in our shop and our products. The display of product recommendations results from a cookie-based analysis of visitor's former behavior without storing any personal data. In cases of retargeting technology, a cookie will be stored on your computer or mobile device in order to collect pseudonymized data regarding your interests and will customize advertisement according to the stored information. Cookies are small text files that are stored on your computer or mobile device. Thus, the advertisement shown to you will most likely correspond to your product and information interests. If the information collected is personal, it is processed in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in the insertion of personalized advertising and market research.
You can permanently refuse the setting of cookies for advertising preferences by configuring your Internet browser so that in the future, cookies can no longer be stored on your computer and cookies that have already been stored will be deleted. However, when disabling all cookies, some functions of our Internet pages may no longer be executable. Further information and the data protection regulations regarding advertising and Nosto can be viewed at: https://www.iubenda.com/privacy-policy/7907737/legal.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Outbrain
This website uses the retargeting technology of Outbrain Inc, 39 W 13th Street, New York, NY 10011, USA (hereinafter "Outbrain"). This allows visitors to our internet pages to be specifically referred to additional own or third-party content in the form of banners, which are likely to correspond to the respective user interest. This content is displayed on the basis of a cookie-based analysis of previous usage patterns, but no personal data is stored. A cookie is stored on your computer or mobile device for the purpose of the interest-based content definition in order to record pseudonymized data about your surfing behavior and thus to adapt the content individually to the stored information.
If the information collected and evaluated has a personal reference, it is processed in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in the display of personalized page content and in market research.
If you wish to deactivate the use of cookies on your terminal device, you can set your Internet browser so that cookies can no longer be stored on your terminal device in the future or cookies that have already been stored will be deleted. Switching off all cookies can lead to the inability to perform some functions on our internet pages. You can also permanently object to "Outbrain" setting cookies for advertising purposes by using the option of setting an opt-out cookie provided on the page linked below: https://www.outbrain.com/legal/privacy#privacy-policy.
You will also find further information on "Outbrain"'s privacy policy protection under the link provided
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Pinterest-Tag Conversion-Tracking
This website uses the conversion tracking technology "Pinterest Tag" of Pinterest Europe Ltd, Palmerston House, 2nd Floor, Fenian Street, Dublin 2, Ireland ("Pinterest").
If you have reached our website from a pin on Pinterest, we set a cookie on your computer which interacts with an implemented "tag" in the form of a JavaScript code from Pinterest. Cookies are small text files that are stored on your terminal device. These cookies lose their validity after 180 days and are not used for personal identification.
If the user is forwarded from a pin to Pinterest on pages of this website and the cookie has not yet expired, the tag records certain user actions predefined by us and can track them (e.g. completed transactions, leads, search queries on the website, calls to product pages). When such an action is performed, your browser sends an HTTP request from the cookie to the Pinterest server via the Pinterest tag, which contains certain information about the action (including type of action, time, browser type of device).
Through this transmission, Pinterest can generate statistics about the usage behavior on our website after forwarding a Pinterest Pin, which serve to optimize our offer.
If personal user data is processed, this is done in accordance with Art. 6 Para. 1 lit. f DSGVO on the basis of our legitimate interest in the statistical evaluation of the success of product ads on Pinterest and the purchasing behavior of the user and thus serves to optimize our online offering.
However, we do not receive any information with which users can be personally identified.
If you do not wish to participate in tracking, you can object to this by deactivating the Pinterest Tag Conversion Tracking cookie in your Internet browser under User Settings. You will then not be included in the conversion tracking statistics. Alternatively, you can use the deactivation page for EU consumers at http://www.youronlinechoices.com/de/praferenzmanagement/
Check whether Microsoft advertising cookies are set in your browser and deactivate them.
For more information about Pinterest's privacy policy, please visit the following Web address: https://policy.pinterest.com/de/privacy-policy
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
Taboola
This website uses the retargeting technology of Taboola Inc, 16 Madison Square West 7th Floor, New York, NY 10010, USA (hereinafter "Taboola"). This allows visitors to our internet pages to be specifically referred to additional own or third-party content in the form of banners, which are likely to correspond to the respective user interest. This content is displayed on the basis of a cookie-based analysis of previous usage patterns, but no personal data is stored. A cookie is stored on your computer or mobile device for this interest-based content definition in order to record pseudonymized data about your surfing behavior and thus adapt the content individually to the stored information.
If the information collected and evaluated has a personal reference, it is processed in accordance with Art. 6 (1) point f GDPR on the basis of our legitimate interest in the display of personalized page content and in market research.
If you wish to deactivate the use of cookies on your terminal device, you can set your internet browser so that cookies can no longer be stored on your terminal device in the future or cookies that have already been stored are deleted. Switching off all cookies can lead to the inability to perform some functions on our Internet pages. You can also permanently object to the setting of cookies for advertising purposes by Taboola by using the option of setting an opt-out cookie on the following linked page: https://www.taboola.com/privacy-policy#optout
You can find further information about Taboola's privacy policy at: https://www.taboola.com/privacy-policy
To the extent required by law, we have obtained your consent to the processing of your data as described in accordance with Art. 6 (1) point a GDPR. You can withdraw your consent at any time with effect for the future. In order to exercise your right of withdrawal, please follow the procedure described above.
15.1 consentmanager
This website uses the cookie consent tool supplied by consentmanager, Jaohawi AB, Håltegelvägen 1b, 72348 Västerås, Sweden („consentmanager“), to obtain valid user consents for cookies and cookie-based applications.By incorporating a corresponding JavaScript code, users are shown a banner when calling up a page, in which consent for certain cookies and/or cookie-based applications can be given by ticking the respective box. The tool blocks all cookies requiring consent until the individual user gives corresponding consent. This ensures that such cookies are only set on the user's terminal device if consent is given.
To enable the cookie consent tool to clearly assign page views to individual users and to individually record, log and store the consent settings made by the user for a session, certain user information (including the IP address) is collected by the cookie consent tool when calling up our website, transmitted to consentmanager servers and stored there.
This data processing takes place in accordance with Art. 6 para. 1 lit. f GDPR on the basis of our legitimate interest in a legally compliant, user-specific and user-friendly consent management for cookies and thus in a legally compliant design of our website.
Further legal basis for the data processing described is Art. 6 para. 1 lit. c GDPR. As the data controller for this website, we are subject to the legal obligation to make the use of technically unnecessary cookies dependent on the respective user's consent.
Further information on data use by consentmanager can be found in consentmanager's privacy policy at https://www.consentmanager.de/privacy.php
15.2 Google reCAPTCHA
On this website we also use the reCAPTCHA function of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland ("Google"). This function is mainly used to distinguish whether an entry is made by a natural person or misused by automatic and automated processing. The service includes the sending of the IP address and possibly other data required by Google for the reCAPTCHA service to Google and is carried out in accordance with Art. 6 (1) point f GDPR, on the basis of our legitimate interest in determining the individual willingness of actions on the Internet and avoiding misuse and spam.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list.
Further information about Google reCAPTCHA and Google's privacy policy can be found at: https://policies.google.com/privacy?hl=en-GB
15.3 Google Maps
Our website uses Google Maps (AP’I) of Google Ireland Limited, Gordon House, 4 Barrow St, Dublin, D04 E5W5, Ireland (“Google”). Google Maps is a web service for displaying interactive (country) maps in order to display geographical information visually. Using this service will show you our location and will make it easier for you to find us.
When you access the sub-pages that contain the Google Maps map, information about your use of our website (such as your IP address) is transmitted to and stored by Google on servers. When using Google Maps, personal data may also be transmitted to the servers of Google LLC. in the USA. This is regardless of whether Google provides a user account that you are logged in with or whether no user account exists. If you are logged in to Google, your information will be directly associated with your account. If you do not wish to be associated with your profile on Google, you must log out before activating the button. Google saves your data (even for users who are not logged in) as usage profiles and evaluates them. Such an evaluation takes place according to Art. 6 (1) point f GDPR, on the basis of the legitimate interests of Google in the insertion of personalized advertising, market research and/or demand-oriented design of its website. You have the right to object to the creation of these user profiles. If you want to do so, you must contact Google to exercise this right.
In the event that personal data is transferred to Google LLC. based in the United States, Google LLC. is certified for the US-European data protection agreement "Privacy Shield", which guarantees compliance with the data protection level applicable in the EU. An up-to-date certificate can be viewed here: https://www.privacyshield.gov/list.
If you do not agree to the future transmission of your data to Google in the context of using Google Maps, you may completely deactivate the Google Maps web service by switching off the JavaScript application in your browser. In this case, Google Maps as well as the map display on this website cannot be used.
The Google terms of use can be found at: https://policies.google.com/terms?hl=en. The additional terms of use can be found at: https://www.google.com/intl/en-US_US/help/terms_maps.html.
You can find detailed information on data protection in connection with the use of Google Maps on Google's website ("Google Privacy Policy") at: https://policies.google.com/privacy?hl=en.
To the extent required by law, we have obtained your consent to the processing of your data as described above in accordance with Art. 6 (1) point a GDPR. You can revoke your consent at any time with effect for the future. In order to exercise your revocation, please follow the procedure described above for submitting an objection.
15.4 Applications for job advertisements by e-mail
On our website, we advertise current vacancies in a separate section, for which interested parties can apply by e-mail using the contact address provided.
If applicants want to be included in the application process, they must provide us with all personal details required for a well-founded and informed assessment and selection in conjunction with their application by e-mail.
The required data should include general personal information (name, address, telephone or electronic contact) as well as performance-specific evidence showing the qualifications required for the advertised position. In addition, health-related information may be required, which in the interest of social protection must be given special attention to regarding the applicant's person according to labor and social law.
The components an application must contain to be considered and the form in which these components must be sent by e-mail can be found in the respective job advertisement.
After receipt of the application sent using the e-mail contact address supplied, the applicant data will be stored by us and evaluated exclusively for the purpose of processing the application. In the event of queries arising in the course of processing the application, we will use either the e-mail address supplied by the applicant with his application or a telephone number supplied, at our discretion.
The legal basis for such processing, including the contacting of applicants for queries, is basically Art. 6 (1) point b GDPR in conjunction with Art. 26 (1) Federal Data Protection Act. According to these provisions, the completion of the application procedure is deemed to be the initiation of an employment contract.
If special categories of personal data within the meaning of Art. 9 (1) GDPR (e.g. health data such as information on severely disabled status) are requested from applicants as part of the application procedure, processing will take place in accordance with Art. 9 (2) point b GDPR, so as to enable us to exercise the rights arising from labor law, social security and social protection law and to fulfil our obligations in this regard.
The processing of special categories of data may also be based cumulatively or alternatively on Art. 9 (1) point h GDPR if it is used for the purposes of health care or occupational medicine, for the assessment of the applicant's ability to work, for medical diagnostics, health or social care or for the management of systems and services in the health or social sector.
If, in the course of the evaluation described above, the applicant is not selected or if an applicant withdraws his application prematurely, his data transmitted by e-mail as well as all electronic correspondence including the original application e-mail will be deleted at the latest after 6 months following a corresponding notification. This period shall be determined on the basis of our legitimate interest in being able to answer any follow-up questions regarding the application and, if necessary, to comply with our obligation to provide evidence under the regulations governing the equal treatment of applicants.
In the event of a successful application, the data provided will be processed on the basis of Art. 6 (1) point b GDPR in conjunction with Art. 26 (2) Federal Data Protection Act for the purposes of implementing the employment relationship.
16.1 The applicable data protection law grants you the following comprehensive rights of data subjects (rights of information and intervention) vis-à-vis the data controller with regard to the processing of your personal data:
- Right of access by the data subject pursuant to Art. 15 GDPR: You shall have the right to receive the following information: The personal data processed by us; the purposes of the processing; the categories of processed personal data; the recipients or categories of recipients to whom the personal data have been or will be disclosed; the envisaged period for which the personal data will be stored, or, if not possible, the criteria used to determine that period; the existence of the right to request from the controller rectification or erasure of personal data or restriction of processing personal data concerning the data subject or to object to such processing; the right to lodge a complaint with a supervisory authority; where the personal are not collected from the data subject, any available information as to their source; the existence of automated decision-making, including profiling and at least in those cases, meaningful information about the logic involved, as well as the significance and envisaged consequences of such processing for the data subject; the appropriate safeguards pursuant to Article 46 when personal data is transferred to a third country.
- Right to rectification pursuant to Art. 16 GDPR: You have the right to obtain from the controller without undue delay the rectification of inaccurate personal data concerning you and/or the right to have incomplete personal data completed which are stored by us.
- Right to erasure (“right to be forgotten”) pursuant to Art. 17 GDPR: You have the right to obtain from the controller the erasure of personal data concerning you if the conditions of Art. 17 (2) GDPR are fulfilled. However, this right will not apply for exercising the freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the establishment, exercise or defense of legal claims.
- Right to restriction of processing pursuant to Art. 18 GDPR: You have the right to obtain from the controller restriction of processing your personal data for the following reasons: As long as the accuracy of your personal data contested by you will be verified. If you oppose the erasure of your personal data because of unlawful processing and you request the restriction of their use instead. If you require the personal data for the establishment, exercise or defense of legal claims, once we no longer need those data for the purposes of the processing. If you have objected to processing on grounds relating to your personal situation pending the verification whether our legitimate grounds override your grounds.
- Right to be informed pursuant to Art. 19 GDPR: If you have asserted the right of rectification, erasure or restriction of processing against the controller, he is obliged to communicate to each recipient to whom the personal date has been disclosed any rectification or erasure of personal data or restriction of processing, unless this proves impossible or involves disproportionate effort. You have the right to be informed about those recipients.
- Right to data portability pursuant to Art. 20 GDPR: You shall have the right to receive the personal data concerning you, which you have provided to us, in a structured, commonly used and machine-readable format or to require that those data be transmitted to another controller, where technically feasible.
- Right to withdraw a given consent pursuant to Art. 7 (3) GDPR: You have the right to withdraw your consent for the processing of personal data at any time with effect for the future. In the event of withdrawal, we will immediately erase the data concerned, unless further processing can be based on a legal basis for processing without consent. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal.
- Right to lodge a complaint pursuant to Art. 77 GDPR: Without prejudice to any other administrative or judicial remedy, you have the right to lodge a complaint with a supervisory authority, in particular in the Member State of your habitual residence, place of work or place of the alleged infringement if you consider that the processing of personal data relating to you infringes the GDPR.
16.2 RIGHT TO OBJECT
IF, WITHIN THE FRAMEWORK OF A CONSIDERATION OF INTERESTS, WE PROCESS YOUR PERSONAL DATA ON THE BASIS OF OUR PREDOMINANT LEGITIMATE INTEREST, YOU HAVE THE RIGHT AT ANY TIME TO OBJECT TO THIS PROCESSING WITH EFFECT FOR THE FUTURE ON THE GROUNDS THAT ARISE FROM YOUR PARTICULAR SITUATION.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED. HOWEVER, WE RESERVE THE RIGHT TO FURTHER PROCESSING IF WE CAN PROVE COMPELLING REASONS WORTHY OF PROTECTION FOR PROCESSING WHICH OUTWEIGH YOUR INTERESTS, FUNDAMENTAL RIGHTS AND FREEDOMS, OR IF THE PROCESSING SERVES TO ASSERT, EXERCISE OR DEFEND LEGAL CLAIMS.
IF WE PROCESS YOUR PERSONAL DATA FOR DIRECT MARKETING PURPOSES, YOU HAVE THE RIGHT TO OBJECT AT ANY TIME TO THE PROCESSING OF YOUR PERSONAL DATA WHICH ARE USED FOR DIRECT MARKETING PURPOSES. YOU MAY EXERCISE THE OBJECTION AS DESCRIBED ABOVE.
IF YOU EXERCISE YOUR RIGHT TO OBJECT, WE WILL STOP PROCESSING THE DATA CONCERNED FOR DIRECT ADVERTISING PURPOSES.
The duration of the storage of personal data is based on the respective legal basis, the purpose of processing and - if relevant – on the respective legal retention period (e.g. commercial and tax retention periods).
If personal data is processed on the basis of an express consent pursuant to Art. 6 (1) point a GDPR, this data is stored until the data subject revokes his consent.
If there are legal storage periods for data that is processed within the framework of legal or similar obligations on the basis of Art. 6 (1) point b GDPR, this data will be routinely deleted after expiry of the storage periods if it is no longer necessary for the fulfillment of the contract or the initiation of the contract and/or if we no longer have a justified interest in further storage.
When processing personal data on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection in accordance with Art. 21 (1) GDPR, unless we can provide compelling grounds for processing worthy of protection which outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims.
If personal data is processed for the purpose of direct marketing on the basis of Art. 6 (1) point f GDPR, this data is stored until the data subject exercises his right of objection pursuant to Art. 21 (2) GDPR.
Unless otherwise stated in the information contained in this declaration on specific processing situations, stored personal data will be deleted if it is no longer necessary for the purposes for which it was collected or otherwise processed.